Solution Overview
Docker Enterprise Edition (Docker EE) is a platform for developing, deploying, and managing containerized applications.
Docker EE simplifies application deployment with encryption and infrastructure abstraction.
Containerization shifts business software to a more efficient and secure container platform.
Docker frees up users’ time and resources, enabling the creation of new systems based on containers.
Advantages of Docker EE platform
Docker decouples applications from infrastructure, improving teamwork and fostering innovation.
Components of Docker Enterprise Edition (EE)
The Docker EE platform has three layers that work on-premises and in the cloud, ensuring consistent application performance. It combines development and production, creating a flexible, secure, and easily managed platform.
Commercially supported Docker container engine.
Worker nodes host the container engine, managing interactions with the operating system, handling Docker container APIs, and facilitating Swarm cluster operations. They also manage infrastructure resources like OS resources, networking, and storage.
Web-based management platform for Docker EE clusters.
UCP simplifies app management by providing interfaces for users and software across nodes. It supports authentication, web UI/APIs, and works with legacy Swarm clusters.
Secure private container image repository.
DTR (Docker Trusted Registry) provides a secure platform for storing, sharing, and scanning Docker images. It integrates with UCP for Single Sign-On and PKI. Its features include private repositories, image signing, web interface/API, and databases for metadata and system status.
Docker Enterprise manages multiple nodes with Swarm.
Swarm divides container engine nodes into worker nodes and manager nodes, which are responsible for running container services and maintaining system status, respectively. In addition to maintaining system status, PKI authentication management, and API interface services, manager nodes can also handle the load of container services (only services running UCP in Docker EE).
Swarm's service mode balances container loads, scales services, and provides stable access points and customizable ports. Its Routing Mesh enables access across the cluster, while UCP's HTTP Routing Mesh enhances service discoverability with Hostname-To-Service Mapping.
商業支援的 Docker 容器引擎。
工作節點為容器引擎運作的位置，功能包含與作業系統的互動管理、Docker 容器相關的 API、以及運行 Swarm 叢集。容器引擎也是作業系統資源、網路、或是儲存空間等基礎設施資源的所在。
Docker EE 叢集的網頁管理平台
UCP 是整合式的應用系統管理平台，提供用戶互動環境以及軟體整合界面。UCP 包含所有工作節點佈署監控服務，與所有控制節點上運行的一組服務。這些服務包含用戶身份認證、用戶與叢集 PKI 的相關 CA 憑證、網頁使用者界面與 API 服務、UCP 狀態資料庫，以及向下相容舊版 Swarm 叢集服務。
安全的容器映像檔私有倉庫 (Repository)。
DTR 提供 Docker 容器映像檔的儲存、發布與安全檢驗等功能。DTR 與 UCP 密切整合，藉由 UCP 的用戶身份認證提供單一登入功能（Single Sign-On），並建立 PKI 相互驗證。DTR 為一組服務，同時在數個副本節點上執行以下服務：儲存/發布映像檔的私有倉庫、映像檔簽署服務、網頁界面與 API，以及紀錄映像檔元資料與 DTR 系統狀態的資料庫。
Docker 企業版透過 Swarm 模組，進行多節點控制的功能。
Swarm 將容器引擎節點區分成工作節點與控制節點，分別負責運行容器服務與維持系統狀態。管理節點除了維持系統狀態、 PKI 驗證管理與 API 接口服務之外，也可以負擔容器服務的負載（在 Docker EE 中只有運行 UCP 的服務）。
Swarm 模組的服務模式提供一個清晰的叢集狀態管控：管理容器服務負載、彈性調整服務數量、提供穩定的存取名稱、易於自訂需要開放的服務接口。開放出來的接口透過 Linux 核心內建的高效路由網格層（Routing Mesh）提供全叢集內的存取能力，UCP 的 HTTP 路由網格服務更提供主機名稱/服務映射（Hostname-to-Service Mapping），提昇服務叢集內/外的可搜索性。