AWS re:Invent 2017 Recap:
The annual Amazon Web Services conference boasted upwards of 40,000 attendees at the end of November this year. As well as adding an extra day of content, AWS re:Invent 2017 also required a significant footprint expansion to accommodate the large crowd of attendees. The event adopted another hotel and an additional expo hall.
Whether attending for the keynote speakers, deep-dive workshops or the unique networking opportunities, the yearly AWS re:Invent conference is a worthy calendar event for every cloud architect. AWS even provide a Justification Letter template to help attendees gain permission to go—worth remembering for next year. If like Caylent you plan to attend next year, we advise booking early. Tickets, hotels, and other venues tend to sell out quickly. Spaces typically become available in early Summer.
This year, CEO Andy Jassy made two major announcements in his keynote speech regarding AWS’ 2017 compute offerings: AWS Elastic Container Service for Kubernetes (EKS) and AWS Fargate. These new features emphasize that containers are vitally important first-class citizens not just for AWS, but everyone.
Amazon Elastic Container Service for Kubernetes (EKS)
Source: Amazon Web Services
Perhaps one of the most significant announcements coming out of re:Invent is AWS’ new managed Kubernetes service, fully compatible with Elastic Container Service (ECS). Not only is EKS pure vanilla upstream Kubernetes—and as such should work with existing tools and applications out of the box—it paves the way for a fully hosted solution in the future. Currently, its main value proposition lies in removing the burden of self-managing K8 master clusters on top of full integration with existing AWS services.
Given the response to Cloud Native Computing Foundation (CNCF) that 63% of Kubernetes workloads were being deployed to the AWS cloud, it’s no surprise the platform has been its focus in preparation for re:Invent 2017. Amazon EKS will launch with support for Kubernetes 1.7 and three most recent versions before adding any assist for future editions. Apply for preview access here.
Full cluster management and high availability:
- A multi-AZ architecture that provides three Kubernetes masters distributed across three Availability Zones (AZ) for each cluster
- Automatic self-healing and replacement of unhealthy masters
- Automatic version upgrades and patching for masters
- Identity Access Management (IAM) integration through cooperation with Heptio via Role Based Access Control (RBAC); Kubernetes’ native access control system
- EKS clusters to run inside personal VPCs allowing granular control over security groups and network ACLs
- Single tenant environments with no shared resources allowing for maximum security
- EKS complements the Kubernetes’ component Calico (by Tigera) to merge with the AWS VPC container network interface (CNI) plugin, allowing for granular control on a per-microservice basis using the Kubernetes API
- PrivateLink support will allow customers to access Kubernetes masters and the EKS service API endpoint internally within the VPC, eliminating the need to route traffic over public IP addresses
As you might expect from an AWS service, EKS will integrate with other AWS logging and audit trail services including CloudWatch Logs and CloudTrail:
- Utilize CloudWatch Logs to view logs from Kubernetes masters
- Employ CloudTrail to view logs on API activity to the EKS service endpoint
For the full spec, check out AWS EKS here.
Source: Amazon Web Services
Potentially more game-changing for AWS, Fargate will provide a full fleet of managed worker containers. The implications of this new managed service are huge. Fargate effectively eliminates the need to administer the underlying infrastructure (e.g., EC2) that has always previously been needed for Amazon’s own ECS and other popular third-party schedulers (i.e., Swarm, Kubernetes, etc.)
Put simply, think of Fargate as Heroku for containers on AWS. There are no servers to manage, and it functions as a full Platform-as-a-Service offering within ECS. The only input necessary is to define the container image, CPU and memory requirements, then determine the networking and IAM policies prior to deployment.
While the announcement was somewhat upstaged by EKS, Fargate has the potential to be an even bigger deal for Amazon is it marks the organization’s position in the growing Containers-as-a-Service (CaaS) market. Initially, Fargate will only support ECS, but there are plans to integrate the service with EKS sometime in 2018. Not long to wait.
Source: Amazon Web Services
- Per-second billing, which—depending on the workload— could have a huge impact on certain types of AWS customers
- Works with all the same ECS primitives, APIs, and AWS integrations that AWS customers are already accustomed to using
- ECS clusters now support Fargate and EC2 workloads together
- Fargate is available now in US-East, with no announcements yet about other regions
- Pricing is on-demand with 50 available configuration options for vCPU and Memory:
- Per vCPU is $0.0506 per hour
- Per GB memory is $0.0127 per hour
For the full spec, check out AWS Fargate here.
Planning on using either of these services? Let us know in the comments if you see these new AWS features fitting into your production environment. As for Caylent, we will be undertaking our own evaluation on EKS and Fargate in the coming months.
Looking for help running containers in the more immediate future? Look no further, Caylent has you covered. Check out our new managed service offering. It’s like having a full-time DevOps Engineer on staff for a fraction of the cost.
Want to begin with AWS on Caylent? Setup a High-Availability Docker Swarm Stack on AWS