AWS Summit Tel Aviv - Enterprise Track - Enterprise Apps & Hybrid

AWS Summit 2013 Tel Aviv
Oct 16 – Tel Aviv, Israel

Enterprise Applications
and Hybrid Environments
on AWS
Jean-Pierre Le Goaller

Agenda
1.
2.
3.
4.
5.

Datacenter Capacity Extension
Connection to AWS
Development & Test
Customer Testimonial: Gonen Wilf @ LivePerson
Enterprise Workloads
 Oracle
 SAP
 Microsoft

6. Need help?
7. Conclusion

EXTENDING
THE ENTERPRISE
DATA CENTER
●○○○○○

Capacity increase request

Corporate
Data Center

Request

Approvals
Vendor Selection
Negotiation
Procurement
Provisioning
Configuration
Corporate
Data Center

Availability

A few months later…

Corporate
Data Center

Infrastructure Request For New Project
Project X
Potential impact: UNCERTAIN
Cost of infrastructure: HIGH

Corporate
Data Center

In Corporate Data Center
Project X
Potential impact: UNCERTAIN
Denied

Corporate
Data Center

On AWS
Project X
Approved for POC
Starts immediately

Corporate
Data Center

On AWS
Project X
POC Completed

Corporate
Data Center


Project Y
Potential impact: HIGH

Corporate
Data Center


Project Y
Denied or
Delayed by 3 months

Corporate
Data Center

On AWS

Project Y
Approved
Starts immediately

Corporate
Data Center


Project Z
Cost of infrastructure: LOW
Nature: Temporary

Corporate
Data Center


Project Z
Cost of infrastructure: LOW
Nature: Temporary
Approved
Delayed by 3 months
Corporate
Data Center

On AWS

Project Z
Approved
Starts immediately

Corporate
Data Center

Project Z

On AWS

Completed

Corporate
Data Center

Project Z

On AWS

Capacity Released

Corporate
Data Center

ELASTIC
INFRASTRUCTURE
FLEXIBLE, ON-DEMAND

Private Cloud -> Customer-owned IaaS

Corporate
Data Center

Private Cloud Capacity Management

Corporate
Data Center

GETTING
CONNECTED
TO AWS
BUILDING A SECURE, RELIABLE LINK TO AWS

●●○○○○○

Amazon VPC
VIRTUAL PRIVATE CLOUD
MANAGE YOUR OWN NETWORK IN THE CLOUD

Amazon VPC gives you the ability to…
• Define a virtual network where you launch your AWS
resources
• Have complete control over:
• IP Address ranges, Subnets, Routes, Gateways and Security
settings

• Securely connect your Amazon VPC to your existing
datacenters and offices
• Use AWS as an extension of your corporate data center

Availability Zone A

Availability Zone B

Subnet 1

Availability Zone A

Subnet 2

Availability Zone B

10.0.1.9
10.0.0.5

10.0.0.6

10.0.1.8
Availability Zone A

Availability Zone B

Internet

Public
Subnet

Internet facing systems
Assert control over networking layer

Internal facing systems
Accessible only over VPN – access to
internet over corporate connection

Private
Subnet

VPN

Internet

Public
Subnet

Private
Subnet

VPN

Internet

Public
Subnet

Public
Subnet

Private
Subnet

VPN

Private
Subnet

Router

Router

AWS

DATA CENTER

IPSec tunnel via
statically-routed
or dynamicallyrouted (BGP)
VPN

Router

Router

Router

Router

DATA CENTER

AWS

Failover to
Secondary
Connection to
different
physical router

AWS Direct
Connect
Location
DATA CENTER

AWS

London • Dublin •
New York • Los
Angeles •
Washington DC •
San Jose •
Singapore • Tokyo •
Sao Paulo • Sydney

