.NET Core 1.0ย
.NET Core 1.0ย is a major new investment in the future of .NET and laying the foundation for decades to come. Still, it is in its early stage, and for some time you might still focus .NET Framework 4.6 depending on your application needs. But for many scenarios, especially in cloud/server scenarios, it will be the ideal framework, since .NET Core 1.0ย and ASP.NET 5 have being designed from the ground-up as an optimized stack for server and cloud workloads.
.NET Core 1.0ย is a completely open source stack and can run on multiple operating systems. In addition, not only are Microsoftย contributing .NET Core 1.0ย to the .NET Foundation but Microsoftย will openly collaborate with the community and ensure that Microsoftย continue our strong relationship with existing .NET open source communities, in particular the Mono community. Here are a set of announcement around open source and cross platform from Connect(); event:
- .NET Core 1ย is open source on GitHub
- Microsoft will support .NET Coreย 1.0ย on Windows, Linux and Mac.
- Microsoft has contributed .NET Core 1.0 to the .NET Foundation
- Renewed collaboration with the Mono Project
.NET Core is a modular implementation that can be used in a wide variety of verticals, scaling from the data center to touch based devices, is available as open source, and is supported by Microsoft on Windows, Linux and Mac OSX.
.NET Core is optimized around factoring concerns. Even though the scenarios of .NET Native (initially touch based devices) and ASP.NET 1.0ย (server side web development) are quite different, Microsoft has been able to provide a unified Base Class Library (BCL).
So, this is a diagram summarizing .NET Core:
The API surface area for the .NET Core BCL is identical for both .NET Native as well ASP.NET 5. At the bottom of the BCL Microsoftย have a very thin layer that is specific to the .NET runtime. Microsoft haveย currently two implementations: one is specific to the .NET Native runtime and one that is specific to CoreCLR, which is used by ASP.NET 5. The majority of the BCL are pure MSIL assemblies that can be shared as-is.
On top of the BCL, there are app-model specific APIs. For instance, the .NET Native side provides APIs that are specific to Windows client development, such as WinRT interop. ASP.NET 5 adds APIs such as MVC that are specific to server- side web development.
.NET Core is not specific to either .NET Native nor ASP.NET 5 โ the BCL and the runtimes are general purpose and designed to be modular. As such, it forms the foundation for all future .NET verticals, even additional to ASP.NET or Windows Store.
- NuGet is mainstream in .NET Core;
In contrast to the .NET Framework, the .NET Core platform is delivered as a set of NuGet packages thru NuGet.org.
In order to continue our effort of being modular and well factored Microsoftย donโt just provide the entire .NET Core platform as a single NuGet package. Instead, itโs a set of fine grained NuGet packages. For the BCL layer, Microsoft willย have a 1-to-1 relationship between assemblies and NuGet packages.
NuGet allows us to deliver .NET Core in an agile fashion. So if Microsoft provide an upgrade to any of the NuGet packages, you can simply upgrade the corresponding NuGet reference.
The NuGet based delivery also turns the .NET Core platform into an app-local framework. The modular design of .NET Core ensures that each application only needs to deploy what it needs. Microsoft isย also working on enabling smart sharing if multiple applications use the same framework bits. However, the goal is to ensure that each application is logically having its own framework so that upgrading doesnโt interfere with other applications running on the same machine.
- .NET Core with NuGet deployment is Enterprise ready;
Although .NET Core is delivered as a set of NuGet packages it doesnโt mean that you have to download packages each time you need to create a project. Microsoft will provide an offline installer for distributions and also include them with Visual Studio so that creating new projects will be as fast as today and not require internet connectivity in the development process.
Let see how the .NET platform was packed in the past.
.NET โ a set of verticals
When Microsoftย originally shipped the .NET Framework in 2002 there was only a single framework. Shortly after, Microsoftย released the .NET Compact Framework which was a subset of the .NET Framework that fit within the footprint of smaller devices, specifically Windows Mobile. The compact framework was a separate code base from the .NET Framework. It included the entire vertical: a runtime, a framework, and an application model on top.
Since then, Microsoft have repeated this sub setting exercise many times: Silverlight, Windows Phone and most recently for Windows Store. This yields to fragmentation because the .NET Platform isnโt a single entity but a set of platforms, owned by different teams, and maintained independently.
