Highly Available Web Properties in Aws
•Télécharger en tant que PPTX, PDF•
12 j'aime•2,072 vues
Recommandé
Recommandé
Contenu connexe
En vedette
En vedette (20)
Similaire à Highly Available Web Properties in Aws
Similaire à Highly Available Web Properties in Aws (20)
Plus de Amazon Web Services
Plus de Amazon Web Services (20)
Dernier
Dernier (20)
Highly Available Web Properties in Aws
- 1. Building Highly Available, Scalable Web Properties with AWS Joe Ziegler │Technical Evangelist @jiyosub
- 2. 1. ELASTICITY 2. DESIGN FOR FAILURE 3. LOOSE COUPLING 4. SECURITY 5. PERFORMANCE
- 3. # 1 ELASTICITY ●○○○○
- 4. AMAZON EC2 ELASTIC COMPUTE CLOUD
- 6. AMAZON CLOUDWATCH MONITORING FOR AWS RESOURCES
- 8. AUTO SCALING SCALE UP/DOWN EC2 CAPACITY
- 10. ELASTIC LOAD BALANCING NETWORK TRAFFIC DISTRIBUTION
- 12. 6 am
- 13. 10 am
- 14. 10 am
- 15. 10 am
- 16. 7 pm
- 17. 7 pm
- 18. 7 pm
- 19. without elasticity you can't accelerate
- 20. what you really need is… …adjustable capacity
- 21. # 2 DESIGN FOR FAILURE ●●○○○
- 22. « Everything fails all the time » Werner Vogels CTO of Amazon
- 23. YOUR GOAL Applications should continue to function even if the underlying physical hardware fails or is removed or replaced
- 24. Avoid single points of failure. Assume everything fails, and design backwards.
- 25. Avoid single points of failure. Assume everything fails, and design backwards.
- 27. AMAZON RDS RELATIONAL DATABASE SERVICE
- 30. AMAZON ROUTE 53 DOMAIN NAME SERVICE
- 40. AMAZON CLOUDWATCH ALARMS
- 45. AWS BUILDING BLOCKS Inherently Fault-Tolerant Services Fault-Tolerant with the right architecture Amazon S3 Elastic Load Balancing Amazon EC2 Amazon SimpleDB AWS IAM Amazon EBS Amazon DynamoDB AWS Elastic Amazon RDS Amazon CloudFront Beanstalk Amazon SWF Amazon VPC Amazon Amazon SQS ElastiCache Amazon SNS Amazon EMR Amazon SES Amazon CloudSearch Amazon Route53
- 49. # 3 LOOSE COUPLING ●●●○○
- 50. BUILD LOOSELY COUPLED SYSTEMS The looser the are coupled, the bigger they scale
- 52. Create independent components Design everything as a Black Box
- 53. Create independent components Design everything as a Black Box Think in terms of services
- 54. TRANSCODE RECEIVE & PUBLISH
- 55. TRANSCODE RECEIVE & PUBLISH QUEUE
- 58. AMAZON SQS SIMPLE QUEUE SERVICE
- 61. START CHECK REJECT STOP VIDEO YES NO TOO SPAM PUBLISH SPAM? LONG? CHECK & NOTIFY YES NO SHORTEN TRANSCODE VIDEO
- 65. WHAT ARE WE TRYING TO DO?
- 66. START CHECK REJECT STOP VIDEO YES NO TOO SPAM PUBLISH SPAM? LONG? CHECK & NOTIFY YES NO SHORTEN TRANSCODE VIDEO
- 67. START CHECK REJECT STOP VIDEO YES NO TOO SPAM PUBLISH SPAM? LONG? CHECK & NOTIFY YES NO SHORTEN TRANSCODE VIDEO
- 68. START CHECK REJECT STOP VIDEO YES NO TOO SPAM PUBLISH SPAM? LONG? CHECK & NOTIFY YES NO SHORTEN TRANSCODE VIDEO
- 69. TASKS DECISIONS STATELESS ! HISTORY
- 70. STATELESS SCALES HORIZONTALLY
- 71. AMAZON SWF WORKFLOW SERVICE FOR SCALABLE, RESILIENT APPLICATIONS
- 72. AMAZON SWF Keeps track of : State Executed tasks Timeouts Errors
- 73. WORKFLOW ACTORS
- 74. DECIDERS COORDINATION LOGIC 1. Poll for work on a decision list Long polling: 60 seconds 2. Evaluate workflow execution history SWF sends full history in JSON format 3. Return decision to Amazon SWF Usually scheduling another task
- 75. WORKERS COORDINATION LOGIC 1. Poll for work on a specific task list Long polling: 60 seconds 2. Execute works, send heartbeats SWF sends input data from deciders 3. Return success / failure Detailed data can be provided to deciders
- 78. ALL HORIZONTAL SCALING PATTERNS APPLY
- 85. NO NEW LANGUAGE TO LEARN YOUR CODE IS YOUR WORKFLOW LANGUAGE SWF MAINTAINS STATE
- 86. AWS FLOW FRAMEWORK Java Library • Entire workflow can be expressed in sequential code • Integrated with Java Utils API
- 87. CHAINED TASKS WITHOUT DECISIONS? RECEIVE TRANSCODE NOTIFY use AMAZON SQS
- 88. TASK GRAPH WITH DECISIONS? GOOD OK RECEIVE CHECK SPAM TRANSCODE VIDEO LENGTH CHECK LONG SPAM SHORTEN PUBLISH REJECT VIDEO & NOTIFY use AMAZON SWF
- 89. # 4 SECURITY ●●●●○
- 90. AWS IAM IDENTITY AND ACCESS MANAGEMENT
- 93. SECURITY GROUPS LAYERED SECURITY
- 98. CERTIFICATIONS & COMPLIANCE SAS 70 Type II audit ISO 27001 Certification Sarbanes-Oxley SOX HIPAA healthcare FISMA US Federal Government DIACAP MAC III Sensitive IATO
- 99. PCI DSS Compliant LEVEL 1 SERVICE PROVIDER
- 100. # 5 PERFORMANCE ●●●●●
- 101. VERTICAL SCALING
- 103. CLUSTER COMPUTE EIGHT EXTRA LARGE 2x Intel Xeon E5-2670, eight-core Sandy Bridge architecture 60.5 GB of memory – 3.3 TB of storage
- 104. CLUSTER GPU QUADRUPLE EXTRA LARGE Intel Xeon X5570, quad-core 2x Nehalem architecture NVIDIA Tesla Fermi 2x M2050 GPUs 22 GB of memory – 1.7 TB of storage
