Interstella 8888 is an intergalactic trading company that deals in rare resources, but their antiquated monolithic logistics systems are causing the business to lose money. Join this workshop to get hands-on experience with Docker as you containerize Intersella 8888’s aging monolithic application and deploy it using Amazon ECS. AWS credits are provided. Bring your laptop, and please have an active AWS account."

1. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS re:INVENT
Interstella 8888: Learn How to Use
Docker on AWS
H u b e r t C h e u n g , A W S S o l u t i o n s A r c h i t e c t
A n d y M u i , A W S S o l u t i o n s A r c h i t e c t
D a v i d K u o , A W S S o l u t i o n s A r c h i t e c t
C O N 2 0 9

2. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ABOUT ME
andymui@amazon.com
Solutions Architect
Three years at AWS
Based in Southern California

3. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
WHAT TO EXPECT
Overview Docker Containers
Amazon Elastic Container Registry (ECR)
Amazon Elastic Container Service (ECS)
Hands-on Lab
• Containerize an Application
• Deploy Docker Containers Using ECS/ECR
• Scale Containers with AWS Application Load Balancer (ALB)

4. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
THE PROBLEM
Different application stacks
Different hardware deployment
environments
How to run all applications
across different environments?
How to easily migrate from one
environment to another?
Static
website
Web
fronted
Background
workers
User DB
Analytics
DB
Queue
Dev VM
QA
Server
Single
Prod
Server
Onsite
Cluster
Public
Cloud
Develope
r laptop
Customer
Servers

5. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
THE SOLUTION
Unit of software delivery
Lightweight, portable, consistent
Deploy and run everywhere
Deploy and run anything
Static
website
Web
fronted
Background
workers
User DB
Analytics
DB
Queue
Dev VM
QA
Server
Single
Prod
Server
Onsite
Cluster
Public
Cloud
Develope
r laptop
Customer
Servers

6. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
USE CASES
Consistent environment between development and production
Service-oriented architectures/microservices
Short-lived workflows
Isolated environments for testing
Batch processing

7. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
CONTAINERs vs VMs
Server (Host)
Host OS
Hypervisor
Guest OS Guest OS Guest OS
Bins/Libs Bins/Libs Bins/Libs
App 1 App 2 App 3
VM
Server (Host)
Host OS
Docker
Bins/Libs Bins/Libs Bins/Libs
App 1 App 2 App 3
Container

8. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
DOCKER IMAGE
Read-only template
Used to launch container
Start with base image, additional
data/dependencies are layers added
on top
Union file system merges layers into
single image
Instructions stored in Dockerfile
bootfs
kernel
Base image
Image
Image
Container
References
parent
image

9. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
DOCKERFILE
FROM dockerfile/ubuntu
RUN
add-apt-repository -y ppa:nginx/stable &&
apt-get update &&
apt-get install -y nginx &&
rm -rf /var/lib/apt/lists/* &&
echo "ndaemon off;" >> /etc/nginx/nginx.conf &&
chown -R www-data:www-data /var/lib/nginx
VOLUME ["/etc/nginx/sites-enabled", "/etc/nginx/certs",
"/etc/nginx/conf.d", "/var/log/nginx", "/var/www/html"]
WORKDIR /etc/nginx
CMD ["nginx"]
EXPOSE 80
EXPOSE 443
Source: https://github.com/dockerfile/nginx
Pull base image
Install Nginx
Define mountable directories
Define working directory
Define default command
Expose ports

10. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
DOCKER IMAGE REGISTRY
Images stored in a registry
Amazon Elastic Container Registry (ECR)
• Fully managed
• Secure – encryption at rest, IAM integration
• Scalable and highly available
• Integrated with Amazon ECS and Docker CLI
DockerHub
• Public repository of images
• Provides private image storage
Amazon ECR
Docker Hub

11. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
DOCKER ARCHITECTURE
Docker daemon manages images, containers,
networks and volumes
Docker client (e.g. CLI) communicates with daemon
through a REST API
Sample Commands:
• docker build – build image from Dockerfile
• docker images – list images on Docker host
• docker run – run an image
• docker ps – list running containers
• docker stop – stop a running container
docker daemon
Docker Host
Container 1
Container 2
Container n
Ubuntu Image
Nginx Image
Custom Image

12. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
DEPLOYING CONTAINERS
Server
Docker
Bins/Libs Bins/Libs
App2App1
Single host with one
or more containers
…easy…

13. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
DEPLOYING CONTAINERS
Server
Docker
Bins/Libs Bins/Libs
App2App1
Tens of hosts with
multiple containers
…challenge
accepted…
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1

14. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
DEPLOYING CONTAINERS
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Hundreds of hosts with
thousands of containers
…OK, this is hard…
Amazon ECS
Swarm

15. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AMAZON ECS
H i g h l y s c a l a b l e , h i g h p e r f o r m a n c e c o n t a i n e r m a n a g e m e n t
s e r v i c e t h a t s u p p o r t s D o c k e r c o n t a i n e r s a n d a l l o w s y o u t o
e a s i l y r u n a p p l i c a t i o n s o n a m a n a g e d c l u s t e r o f
A m a z o n E l a s t i c C o m p u t e C l o u d ( E C 2 ) i n s t a n c e s .

16. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AMAZON ECS
EC2 INSTANCES
ECS
AGENT
TASK
Container
TASK
Container
ECS
AGENT
TASK
Container
TASK
Container AGENT COMMUNICATION
SERVICE
Amazon
ECS
API
CLUSTER MANAGEMENT
ENGINE
KEY/VALUE STORE
ECS
AGENT
TASK
Container
TASK
Container
Internet LOAD
BALANCER
LOAD
BALANCER

17. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AMAZON ECS - CLUSTER
EC2 INSTANCES
ECS
AGENT
TASK
Container
TASK
Container
ECS
AGENT
TASK
Container
TASK
Container AGENT COMMUNICATION
SERVICE
Amazon
ECS
API
CLUSTER MANAGEMENT
ENGINE
KEY/VALUE STORE
ECS
AGENT
TASK
Container
TASK
Container
Internet LOAD
BALANCER
LOAD
BALANCER

18. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AMAZON ECS - TASK
EC2 INSTANCES
ECS
AGENT
TASK
Container
TASK
Container
ECS
AGENT
TASK
Container
TASK
Container AGENT COMMUNICATION
SERVICE
Amazon
ECS
API
CLUSTER MANAGEMENT
ENGINE
KEY/VALUE STORE
ECS
AGENT
TASK
Container
TASK
Container
Internet LOAD
BALANCER
LOAD
BALANCER

19. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AMAZON ECS - SERVICE
EC2 INSTANCES
ECS
AGENT
TASK
Container
TASK
Container
ECS
AGENT
TASK
Container
TASK
Container AGENT COMMUNICATION
SERVICE
Amazon
ECS
API
CLUSTER MANAGEMENT
ENGINE
KEY/VALUE STORE
ECS
AGENT
TASK
Container
TASK
Container
Internet LOAD
BALANCER
LOAD
BALANCER

20. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AMAZON ECS – TASK DEFINITION
{
"containerDefinitions": [
{
"name": "wordpress",
"links": [ "mysql" ],
"image": "wordpress",
"essential": true,
"portMappings": [
{
"containerPort": 80,
"hostPort": 80
} ],
"memory": 500,
"cpu": 10
},
{
"name": "mysql",
"image": "mysql",
"cpu": 10,
"memory": 500,
Instructions used by ECS to launch
containers
JSON template
Used to launch tasks and services
Maps to docker run parameters

21. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
HANDS-ON LAB

22. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
WELCOME TO INTERSTELLA 8888
Interstella 8888 is an intergalactic trading company that was
established to import and export rare resources in the universe.
Interstella was a thriving company but business has been
declining despite a booming economy. You and a few other
consultants have been brought on board to turn this around. Will
you be able to restore Interstella to its former glory?

23. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
YOUR MISSION
Interstella 8888 operates a logistics platform to control the processing centers of
the two rare resources – iridium and magnesite. We need help deploying the
platform to the AWS cloud and would like to adopt containers as a part of the
move.
Lab 1: Containerize the Interstella logistics software
Lab 2: Deploy containers using Amazon ECR and Amazon ECS
Demand is on the rise, and our developers are working on a microservices
implementation to help us scale fulfillment. As a stop-gap, help us horizontally
scale the logistics platform.
Bonus Lab: Scale the logistics platform with an ALB

24. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
WORKSHOP ENVIRONMENT
Public subnet – AZ #1 Public subnet – AZ #2
Amazon SNS
EC2 Instance
ECS Cluster
EC2 Instance
Amazon
ECR
Amazon API
Gateway
ORDER
Amazon S3
bucket
Amazon
DynamoDB
Amazon
ECS
Orders come into
the logistics
platform as HTTP
POST messages via
Amazon Simple
Notification Service
(Amazon SNS)
Amazon S3 hosts
web content and
utilities – API key
generator, order
subscription, order
dashboard
The logistics platform
communicates with an
order fulfillment API
running on Amazon
API Gateway. Order
data is stored in
Amazon DynamoDB
Amazon
CloudWatch

25. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
LAB 1
Public subnet – AZ #1 Public subnet – AZ #2
Amazon SNS
EC2 Instance
ECS Cluster
EC2 Instance
Amazon API
Gateway
ORDER
Amazon S3
bucket
Amazon
DynamoDB
1. Construct a
Dockerfile on to build
a Docker image for
the logistic platform.
2. Run the container
using the Docker
client to confirm it’s
working as expected.
3. Push the Docker
image up to Amazon
ECR.
FULFILL
Amazon
CloudWatch
Amazon
ECR
Amazon
ECS

26. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
LAB 2
Public subnet – AZ #1 Public subnet – AZ #2
Amazon SNS
EC2 Instance
ECS Cluster
EC2 Instance
Amazon
ECR
Amazon API
Gateway
ORDER
Amazon S3
bucket
Amazon
DynamoDB
Amazon
ECS
1. Construct an ECS task
definition referencing
the Docker image
pushed up to ECR
from lab 1 and
configuring logging
to Amazon
CloudWatch Logs.
2. Run the task and
confirm orders are
being processed.
FULFILL
Amazon
CloudWatch
LOGS

27. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
BONUS LAB
Public subnet – AZ #1 Public subnet – AZ #2
Amazon SNS
EC2 Instance
ECS Cluster
EC2 Instance
Amazon
ECR
Amazon API
Gateway
ORDER
Amazon S3
bucket
Amazon
DynamoDB
Amazon
ECS
1. Create an Application
Load Balancer (ALB).
2. Create an ECS service
that ties in the ALB
for routing orders to
tasks and maintains a
desired task count.
FULFILL
Amazon
CloudWatch
LOGS
Application
Load Balancer

28. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
LOGISTICS
AWS REGION: EU (Ireland)
INSTRUCTIONS:
http://interstella.trade/workshop1/
Raise your hand if you have any questions. High-five your neighbors, feel
free to team up or help each other out, and have fun!
Please fill out feedback forms once you are done! Feel free to email us
with comments/questions/feedback: aws-interstella-team@amazon.com

29. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
THANK YOU!