Of course, there is nothing wrong with offering specialized features in order to cater to a particular need. But it becomes a problem if there is no systematic approach and specialization happens at every layer with little to no regards for corresponding layers in other verticals. The outcome is a set of platforms that only share APIs by the fact that they started off from a common code base. Over time this causes more divergence unless explicit (and expensive) measures are taken to converge APIs.
What is the problem with fragmentation? If you only target a single vertical then there really isnโt any problem. Youโre provided with an API set that is optimized for your vertical. The problem arises as soon as you want to target the horizontal, that is multiple verticals. Now you have to reason about the availability of APIs and come up with a way to produce assets that work across the verticals you want to target.
Today itโs extremely common to have applications that span devices: there is virtually always a back end that runs on the web server, there is often an administrative front end that uses the Windows desktop, and a set of mobile applications that are exposed to the consumer, available for multiple devices. Thus, itโs critical to support developers in building components that can span all the .NET verticals.
- Birth of portable class libraries
Originally, there was no concept of code sharing across verticals. No portable class libraries, no shared projects. You were essentially stuck with creating multiple projects, linked files, and #if. This made targeting multiple verticals a daunting task.
Duringย the Windows 8 eraย Microsoft came up with a plan to deal with this problem. When Microsoftย designed the Windows Store profile Microsoftย introduced a new concept to model the sub-setting in a better way: contracts.
Originally, the .NET Framework was designed around the assumption that itโs always deployed as a single unit, so factoring was not a concern. The very core assembly that everything else depends on is mscorlib. The mscorlib provided by the .NET Framework contains many features that that canโt be supported everywhere (for example, Remoting and AppDomains). This forces each vertical to subset even the very core of the platform. This made it very complicated to tool a class library experience that lets you target multiple verticals.
The idea of contracts is to provide a well factored API surface area. Contracts are simply assemblies that you compile against. In contrast to regular assemblies contract assemblies are designed around proper factoring. Microsoftย deeply care about the dependencies between contracts and that they only have a single responsibility instead of being a grab bag of APIs. Contracts version independently and follow proper versioning rules, such as adding APIs results in a newer version of the assembly.
Microsoft isย using contracts to model API sets across all verticals. The verticals can then simply pick and choose which contracts they want to support. The important aspect is that verticals must support a contract either wholesale or not at all. In other words, they canโt subset the contents of a contract.
This allows reasoning about the API differences between verticals at the assembly level, as opposed to the individual API level that Microsoftย had before. This aspect enabled us to provide a class library experience that can target multiple verticals, also known as portable class libraries.
- Unifying API shape versus unifying implementation
You can think of portable class libraries as an experience that unifies the different .NET verticals based on their API shape. This addressed the most pressing need, which is the ability to create libraries that run on different .NET verticals. It also served as a design tool to drive convergence between verticals, for instance, between Windows 8.1 and Windows Phone 8.1.
However, Microsoftย still have different implementations โ or forks โ of the .NET platform. Those implementations are owned by different teams, version independently, and have different shipping vehicles. This makes unifying API shape an ongoing challenge: APIs are only portable when the implementation is moved forward across all the verticals but since the code bases are different thatโs fairly expensive and thus always subject to (re-)prioritization. And even if Microsoftย could do a perfect job with converging the APIs: the fact that all verticals have different shipping vehicles means that some part of the ecosystem will always lag behind.
A much better approach is unifying the implementations: instead of only providing a well factored view, Microsoftย should provide a well factored implementation. This would allow verticals to simply share the same implementation. Convergence would no longer be something extra; itโs achieved by construction. Of course, there are still cases where Microsoft may need multiple implementations. A good example is file I/O which requires using different technologies, based on the environment. However, itโs a lot simpler to ask each team owning a specific component to think about how their APIs work across all verticals than trying to retroactively providing a consistent API stack on top. Thatโs because portability isnโt a something you can provide later. For example, .NETย file APIs include support for Windows Access Control Lists (ACL) which canโt be supported in all environments. The design of the APIs must take this into consideration, and, for instance, provide this functionality in a separate assembly that can be omitted on platforms that donโt support ACLs.
