+−⟲ WORKER WORKER WORKER WORKER WORKER WORKER MANAGER MANAGER MANAGER No need to login on all the worker nodes,the manager passes the docker auth credentials to workersto pull from the private docker registry GLOBAL-SERVICE - containers/task are created on all nodes, like daemon-setcan be used for monitoring or apps that need high Fault ToleranceREGULAR-SERVICE - containers/task are scaled and placed on nodes by theswarm managers as necessary according to the configuration ALL nodes participate in the overlay-network and can accept all the trafficfrom the load balancer, even if the service is not on the node. ALWAYS USE DEClARATIVE CONFIGURATION, never use imperative config i.e cli commandsand always use a VCS to maintain the configuration files global global global global global global global global global task task task task task task ROUTING-MESH - is what sets all the nodes to accept the traffic on the published-portand forwards to the target-port (container)We will only use 443 in the routing mesh. use constraints to control node placement and other fine grain tuning