Comprehensive Software Reviews to make better IT decisions
Amazon Web Services Streamlines Container Networking
AWS has provided valuable new features for managing container networking. But this tasty secret sauce may prove addictive.
The largest cloud IaaS provider has enabled superior container networking through an expansion of its virtual private cloud (VPC) service. While container networking within the same instance on AWS is relatively straightforward, issues arise when containers need to communicate across instances.
The traditional way to achieve cross-instances communication between containers is through the use of an overlay network, such as that provided by Docker. An overlay network is a software-defined network that allows containers to communicate to one another by appropriately forwarding traffic based on a particular identifier (e.g. a container name – identifiers may vary), rather than by IP. This also allows for the use of load balancers.
While overlay networks work perfectly fine, they pose problems in a few use cases. Here we’ll focus on high performance computing (HPC) and on security.
- HPC: In an overlay network packets proceed through multiple hops and latency can affect performance.
- Security: Many organizations may want to ensure segregation of network traffic from apps belonging to different teams, including the network interfaces that can be used. This can be difficult to achieve with an overlay.
Amazon’s solution to these problems is their VPC task/pod networking feature. This service provides container networking through the use of elastic network interfaces (ENIs).
When you launch a task on an AWS instance, the task gets an ENI. Each ENI shows up in the default namespace and has a different IP address. An agent creates the task namespace for the networking (rather than relying on Docker), and each task namespace has an ENI. The ENIs automatically connect to each other over VPC. ENIs contain task metadata, so VPC directly connects the IP from one task to another (on the basis of the metadata) – so only a single hop is required from one task to another, enabling improved performance and security posture.
AWS’s use of ENIs for container networking solves significant problems, and is a valuable feature for many customers. On the other hand, by relying on Amazon’s built-in services to do the heavy lifting on the back end, organizations risk vendor lock-in, and forego some of the value of employing a container ecosystem.
One of the key benefits of containers is being able to deploy scaleable networks of microservices that span seamlessly across on-premises and various cloud infrastructures. By relying on the ENIs in Amazon’s VPC, organizations will forego this key benefit.
Amazon’s streamlining of container networking is another example of innovative and valuable features that can lead to vendor lock-in down the road. After having a taste of AWS’s secret sauce, organizations may never want to open another menu.
Want to Know More?
AWS customers can now integrate Azure AD with AWS single sign-on. This will bring the convenience of the Office 365 sign-on to Amazon’s cloud, and it’s a signal that multicloud deployments are the future.
Oracle reported slightly better-than-expected Q2 FY20 results, but despite substantial revenue numbers and high growth areas such as Oracle Cloud, Fusion ERP, and Autonomous Database, it’s unclear when these market segments will accelerate revenue growth materially.
Microsoft is retiring some of the key and most valuable benefits of its Software Assurance Benefit (SAB) program. These soon-to-be-retired benefits will include Deployment Planning Services, Training Vouchers, and 24x7 Problem Resolution Support.
AWS pioneered the IaaS industry, predicting that private data centers would become a relic of the past. Ironically, AWS now finds itself moving hardware and software into its customers’ data centers with AWS Outposts.
Highly regulated industries have resisted the full-scale move into the public cloud to date. In typical fashion, the finance industry is preparing to be a leader by example as two major banking institutions take the public cloud plunge, albeit via different routes.
Tableau and AWS Expand Strategic Relationship to Bring Analytics in the Cloud Closer to Their Customers
Leading analytics player Tableau recently announced its new initiative – Modern Cloud Analytics (MCA) – which sees it partnering with Amazon Web Services Inc. (AWS) to make cloud-based analytics more achievable for their customers.
AWS and Humber College have announced a partnership. This aligns with AWS’s focus on education and partnership as part of its marketing and service strategies.
Infrastructure as a Service (IaaS) will suffer a slow death as applications evolve to run on cloud platforms. The IaaS/PaaS/SaaS model of cloud services will die with it.
Amazon Web Services (AWS) has added a new discount model to give customers a quicker on-ramp to savings while locking them into multiple-year term agreements. The latest discount plans are based on annual or multiple-year spend commitments on the AWS platform.