Le soluzioni basate su tecnologie container stanno rapidamente diventando uno strumento importantissimo per la modernizzazione delle applicazioni in ottica micro-servizi. In questa sessione faremo una breve introduzione sui motivi per cui i container sono diventati cosi’ popolari. Successivamente ci addentreremo nei servizi AWS che permettono agli sviluppatori di sfruttare comodamente queste tecnologie. Obiettivi Webinar - Fornire una introduzione sul perche’ dell’esplosione nell’adozione dei container - Fornire un posizionamento dei servizi AWS che permettono allo sviluppatore di creare soluzioni in modalita’ container - Fornire una breve descrizione del funzionamento dei servizi AWS sopra

1. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Massimo Re Ferrè, AWS Solutions Architect
mreferre@amazon.com
13/11/2018
Containers at AWS: State of the Union

2. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
It all starts with an app
https://github.com/mreferre/yelb

3. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
It all starts with an app
https://github.com/mreferre/yelb

4. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
It all starts with an app
How does the
setup of this small
piece look like?
https://github.com/mreferre/yelb

5. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
In short: a big mess A lot of All these stuff are very
much “OS distribution sensitive”
Linux
Linux
Linux

6. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
In short: a big mess Not to mention packages incompatibilities
across multiple applications running on the
same host/OS
Linux

7. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Enter Docker
dockerfile
docker build
docker image
docker run
Linux
docker container
Docker runtime
Complete
Decoupling
Start of my image. It could be an OS (e.g.
Ubuntu) or it could be a higher level
abstraction (e.g. Node installed on an OS)

8. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Enter Docker
My Laptop
docker image(s)
docker container(s)

9. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Single-instance containers deployments
OS
Instance
Easy, all is good

10. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Multi-instance containers deployments
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
Hard, not very practical and not scalable

11. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Multi-instance containers deployments
Orchestrator
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
Agent Agent Agent Agent Agent AgentAgent

12. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Multi-instance containers deployments
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
Agent Agent Agent Agent Agent AgentAgent
Orchestrator
How do we solve the control plane problem?

13. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS
Lambda
Amazon
EC2
Bare Metal
Amazon
EKS
VMcontainerfunction
Levelofabstraction
Provider space
(managed by AWS)
Consumer space
(managed by the customer)
Amazon
ECS
physicalserver

14. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Elastic Container Service (ECS): the user view
EC2
Container
Instance
EC2
Container
Instance
EC2
Container
Instance
EC2
Container
Instance
EC2
Container
Instance
EC2
Container
Instance
EC2
Container
Instance
Agent Agent Agent Agent Agent AgentAgent
ECS Control Plane (managed service)
ECS Cluster Resource

15. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon ECS
EC2 INSTANCES
ECS
AGENT
TASK
Container
TASK
Container
ECS
AGENT
TASK
Container
TASK
Container AGENT COMMUNICATION
SERVICE
Amazon
ECS
API
CLUSTER MANAGEMENT
ENGINE
KEY/VALUE STORE
ECS
AGENT
TASK
Container
TASK
Container
Internet LOAD
BALANCER
LOAD
BALANCER

16. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ECS Task (IAM Role integration)

17. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ECS Service (Load Balancing integration)

18. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
What is EKS?
“Run Kubernetes for me.”

19. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
What customers asked us
“Give us an upstream experience.”
“Please don’t fork.”
“Make sure it’s compatible”

20. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
EKS (High level architecture)
Availability
Zone 1
Master Master
Availability
Zone 2
Availability
Zone 3
Master
Workers Workers Workers
Customer Account
AWS Managed

21. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
EKS (High level consumption flow)
mycluster.eks.amazonaws.com
Availability
Zone 1
Availability
Zone 2
Availability
Zone 3
Kubectl

22. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
EKS (API Authentication)
Kubectl
3) Authorizes AWS Identity with RBAC
K8s API
1) Passes AWS Identity
2) Verifies AWS Identity
4) K8s action
allowed/denied
AWS Auth

23. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Kube2IAM
https://github.com/jtblin/kube2iam

24. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
How do you expose services with EKS?
ELB support via Service of type LoadBalancer (GA)
NLB support via Service of type LoadBalancer
- via annotation (currently in Alpha)
ALB Ingress (https://github.com/kubernetes-sigs/aws-alb-ingress-controller)
- (currently in Beta)

25. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
EKS (network overlay)
Nginx Pod
Java Pod
ENI
Secondary IPs:
10.0.0.1
10.0.0.2
Veth IP: 10.0.0.1
Veth IP: 10.0.0.2
Nginx Pod
Java Pod
ENI
Veth IP: 10.0.0.20
Veth IP: 10.0.0.22
Secondary IPs:
10.0.0.20
10.0.0.22
VPC Subnet – 10.0.0.0/24
Instance 1 Instance 2

26. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Multi-instance containers deployments
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
OS
Instance
Agent Agent Agent Agent Agent AgentAgent
Orchestrator
How do we solve the data plane problem?

27. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS
Lambda
Amazon
EC2 AWS
Fargate
Amazon
EKS
VMcontainerfunction
Levelofabstraction
Provider space
(managed by AWS)
Consumer space
(managed by the customer)
Amazon
ECS
physicalserver
Bare Metal

28. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon ECS
EC2 INSTANCES
ECS
AGENT
TASK
Container
TASK
Container
ECS
AGENT
TASK
Container
TASK
Container AGENT COMMUNICATION
SERVICE
Amazon
ECS
API
CLUSTER MANAGEMENT
ENGINE
KEY/VALUE STORE
ECS
AGENT
TASK
Container
TASK
Container
Internet LOAD
BALANCER
LOAD
BALANCER

29. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon ECS w/ Fargate
TASK
Container
TASK
Container
TASK
Container
TASK
Container AGENT COMMUNICATION
SERVICE
Amazon
ECS
API
CLUSTER MANAGEMENT
ENGINE
KEY/VALUE STORE
TASK
Container
TASK
Container
Internet LOAD
BALANCER
LOAD
BALANCER
Amazon Fargate

30. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Fargate (in the ECS context)

31. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Call to action: dive deeper if interested
On-line ECS Workshop:
- https://ecsworkshop.com
On-line EKS Workshop:
- https://eksworkshop.com

32. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Please fill out the feedback in the app!
Thanks!
Mail: mreferre@amazon.com
Twitter: @mreferre