AWS Direct
Connect
Location
AWS

DATA CENTER

Dedicated
connection
Ethernet
transport
1 Gbps/10Gbps
ports

AWS Direct
Connect
Location
DATA CENTER

Amazon Partner
Network
suppliers hook
up the last leg

AWS

Router
Router
DATA CENTER

AWS Direct
Connect
Location

Router
Router

AWS

ROUTERS

DATA CENTER

Fault tolerant
primary Direct
Connect routes

ROUTERS

AWS Direct
Connect
Location

AWS

Backup internet
carried VPN
tunnel

ROUTERS

ROUTERS

DATA CENTER

AWS

Fault tolerant
primary Direct
Connect routes

AWS

DATA CENTER

End-to-End
Highly Available
Low Latency
Dedicated
Connection
1 or 10 Gbps

AWS
Direct Connect
Location

AWS

DATA CENTER

Co-locate your
own hardware
requiring
minimal latency
to AWS

DEVELOPMENT & TEST
Leveraging the agility of the cloud
●●●○○○○○

Development environments

Source control

Issue Tracking

Leverage EC2 to run
popular source control
systems

Add integrated project
management and issue
tracking

Development Servers

Build servers

Allow developers to
deploy and test their
code

Use EC2 horsepower to
drive build servers and
continuous integration

Development environment software on EC2
Source control

Development Servers

Amazon EC2

Issue Tracking

Build servers

Amazon EC2 Plugin
•
•
•
•

Scale your Jenkins fleet with the load
Can use spot instances
Support for Amazon VPC
Support for AWS IAM
(Identity and Access Management)

Testing environments

Unit & Regression

A/B

Scale up and parallel run
unit and regression plans
in a fraction of the time

Run A/B scenario testing
with replica stacks

Load & Performance

Security

Utilize spot market for
generating load and test
how applications perform

Create sandboxes for
aggressive security
testing

Shell uses AWS to Develop Software Faster and Cheaper

Core
Development
Team
Extra
Development
Resources

Contractor Team

Remote Team

CUSTOMER
TESTIMONIAL
●●●●○○○

LivePerson and AWS

Gonen Wilf, Head of Production

Agenda
1.
2.
3.
4.
5.
6.
7.

About LivePerson
The Challenge
Solution
Components and tools
Results
Wins
Lessons and tips

LivePerson is…

Mission

Customers

Creating Meaningful
Customer Connections

8,500
customers

Technology

SaaS pioneer since 1998

Optimize Customer Acquisition & Reduce Bounce Rate

Live engagement for
Rich multimedia to
lingering customer
drive sales closure

Application Stack

JVM heavy - Java & Scala
Private cloud based on openstack
Linux on commodity servers

Data

13
VOLUME

TB
per month

20

M
Engagements per month

1.8

B
Visits per month

The Challenge
1.
2.
3.
4.
5.
6.

R&D expanded globally
Provide teams with shared components for development
Development environment must reflect LP production environment
Provide high SLA for the dev environment
Solution must be quick and cost effective
Be able to support the next steps in Continuous Deployment

Build a global shared environment and have developers work locally on
their respective components

Solution
Create a hybrid cloud using AWS and Vagrant
1.
2.
3.
4.
5.

Put the shared core components on AWS
Developers use virtualized env stretched from laptop to AWS
All shared core production components on AWS
VPC (offices) and VPN (mobile users) to AWS
Use LP Production building blocks & tools

Solution: LP Global Development Environment
LP TLV

LP SFO

Shared Components at the Dev
WEB

Kafka

MSG

TomCat

MySQL

LDAP

WEB

WEB

Oracle
DB

Hadoop

App

MSG

Virtual Private Cloud
VPN or
Direct Connect

VPN or
Direct Connect

Key Components

•
•
•
•
•

Oracle DB
Apache
Tomcat
MySQL
F5 Viprion

•
•
•
•
•

HP Vertica
Cassandra
Hadoop
Kafka
Storm

Infra Tools

Monitoring Tools

•
•
•
•

•
•
•
•

Puppet
MCollective
Vagrant
Yum

Jenkins
Zabbix
Graphite
Ganglia

Network
Challenge:
• AWS L3 and L2 Networks are not as in our DC
Solution:
• Build a parallel L3 network with different subnets on top
of AWS interfaces, with F5 as the default Gateway
• Use Puppet to configure the network on the servers and
push default GW keeping AWS network for emergency
console access