- 105. AMAZON ELASTICACHE MEMCACHED COMPATIBLE IN-MEMORY CACHE
- 107. SEARCH ENGINES
- 109. Relevance & Ranking
- 110. Faceting
- 111. Range Searching
- 113. +
- 114. DEMOCRATIZE SEARCH Amazon CloudSearch delivers a fully-managed search service in the cloud that can be set up and running in less than 1 hour, with automatic scaling for data & traffic, at a price starting at less than $100 per month.
- 122. 1. ELASTICITY 2. DESIGN FOR FAILURE 3. LOOSE COUPLING 4. SECURITY 5. PERFORMANCE
- 123. « If you're not embarrassed when you ship your first version you waited too long » Matt Mullenweg CEO & Founder of WordPress
- 125. AWS ANZ Customer Appreciation Day Is Coming to Sydney November 13 th #AWSCADAU
Notes de l'éditeur
- Elasticity is a fundamental property of the CloudThe difference between a classic architecture and a cloud architecture often resides in elasticity implementation
- Ideally, you would need a cursor to dynamically adjust to the desired capacity level.It's exactly what EBK do … automatically.
- Pour illustrer le launch early
- 00:47:00
- Is it open sourced yet ?
- AUDITABILITY = No central location to track the status of a task
- Montrerqu’apartir du moment oudoit faire des decisions, ilfaut considerer l’option SWFBubbles are steps, or activities. [workers]Arrows are control decisions, or coordination logic. [decider]
- Activities, or steps
- control decisions, or coordination logic
- Writing a decider requires you to review the state of the workflow. The decider itself is stateless but SWF keeps the state and tells the decider about what has happened.[Point out that a decider can return several decisions in the same call. This allows for parallel processing.]To write workers and deciders you can use the SWF SDK (provided for Java, .NET, PHP) or call the API directly, but to make this easier [CUE NEXT SLIDE]
- Compare this to what was required to write an SQS queue worker: Now the worker might have to send heartbeats; it also needs to take care of informing SWF if the work has been successful or not. This is required for SWF to keep track.
- Create distinct Security Groups for each Amazon EC2 clusterUse group-based rules for controlling access between layersRestrict external access to specific IP rangesEncrypt data “at-rest”, encrypt data “in-transit” (SSL)Use Identity and Access Management (IAM)Rotate your AWS CredentialsUse Multi-Factor AuthenticationUse Amazon Virtual Private Cloud (VPC)
- Filter by IP range, port range, security group, role
- PCI DSS Level 1AWS satisfies the requirements under PCI DSS for shared hosting providers. AWS also has been successfully validated against standards applicable to a Level 1 service provider under PCI DSS Version 2.0. Merchants and other PCI service providers can use the AWS PCI-compliant technology infrastructure for storing, processing, and transmitting credit card information in the cloud, as long as those customers create PCI compliance for their part of the shared environment. Amazon Elastic Compute Cloud (EC2), Amazon Simple Storage Service (S3), Amazon Elastic Block Storage (EBS) and Amazon Virtual Private Cloud (VPC) were included as part of this validation. Under the same circumstances, other enterprises can also benefit by running their applications on other PCI-compliant technology infrastructure. AWS provides additional information and frequently asked questions about its PCI compliance on its web site.
- cloud-hosted search service from AWSfully managed search service on the cloudscales automaticallyeliminates complex managementsupport structured or unstructured text documents. Why ?huge explosion on amount of data created everyday. structured or not.
- Amazon CloudSearch builds an index and picks the appropriate initial search instance type to ensure that your index can be stored in RAM. As your data volume grows, Amazon CloudSearch will scale your search domain to a larger search instance type (or partition your index across multiple instances if you are already on the largest search instance type).As with data volume, Amazon CloudSearch automatically scales your search domain to meet your traffic demands. When a search instance reaches over 80% CPU utilization, CloudSearch scales up your search domain by adding a search instance to handle the increased traffic. Conversely, when a search instance reaches below 30% CPU utilization, CloudSearch scales down your search domain by removing the additional search instances in order to minimize costs.
- Pour illustrer le launch early