We are heading into a world where the files of most users are hosted by 4 big companies in the US. This is the case for most home users, companies but also education and research institutions. If we want to keep our sovereignty over our data, protect our privacy and prevent vendor lock-in then we need open source self-hosted and federated alternatives. The internet and the web use a distributed and federated architecture. Now we have to make sure that cloud services follow the same model. This talk will cover how this can be implemented in a real world example. It covers how a 20 million user instance of Nextcloud can be scaled across different hosting centers and continents. It will cover high level concepts but also concrete Kubernetes, Ceph and MariaDB clustering setups.
2. Frank Karlitschek
•Studied Computer Science in Tübingen
•Founder of several IT companies
•KDE contributor and board member
•W3C invited expert
•Fellow at Open Forum Europe
•Advisor to the United Nations about Open Source
•Founder ownCloud
•Founder Nextcloud
3. Agenda
• What is Nextcloud ?
• Feature Overview
• Scaling from very small to very big
• Case Study MagentaCloud
• Case Study América Móvil
19. File Access
Control
Block access and sharing
Based on:
• IP
• tag
• LDAP group
• time
• name
• mime type
• size
• user agent
• …
20. • Most requested feature
• Supported in
• iOS
• Android
• Mac
• Windows
• Linux
• Enterprise grade key management
• Sharing
• Files Drop
• Optional Key Recovery
• HSM Support
End 2 End Encryption
21. Nextcloud as central access point for all enterprise data
• SMB/CIFS
• Sharepoint
• S3
• Swift
• FTP
• Dropbox
• Google Drive
• Local
• WebDAV
• Nextcloud
Mount by: user, group, global
Authentication: per user, global, cached
Central auditing, access control, authentication, clients
Data Access Engine
22.
23. • Server 2 Server sharing
• Folder / Files
• Behaves as one service
• Open Cloud Mesh
• Trusted servers
• Autocompletion with Lookup Server
• Access control via File Firewall
Federation
26. Communication Product
• Alternative to:
• Zoom
• Skype for Business
• WebEx
• Microsoft Teams
• Slack
• Audio / Video calls
• Chat
• Integrated into Nextcloud Files
• Integrated into Collabora Online
• Self Hosted
• Webinar use-case
• Phone use-case
• Group chat use-case
Nextcloud Talk
27. • Snapper and better UI
• Posting documents into a conversation (2 sides)
• Conversation/people filters
• New conversation creation flow
• User defined groups / circles
• Mentioning / notification
• Commands / polls
• Lobby
• Video Verification
• Reply feature
• bigger emojis
Talk
28.
29.
30.
31.
32.
33.
34.
35. A group call has started in Brainstormig
upcoming press release
67. • Raspberry Pi
• 1-10 users
• NextcloudPi
• Nextcloud AIO (All In One Docker Image)
68. • Standard Single Linux Server
• Up to 10.000 Users
• Additional Redis
• MariaDB, MySQL or PostgreSQL
• Local, NFS, S3 Storage
• High Performance Backend Files
• High Performance Backend Talk
• OCS Microservices
69. • Optional
• Additional component written in Rust
• Faster syncing
• 10x less server requests
• Instant notifications
• Clustering enabled
High Performance Backend for Files
70. • Exclusive for customers
• STUN Server (Advanced IP negotiations)
• TURN Server (Firewall tunneling)
• MCU Server (up to 100 users per call)
• Advanced Signaling Server (Scaling to >1M users)
• SIP Bridge (Telephone dialin)
Talk High Performance Backend
80. • Scalability > 5 Million users
• Global distribution
• Cost efficiency
• Independent nodes
• Federated sharing between nodes
• Lookup Server
• Global Site Selector
• Balancer
Global Scale
83. Nextcloud Conference
• Full Microsoft 365 or Google Workspace alternative
• Hosted wherever wanted
• Compliant
• Great scalability
• No foreign laws involved
• 100% open source and free software
• No vendor lock-in
83