Network
Challenge:
• No broadcasts to fetch arp responses
Solution:
• Build the arp table using Puppet to update servers local
subnet MAC list and update the F5 MAC list

Security
AWS Security had to be manipulated a bit for this to work:
• "Source/Destination check" had to be disabled as AWS
doesn’t know about new subnets
• AWS security was used to block access to AWS networks as
much as possible and permit everything else, allowing F5 to
be the Router/FW
• VPN S2S and remote client access was done with F5 using
IPsec for S2S and F5 APM SSL VPN for remote user access
• External services like F5 Virtual Servers are done regularly
using an F5 interface on AWS network with elastic IPs

Project results
1.
2.
3.
4.
5.
6.

Developers work on components locally
Each team uses AWS LP shared components
Developers enjoy Production standards
Real world problems caught before hitting Production
Safely enable continuous deployment
“Production-like” environment accessible for all developers

Wins
1.
2.
3.
4.
5.

POC was quick
Expandable environment – components and geo
Secure mobility for developers
Ties easily to Production tools
Monitored by NOC

Lessons and Tips
1.
2.
3.
4.
5.
6.
7.

Experiment
Start small with proof of concept
Involve stakeholders from day one
Have production standards in mind
Re-use tools and building blocks
Use AWS out of the box
Think hybrid, AWS can interact with many private clouds

THANK YOU!
Gonen Wilf
gonenw@liveperson.com

ENTERPRISE
WORKLOADS
LOWER COSTS, INCREASE AGILITY

●●●●●○○

Oracle Database on AWS
• Oracle Database 9i, 10g and 11g are fully supported on EC2
• All Editions of Database are supported on EC2:
Express Edition
Up to 4 cores and
1GB of memory

Standard Edition One
Up to 8 cores
Standard Edition
Up to 16 cores
Enterprise Edition
Unlimited

Key components of Oracle Database on AWS
• Amazon Virtual Private Cloud (Amazon VPC)
• Elastic Block Store (EBS) provisioned IOPS volumes
– Up to 4,000 IOPS per volume
– Stripe across several volumes

•
•
•
•
•

EBS-optimized instances
Oracle Automatic Storage Management (ASM)
Oracle Data Guard and Active Data Guard
Oracle Secure Backup Cloud Module
Oracle Transparent Data Encryption (TDE) with AWS CloudHSM

Key components of Oracle Database - simplified
• Amazon RDS for Oracle
• Provisioned IOPS storage for RDS – up to 30,000 IOPS/database
• Amazon Virtual Private Cloud (Amazon VPC)

Oracle Licensing on AWS
• Bring Your Own License (BYOL)
– Applies to most Oracle software on AWS
– All Oracle Software licenses are fully portable to Amazon EC2
– Oracle Cloud Licensing Policy:
http://www.oracle.com/us/corporate/pricing/cloud-licensing-070579.pdf

• License Included
– Pay by the hour
– Amazon Relational Database (RDS) for Oracle Standard Edition One

Standard Oracle Database Architecture on Amazon EC2

Public Subnet

Private Subnet

App
Servers

Oracle DB
Server

S3 Bucket

AMI
(Ready to launch)
PIOPS
Root
Volume

Data
Volume
RMAN

Mirrored Redo
Log Volumes

EBS Snapshot
Backup
Volume

EBS Snapshot Copy

Primary Availability Zone

Primary Region

DR Region

Enterprise Class Database Architecture on Amazon EC2

Public Subnet

Private Subnet

App
Web
Servers

Oracle DB
Server

Private Subnet

ASM Striped
Data Volumes

Root
Volume

App
Web
Servers

Oracle DB
Server

Oracle Data Guard

PIOPS
Root Volume

Public Subnet

PIOPS

Root
Volume

CloudFormation
Template
(Ready to launch)

