Reference Architectures

Expert advice and guidance from top Docker practitioners. Get design considerations, best practices, and decision support for architecting and building your Docker environment.

19 Articles

Deploy and Manage

Using Docker EE in high availability mode is recommended for minimal downtime. Learn best practices for deploying and managing Docker EE in a standard, production level environment.

Running Docker Enterprise Edition at Scale 

This guide helps you plan and architect large-scale Docker Enterprise Edition deployments

By
Design Considerations and Best Practices to Modernize Traditional Apps (MTA) 

This document starts with high-level decisions such as what applications to Dockerize and methodology, then moves on to what components to put in images, container configuration, and how to store assets for building images and configuration in versio...

By
Modernizing Traditional .NET Framework Applications 

Traditional or legacy applications can be migrated to containers and Docker Enterprise Edition (EE) to take advantage of the benefits that Docker EE provides. This reference architecture provides guidance and examples for modernizing traditional .NET...

By
Docker Logging Design and Best Practices 

This reference architecture provides an overview of how Docker logging works, explains the two main categories of Docker logs, and then discusses Docker logging best practices.

By
Docker EE Best Practices and Design Considerations 

This reference architecture describes a standard, production-grade, Docker EE deployment including details on how to automate deployments, manage users and teams, provide high availability, and manage the infrastructure.

By and
Docker EE Best Practices and Design Considerations (EE 17.03) 

This reference architecture describes a standard, production-grade, Docker EE 17.03 deployment including details on how to automate deployments, manage users and teams, provide high availability, and manage the infrastructure.

By and

Networking

Discover how to design Docker networks while considering the constraints of the application and the physical network.

Universal Control Plane 3.0 Service Discovery and Load Balancing 

Learn how to deploy applications as services, how service discovery and load balancing make it easy for developers to create applications that can dynamically discover each other, and about how Interlock Proxy routes HTTP traffic based on DNS hostnam...

By
Universal Control Plane 2.0 Service Discovery and Load Balancing 

Learn how to deploy applications as services, how service discovery and load balancing make it easy for developers to create applications that can dynamically discover each other, and about how Interlock Proxy routes HTTP traffic based on DNS hostnam...

By
Service Discovery and Load Balancing with Docker Universal Control Plane (UCP 1.1) 

This reference architecture provides guidance towards a supported high availability configuration of UCP with dynamic service discovery and load balancing.

By
Designing Scalable, Portable Docker Container Networks 

This document addresses the challenges of designing Docker networks while considering the constraints of the application and the physical network. It also discusses the tools available and common deployment patterns.

By

Security

Docker lives by “Secure by Default.” With Docker Enterprise Edition (Docker EE), the default configuration and policies provide a solid foundation for a secure environment. However, they can easily be changed to meet the specific needs of any organization.

Securing Docker EE and Security Best Practices 

This document outlines the default security of Docker EE as well as best practices for further securing Universal Control Plane and Docker Trusted Registry. New features introduced in Docker EE 2.0 such as Image Mirroring and Kubernetes are also expl...

By
Securing Docker EE and Security Best Practices (Docker EE 17.06) 

This document outlines the default security of Docker EE as well as best practices for further securing Universal Control Plane and Docker Trusted Registry. New features introduced in Docker EE 17.06 such as image promotion and immutability with Dock...

By and
Securing Docker EE and Security Best Practices (EE 17.03) 

This document outlines the default security of Docker EE 17.03 as well as best practices for further securing it. New features such as image signing and verification with Docker Content Trust and secrets are also explored.

By and
Building a Docker Secure Supply Chain 

This reference architecture describes the components that make up a Secure Supply Chain. Topics include using Git, Jenkins, and the Docker Store to feed the supply chain. All the tools listed and demonstrated within this reference architecture can be...

By

Storage

A variety of storage solutions exist for enterprise use, and a rapidly growing container ecosystem continues to provide many more storage solutions for future consideration. Storage must be highly adaptable and configurable to achieve the optimal platform for containerized workloads. Docker EE provides a pluggable “batteries included, but replaceable” architecture that allows for the implementation and configuration of storage solutions that best meet your requirements across the entire Software Delivery Supply Chain.

An Introduction to Storage Solutions for Docker CaaS 

Docker Datacenter provides a pluggable architecture approach for implementing storage of choice. This document explores three distinct storage tiers — graph driver storage, volume storage, and registry storage.

By

App Development

Whether you are deploying new applications with Docker containers or modernizing traditional applications, these reference architectures will explain what to include in the Docker image, what configuration to put in containers, how to store assets for building images and configuration in version control, how service discovery works, and explore load balancing.

Universal Control Plane 3.0 Service Discovery and Load Balancing 

Learn how to deploy applications as services, how service discovery and load balancing make it easy for developers to create applications that can dynamically discover each other, and about how Interlock Proxy routes HTTP traffic based on DNS hostnam...

By
Universal Control Plane 2.0 Service Discovery and Load Balancing 

Learn how to deploy applications as services, how service discovery and load balancing make it easy for developers to create applications that can dynamically discover each other, and about how Interlock Proxy routes HTTP traffic based on DNS hostnam...

By
Service Discovery and Load Balancing with Docker Universal Control Plane (UCP 1.1) 

This reference architecture provides guidance towards a supported high availability configuration of UCP with dynamic service discovery and load balancing.

By
Design Considerations and Best Practices to Modernize Traditional Apps (MTA) 

This document starts with high-level decisions such as what applications to Dockerize and methodology, then moves on to what components to put in images, container configuration, and how to store assets for building images and configuration in versio...

By
Modernizing Traditional .NET Framework Applications 

Traditional or legacy applications can be migrated to containers and Docker Enterprise Edition (EE) to take advantage of the benefits that Docker EE provides. This reference architecture provides guidance and examples for modernizing traditional .NET...

By
Development Pipeline Best Practices Using Docker EE 

The purpose of this document is to provide you with typical development pipeline workflows as well as best practices for structuring your development process using Docker EE.

By

Docker Certified Infrastructure

Docker Certified Infrastructure is Docker’s prescriptive approach to deploying Docker Enterprise Edition on a range of infrastructures. Docker Certified Infrastructure is designed to automate and reliably deliver a secure, enterprise-ready container platform, integrated with your existing management and infrastructure tools. Each Certified Infrastructure includes a reference architecture, automation templates, and ecosystem solution briefs.

Docker EE 17.06 Platform on VMware vSphere 

Docker Certified Infrastructure for VMware vSphere equips you with a reference architecture and automated tooling to reliably deploy and manage Docker EE, plus solution briefs to help you integrate the Docker container platform with your existing eco...

By
Docker EE 17.06 Platform on Microsoft Azure 

Docker Certified Infrastructure for Microsoft Azure equips you with a reference architecture and automated tooling to reliably deploy and manage Docker EE, plus solution briefs to help you integrate the Docker container platform with your existing ec...

By
Docker EE 17.06 Platform on Amazon Web Services 

Docker Certified Infrastructure for AWS equips you with a reference architecture and automated tooling to reliably deploy and manage Docker EE, plus solution briefs to help you integrate the Docker container platform with your existing ecosystem tool...

By