Machine-wide frameworks versus application-local frameworks
Another interesting challenge has to do with how the .NET Framework is deployed.
The .NET Framework is a machine-wide framework. Any changes made to it affect all applications taking a dependency on it. Having a machine-wide framework was a deliberate decision because it solves those issues:
- It allows centralized servicing
- It reduces the disk space
- Allows sharing native images between applications
- But it also comes at a cost.
For one, itโs complicated for application developers to take a dependency on a recently released framework. You either have to take a dependency on the latest OS or provide an application installer that is able to install the .NET Framework when the application is installed. If youโre a web developer, you might not even have this option as the IT department tells you which version youโre allowed to use. And if youโre a mobile developer you really donโt have choice but the OS you target.
But even if youโre willing to go through the trouble of providing an installer in order to chain in the .NET Framework setup you may find that upgrading the .NET Framework can break other applications.
Hold on โ isnโt Microsoftย saying that our upgrades are highly compatible? And Microsoftย take compatibility extremely seriously. Microsoft have rigorous reviews for any changes made to the .NET Framework. And for anything that could be a breaking change Microsoft have dedicated reviews to investigate the impact. Microsoft run a compat lab where Microsoft test many popular .NET applications to ensure that Microsoft donโt regress them. Microsoft also have the ability to tell which .NET Framework the application was compiled against. This allows us to maintain compatibility with existing applications while providing a better behavior for applications that opted-into targeting a later version of the .NET Framework.
Unfortunately, Microsoft haveย also learned that even compatible changes can break applications. Let me provide a few examples:
- Adding an interface to an existing type can break applications because it might interfere with how the type is being serialized.
- Adding an overload to a method that previously didnโt had any overloads can break reflection consumers that never handled finding more than one method.
- Renaming an internal type can break applications if the type name was surfaced via a ToString() method.
Those are all rare cases but when you have a customer base of 1.8 billion machines being 99.9% compatible can still mean that 1.8 million machines are affected.
Interestingly enough, in many cases fixing impacted applications is fairly trivial. But the problem is that the application developer isnโt necessarily involved when the break occurs. Letโs look at a concrete example.
You tested your application on .NET Framework 4 and thatโs what you installed with your app. But some day one of your customers installed another application that upgraded the machine to .NET Framework 4.5. You donโt know your application is broken until that customer calls your support. At this point addressing the compat issue in your application is fairly expensive as you have to get the corresponding sources, setup a repro machine, debug the application, make the necessary changes, integrate them into the release branch, produce a new version of your software, test it, and finally release an update to your customers.
Contrast this with the case where you decide you want to take advantage of a feature released in a later version of the .NET Framework. At this point in the development process, youโre already prepared to make changes to your application. If there is a minor compat glitch, you can easily handle it as part of the feature work.
Due to these issues, it takes us a while to release a new version of the .NET Framework. And the more drastic the change, the more time Microsoft need to bake it. This results in the paradoxical situation where our betas are already fairly locked down and Microsoft haveย pretty much unable to take design change requests.
Two years ago, Microsoft have started to ship libraries on NuGet. Since Microsoftย didnโt add those libraries to the .NET Framework Microsoftย refer to them as โout-of-bandโ. Out-of- band libraries donโt suffer from the problem Microsoftย just discussed because they are application-local. In other words, the libraries are deployed as if they were part of your application.
This pretty much solves all the problems that prevent you from upgrading to a later version. Your ability to take a newer version is only limited by your ability to release a newer version of your application. It also means youโre in control which version of the library is being used by a specific application. Upgrades are done in the context of a single application without impacting any other application running on the same machine.
This enables us to release updates in a much more agile fashion. NuGet also provides the notion of preview versions which allow us to release bits without yet committing on a specific API or behavior. This supports a workflow where Microsoft can provide you with our latest design and โ if you donโt like it โ simply change it. A good example of this is immutable collections. It had a beta period of about nine months. Microsoftย spend a lot of time trying to get the design right before Microsoft shipped the very first version. Needless to say that the final design โ thanks to the extensive feedback you provided โ is way better than the initial version.
- Enter .NET Core
All these aspects caused us to rethink and change the approach of modelling the .NET platform moving forward. This resulted in the creation of .NET Core:
.NET Core is a modular implementation that can be used in a wide variety of verticals, scaling from the data center to touch based devices, is available as open source, and is supported by Microsoft on Windows, Linux and Mac OSX.
