Built on industry standards, secured for the enterprise
Docker Engine – Enterprise (EE) is the industry-leading enterprise container engine at the heart of Docker Enterprise; based on containerd, the Cloud Native Computing Foundation (CNCF) core container runtime,
Running on Linux (CentOS, RHEL, and Ubuntu) and Windows Server operating systems, Docker Engine – Enterprise helps Docker Enterprise Worker nodes operate efficiently on any substrate, and host any kind of containerized workload under Kubernetes and/or Swarm orchestration. Operators can use familiar tools and consistent automation, everywhere: portable DevOps.
Plugin support lets EE exploit best-in-class Kubernetes container networking fabrics like Calico, Kubernetes ingress solutions like Istio, and GPU-equipped and other specialized hardware. Component and node capabilities discovered by plugin are labeled in UCP, appropriately tagged, and made immediately available to application deployments for scheduling.
“Secure by default,” Docker Engine-Enterprise deploys with restricted host access, end-to-end encryption, secure mutual TLS authentication and cryptographic node identity. Security features are supported by EE’s FIPS 140-2-compliant cryptographic module, validated by the National Institute of Science and Technology (NIST), fulfilling key requirements of the Federal Information Security Management Act (FISMA).
Auditable and Trusted
Integration with Docker Trusted Registry, Docker Enterprise OSCAL automated-audit functionality, plus the ability to run vulnerability scans on Docker containers help make Docker Enterprise an efficient solution for government and commercial customers with stringent data security, privacy, and computational integrity requirements.
Preferred for Kubernetes (and Swarm)
Docker Engine-Enterprise is validated to work with Kubernetes Container Runtime Interface (CRI) and is the most-popular container runtime for Kubernetes, and also for Docker Swarm. Docker Enterprise can orchestrate EE nodes in Kubernetes, Infrastructure (Swarm), or ‘mixed’ configurations, so exploits EE flexibility in letting you configure Docker Enterprise clusters to match workload capacity and placement requirements today, then change them quickly to adapt to new requirements.
Enforce Signed Images
Docker Engine-Enterprise lets you validate container provenance by requiring proper digital signing of images before they can be deployed. Users are prevented from using container images or composing containers on base layers from unknown sources.LEARN MORE
Integrate Docker Engine with your preferred networking, storage, and logging tools through validated and certified plugins. The plugin architecture extends capabilities of Docker Engine to 3rd-party provided tools.LEARN MORE