Container and Cloud‑Native Technologies for Financial‑Grade Distributed Architecture

In financial‑grade distributed architectures, adopting containers presents several challenges. At the 2018 ATEC Ant Financial Technology Exploration Conference, senior expert Sheng Yanmin analyzed the essence of containers and cloud‑native technologies, offering practical solutions for their use.

Cloud‑native technology comprises five foundational components: Containers, Service Meshes, Declarative APIs, Immutable Infrastructure, and Microservices, along with capabilities across public, hybrid, and private clouds.

The article clarifies less familiar concepts: Service Meshes enable cross‑language and cross‑stack communication; Declarative APIs describe desired system states (e.g., Kubernetes objects); Immutable Infrastructure treats pods like disposable units, similar to replacing an iPhone rather than repairing it.

It outlines three major challenges when using containers in financial‑grade systems: (1) smoothly transitioning existing infrastructure (asset management, monitoring, operations); (2) implementing service discovery, multi‑language support, and governance for microservices; (3) achieving elastic scaling across private, public, and hybrid clouds.

Ant Financial’s solution, called CAFE (Cloud Application Fabric Engine), includes two standards (cloud‑provider and Open Service Broker API) and three platforms (Application & Container Platform, Monitoring & Analytics Platform, Disaster‑Recovery Platform), supporting three deployment models (private, public, hybrid) and numerous solutions such as DevOps and distributed architecture.

The three response strategies are:

Bridge from traditional to cloud‑native: CAFE treats containers like lightweight VMs, allowing login, shutdown, restart, and image‑based deployment while preserving IP/ID and supporting persistent volumes, thus easing migration for operations teams.

SOFAMesh native support: Leveraging SOFAStack middleware, SOFAMesh provides a smart gateway (Pilot) and data plane (MOSN) for multi‑language microservices, enabling seamless traffic control, metrics, logging, and tracing.

Hybrid‑cloud architecture: CAFE synchronizes applications, data, and images across clouds, enabling elastic workload distribution between private and public clouds for cost‑effective scaling.

Custom CAFE pod lifecycle extends the native Kubernetes pod model to support VM‑style releases, gray‑scale deployments, version management, self‑healing, in‑place and recreate upgrades, and multi‑site active‑active setups, while preserving persistent storage.

Logging is handled by AntQ (streaming delivery) and ZSearch (ElasticSearch‑based storage), with agents collecting Docker events and forwarding logs to real‑time engines, indexing services, or HDFS for offline analysis.

The overall Antstack product suite, built on CAFE, integrates OceanBase containerization and provides a full stack of compute, storage, networking, and developer platforms suitable for banking and insurance scenarios.

In summary, CAFE offers a smooth migration path from traditional operations to cloud‑native, a robust platform for microservice deployment via SOFAMesh, and flexible hybrid‑cloud capabilities, delivering scalable, resilient infrastructure for financial enterprises.