The document summarizes a presentation on running enterprise applications and workloads in hybrid environments on AWS. It discusses using AWS to extend on-premises data centers for capacity, connecting to AWS through VPC and Direct Connect, and using AWS for development, testing, and non-production workloads. Specific applications covered include Oracle databases, SAP solutions, and Microsoft workloads. The presentation provides an overview of architecture options, performance benchmarks, and licensing models for running major enterprise applications on AWS.
15. Infrastructure Request For New Project
Project Z
Potential impact: HIGH
Cost of infrastructure: LOW
Nature: Temporary
Corporate
Data Center
16. In Corporate Data Center
Project Z
Potential impact: HIGH
Cost of infrastructure: LOW
Nature: Temporary
Approved
Delayed by 3 months
Corporate
Data Center
26. Amazon VPC gives you the ability to…
• Define a virtual network where you launch your AWS
resources
• Have complete control over:
• IP Address ranges, Subnets, Routes, Gateways and Security
settings
• Securely connect your Amazon VPC to your existing
datacenters and offices
• Use AWS as an extension of your corporate data center
48. Development environments
Source control
Issue Tracking
Leverage EC2 to run
popular source control
systems
Add integrated project
management and issue
tracking
Development Servers
Build servers
Allow developers to
deploy and test their
code
Use EC2 horsepower to
drive build servers and
continuous integration
52. Amazon EC2 Plugin
•
•
•
•
Scale your Jenkins fleet with the load
Can use spot instances
Support for Amazon VPC
Support for AWS IAM
(Identity and Access Management)
53. Testing environments
Unit & Regression
A/B
Scale up and parallel run
unit and regression plans
in a fraction of the time
Run A/B scenario testing
with replica stacks
Load & Performance
Security
Utilize spot market for
generating load and test
how applications perform
Create sandboxes for
aggressive security
testing
65. The Challenge
1.
2.
3.
4.
5.
6.
R&D expanded globally
Provide teams with shared components for development
Development environment must reflect LP production environment
Provide high SLA for the dev environment
Solution must be quick and cost effective
Be able to support the next steps in Continuous Deployment
Build a global shared environment and have developers work locally on
their respective components
67. Solution
Create a hybrid cloud using AWS and Vagrant
1.
2.
3.
4.
5.
Put the shared core components on AWS
Developers use virtualized env stretched from laptop to AWS
All shared core production components on AWS
VPC (offices) and VPN (mobile users) to AWS
Use LP Production building blocks & tools
68. Solution: LP Global Development Environment
LP TLV
LP SFO
Shared Components at the Dev
WEB
Kafka
MSG
TomCat
MySQL
LDAP
WEB
WEB
Oracle
DB
Hadoop
App
MSG
Virtual Private Cloud
VPN or
Direct Connect
VPN or
Direct Connect
71. Network
Challenge:
• AWS L3 and L2 Networks are not as in our DC
Solution:
• Build a parallel L3 network with different subnets on top
of AWS interfaces, with F5 as the default Gateway
• Use Puppet to configure the network on the servers and
push default GW keeping AWS network for emergency
console access
72. Network
Challenge:
• No broadcasts to fetch arp responses
Solution:
• Build the arp table using Puppet to update servers local
subnet MAC list and update the F5 MAC list
73. Security
AWS Security had to be manipulated a bit for this to work:
• "Source/Destination check" had to be disabled as AWS
doesn’t know about new subnets
• AWS security was used to block access to AWS networks as
much as possible and permit everything else, allowing F5 to
be the Router/FW
• VPN S2S and remote client access was done with F5 using
IPsec for S2S and F5 APM SSL VPN for remote user access
• External services like F5 Virtual Servers are done regularly
using an F5 interface on AWS network with elastic IPs
74. Project results
1.
2.
3.
4.
5.
6.
Developers work on components locally
Each team uses AWS LP shared components
Developers enjoy Production standards
Real world problems caught before hitting Production
Safely enable continuous deployment
“Production-like” environment accessible for all developers
76. Lessons and Tips
1.
2.
3.
4.
5.
6.
7.
