Upload
cohesive-networks
View
190
Download
2
Embed Size (px)
Citation preview
copyright 2013
• Level Set: Cloud & Virtualization Basics • Working together: AWS ecosystems • AWS Core: Terminology & references
2
copyright 2013
Layer 0
Layer 4
Layer 3
Layer 2
Layer 1
Layer 5
Layer 7
Layer 6
“_______ as a Service”
5
Software Commercial software access
SaaS
Platform Information, messaging, connectivity, integration
services access
PaaS
Infrastructure Servers, network devices and
storage disksIaaS
copyright 2013
Virtualization
Cloud Provider OS/Hypervisor
Server Hardware
AMI bins/ libs
bins/ libs
bins/ libs
Guest OS
Guest OS
Guest OS
AppStack
AppStack
AppStack
VM
copyright 2013
On-Demand
8
source: imsa.edusource: theweightofdebt.com
NOThourly pricing capital expense
copyright 2013
Elastic
9
source: http://aws.amazon.com/blogs/aws/animoto---scali/
copyright 2013
Internet
10
Cloud DB Cloud Server
Hypervisor
Workstations Clients OR Users
Internet
provider user
copyright 2013
Public Cloud: the Zipcar of Computing
11
Cloud Computing and Zipcar are: • On-demand • Self-service • Flexible & easy to use • Shared resources • Pay-as-you-go pricing • Creating new ways to use and connect resources
SaaSSaaS
Images: Wikipedia
copyright 2013
Cloud Providers
15
AWS offers 5x the compute capacity of next 14 cloud providers in the Gartner Magic Quadrant, combined. !
Analysts estimate AWS’ sales around $1.2 billion for Qi 2014, up from $750 million in Q1 2013 2
1. Gartner - Toolkit: Comparison Matrix for Cloud Infrastructure as a Service Providers, 2013 https://www.gartner.com/doc/2575815
copyright 2013
AWS MarketplaceIn AWS, you can launch an instance from community or marketplace AMIs
17
copyright 2013
Amazon Web Services Offerings (Console)
21
More information at aws.amazon.com/console
copyright 2013
AWS Regions & Availability Zones
22
Each region is a separate geographic area. Each region has multiple, isolated locations known as Availability Zones. Choose specific regions to:
• Optimize latency • Address regulatory requirements • Create a point-of-presence (POP)
Internet Availability Zone
Servers
Region: US East
Servers
Availability Zone
Availability Zone
Servers
Region: US West
Servers
Availability Zone
copyright 2013
AMIs
23
Applications
Operating system
Application Server
Amazon Instance
AMI
Amazon Machine Image (AMI) - template to launch an Amazon EC2 instance with your software !
• Main component is a read-only filesystem containing an operating system & additional software
!
• Compressed, encrypted, & uploaded into AWS S3 for storage or as a volume in AWS EBS
!
• Run multiple instances from the same AMI
copyright 2013
Image & Instance
24
Image - template to launch an Amazon EC2 instance with your software !
Instance - the AWS name for a server / virtual machine
Image
Detailed information can be found at: http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/instance-types.html
Instance
specifications/vmdk.html#streamOptimized" ovf:populatedSize="1167196160"/>
<Disk ovf:allocationUnits="1048576" ovf:capacity="1" ovf:capacityAllocationUnits="byte * 2^20" ovf:diskId="vmdisk2"
ovf:fileRef="file2" ovf:format="http://www.vmware.com/interfaces/specifications/vmdk.html#streamOptimized" ovf:populatedSize="0"/>
copyright 2013
EBS-BackedInstance Store-BackedTwo Kinds of AMI Storage
• Boot in <5mins • Limited to 10GB* • Data on instance only
persists during the life of the instance
• Instance attributes are fixed for the life of the instance
• Cheaper only charged runtime
• Boot in <1min
• Limited to 1TB • Data persists after instance
termination • Stop to change instance
settings • Pay for runtime & storage • All AWS Marketplace AMIs
are EBS-backed
25
copyright 2013
Using an Instance
26
• Launching an instance: creating a virtual machine with the specifications you provide. !
• Terminating = destroying it, forever. !
• Stopping = pausing. No data is lost and while stopped you aren’t being charged. !
• Starting = un-pausing. Your data should still be there.
copyright 2013
Security Groups
27
Security Groups • Acts as a firewall that controls the traffic allowed into a group of instances
!• Add rules that govern inbound traffic; can add or modify rules at any time !
• Cannot map security groups across regions
Rules • Specify a certain protocol (TCP, UDP or ICMP) • Specify destination port or ports (if the protocol is TCP or UDP) • Specify source (IP address or addresses using CIDR notation*)
*combination of IP addresses represented by xxx.xxx.xxx.xxx/n where n is the number of 1 bits in the mask. Example 192.168.12.0/23 represents address range 192.168.12.0- 192.168.13.255
copyright 2013
IP Addresses
28
Elastic IP Address (Static IP address): • Associated with account, rather than a particular instance • If your instance fails, can map its replacement to the same IP address • Each account is limited to 5 elastic IP addresses • You are charged $.01/hr when these IP addresses are not mapped to an instance
Amazon Instance
Amazon Instance
204.236.202.134 63.250.226.146
Amazon Instance
Amazon Instance
204.236.202.134 204.236.202.134
Amazon randomly assigns public IP addresses Assign instances with your Elastic IP Address
copyright 2013
VPC
29
Logically isolated section of the AWS Cloud - VLANs
• Control of Virtual Network !
• More Layers of Security (SG and Network ACLs) !
• Public and/or Private Subnets
copyright 2013
AWS Marketplace
32
https://aws.amazon.com/marketplace