PIOPS
ASM Striped
Data Volumes

Root
Volume

AMI Used by
CFN Template

OSB + RMAN
Mirrored Redo
log Volumes


OSB + RMAN
Secondary Availability Zone
RMAN Backup in
S3 Bucket

Primary Region

DR Region

Simplify: Amazon RDS for Oracle

Public Subnet

Private Subnet

App
Web
Servers

Oracle DB
Server


Primary Region

Private Subnet

RDS Synchronous
Replication

Oracle DB
Server

Public Subnet
App
Web
Servers


Intranet Enterprise Class 3-tier Architecture

Private Subnet

Private Subnet

Web
Server

Web
Server

Web
Server

Web
Server

Web
Server

Private Subnet

Private Subnet

App
Servers

Web
Server

App
Servers

App
Servers

App
Servers

Private Subnet
Oracle
DB

App
Servers

Private Subnet

Synchronous Replication


AWS

App
Servers

Corporate
Data Center

Oracle
DB


Corporate Network

Oracle Fusion Middleware on AWS
Fully supported on EC2

Oracle SOA
Suite

WebCenter
OBIEE

WebLogic
Suite

Identity and Access
Management

Business Process Management
Suite
Master Data Management
Suite
Business Rules

Business Activity Monitoring (BAM)

Oracle Enterprise Applications on AWS
Fully supported on EC2 on OVM

Oracle E-Business Suite
JD Edwards World

Hyperion

JD Edwards EnterpriseOne
Agile PLM

Siebel
Oracle Fusion
Applications

PeopleSoft Applications

InQuira
Primavera

ATG Web Commerce

AWS / SAP Alliance
SAP has been an AWS customer
since 2008
AWS has been a strategic SAP Global
Technology Partner since 2011
Most SAP products are now certified for production
deployment on AWS

SAP Solutions Certified for Production on AWS









SAP
SAP
SAP
SAP
SAP
SAP
SAP

Business Suite
Business All-in-One
Business One
Rapid Deployment Solutions (RDS)
BusinessObjects BI Solutions
Afaria
HANA One / SAP HANA One Premium

Performance: Amazon EC2 SAPS
SAP SD 2-Tier Benchmark
Instance Type (VM)

Cores

Mem

ECU

SAPS

High Memory 2-XLarge

4

34.2

13

3,700

High Memory 4-XLarge

8

68.4

26

7,400

ECU = EC2 Compute Unit

Performance: Amazon EC2 SAPS

SAP SD 3-Tier Benchmark
Instance Type

#

Cores

Mem

ECU

SAPS

Cluster Compute 8-XLarge

1

16

60

88

DB

Cluster Compute 8-XLarge

6

16

60

88

SCS+DI
90,330

ECU = EC2 Compute Unit

SAP Licensing on AWS
Bring-Your-Own-License (BYOL)

 Primary model for most SAP applications
 Use your existing SAP licenses on AWS

SAP Licensing on AWS

License Included





SAP
SAP
SAP
SAP

HANA One - $0.99/hour
HANA One Premium
Business Objects BI 4.0
Afaria Cloud Edition

How SAP Customers and Partners Use AWS

Extend Existing SAP Infrastructure to the AWS Cloud

 Run SAP temporary environments on AWS:
 Test
 Training
 Demo
 POC
 Sandbox systems


Extend Existing IT Infrastructure to the AWS Cloud
 Run SAP temporary environments on AWS

 Migrate SAP DEV and QA landscapes to AWS

Hybrid SAP Deployment – Customer Data Centre & AWS
SAP Production landscape runs in
customer’s own datacentre

SAP Development & Quality
Assurance landscape runs on AWS

DEV

QA

ECC

ECC

BW

BW

SRM

SRM

PROD

ECC
BW
Customer
Data Centers

SRM

VPN or
Direct Connect
Secure connectivity
between datacentre &
AWS


Hybrid SAP Deployment – Customer Data Centre & AWS
SAP Production landscape runs in
customer’s own datacentre

