Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

An AWS Region is coming to France

allthingsdistributed.com

Post reply on HN
Print view View original

31–40 of 70 posts

Re: An AWS Region is coming to France

#31

Post by ceejayoz »

grif-fin wrote: post #29
ceejayoz wrote: post #28

Earlier quoted context omitted.

AWS initially launched API-only. At any significant scale, it's simply not intended to be managed via the console.

I found visualization very much helpful when complexity rises. APIs stays powerful but do not support a human admin for monitoring and server setups (including IAM users, Services, Tasks, Clusters, Launching EC2 instances, ECR setup for docker, AIM, Loadbalancing, Security groups, Roles etc all multiplied to X regions).

Again, if you're large enough to be in multiple regions, all of this should be configured via the APIs using a configuration management system of some sort.

Ansible, for example, can easily manage stuff like security groups (http://docs.ansible.com/ansible/ec2_group_module.html) , load balancing (http://docs.ansible.com/ansible/ec2_elb_lb_module.html), IAM users and roles (http://docs.ansible.com/ansible/iam_module.html), etc., and it does them in repeatable, auditable, version-controllable, self-documenting fashion.

Re: An AWS Region is coming to France

#32

Post by Symbiote »

jsingleton wrote: post #30
dazbradbury wrote: post #5

For those in London wondering where is best for UK based customers, it seems, for London at least, this could be an improvement over Dublin (where Frankfurt is slower), as Paris is roughly 70 miles closer. Of course, depending on where / when [1] a UK-based data centre is released, I'd imagine that would be faster still. Currently Ireland vs. Frankfurt is (more data needed of course)[2]: Europe (Ireland): 25 ms 27 ms…

I've found latency in the UK can be about a third lower than Ireland. I used Bytemark for testing in my recent book but Azure have UK regions now [0] and DO have had a London DC for a couple of years [1]. AWS UK is currently just "coming soon" [2] but Werner has said "end of 2016 (or early 2017)" [3]. [0] https://unop.uk/azure-eu-regions-naming-confusion [1] https://www.digitalocean.com/company/blog/introducing-our-l…

> [0] https://unop.uk/azure-eu-regions-naming-confusion

I expect Microsoft are using the UN region names for Europe, where Britain are Ireland are part of Northern Europe.

https://en.wikipedia.org/wiki/United_Nations_geoscheme_for_E...

Re: An AWS Region is coming to France

#33

Post by grif-fin »

ceejayoz wrote: post #31
grif-fin wrote: post #29

Earlier quoted context omitted.

I found visualization very much helpful when complexity rises. APIs stays powerful but do not support a human admin for monitoring and server setups (including IAM users, Services, Tasks, Clusters, Launching EC2 instances, ECR setup for docker, AIM, Loadbalancing, Security groups, Roles etc all multiplied to X regions).

Again, if you're large enough to be in multiple regions, all of this should be configured via the APIs using a configuration management system of some sort. Ansible, for example, can easily manage stuff like security groups ( http://docs.ansible.com/ansible/ec2_group_module.html ) , load balancing ( http://docs.ansible.com/ansible/ec2_elb_lb_module.html ), IAM users and roles ( http://docs.ansible.com/ansible/iam_mod…

" if you're large enough to be in multiple regions, all of this should be configured via the APIs"

Is the suggestion to recreate what Amazon Console has done (using APIs) in every large organisation using AWS because Amazon Console is not good enough?

Re: An AWS Region is coming to France

#34

Post by widforss »

reacweb wrote: post #21
widforss wrote: post #9

What is the state of the temporary spy laws in France? Shouldn't it at least be mentioned in the announcement that the french government can pretty much ask Amazon for any of your data without a warrant. Or is the situation better than a year ago? EDIT: Warrant is apparently needed as noplay said.

In France, we have some consideration toward power separation. Police and secret services can collect your data mostly without a warrant. Government can exceptionally ask the police some data, but if there are abuses, the judicial power will intervene.

I meant government as in government agencies, not strictly under the direct control of the actual group of humans making up the government.

I guess "government" interprets to different things in different countries, what I wrote above is a very american viewpoint.

In my country (SE), a member of government can be relieved of her duties if she even mentions that an agency should act in a certain way (as the government only should make up policies and not interfere in the daily businesses of the agencies).

https://en.wikipedia.org/wiki/Ministerstyre

Re: An AWS Region is coming to France

#35

Post by solatic »

There is STILL no AWS region in Israel.

