AWS Summit Milan 2018 Semplificare la gestione dei container con i servizi AWS Speaker: Danilo Poccia, Technical Evangelist AWS

1. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Danilo Poccia
Technical Evangelist, AWS
@danilop
Amazon Container Services
Highly Scalable, Easy to Use
Container Management and Registry Services

2. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
What Are Containers?
OS virtualization
Process isolation
Images
Automation
Server
Guest OS
Bins/Libs Bins/Libs
App2App1 Portable
Flexible
Fast
Efficient

3. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Building Blocks for Containerized Microservices
AWS Elastic
Beanstalk
Amazon
SQS
Compute
AWS X-Ray
Developer Tools
AWS
CodeBuild
AWS
CodePipeline
AWS
Cloud9
AWS
Fargate
Amazon
ECS
Application Integration
Amazon
SNS
Amazon
MQ
Logging & Monitoring
Amazon
CloudWatch
AWS
CloudTrail
Amazon
DynamoDB
Amazon S3
Storage & Database
Amazon
ElastiCache
Amazon RDSAmazon
ECR
Amazon API
Gateway
Networking & API Proxy
Elastic Load
Balancing
Amazon
Route 53
AWS Step
Functions
Amazon
EKS

4. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Amazon ECR
Amazon Elastic Container Registry
(ECR) is a fully-managed Docker
container registry that makes it easy
for developers to store, manage, and
deploy Docker container images.

5. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Amazon ECS
Amazon Elastic Container Service
(Amazon ECS) is a highly scalable,
high-
performance container management
service that
supports Docker containers and
enables you to easily run applications
on a managed cluster.

6. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Why Amazon ECS
• Fully managed, elastic service. You don’t need
to run anything, and the service scales as your
microservices architecture grows.
• Integrations with services like ALB, NLB, IAM,
VPC, auto-scaling, Amazon Route 53, Amazon
ECR, CloudWatch Logs, CloudWatch Events,
Amazon SQS, Amazon SNS, Step Functions,
and Code services for continuous integration
and delivery (CI/CD).

7. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Amazon ECS
EC2 INSTANCES
ECS
AGENT
TASK
CONTAINE
R
TASK
CONTAINE
R
ECS
AGENT
TASK
CONTAINER
TASK
CONTAINER AGENT COMMUNICATION
SERVICE
Amazon
ECS
API
CLUSTER MANAGEMENT
ENGINE
KEY/VALUE STORE
ECS
AGENT
TASK
CONTAINER
TASK
CONTAINE
R
INTERNET LOAD
BALANCER
LOAD
BALANCER

8. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Amazon ECS Customers

9. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Customer Testimonials
GoPro: containerized its microservices architecture
for its GoPro Plus photo and video sharing application
by using Amazon ECS to accelerate innovation,
improve scalability, and increase server utilization by
reducing its EC2 footprint by 70%.
mytaxi: designed a microservices architecture using
containers that scales to support 350 percent spikes in
taxi demand during holidays. The company runs
Europe’s leading taxi app, connecting 10 million users
with 45,000 taxies in 40 cities. They use Amazon ECS
to manage their containers.
BuzzFeed: built a platform as a service, called rig,
on top of ECS to operate over 200 services and
average more than 150 deploys per day. Using ECS
and rig, the cost and overhead of building and
deploying a new service is lowered, which encourages
low-risk experimentation and iteration .
Fox Digital Consumer Group: uses
containerized microservices running on AWS to build
and deliver FOX NOW, which streams millions of hours
of digital content to consumers via web, mobile, and
set-top devices.
Washington Post: built Arc Publishing, a SaaS
platform that lets any media company take advantage
of the scalable, flexible publishing platform The
Washington Post built for its own newsroom. Arc is
built as containerized microservices running on AWS
using Amazon ECS.
McDonald’s: built Home Delivery, a platform to
integrate local restaurants with delivery partners such
as UberEats. McDonald's built and launched the Home
Delivery platform in less than four months using a
microservices architecture.

11. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Cloud Native Computing Foundation (CNCF)

12. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
CNCF Survey (December 2017)
57% run Kubernetes
on AWS
https://www.cncf.io/blog/2017/12/06/cloud-native-technologies-scaling-production-applications/

13. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Running Kubernetes on AWS
Kubernetes Operations (kops)
https://github.com/kubernetes/kops
AWS Workshop for Kubernetes
https://amzn.to/k8s-on-aws

14. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Running Kubernetes on AWS
Availability
Zone 1
Etcd
Master
Etcd
Master
Availability
Zone 2
Availability
Zone 3
Etcd
Master

15. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
+
=
E L A S T I C C O N TA I N E R S E RV I C E F O R K U B E R N E T E S
(EKS)

16. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

17. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

18. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

19. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

20. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Amazon EKS
mycluster.eks.amazonaws.com
Availability
Zone 1
Availability
Zone 2
Availability
Zone 3
Kubectl

21. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
APIAPIAPIAPI
EKS
Create
Cluster
Describe
Cluster
Delete
Cluster
List
Clusters
Amazon EKS API

22. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Native VPC networking
with CNI plugin
Pods have the same VPC
address inside the pod
as on the VPC
Simple, secure networking
Open source and
on GitHub
…{ }
https://github.com/aws/amazon-vpc-cni-k8s
Amazon EKS Networking

23. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Can we make it simpler?

24. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
AWS Fargate
No instances
to manage
Task
native API
Resource-based
pricing
Simple, easy to use,
powerful, and new
consumption model
=

25. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Scheduling and Orchestration
Cluster Manager Placement Engine
ECS
AMI
Docker
agent
ECS
agent
EC2 Instance
ECS
AMI
Docker
agent
ECS
agent
EC2 Instance
ECS
AMI
Docker
agent
ECS
agent
EC2 Instance

26. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
AWS Fargate Supported Configurations
CPU Memory Values
0.25 vCPU 0.5GB, 1GB, and 2GB
0.5 vCPU Min. 1GB and Max. 4GB, in 1GB increments
1 vCPU Min. 2GB and Max. 8GB, in 1GB increments
2 vCPU Min. 4GB and Max. 16GB, in 1GB increments
4 vCPU Min. 8GB and Max. 30GB, in 1GB increments

27. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
How does this work in practice?
Two launch types for ECS and EKS (in 2018):
• EC2 (traditional, manage your cluster infrastructure)
• Fargate

28. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
AWS Fargate Demo

29. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
AWS Fargate Demo

30. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
AWS Fargate Demo
https://summit.demo.danilop.net

31. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
AWS Fargate Demo
A scalable realtime chat application powered by Socket.io,
Node.js, Docker, and AWS Fargate
https://github.com/nathanpeck/socket.io-chat-fargate

32. AWS Summit Milan
27 March 2018
Lynfa SaaS
From on-premises to cloud
Luca Bolli - DevOps Engineer @ teamsystem.com
Alessandro Poli - Cloud Architect @ mondora.com

33. TeamSystem today
39
250,000
Customers
800
Partner
500
Employees
dedicated to
R&D More than 300M € revenues in 2017
39 Years of
continuous
growth
1st Software
House in Italy
Certified ISO27001, ISO9001 and AGID compliant from 2016

34. TeamSystem today: Product Portfolio
40

35. TeamSystem: Lynfa
41

36. Lynfa - How is today
42

37. How we use AWS
• Amazon Container Service (ECS)
• Amazon Elastic Container Registry (ECR)
• Software Defined Infrastructure
• AWS Lambda
• Amazon Simple Storage Service (S3)
• Amazon Relational Database Service (RDS)
• Amazon ElastiCache
• Amazon Route53 and Private Hosted Zones
• AWS Command Line Interface (CLI)
43

38. Road to Lynfa SaaS
44
1. The migration tool create a 7z archive of customer env (migration process)
2. Push the archive to a migration bucket on S3 (upload)
3. Start provisioning process
a. Create temporary EC2 instance and download archive from S3
b. Extract the customer environment to a dedicated EBS volume
c. Attach the EBS volume to a specific cluster
d. Create new task definition and its service
e. Start the container

39. Architecture
45

40. Benefits
• Cost saving
• Opportunity to approach DevOps and to collaborate with AWS SA
• Fast and easy provisioning new customer with a single Ansible playbook
execution
• Standardized software solution thanks to the delivery process automatization
• Respect the environment
• Possibility to share resources
• Guarantee complete and total isolation of user data
• High security standards
46

41. DevOps example: CD Lynfa container images
• We create a continuous delivery to generate new Lynfa container images
using these tools:
• S3 update repository
• Docker multi-stage builds
• AWS Command Line Interface to login and push
• Ansible playbook to automate operations
47
export ECR_REGISTRY=$(aws ecr get-authorization-token --region ${region} --output text --query
'authorizationData[].proxyEndpoint')
aws ecr get-login --no-include-email --region ${region}| awk '{print $6}' | docker login -u AWS --
password-stdin $ECR_REGISTRY
docker push 310272244054.dkr.ecr.eu-west-1.amazonaws.com/lynfacloud-
staging:${polyedro_ver}-${docker_build_date}

42. Next steps
• Lynfa Cloud
• AWS Fargate
• AWS Aurora serverless
• Alyante Stats
• AWS Athena
• AWS QuickSight
• SJS Analytics
• AWS Lambda functions
48

43. © 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
Thank you!
@danilop