Let me go into a bit more detail of how .NET Core looks like and how it addresses the issues I discussed earlier.
- Unified implementation for .NET Native
When Microsoftย designed .NET Native it was clear that Microsoftย canโt use the .NET Framework as the foundation for the framework class libraries. Thatโs because .NET Native essentially merges the framework with the application, and then removes the pieces that arenโt needed by the application before it generates the native code. As I explained earlier, the .NET Framework implementation isnโt factored which makes it quite challenging for a linker to reduce how much of the framework gets compiled into the application โ the dependency closure is just too large.
.NET Core is essentially a fork of the NET Framework whose implementation is also optimized around factoring concerns. Even though the scenarios of .NET Native (touch based devices) are quite different, Microsoft were able to provide a unified Base Class Library (BCL).
The API surface area for the .NET Core BCL is identical for Native. At the bottom of the BCL Microsoft have a very thin layer that is specific to the .NET runtime. Microsoft haveย currently two implementations: one is specific to the .NET Native runtime and one that is specific to Core-CLR, which is used by ASP.NET 5. However, that layer doesnโt change very often. It contains types like String and Int32. The majority of the BCL are pure MSIL assemblies that can be shared as-is. In other words, the APIs donโt just look the same โ they share the same implementation. For example, there is no reason to have different implementations for collections.
On top of the BCL, there are app-model specific APIs. For instance, the .NET Native side provides APIs that are specific to Windows client development, such as WinRT interop. ASP.NET 5 adds APIs such as MVC that are specific to server- side web development.
Microsoft think of .NET Core as not being specific to .NET Native โ the BCL and the runtimes are general purpose and designed to be modular. As such, it forms the foundation for all future .NET verticals.
- NuGet as a first class delivery vehicle;
In contrast to the .NET Framework, the .NET Core platform will be delivered as a set of NuGet packages. Microsoft haveย settled on NuGet because thatโs where the majority of the library ecosystem already is.
In order to continue our effort of being modular and well factored Microsoft donโt just provide the entire .NET Core platform as a single NuGet package. Instead, itโs a set of fine grained NuGet packages:
For the BCL layer, Microsoft willย have a 1-to-1 relationship between assemblies and NuGet packages.
Moving forward, the NuGet package will have the same name as the assembly. For example, immutable collections will no longer be delivered in a NuGet package called Microsoft.Bcl.Immutable but instead be in a package called System.Collections.Immutable.
In addition, Microsoftย have decided to use semantic versioning for our assembly versioning. The version number of the NuGet package will align with the assembly version.
The alignment of naming and versioning between assemblies and packages help tremendously with discovery. There is no longer a mystery which NuGet packages contains System.Foo, Version=1.2.3.0 โ itโs provided by the System.Foo package in version 1.2.3.
NuGet allows us to deliver .NET Core in an agile fashion. So if Microsoft provide an upgrade to any of the NuGet packages, you can simply upgrade the corresponding NuGet reference.
Delivering the framework itself on NuGet also removes the difference between expressing 1st party .NET dependencies and 3rd party dependencies โ they are all NuGet dependencies. This enables a 3rd party package to express, for instance, that they need a higher version of the System.Collections library. Installing this 3rd party package can now prompt you to upgrade your reference to System.Collections. You donโt have to understand the dependency graph โ you only need to consent making changes to it.
The NuGet based delivery also turns the .NET Core platform into an app-local framework. The modular design of .NET Core ensures that each application only needs to deploy what it needs. Microsoft haveย also working on enabling smart sharing if multiple applications use the same framework bits. However, the goal is to ensure that each application is logically having its own framework so that upgrading doesnโt interfere with other applications running on the same machine.
Our decision to use NuGet as a delivery mechanism doesnโt change our commitment to compatibility. Microsoft continue to take compatibility extremely seriously and will not perform API or behavioral breaking changes once a package is marked as stable. However, the app-local deployment ensures that the rare case where a change that is considered additive breaks an application is isolated to development time only. In other words, for .NET Core these breaks can only occur after you upgraded a package reference. In that very moment, you have two options: addressing the compat glitch in your application or rolling back to the previous version of the NuGet package. But in contrast to the .NET Framework those breaks will not occur after you deployed the application to a customer or the production server.