Experiment
Start small with proof of concept
Involve stakeholders from day one
Have production standards in mind
Re-use tools and building blocks
Use AWS out of the box
Think hybrid, AWS can interact with many private clouds
80. Oracle Database on AWS
• Oracle Database 9i, 10g and 11g are fully supported on EC2
• All Editions of Database are supported on EC2:
Express Edition
Up to 4 cores and
1GB of memory
Standard Edition One
Up to 8 cores
Standard Edition
Up to 16 cores
Enterprise Edition
Unlimited
81. Key components of Oracle Database on AWS
• Amazon Virtual Private Cloud (Amazon VPC)
• Elastic Block Store (EBS) provisioned IOPS volumes
– Up to 4,000 IOPS per volume
– Stripe across several volumes
•
•
•
•
•
EBS-optimized instances
Oracle Automatic Storage Management (ASM)
Oracle Data Guard and Active Data Guard
Oracle Secure Backup Cloud Module
Oracle Transparent Data Encryption (TDE) with AWS CloudHSM
82. Key components of Oracle Database - simplified
• Amazon RDS for Oracle
• Provisioned IOPS storage for RDS – up to 30,000 IOPS/database
• Amazon Virtual Private Cloud (Amazon VPC)
83. Oracle Licensing on AWS
• Bring Your Own License (BYOL)
– Applies to most Oracle software on AWS
– All Oracle Software licenses are fully portable to Amazon EC2
– Oracle Cloud Licensing Policy:
http://www.oracle.com/us/corporate/pricing/cloud-licensing-070579.pdf
• License Included
– Pay by the hour
– Amazon Relational Database (RDS) for Oracle Standard Edition One
84. Standard Oracle Database Architecture on Amazon EC2
Public Subnet
Private Subnet
App
Servers
Oracle DB
Server
S3 Bucket
AMI
(Ready to launch)
PIOPS
Root
Volume
Data
Volume
RMAN
Mirrored Redo
Log Volumes
EBS Snapshot
Backup
Volume
EBS Snapshot Copy
Primary Availability Zone
Primary Region
DR Region
85. Enterprise Class Database Architecture on Amazon EC2
Public Subnet
Private Subnet
App
Web
Servers
Oracle DB
Server
Private Subnet
ASM Striped
Data Volumes
Root
Volume
App
Web
Servers
Oracle DB
Server
Oracle Data Guard
PIOPS
Root Volume
Public Subnet
PIOPS
Root
Volume
CloudFormation
Template
(Ready to launch)
PIOPS
ASM Striped
Data Volumes
Root
Volume
AMI Used by
CFN Template
OSB + RMAN
Mirrored Redo
log Volumes
Primary Availability Zone
OSB + RMAN
Secondary Availability Zone
RMAN Backup in
S3 Bucket
Primary Region
DR Region
86. Simplify: Amazon RDS for Oracle
Public Subnet
Private Subnet
App
Web
Servers
Oracle DB
Server
Primary Availability Zone
Primary Region
Private Subnet
RDS Synchronous
Replication
Oracle DB
Server
Public Subnet
App
Web
Servers
Secondary Availability Zone
87. Intranet Enterprise Class 3-tier Architecture
Private Subnet
Private Subnet
Web
Server
Web
Server
Web
Server
Web
Server
Web
Server
Private Subnet
Private Subnet
App
Servers
Web
Server
App
Servers
App
Servers
App
Servers
Private Subnet
Oracle
DB
App
Servers
Private Subnet
Synchronous Replication
Primary Availability Zone
AWS
App
Servers
Corporate
Data Center
Oracle
DB
Secondary Availability Zone
Corporate Network
88. Oracle Fusion Middleware on AWS
Fully supported on EC2
Oracle SOA
Suite
WebCenter
OBIEE
WebLogic
Suite
Identity and Access
Management
Business Process Management
Suite
Master Data Management
Suite
Business Rules
Business Activity Monitoring (BAM)
89. Oracle Enterprise Applications on AWS
Fully supported on EC2 on OVM
Oracle E-Business Suite
JD Edwards World
Hyperion
JD Edwards EnterpriseOne
Agile PLM
Siebel
Oracle Fusion
Applications
PeopleSoft Applications
InQuira
Primavera
ATG Web Commerce
90.
