2018年11月29日 BURZIN PATEL
HashiCorp 是今年AWS re:Invent 的黃金贊助商, 並在發佈日宣佈 Hashicorp Terraform 和 Hashicorp Consul 將支持 AWS 的多個新產品。以下是我們對這些新服務的概述, 以及會議期間的信息, 您可以在會上了解更多有關客戶如何使用 HashiCorp 工具的信息。
Terraform
HashiCorp Terraform 仍然是在 AWS 上配置和管理基礎架構的首選工具。我們很高興地宣佈與 AWS 工程團隊合作創建以下服務支持:
AWS 中轉網關（Transit Gateway）
AWS 中轉網關使用戶能夠跨區域和與本地網絡連接
VPC。以前, 爲了管理這些網絡之間的通信, 需要爲將要通信的所有實例啓用 VPC 對等。這就要求用戶在每個 VPC 和這些 VPC 中的每個 VPN 連接之間手動設置一個新的 "對等連接"。相反, 中轉網關允許用戶將其 VPC 和站點到站點 VPN 連接到單個網關, 使網絡和 InfoSec 團隊能夠更輕鬆地管理和監視其組織中的網絡連接。這些網關還可以跨 AWS 區域配對, 允許用戶在全球範圍內連接其 VPN 和內部部署網絡。Terraform 可用於通過 terraform AWS Provider提供和管理中轉網關。
有關 AWS EC2 中轉網關的詳細信息, 請參閱 Terraform AWS Provider 文檔.
數據同步
AWS 數據同步是一項服務, 它使用戶能夠自動在本地存儲和基於 AWS 的存儲服務 ，如 Amazon S3 或 Amazon Elastic File System (efs)之間傳輸數據。數據同步由四個主要組件組成: 同步代理、位置、任務和任務執行。對 Datasync 感興趣的組織可以使用 Terraform 通過其 Terraform 配置文件配置這些組件。有關如何使用 Terraform AWS 提供商設置 AWS 數據同步的詳細信息, 請參閱 Terraform AWS Provider 文檔.
其他資源
Terraform 還將通過 Terraform AWS 提供商支持以下資源:
有關如何配置這些資源的詳細信息, 請參閱 Terraform AWS Provider文檔: https://www.terraform.io/docs/providers/aws/index.html
Consul
在過去的一年裏, 我們爲 HashiCorp Consul 引入了許多新功能, 包括用於服務細分的 Consul connect 、用於管理 Kubernetes 的 Helm support ，以及對企業版的多數據中心支持。在 re:Invent 中, AWS 宣佈了對 Consul 的集成, 該集成將幫助用戶管理 AWS 和本地數據中心中的微服務。
AWS 雲地圖
AWS 雲地圖是一項新服務, 可爲 AWS 環境提供服務發現。雲地圖使用戶能夠發現 AWS 環境中的資源和服務, 進行運行狀況檢查, 並與其他服務網格產品 (如 HashiCorp Consul ) 集成。雲地圖適用於在 Amazon EC2 實例或 Amazon ECS 任務上構建的任何應用程序服務。雲地圖管理部署在 Amazon API 網關之上的基於 ARN 的資源和 API 的配置。這意味着用戶可以註冊具有特定屬性的資源, 然後將這些屬性用於連接新的 AWS 服務或資源。爲了確保只允許經過批准的連接, 雲地圖使用 AWS IAM credentials 對 API 調用進行身份驗證。這些相同的 API 也可以直接提供給 Consul, Consul 可以管理 AWS 和非 AWS 資源之間的連接, 而不管環境是在 AWS 中、本地數據中心中還是在另一個雲中。要了解有關 Consul 如何使用雲地圖的更多信息並查看示例配置, 請閱讀此博客.
分會議
有許多 Sessions 的特點是客戶在將應用程序部署到 AWS 時使用 HashiCorp 工具。參加這些會議, 看看像 Riot Games 、realtor. com 和 Moody’s 這樣的公司是如何使用 HashiCorp 產品的:
- ARC314 - Globalizing Player Accounts at Riot Games While Maintaining Availability
- CON315-R - Deploying Microservices Using AWS Fargate
- CTD409 - High Velocity DevOps: Four Ways to Leverage CloudFront in Faster DevOps Workflows
- DEM09 - Modern Application Delivery with AWS and HashiCorp
- DEM72 - Get Better App Performance with “Optimization as Code”
- SEC309-S - Moody’s: Deploying Cloud-Native Architectures with Automation
- TMA08-R - This Is My Architecture Video Series - DevOps
- TMA16-R - This Is My Architecture Video Series - Security
HashiCorp 展位
如果您正在參加 aws re:Invent, 您可以找到我們的團隊位於展位341號在展位。我們將有來自我們的工程和解決方案團隊的一些團隊成員在那裏回答問題並進行產品的現場演示。以上是我們爲發佈日提供支持的新服務的概述, 以及會議期間的內容, 您可以在會議上了解更多有關客戶如何使用 hashicorp 工具的信息。
結論
我們很高興提供上述發佈日服務, 並期待着繼續與 AWS 工程團隊合作, 以改善 HashiCorp 和 AWS 用戶的體驗。
要了解更多關於 Hashicorp Terraform 和 Hashicorp Consul 的信息,請在我們的展位停留或訪問我們的產品頁面。
【原文】HashiCorp at re:Invent: Terraform & Consul launch-day support for multiple new AWS offerings
NOV 29 2018 BURZIN PATEL
</header>
HashiCorp is a gold sponsor of AWS re:Invent this year and has announced launch-day support for multiple of the new AWS offerings with HashiCorp Terraform and HashiCorp Consul. Below is an overview of our support for these new services as well as the conference sessions where you can learn more about how customers are using HashiCorp tools.