SAP Development & Quality
Assurance landscape runs on AWS

DEV

ECC

BW

BW

SRM

SRM

PROD

ECC

ECC

BW
Customer
Data Centers

QA

ECC

STAGING

BW

SRM

SRM

VPN or
Direct Connect

Secure connectivity
between datacenter
& AWS




 Archive SAP Data to AWS Cloud Storage
 Store recent SAP Database backups in Amazon S3
 Archive all SAP Database backups in Amazon Glacier



 Temporary infrastructure for SAP upgrades and
OS/DB migrations

SAP on AWS Pricing Example





1 EC2 instance (VM): 4 cores x 15 GB memory
Online M-F 8AM-8PM: 240 hours p/month
Persistent storage: 200 GB
Backup storage:
300 GB

Component

AWS Resource

Virtual Machine

m1.xlarge - SLES 11

240 hours

$0.58

p/hour

Primary Storage

EBS volume

200 GB

$0.10

p/GB p/month

$20

Backup Storage

S3 storage

300 GB

$0.095

p/GB p/month

$29

Network & IO

Data Transfer & IO

* Pricing based on US-East region as of 2/13/2013

Quantity

Unit Cost

Monthly
Cost
$140

$9

Total Monthly Cost

$198


 Temporary infrastructure for SAP upgrades and OS/DB migrations

 DR site for on-premises SAP production
environments



 DR site for on-premises SAP production environments

 Evaluate HANA



 DR site for on-premises SAP production environments
 Evaluate HANA

 Host individual SAP solutions like Afaria or
Business Objects on AWS


Host Complete SAP Environments on the AWS Cloud
 Migration of SAP legacy systems to AWS


Host Complete SAP Environments on the AWS Cloud
 Migration of SAP legacy systems to AWS

 Rapid deployment of infrastructure to start a
new SAP implementation

Full SAP Deployment on AWS
Customer runs DEV, QAS & PRD on AWS
Customer
LAN

DEV

QA

PRD

ECC

ECC

ECC

BW

BW

BW

SRM

SRM

SRM

VPN or
Direct Connect
Secure connectivity
between LAN & AWS
network


HIGH AVAILABILITY
AND
DISATER RECOVERY
FOR SAP PRODUCTION APPLICATIONS

AWS Partner Network: SAP Partners

Consulting Services
 SAP Implementation

 AWS Onboarding

 SAP OS/DB Migrations

 SAP POCs

 SAP Sizing

 Architecture Planning

 SAP Evaluations

 Performance Tuning

 SAP High Availability

 SAP Hosting

 Backup & Recovery

 Account Management

 Disaster Recovery

 DB Administration

 SAP BASIS

 24/7 Help Desk

 OS Admin & Patching

 SAP Upgrades

Managed Services

More SAP on AWS Information
http://aws.amazon.com/sap






Whitepapers
SAP Notes
Support Information
AWS-SAP Partners

Amazon EC2 Windows Guide
What’s New:
• Using Windows Powershell
with the AWS SDK for
.NET
• AWS Diagnostic tools for
Windows Server
• Install EC2 command line
tools on Windows
• Setting up a Windows HPC
Cluster
http://docs.amazonwebservices.com/AWSEC2/latest/WindowsGuide/Welcome.html

AWS SDK for .NET
• APIs for many AWS services
• Includes:
– AWS Toolkit for Microsoft
Visual Studio

– Visual Studio templates
– AWS Tools for Windows
PowerShell

– AWS CloudFormation
Template Editor
– AWS .NET Library
– C# code samples

AWS Marketplace
• Microsoft Windows-based
Amazon Machine Images (AMIs)
• Windows and SQL Server
• > 20 AMIs

Microsoft Software on AWS – License Included
• Windows Server OS

–
–
–
–

2003
2008
2008 R2
2012

• SQL Server Express/Web/Standard
– RDS or EC2

Microsoft Software on AWS – Bring Your Own License
• Microsoft License Mobility through Software Assurance

Microsoft Software on AWS – Bring Your Own License
• SQL Server Enterprise
– EC2
– RDS