91. AWS / SAP Alliance
SAP has been an AWS customer
since 2008
AWS has been a strategic SAP Global
Technology Partner since 2011
Most SAP products are now certified for production
deployment on AWS
92. SAP Solutions Certified for Production on AWS
SAP
SAP
SAP
SAP
SAP
SAP
SAP
Business Suite
Business All-in-One
Business One
Rapid Deployment Solutions (RDS)
BusinessObjects BI Solutions
Afaria
HANA One / SAP HANA One Premium
93. Performance: Amazon EC2 SAPS
SAP SD 2-Tier Benchmark
Instance Type (VM)
Cores
Mem
ECU
SAPS
High Memory 2-XLarge
4
34.2
13
3,700
High Memory 4-XLarge
8
68.4
26
7,400
ECU = EC2 Compute Unit
94. Performance: Amazon EC2 SAPS
SAP SD 3-Tier Benchmark
Instance Type
#
Cores
Mem
ECU
SAPS
Cluster Compute 8-XLarge
1
16
60
88
DB
Cluster Compute 8-XLarge
6
16
60
88
SCS+DI
90,330
ECU = EC2 Compute Unit
95. SAP Licensing on AWS
Bring-Your-Own-License (BYOL)
Primary model for most SAP applications
Use your existing SAP licenses on AWS
96. SAP Licensing on AWS
License Included
SAP
SAP
SAP
SAP
HANA One - $0.99/hour
HANA One Premium
Business Objects BI 4.0
Afaria Cloud Edition
97. How SAP Customers and Partners Use AWS
Extend Existing SAP Infrastructure to the AWS Cloud
Run SAP temporary environments on AWS:
Test
Training
Demo
POC
Sandbox systems
98. How SAP Customers and Partners Use AWS
Extend Existing IT Infrastructure to the AWS Cloud
Run SAP temporary environments on AWS
Migrate SAP DEV and QA landscapes to AWS
99. Hybrid SAP Deployment – Customer Data Centre & AWS
SAP Production landscape runs in
customer’s own datacentre
SAP Development & Quality
Assurance landscape runs on AWS
DEV
QA
ECC
ECC
BW
BW
SRM
SRM
PROD
ECC
BW
Customer
Data Centers
SRM
VPN or
Direct Connect
Secure connectivity
between datacentre &
AWS
Virtual Private Cloud
100. Hybrid SAP Deployment – Customer Data Centre & AWS
SAP Production landscape runs in
customer’s own datacentre
SAP Development & Quality
Assurance landscape runs on AWS
DEV
ECC
BW
BW
SRM
SRM
PROD
ECC
ECC
BW
Customer
Data Centers
QA
ECC
STAGING
BW
SRM
SRM
VPN or
Direct Connect
Secure connectivity
between datacenter
& AWS
Virtual Private Cloud
101. How SAP Customers and Partners Use AWS
Extend Existing IT Infrastructure to the AWS Cloud
Run SAP temporary environments on AWS
Migrate SAP DEV and QA landscapes to AWS
Archive SAP Data to AWS Cloud Storage
Store recent SAP Database backups in Amazon S3
Archive all SAP Database backups in Amazon Glacier
102. How SAP Customers and Partners Use AWS
Extend Existing IT Infrastructure to the AWS Cloud
Run SAP temporary environments on AWS
Migrate SAP DEV and QA landscapes to AWS
Archive SAP Data to AWS Cloud Storage
Temporary infrastructure for SAP upgrades and
OS/DB migrations
103. SAP on AWS Pricing Example
1 EC2 instance (VM): 4 cores x 15 GB memory
Online M-F 8AM-8PM: 240 hours p/month
Persistent storage: 200 GB
Backup storage:
300 GB
Component
AWS Resource
Virtual Machine
m1.xlarge - SLES 11
240 hours
$0.58
p/hour
Primary Storage
EBS volume
200 GB
$0.10
p/GB p/month
$20
Backup Storage
S3 storage
300 GB
$0.095
p/GB p/month
$29
Network & IO
Data Transfer & IO
* Pricing based on US-East region as of 2/13/2013
Quantity
Unit Cost
Monthly
Cost
$140
$9
Total Monthly Cost
$198
104. How SAP Customers and Partners Use AWS
Extend Existing IT Infrastructure to the AWS Cloud
Run SAP temporary environments on AWS
Migrate SAP DEV and QA landscapes to AWS
Archive SAP Data to AWS Cloud Storage
Temporary infrastructure for SAP upgrades and OS/DB migrations
DR site for on-premises SAP production
environments
105. How SAP Customers and Partners Use AWS
Extend Existing IT Infrastructure to the AWS Cloud
Run SAP temporary environments on AWS
Migrate SAP DEV and QA landscapes to AWS
Archive SAP Data to AWS Cloud Storage
Temporary infrastructure for SAP upgrades and OS/DB migrations
DR site for on-premises SAP production environments
Evaluate HANA
106.
107. How SAP Customers and Partners Use AWS
Extend Existing IT Infrastructure to the AWS Cloud
Run SAP temporary environments on AWS
Migrate SAP DEV and QA landscapes to AWS
Archive SAP Data to AWS Cloud Storage
Temporary infrastructure for SAP upgrades and OS/DB migrations
DR site for on-premises SAP production environments
Evaluate HANA
Host individual SAP solutions like Afaria or
Business Objects on AWS
108.
109.
