SOLIDserver Virtual Cloud AWS-8.1
SOLIDserver Virtual Cloud AWS-8.1
This document aims at detailing EfficientIP proprietary solutions. As our solutions rely on several third-party products, created by other
companies or organizations, it may redirect readers to third-party websites and documentation for further information. EfficientIP cannot
be liable for or expected to provide said information regarding products maintained or created by third parties.
In no event shall EfficientIP be liable for any special, punitive, indirect, incidental or consequential damages of any kind including, but
not limited to, loss of present or prospective profits or business, loss of data, business interruption, damages to reputation or image,
whether in an action of contract, negligence, or other action, arising out of or in connection with the use, reliance upon or performance
of the products provided by EfficientIP or any information contained herein.
All EfficientIP products and documentation are subject to separate licensing terms which users must agree to and comply with in order
to use such products and documentation.
Table of Contents
Purpose of This Guide ....................................................................................................... v
1. SOLIDserver Deployment on AWS EC2 .......................................................................... 1
Prerequisites ............................................................................................................ 1
Limitations ................................................................................................................ 1
Uploading SOLIDserver Image .................................................................................. 2
Deploying SOLIDserver ............................................................................................. 3
Connecting to SOLIDserver ....................................................................................... 4
2. SOLIDserver Management on AWS EC2 ........................................................................ 6
Monitoring SOLIDserver with CloudWatch .................................................................. 6
Saving a Backup of SOLIDserver ............................................................................... 7
Troubleshooting SOLIDserver .................................................................................... 7
Upgrading SOLIDserver .......................................................................................... 13
Terminating an Instance Running SOLIDserver ......................................................... 13
iv
Purpose of This Guide
This document aims at describing EfficientIP operational guidelines for deploying SOLIDserver
on Amazon Web Services (AWS) Cloud environment.
SOLIDserver can be hosted in any compliant virtual environment. However, in public cloud envir-
onments a few guidelines are to be considered since administrators do not have full control over
the infrastructure. For instance, they may not have access to the local console of the virtual ma-
chines and therefore can lose access to the system and be unable to execute troubleshooting
operations. In order to avoid such a situation, make sure to follow the recommendations of this
guide.
If you want to get a first look at SOLIDserver initial configuration and setup, refer to the guide
SOLIDserver Quick Start.
v
Chapter 1. SOLIDserver Deployment on
AWS EC2
Running SOLIDserver to the full extent of its capabilities on AWS cloud implies:
• Meeting the prerequisites.
• Taking into account the limitations.
• Uploading SOLIDserver Image.
• Deploying SOLIDserver.
• Connecting to SOLIDserver.
Prerequisites
• An Internet connection and your credentials ready to connect to EfficientIP download portal.
If you do not have credentials yet, request them at www.efficientip.com/support-access.
• A SOLIDserver cloud image for AWS, it is available for download on our portal at
https://downloads.efficientip.com/support/downloads/cloud_images/aws/.
• An AWS account with sufficient rights. The import/export requirements are available at
https://docs.aws.amazon.com/vm-import/latest/userguide/vmie_prereqs.html.
• Make sure the account has sufficient rights over S3 buckets and EC2 environment.
• Make sure the required vmimport service role is defined and associated with the proper S3
bucket in your IAM policy.
• A basic knowledge of AWS, especially AWS EC2, or access to its documentation at
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/get-set-up-for-amazon-ec2.html.
• Identify the instance type matching your performance needs and license.
• A windows or linux client with awscli, AWS Command Line Interface, installed. For more details,
go to https://aws.amazon.com/cli/.
• An SSH Key pair to access the SSH console with the account admin.
• At least one Security Group granting windows or linux client SSH and HTTPS access to the
relevant instances.
• Take into account SOLIDserver network flows, detailed in the appendix Matrices of Network
Flows of the Administrator Guide available at https://mirror2.efficientip.com/support/downloads/,
in the relevant version folder.
Limitations
• EC2 AMIs are registered region by region and not globally. You must copy the image in all
relevant regions during the deployment.
• Network performance depends on the chosen instance type. Keep in mind that AWS does not
indicate the supported packet rate which is limited but only the bandwidth. For more details,
refer to the table Processing capabilities per instance type.
• DHCP services are limited when running on AWS VPC. Only on-premise devices connected
to the VPC through VPN and/or Direct Connect can interact with a SOLIDserver DHCP service
running in AWS.
• CARP redundancy protocol is not supported on AWS.
1
SOLIDserver Deployment on AWS
EC2
The command returns an ImportTaskId, that you need for the next step.
b. Monitor the import using the command:
aws ec2 describe-import-snapshot-tasks --import-task-ids <ImportTaskId>
The process can take a while, you can run the command several times.