All Internet traffic in and out of Israel goes through three undersea cables connecting the country with Turkey, Greece, and Italy, and as such suffer from the kind of lag that happens when you're separated from your destination server by a couple thousand kilometers, usually more. There are no local cloud providers and the local entrepreneurial culture (which is MASSIVE for such a small country) either has to pay for cloud resources in Europe or has to pay for local non-cloud hosting, which is orders of magnitude more expensive and running on relatively ancient hardware (the local VPS shops have little incentive to upgrade).

Do we have to beg for Amazon to come here?!

Re: An AWS Region is coming to France

#36

Post by noplay »

widforss wrote: post #34
reacweb wrote: post #21

Earlier quoted context omitted.

In France, we have some consideration toward power separation. Police and secret services can collect your data mostly without a warrant. Government can exceptionally ask the police some data, but if there are abuses, the judicial power will intervene.

I meant government as in government agencies, not strictly under the direct control of the actual group of humans making up the government. I guess "government" interprets to different things in different countries, what I wrote above is a very american viewpoint. In my country (SE), a member of government can be relieved of her duties if she even mentions that an agency should act in a certain way (as the government…

Yeah in France separation is less clear. That's why warrant is not the problem if they want it they will get it anyway.

Re: An AWS Region is coming to France

#37

Post by runeks »

solatic wrote: post #35

There is STILL no AWS region in Israel. All Internet traffic in and out of Israel goes through three undersea cables connecting the country with Turkey, Greece, and Italy, and as such suffer from the kind of lag that happens when you're separated from your destination server by a couple thousand kilometers, usually more. There are no local cloud providers and the local entrepreneurial culture (which is MASSIVE for su…

Amazon will come to Israel if they deem it profitable. They aren't exactly Google Fiber though, so I think they would avoid locating themselves in areas with poor connectivity options in the first place.

Re: An AWS Region is coming to France

#38

Post by jeffbarr »

inopinatus wrote: post #20
alicewales wrote: post #14

Earlier quoted context omitted.

It's hardly surprising. Everything on the UK internet goes through London anyway. If you have a DC in Manchester and an end-user in Liverpool, the link normally goes Manchester - London - Liverpool. It's not a great situation, having everything so centralised on London, but it's a small enough country that it doesn't have a huge effect on latency. It would make no sense for AWS to locate in a non-London region when e…

Not every decision is about cost minimisation. There's a resiliency motivation to place DCs in separate flood plains and separate power grids if possible. Whether AWS is following that, I cannot say.

We (I am part of the AWS team) pay a lot of attention to that; our "Overview of Security Practices" paper[1] says:

"Each availability zone is designed as an independent failure zone. This means that availability zones are physically separated within a typical metropolitan region and are located in lower risk flood plains (specific flood zone categorization varies by Region). In addition to discrete uninterruptable power supply (UPS) and onsite backup generation facilities, they are each fed via different grids from independent utilities to further reduce single points of failure. Availability zones are all redundantly connected to multiple tier-1 transit providers."

[1] https://d0.awsstatic.com/whitepapers/aws-security-whitepaper...

Re: An AWS Region is coming to France

#39

Post by pavel_lishin »

solatic wrote: post #35

There is STILL no AWS region in Israel. All Internet traffic in and out of Israel goes through three undersea cables connecting the country with Turkey, Greece, and Italy, and as such suffer from the kind of lag that happens when you're separated from your destination server by a couple thousand kilometers, usually more. There are no local cloud providers and the local entrepreneurial culture (which is MASSIVE for su…

> the local entrepreneurial culture (which is MASSIVE for such a small country)

> (the local VPS shops have little incentive to upgrade)

> Do we have to beg for Amazon to come here?!

I'm surprised nobody has stepped in and built out their own cloud offering.

Re: An AWS Region is coming to France

#40

Post by tomcart »

grif-fin wrote: post #33
ceejayoz wrote: post #31

Earlier quoted context omitted.

Again, if you're large enough to be in multiple regions, all of this should be configured via the APIs using a configuration management system of some sort. Ansible, for example, can easily manage stuff like security groups ( http://docs.ansible.com/ansible/ec2_group_module.html ) , load balancing ( http://docs.ansible.com/ansible/ec2_elb_lb_module.html ), IAM users and roles ( http://docs.ansible.com/ansible/iam_mod…

" if you're large enough to be in multiple regions, all of this should be configured via the APIs" Is the suggestion to recreate what Amazon Console has done (using APIs) in every large organisation using AWS because Amazon Console is not good enough?

No, treat your infrastructure as code. Define it programatically, version it, have a standard, automated process for recreating it.

If you're using AWS then Cloudformation (maybe with an abstraction like troposphere), will do what you need.

If you are pressing the big blue 'launch instance' button, you are doing it wrong.

Post reply on HN