110. How SAP Customers and Partners Use AWS
Host Complete SAP Environments on the AWS Cloud
Migration of SAP legacy systems to AWS
111. How SAP Customers and Partners Use AWS
Host Complete SAP Environments on the AWS Cloud
Migration of SAP legacy systems to AWS
Rapid deployment of infrastructure to start a
new SAP implementation
112. Full SAP Deployment on AWS
Customer runs DEV, QAS & PRD on AWS
Customer
LAN
DEV
QA
PRD
ECC
ECC
ECC
BW
BW
BW
SRM
SRM
SRM
VPN or
Direct Connect
Secure connectivity
between LAN & AWS
network
Virtual Private Cloud
115. AWS Partner Network: SAP Partners
Consulting Services
SAP Implementation
AWS Onboarding
SAP OS/DB Migrations
SAP POCs
SAP Sizing
Architecture Planning
SAP Evaluations
Performance Tuning
SAP High Availability
SAP Hosting
Backup & Recovery
Account Management
Disaster Recovery
DB Administration
SAP BASIS
24/7 Help Desk
OS Admin & Patching
SAP Upgrades
Managed Services
116. More SAP on AWS Information
http://aws.amazon.com/sap
Whitepapers
SAP Notes
Support Information
AWS-SAP Partners
117.
118. Amazon EC2 Windows Guide
What’s New:
• Using Windows Powershell
with the AWS SDK for
.NET
• AWS Diagnostic tools for
Windows Server
• Install EC2 command line
tools on Windows
• Setting up a Windows HPC
Cluster
http://docs.amazonwebservices.com/AWSEC2/latest/WindowsGuide/Welcome.html
119. AWS SDK for .NET
• APIs for many AWS services
• Includes:
– AWS Toolkit for Microsoft
Visual Studio
– Visual Studio templates
– AWS Tools for Windows
PowerShell
– AWS CloudFormation
Template Editor
– AWS .NET Library
– C# code samples
120. AWS Marketplace
• Microsoft Windows-based
Amazon Machine Images (AMIs)
• Windows and SQL Server
• > 20 AMIs
121. Microsoft Software on AWS – License Included
• Windows Server OS
–
–
–
–
2003
2008
2008 R2
2012
• SQL Server Express/Web/Standard
– RDS or EC2
122. Microsoft Software on AWS – Bring Your Own License
• Microsoft License Mobility through Software Assurance
123. Microsoft Software on AWS – Bring Your Own License
• SQL Server Enterprise
– EC2
– RDS
•
•
•
•
•
•
•
IIS
Active Directory
Exchange
SharePoint
Lync
System Center Operations Manager (SCOM)
Dynamics CRM
124. SharePoint Reference Implementation
Public Subnet
Private Subnet
Private Subnet
Private Subnet
Private Subnet
IIS & SharePoint
Web Front End
Central Admin &
SharePoint Services
Primary DB
SQL Server
Primary DC/DNS
Web Tier
Application Tier
Availability Zone 1
Database Tier
Active Directory
Web Tier
Application Tier
Database Tier
IIS & SharePoint
Web Front End
Central Admin &
SharePoint Services
NAT
Remote
Admin
RDGW
Users
Internet
Gateway
ELB
Active Directory
Mirror DB
Backup DC/DNS
RDGW
Witness
NAT
Public Subnet
Private Subnet
Private Subnet
Availability Zone 2
AWS Region
Private Subnet
Private Subnet
125. Deploy SharePoint Farm in 6 Steps
• Article “Deploy a Microsoft SharePoint 2010 Server Farm
in the AWS Cloud in 6 Simple Steps”:
– Builds upon the SharePoint Reference Implementation White
Paper
– http://aws.amazon.com/articles/9982940049271604
• AWS CloudFormation Templates for each step:
–
–
–
–
Launch the network and Active Directory stack
Launch the database stack
Launch the app stack
Launch the web stack
126. More Microsoft on AWS information
• SharePoint Reference Architecture on AWS whitepaper:
http://aws.amazon.com/windows/sharepoint/
• Microsoft Exchange Server 2010 in the AWS Cloud: Planning &
Implementation Guide
http://aws.amazon.com/windows/exchange/
• Implementing Microsoft Windows Server Failover Clustering
(WSFC) and SQL Server 2012 AlwaysOn Availability Groups in the
AWS Cloud
• … and more
http://aws.amazon.com/windows/
131. Enterprise Account Team
Works with the customer and
TAM to provide architectural
help with projects and design
needs
Account
Manager
Helps ensure customers
are receiving the best value
from AWS services
Solutions
Architect
24x7x365 Support
Engineer Team
Enterprise
Support
TAM
Support Team
Dedicated enterprise
engineer for technical
inquiries and escalations