Serverless survival kit

Serverless Application - A Survival Kit
March 2018

Ippon Technologies © 2018
Ippon Technologies 2018
IPPON IN FIGURES
€40M
2018 TARGET
320CONSULTANTS
€32M
2017 REVENUE
4CONTINENTS
16Y.O.
2002 - 2018

Pourquoi rejoindre l’Academy ?
Une opportunité unique de se
former et d'être certifié AWS en
un temps record au contact de
nos experts du cloud.
Comment puis-je participer ?
Sur sélection interne et externe
5 ceintures (débutant ou expert venez comme vous êtes)
De 1 mois à 1 an
La tête dans les nuages, les pieds dans le code :)
- Un système de temps dédié pour la formation et les
certifications
- Une immersion avec nos experts Ippon (be a part of a
cloud project)
- Progresser techniquement mais aussi humainement
Où ?
Paris, Nantes, Lyon, Bordeaux, Richmond
VA, Washington DC, New York NYC
Dates clés :
Mars / Juin : Appel à candidature
Septembre : Rentrée de la AWS Academy

#ME
Steve HOUËL
Solution & Cloud Architect - Pôle conseil - Ippon Technologies
shouel@ippon.fr
JHipster contributor https://www.jhipster.tech/
#AWS #AllFiver
https://blog.ippon.fr/2017/06/09/les-architectures-serverless/
http://blog.ippon.fr/2017/10/10/how-to-do-serverless/
http://blog.ippon.fr/2017/11/21/decouvrez-notre-livre-blanc-serverless/
http://blog.ippon.fr/2018/03/14/kit-de-survie-dune-application-serverless-1-3/

#Public Cloud Platform
Many
Apps
+ +
Critical
Data
Serverless

What is Serverless
Well… It means no servers right ?
● No need to manage servers
● No need to even think about servers
● No need to provision infrastructure
● Pay only for what to use
● Deploy function not apps (FaaS)
● It’s event based/oriented

What is Serverless
Sometimes we
compare those
kind of services to
that

What is Serverless
But in real life and
without
experience,
sometimes it’s that

A Monolith in Serverless?
What if I talk about Monolith
in Serverless?

Data Mapper / ORM
Service Layer
Resources
Authentication & Authorization
/users /users /users/{userId}
GET POST PUT
A basic monolith architecture:
● Data access
● Business services
● REST endpoints
● Security

GET POST PUT
HANDLER HANDLER HANDLER
Lot of people
would do

Function as a service (FaaS) is a category of cloud
computing services that provides a platform allowing
customers to develop, run, and manage application
functionalities without the complexity of building and
maintaining the infrastructure typically associated with
developing and launching an app
Wikipedia

Infrastructure service

Data Mapper /
ORM
Service Layer
Resources
Authorization
GET POST PUT
Data Mapper /
ORM
Service Layer
Resources
Authorization
Data Mapper /
ORM
Service Layer
Resources
Authorization
Why not using a single
project but bind different
handlers?
Code
quality
Test
consistency
Productivity

The tip of the Iceberg
What your
customer sees
Your backend

What your
customer sees
Your backend
API Gateway
Lambda

What your
customer sees
Your backend
API Gateway
Lambda
Data
Mapper /
ORM
Service
Layer
Resources
Authorizati
on
/users
GET

Swagger forever
x-amazon-apigateway-integration:
uri:
Fn::Sub: arn:aws:apigateway:${AWS::Region}:lambda:path/2015-
03-
31/functions/${GetCurrentUserFunction.Outputs.Arn}:prod/invocations
passthroughBehavior: "when_no_match"
httpMethod: "POST"
responses:
default:
statusCode: "200"
responseParameters:
method.response.header.Access-Control-Allow-Origin: "'*'"
type: "aws_proxy"
security:
- sigv4: []
● Define your contract
● Bind your API to your functions
● Parameters definition & validation
● Security
● Build your documentation

Who said security?
Custom
Authorizer
Cognito
UserPool
(JWT)
AWS
IAM
SSL
Certificate

Which language to choose?

Which language to choose?
What you need to
consider
Lifecycle
Cost
Human

FaaS lifecycle
● Function is not available at
any time
● Code is not in memory, but
sleeping

FaaS lifecycle
Initialization
Context
Execution
ColdStart
...

FaaS lifecycle: concurrent calls
Initialization
Context
Execution
...
Initialization
Context
Execution
...
Initialization
Context
Execution
...

What you should remember
● Initialization is free of charge
● Context initialization is free of charge (< 10s)
● ColdStart is not part of the timeout period
● Optimize your function’s dependencies and
package size
● Stay away from VPC as much as possible (> 10s)

Impact on your project
Careful on your architecture
impact:
- Think single execution
- Close your resources !!
- Full Stateless

Package your code
build:
$(VIRTUALENV) "$(VENV_DIR)"
mkdir -p "$(VENV_DIR)/lib64/python$(PY_VERSION)/site-
packages"
touch "$(VENV_DIR)/lib64/python$(PY_VERSION)/site-
packages/file"
"$(VENV_DIR)/bin/pip$(PY_VERSION)"
--isolated
--disable-pip-version-check
install --no-binary :all: -Ur requirements.txt
find "$(VENV_DIR)" -name "*.pyc" -exec rm -f {} ;
bundle.local:
zip -r -9 "$(ZIP_FILE)" example
cd "$(VENV_DIR)/lib/python$(PY_VERSION)/site-packages"
&& zip -r9 "$(ZIP_FILE)" *
cd "$(VENV_DIR)/lib64/python$(PY_VERSION)/site-packages"
&& zip -r9 "$(ZIP_FILE)" *
bundle:
docker run -v $$PWD:/var/task -it lambci/lambda:build-
python3.6 /bin/bash -c 'make clean build bundle.local'
What you need to know:
● Some languages have specific
dependencies depending on your
system
● All dependencies must be included
into your bundle
● Bundle must be compressed and
deployed on an S3 bucket
● Bundle name must be unique in
order to deploy changes - Use
Hash

An infrastructure tool to rule them all!

Tough decision ahead
Careful, limits exists on AWS
● AWS API rate limit: use DependsOn
● Number of created resources per
stack: use Nested Stack
Think about:
● Project architecture
● Resources binding
● Deployment strategy
● Compliance with new AWS services

Who said continuous deployment
Canary
release
Functions
versioning
Natural
BlueGreen

Monitoring & Supervision
CloudWatch

Service map
● Map all your services
interaction
● Identify your bottle neck
● Display errors

Trace
● Get information on your
ColdStart
● Get information on function
execution time
● Can be used to calculate
financial impact from a
version to another

What about Airbus
python3.6
90
functions
CI / CD
12min
ColdStart
2sec

Conclusion
No instance to
managed
Automatic scaling
Async services
User experience
when ColdStart
occurred
Competency

THE END
Cloud Cost Architect (business
oriented, driven by savings, aws
certified)
http://bit.ly/AirbusCostJob
THANK YOU
Site Reliability Engineers
(python Developers, aws
certified)
http://bit.ly/AirbusSreJob
Customer Reliability Engineers
(former developers, customer
oriented, aws certified)
http://bit.ly/AirbusCreJob
IS HIRING !!

Ippon.fr
contact@ippon.fr
+33 1 46 12 48 48
@IpponTech

Serverless survival kit

More Related Content

What's hot (20)

Similar to Serverless survival kit (20)

Recently uploaded (20)

Serverless survival kit

Editor's Notes