Why CCE?

Cloud Container Engine (CCE) is a one-stop platform integrating compute, networking, storage, and many other services. It supports heterogeneous computing architectures such as GPU, NPU, and Arm. Supporting multi-AZ and multi-region disaster recovery, CCE ensures high availability of Kubernetes clusters.

Huawei Cloud is one of world's first Kubernetes Certified Service Providers (KCSPs). It is the first in China to engage in the Kubernetes community. As a constant contributor, Huawei Cloud marks its presence in the container ecosystem. It is also a founder and platinum member of Cloud Native Computing Foundation (CNCF). CCE is one of the first Certified Kubernetes offerings in the world.

For more information, see Product Advantages and Application Scenarios.

· Creating a Kubernetes cluster is as easy as a few clicks on the web console. You can deploy and manage VMs and BMSs together.

· CCE automates deployment and O&M of containerized applications throughout their lifecycle.

· You can resize clusters and workloads by setting auto scaling policies. In-the-moment load spikes are no longer headaches.

· The console walks you through the steps to upgrade Kubernetes clusters.

· CCE supports turnkey Application Service Mesh (ASM) and Helm charts.

· CCE runs on mature IaaS services and heterogeneous compute resources. You can launch containers at scale.

· AI computing is 3x to 5x better with NUMA BMSs and high-speed InfiniBand network cards.

· HA: Three cross-AZ master nodes for your cluster's control plane and multi-active DR for your nodes ensure service continuity even if one of the nodes is down or an AZ gets hit by natural disasters.

· Secure: Integrating IAM and Kubernetes RBAC, CCE clusters are under your full control. You can set different RBAC permissions for IAM users on the console.

· CCE runs on Docker that automates container deployment, discovery, scheduling, and scaling.

· CCE is compatible with native Kubernetes APIs and kubectl. Updates from Kubernetes and Docker communities are regularly incorporated into CCE.

Docker is written in the Go language designed by Google. It provides operating-system-level virtualization. Linux Control Groups (cgroups), namespaces, and UnionFS (for example, AUFS) isolate each software process. A Docker container packages everything needed to run a software process. Containers are independent from each other and from the host.

Docker has moved forward to enhance container isolation. Containers have their own file systems. They cannot see each other's processes or network interfaces. This simplifies container creation and management.

VMs use a hypervisor to virtualize and allocate hardware resources (such as memory, CPU, network, and disk) of a host machine. A complete operating system runs on a VM. Each VM needs to run its own system processes. On the contrary, a container does not require hardware resource virtualization. It runs an application process directly in the the host machine OS kernel. No resource overheads are incurred by running system processes. Therefore, Docker is lighter and faster than VMs.

Figure 2 Comparison between Docker containers and VMs