Terraform
HashiCorp Terraform continues to be a preferred tool for provisioning and managing infrastructure on AWS. We are pleased to announce launch-day support for the following services, created in collaboration with the AWS engineering team:
AWS Transit Gateway
AWS Transit Gateway enables users to interconnect VPCs across regions and with on-premises networks. Previously, in order to manage traffic between these networks, VPC-peering needed to be enabled for all the instances that would be communicating. This required users to manually setup a new “peering-connection” between each VPC and each VPN connection within those VPCs. Scaling a process like this can be very difficult. The Transit Gateway instead allows users to connect their VPCs and Site-to-Site VPNs to a single gateway making it easier for networking and InfoSec teams to manage and monitor network connectivity across their organization. These gateways can also be paired across AWS regions, allowing users to connect their VPCs and on-premise networks worldwide. Terraform can be used to provision and manage Transit Gateways through the Terraform AWS Provider.
For more information about the AWS EC2 Transit Gateway, please refer to the Terraform AWS provider docs.
DataSync
AWS Datasync is a service that provides users with the ability to automate the transfer of data between on-premises storage and AWS-based storage services like Amazon S3 or Amazon Elastic File System (EFS). Datasync consists of four primary components: Sync Agents, Locations, Tasks, and Task Executions. Organizations interested in Datasync can use Terraform to configure these components through their Terraform configuration files. For more information about how to use the Terraform AWS Provider to set up AWS Datasync, please refer to the Terraform AWS provider docs.
Additional Resources
Terraform will also support the following resources through the Terraform AWS Provider:
For more information about how to configure these resources, please refer to the Terraform AWS Provider documentation: https://www.terraform.io/docs/providers/aws/index.html
Consul
This past year we’ve introduced a number of new features for HashiCorp Consul including Consul Connect for service segmentation, Helm support for managing Kubernetes, and Multi-data Center support for enterprises. At re:Invent, AWS announced an integration for Consul that will help users manage microservices on AWS and in on-premises data centers.
AWS Cloud Map
AWS Cloud Map is a new service which enables service discovery for AWS environments. Cloud Map gives users the capability to discover resources and services within AWS environments, conduct health checks, and integrate with other service mesh offerings, like HashiCorp Consul. Cloud Map works for any application service built on Amazon EC2 instances or Amazon ECS tasks. Cloud Map manages the configurations for ARN-based resources and APIs deployed on top of Amazon API Gateway. This means that users can register resources with specific attributes, which are then used for connecting new AWS services or resources. To ensure that only approved connections are allowed, Cloud Map authenticates API calls with AWS IAM credentials. These same APIs can also be fed directly to Consul which can then manage the connection between AWS and non-AWS resources, regardless of whether the environments are in AWS, in on-premises data centers, or within another cloud. To learn more about how Consul works with Cloud Map and see an example configuration, please read this blog.
Sessions
There are a number of sessions that feature customers that use HashiCorp tools in deploying applications to AWS. Join these sessions to see how companies like Riot Games, Realtor.com, and Moody’s are using HashiCorp products:
- ARC314 - Globalizing Player Accounts at Riot Games While Maintaining Availability
- CON315-R - Deploying Microservices Using AWS Fargate
- CTD409 - High Velocity DevOps: Four Ways to Leverage CloudFront in Faster DevOps Workflows
- DEM09 - Modern Application Delivery with AWS and HashiCorp
- DEM72 - Get Better App Performance with “Optimization as Code”
- SEC309-S - Moody’s: Deploying Cloud-Native Architectures with Automation
- TMA08-R - This Is My Architecture Video Series - DevOps
- TMA16-R - This Is My Architecture Video Series - Security
HashiCorp Booth
If you are attending AWS re:Invent, you can find our team located at Booth 341 on the expo floor. We will have a number of team members from both our engineering and solutions engineering team available there to answer questions and conduct live demonstrations of the products. Below is an overview of the new services that we are offering launch day support for as well as the conference sessions where you can learn more about how customers are using HashiCorp tools.
Conclusion
We are pleased to offer the launch-day services described above and look forward to continuing our work with the AWS engineering team to improve the experience for users of HashiCorp and AWS.
To learn more about HashiCorp Terraform and HashiCorp Consul, stop by our booth at re:Invent or visit our product pages.