•
•
•
•
•
•
•

IIS
Active Directory
Exchange
SharePoint
Lync
System Center Operations Manager (SCOM)
Dynamics CRM

SharePoint Reference Implementation
Public Subnet

Private Subnet

Private Subnet

Private Subnet

Private Subnet

IIS & SharePoint
Web Front End

Central Admin &
SharePoint Services

Primary DB
SQL Server

Primary DC/DNS

Web Tier

Application Tier
Availability Zone 1

Database Tier

Active Directory

Web Tier

Application Tier

Database Tier

IIS & SharePoint
Web Front End

Central Admin &
SharePoint Services

NAT

Remote
Admin

RDGW

Users
Internet
Gateway

ELB

Active Directory

Mirror DB
Backup DC/DNS

RDGW

Witness
NAT
Public Subnet

Private Subnet

Private Subnet

Availability Zone 2
AWS Region

Private Subnet

Private Subnet

Deploy SharePoint Farm in 6 Steps
• Article “Deploy a Microsoft SharePoint 2010 Server Farm
in the AWS Cloud in 6 Simple Steps”:
– Builds upon the SharePoint Reference Implementation White
Paper
– http://aws.amazon.com/articles/9982940049271604

• AWS CloudFormation Templates for each step:
–
–
–
–

Launch the network and Active Directory stack
Launch the database stack
Launch the app stack
Launch the web stack

More Microsoft on AWS information
• SharePoint Reference Architecture on AWS whitepaper:
http://aws.amazon.com/windows/sharepoint/
• Microsoft Exchange Server 2010 in the AWS Cloud: Planning &
Implementation Guide
http://aws.amazon.com/windows/exchange/
• Implementing Microsoft Windows Server Failover Clustering
(WSFC) and SQL Server 2012 AlwaysOn Availability Groups in the
AWS Cloud
• … and more
http://aws.amazon.com/windows/

Amazon VPC

Avoided
data center
build out

50% lower cost
than hosting
options

Saved
$1M over
3 years

NEED HELP?
●●●●●●○

24*7 PREMIUM SUPPORT
BUSINESS AND ENTERPRISE TIERS

Enterprise Account Team
Works with the customer and
TAM to provide architectural
help with projects and design
needs

Account
Manager
Helps ensure customers
are receiving the best value
from AWS services

Solutions
Architect
24x7x365 Support
Engineer Team

Enterprise
Support

TAM

Support Team

Dedicated enterprise
engineer for technical
inquiries and escalations

AWS Trusted Advisor

•
•
•
•

Save Money
Improve Availability
Close Security Gaps
Increase Performance

CONCLUSION
●●●●●●●

OUR ENTERPRISE CUSTOMERS RUN

DEV AND TEST
ENVIRONMENTS ON AWS


ENTERPRISE
WORKLOADS
ON AWS


WEB APPLICATIONS
ON AWS


BIG DATA
ON AWS

LEVERAGE
COST EFFECTIVE SOLUTIONS
FOR MORE AGILITY
• OPEN SOURCE SOFTWARE
• VIRTUAL APPLIANCES
• MANAGED AWS SERVICES

Collection
Storage
Archiving

Glacier

Processing

Analysis and Reporting

INNOVATE
DO THINGS DIFFERENTLY

THANK YOU!
Jean-Pierre Le Goaller
jplg@amazon.lu

AWS Summit Tel Aviv - Enterprise Track - Enterprise Apps & Hybrid

Recomendados

Recomendados

Más contenido relacionado

La actualidad más candente

La actualidad más candente (20)

Destacado

Destacado (9)

Similar a AWS Summit Tel Aviv - Enterprise Track - Enterprise Apps & Hybrid

Similar a AWS Summit Tel Aviv - Enterprise Track - Enterprise Apps & Hybrid (20)

Más de Amazon Web Services

Más de Amazon Web Services (20)

Último

Último (20)

AWS Summit Tel Aviv - Enterprise Track - Enterprise Apps & Hybrid