Minecraft services build on Mariner
Microsoft Franchise Services’ mission is to empower every Minecraft developer, creator, and player to have a seamless play experience across platforms by creating and managing cutting edge studio-wide services. Minecraft Franchise Services architected a shared infrastructure of services and libraries that are being used across Mojang Studios and the games they build, and these services are running on Mariner, Microsoft’s open-source Linux distribution.
Minecraft’s shared infrastructure prioritizes the following pillars, which made Mariner a natural fit for them.
- Ease of onboarding
- Scalability
- Security
- Infrastructure as code
All of Minecraft’s services are running on Azure Kubernetes Service (AKS) utilizing Virtual Machine Scale Sets (VMSS) to automatically adapt to the number of their players across the world.
As Michael Kranz, Senior Software Engineer of Minecraft Operations tells it, “When we first heard about Mariner, it was because of a Microsoft-wide initiative to standardize on a more secure and lightweight Linux distribution.
Our migration to Mariner was done in two months over multiple phases:
- Migration of our .NET core container base images to Mariner
- Use pre-built container images that are hosted on the Microsoft Container Registry of many foundational Open Source Software (OSS) projects
- Migrate our existing AKS nodepools from a previous Linux distro to Mariner
For all these phases, we saw common Mariner benefits right out of the gate:
- Our nodes and pods start up faster because of reduction in image size, which helps to better react to an influx in players. Also, the smaller image size has reduced our attack surface
- The investment in scanning OSS software packages in the shipped container images for security vulnerabilities helps us keep our services safe and secure
- By relying on only Microsoft vetted container images from the Microsoft Container Registry, we are reducing the opportunity for supply chain attacks immensely”
Minecraft Franchise Services is excited to continue building on Mariner, which helps them better react to an influx of players, while keeping their services safe and secure.
Published on:
Learn moreRelated posts
Enable IP restriction for a public facing App service
In this blog article, we will cover how to control the app service deployment to support only public facing app service with IP restriction en...
Selecting the Optimal Container for Azure AI: Docker, ACI, or AKS?
Deploying Azure AI services in containers like Docker, Azure Container Instances (ACI), or Azure Kubernetes Service (...
Securing Hardware and Firmware Supply Chains
In the modern cloud data center, ensuring the authenticity, integrity, and security of hardware and firmware is paramount. Firmware is the low...
Liquid Cooling in Air Cooled Data Centers on Microsoft Azure
With the advent of artificial intelligence and machine learning (AI/ML), hyperscale datacenters are increasingly accommodating AI accelerators...
Mt Diablo - Disaggregated Power Fueling the Next Wave of AI Platforms
Authors: Jason Adrian – General Manager, Azure Platform Architecture Laurentiu Olariu – Power Architect, Azure Platform Architecture Banha Sok...
Deny inbound NSG Rule creation via Azure Policy
In this blog article, we will cover how to deny the creation of inbound Network Security Group Rules if the inbound NSG Rule contains&n...
Azure Extended Zones: Optimizing Performance, Compliance, and Accessibility
Azure Extended Zones are designed to bring the power of Azure closer to end users in specific metropolitan areas or jurisdictions, cate...
Inside Maia 100: Revolutionizing AI Workloads with Microsoft's Custom AI Accelerator
Authored by: Sherry Xu, Partner Lead SoC Architect, Azure Maia Chandru Ramakrishnan, Partner Software Engineering Manager As the advanc...
Accelerate Cloud Potential for Your SAP Workloads on Azure with these Learning Paths
Accelerate Cloud Potential for Your SAP Workloads on Azure with these Learning Paths In today's rapidly evolving digital landsc...
Azure Role Assignments Audit Report
Overview: Azure Administrators often come across challenges while tracking multiple Azure role assignments and removals. At present Azur...