- Enterprise ready;
The NuGet deployment model enables agile releases and faster upgrades. However, Microsoft donโt want to compromise the one-stop-shop experience that the .NET Framework provides today.
One of the great things of the .NET Framework is that it ships as a holistic unit, which means that Microsoft tested and supports all components as a single entity. For .NET Core Microsoft willย provide the same experience. Microsoft willย create the notion of a .NET Core distribution. This is essentially just a snapshot of all the packages in the specific version Microsoft tested them.
The idea is that our teams generally own individual packages. Shipping a new version of the teamโs package only requires that the team tests their component, in the context of the components they depend on. Since youโll be able to mix- and-match NuGet packages there can obviously be cases where certain combinations of components donโt play well together. Distributions will not have that problem because all components are tested in combination.
Microsoft expect distributions to be shipped at a lower cadence than individual packages. Microsoft are currently thinking of up to four times a year. This allows for the time it will take us to run the necessary testing, fixing and sign off.
Although .NET Core is delivered as a set of NuGet packages it doesnโt mean that you have to download packages each time you need to create a project. Microsoft willย provide an offline installer for distributions and also include them with Visual Studio so that creating new projects will be as fast as today and not require internet connectivity in the development process.
While app-local deployment is great for isolating the impact of taking dependencies on newer features itโs not appropriate for all cases. Critical security fixes must be deployed quickly and holistically in order to be effective. Microsoft are fully committed to making security fixes as Microsoft always have for .NET.
In order to avoid the compatibility issues Microsoft have seen in the past with centralized updates to the .NET Framework itโs essential that these only target the security vulnerabilities. Of course, there is still a small chance that those break existing applications. Thatโs why Microsoft only do this for truly critical issues where itโs acceptable to cause a very small set of apps to no longer work rather than having all apps run with the vulnerability.
- Foundation for open source and cross platform
In order to take .NET cross platform in a sustainable way Microsoft decided to open source .NET Core.
From past experience Microsoft understand that the success of open source is a function of the community around it. A key aspect to this is an open and transparent development process that allows the community to participate in code reviews, read design documents, and contribute changes to the product.
Open source enables us to extend the .NET unification to cross platform development. It actively hurts the ecosystem if basic components like collections need to be implemented multiple times. The goal of .NET Core is having a single code base that can be used to build and support all the platforms, including Windows, Linux and Mac OSX.
Of course, certain components, such as the file system, require different implementations. The NuGet deployment model allows us to abstract those differences away. Microsoft can have a single NuGet package that provides multiple implementations, one for each environment. However, the important part is that this is an implementation detail of this component. All the consumers see a unified API that happens to work across all the platforms.
Another way to look at this is that open source is a continuation of our desire to release .NET components in an agile fashion:
- Open Source offers quasi real-time communication for the implementation and overall direction
- Releasing packages to NuGet.org offers agility at the component level
- Distributions offer agility at the platform level
Having all three elements allows us to offer a broad spectrum of agility and maturity.
Relationship of .NET Core with existing platforms;
Although Microsoft haveย designed .NET Core so that it will become the foundation for all future stacks, Microsoft isย very much aware of the dilemma of creating the โone universal stackโ that everyone can use:
Microsoft believe itsย found a good balance between laying the foundation for the future while maintaining great interoperability with the existing stacks. Iโll go into more detail by looking at several of these platforms.
- Summary;
Long thing short; The .NET Core platform is a new .NET stack that is optimized for open source development and agile delivery on NuGet. Microsoft isย working with the Mono community to make it great on Windows, Linux and Mac, and Microsoft will support it on all three platforms.
Microsoft isย retaining the values that the .NET Framework brings to enterprise class development. Microsoft willย offer .NET Core distributions that represent a set of NuGet packages that Microsoft tested and support together. Visual Studio remains your one- stop-shop for development. Consuming NuGet packages that are part of a distribution doesnโt require an internet connection.
Microsoft acknowledge our responsibility and continue to support shipping critical security fixes without requiring any work from the application developer, even if the affected component is exclusively distributed as NuGet package.