Once the import is successfully completed, the command returns a SnapshotId that you
need for the next step.
4. Register the EC2 AMI
Use the SnapshotId to register the imported image as an AMI using the command below.
During the registration:
• You can name SOLIDserver image in place of <your_SOLIDserver_image_name>.
• You can enable the enhanced networking option --ena--support according to your needs.
aws ec2 register-image --name "<your_SOLIDserver_image_name>" --virtualization-type
"hvm" --architecture "x86_64" --root-device-name "/dev/sda1" --block-device-mappings
"DeviceName='/dev/sda1',Ebs={SnapshotId='<SnapshotId>',DeleteOnTermination=true,VolumeType='gp2'}"
[--ena-support]
Once the operation is complete your image is registered as an AMI and ready to use.
2
SOLIDserver Deployment on AWS
EC2
Deploying SOLIDserver
Once SOLIDserver image is uploaded on EC2, you can deploy it.
1
For more details, refer to AWS documentation at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html.
3
SOLIDserver Deployment on AWS
EC2
Once you launched the instance, you can access SOLIDserver from the IP address you configured,
as detailed in the next section.
If an error occurs during the deployment or if the instance has performance issues, refer to the
section Troubleshooting SOLIDserver.
To manage SOLIDserver from the EC2 instance, refer to the chapter SOLIDserver Management
on AWS EC2.
Connecting to SOLIDserver
From any browser, you can connect to SOLIDserver via the IP address you configured.
4
SOLIDserver Deployment on AWS
EC2
ddi.mycorp.com
Login
Password
Once you are logged in, you must activate your license and make the appliance first configurations.
For more details, refer to the guide SOLIDserver_Quick_Start-x.x.pdf, available on our download
2
portal .
Keep in mind that SOLIDserver Administrator Guide is accessible from any page of the GUI in
the menu ? > Administrator Guide. The first configurations are detailed in the chapter Using
SOLIDserver for the First Time of the part Starting.
2
At https://downloads.efficientip.com/support/downloads/docs/, in the relevant version folder. Log in using your credentials. If you do
not have credentials yet, request them at www.efficientip.com/support-access.
5
Chapter 2. SOLIDserver Management on
AWS EC2
Once deployed on EC2, you can take advantage of Cloud environment functionalities to manage
SOLIDserver:
• Monitoring SOLIDserver with CloudWatch.
• Saving a Backup of SOLIDserver.
• Upgrading SOLIDserver.
• Troubleshooting SOLIDserver.
• Terminating an Instance Running SOLIDserver.
In addition, you can use AWS CloudWatch to specifically monitor your instances.
We strongly recommend configuring at least one alarm, triggered whenever a Status check
fails after 3 consecutive periods of 1 minute.
CloudWatch allows you to monitor the following metrics for better control:
Instance CPU Usage
If an instance is running low on Elastic Compute Units (ECUs), its CPU credit consumption
and performances are gradually lowered to the base performance level over a 15-minute
period. It does not experience a sharp performance drop-off when CPU credits are depleted.
When an instance uses all of its CPU credit balance, performances remain at the baseline
performance level. If an instance consistently uses all of its CPU credit balance, it is recom-
mended to upgrade to a larger instance type.
6
SOLIDserver Management on AWS
EC2
There might be a discrepancy between the CPU usage reported by the OS and the compute
that EC2 is reporting as having actively provided. That discrepancy is lost CPU. In such case,
it is also recommended to upgrade to a larger instance type.
Instance Disk IO Usage
AWS Elastic Block Storage (EBS) provides Standard EBS Volumes and Provisioned IOPS
Volumes ranging from 100 IOPS to 10000 IOPS. We recommend monitoring the EBS volumes
VolumeQueueLength, ReadIOPS and WriteIOPS metrics to identify issues and adapt the
volume properties accordingly.
Network Usage
As described in the limitations, network performances depend on the instance type. It is im-
portant to monitor all the metrics relevant to your bandwidth and configure your network
configuration accordingly.
In addition, you can create snapshots of the EBS volume, to have an additional backup of
SOLIDserver.
Note that restoring a backup of SOLIDserver has to be done from its GUI, as detailed in the
chapter Maintenance of the Administrator Guide.
Troubleshooting SOLIDserver
If a functional GUI or SSH access is available, you can try to troubleshoot SOLIDserver, as detailed
in the chapter Maintenance of the Administrator Guide, available in the GUI top bar, in the menu
? > Administrator Guide.
7
SOLIDserver Management on AWS
EC2
You can try stopping the instance and then starting it again, this operation re-deploys the instance
on another physical host.
In the procedure below, you stop and start the instance from the AWS dashboard, but you can
also do it using awscli.
If you cannot establish a telnet connection on the TCP port 443 nor ping your instance, you must
check the instance connectivity.
8
SOLIDserver Management on AWS
EC2
a. Click on Actions > Instance Settings > Get Instance Screenshot.The page refreshes
and displays a screenshot image of SOLIDserver console.
b. Click on Actions > Instance Settings > Get System Log. A pop up appears and dis-
plays the last 64 KB of logs. These can reveal kernel problems and service configuration
issues that could cause an instance to terminate or become unreachable before its SSH
daemon can be started. Note that:
• If the instance was terminated right after being deployed following the section Deploy-
ing SOLIDserver, you might need to visit the AWS support center at
https://console.aws.amazon.com/support/ to request higher limits on instances and
EBS volumes.
• Using awscli, you can display more information about an instance than from the AWS
Management Console by running the following command:
aws ec2 describe-instances--instance-id<the_id_of_your_instance>
With all the elements you collected, refer to AWS proprietary documentation, available at
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-troubleshoot.html, in the
section Troubleshooting instances.
Recovering an instance, means replacing its volume. Indeed, you could terminate the instance
but that would revoke SOLIDserver license.
9
SOLIDserver Management on AWS
EC2
10
SOLIDserver Management on AWS
EC2
e. In the panel Local backup files, select the backup file you want to restore.
f. Click on RESTORE . The wizard Restore a backup file opens.
g. Tick the box Restore the system configuration to restore the system configuration of
the backup file. If you do not tick the box, the backup file data is restored but the current
system configuration of the appliance is kept.
Tick it if you are restoring a backup using an NSD or Unbound Hybrid server.
h. Tick the box Overwrite DNS records managed via a smart architecture to restore
the records database as saved during the backup. If you do not tick the box, the restored
zones keep the current version of the records they contain if they are managed via a
smart architecture.
In both cases, a restoration includes all and only the zones present in the backup file.
i. Click on OK to complete the operation.
For more details on backup restoration, refer to the Administrator Guide.
8. Delete the unused volume
a. In the navigation panel, click on Volumes.
b. Tick the former volume of the crashed instance and click on Actions > Delete Volume.
A pop up appears.
c. Click on Yes, Delete. The volume is no longer listed.
The new instance is only created to use its volume on your crashed instance. Note that, to avoid
invaliding the existing license, the new instance you use to replace the volume must:
• Use the original AMI or an AMI that matches the version running at the time of the crash.
• Use the same volume size.
• Enforce the same NICâ s order and private IP configuration.
• Be reassociated with the same Elastic IP addresse(s).
• Be applied a new license.
• Be restored with a recent SOLIDserver backup file.
11
SOLIDserver Management on AWS
EC2
12
SOLIDserver Management on AWS
EC2
g. Tick the box Restore the system configuration to restore the system configuration of
the backup file. If you do not tick the box, the backup file data is restored but the current
system configuration of the appliance is kept.
Tick it if you are restoring a backup using an NSD or Unbound Hybrid server.
h. Tick the box Overwrite DNS records managed via a smart architecture to restore
the records database as saved during the backup. If you do not tick the box, the restored
zones keep the current version of the records they contain if they are managed via a
smart architecture.
In both cases, a restoration includes all and only the zones present in the backup file.
i. Click on OK to complete the operation.
For more details on backup restoration, refer to the Administrator Guide.
8. Terminate the temporary instance
a. In the navigation panel, click on Instances.
b. Tick the instance created only to get its volume and click on Actions > Instance state
> Terminate. A pop up appears.
c. Click on Yes, Terminate. The list of instances is visible again. Wait and refresh the
page until the instance state is marked terminated.
9. Delete the unused volume
a. In the navigation panel, click on Volumes.
b. Tick the former volume of the crashed instance and click on Actions > Delete Volume.
A pop up appears.
c. Click on Yes, Delete. The volume is no longer listed.
Upgrading SOLIDserver
Even running on AWS, SOLIDserver can only be upgraded from its GUI, provided you have the
proper upgrade package.
For more details, refer to the chapter Upgrading of the Administrator Guide, available in the GUI
top bar, in the menu ? > Administrator Guide.
13
SOLIDserver Management on AWS
EC2
4. Tick the instance(s) hosting SOLIDserver and click on Actions > Instance state > Terminate.
A pop up appears.
5. Click on Yes, Terminate. The list of instances is visible again. Wait and refresh the page
until the instance(s) state is marked terminated.
14