Business Intelligence |    Certification |    Cloud Computing |    Community Manager |    CRM/ERP/ETL |    Data Center |    Database |    Enterprise 2.0 |    Enterprise Applications |    Featured stories |    Free Trials |    Green Technology |    Guest Bloggers |    Identity |    Information Technology |    IT Compliance |    IT Decision-making |    Networking |    On-Demand |    Patch Tuesday |    Podcasts |    Programming |    Security |    Social Computing |    Social Media |    Software |    Storage |    Videos |    Virtualization |    Windows |    Wireless

The Issues With Auto Scaling, Amazon’s Latest Feature On EC2
by Alex Williams

Alex Williams

Amazon has added some new features for EC2, including the ability to auto scale.

Clients have been asking for the auto scale capability for a while. Until now, Amazon’s EC2 service had its best fit in doing computational tasks that leveraged its heavily distributed functionality. With the new service in place, Amazon better serves clients that want automatic, in the cloud, load balancing.

Judging from the activity on Twitter, enthusiasm is high for Amazons new features. Amazon responds fast to customer feedback and develop new features accordingly.

Still, it is easy to get caught up in the enthusiasm and lose sight a bit about the risks that go with auto scaling in the cloud. But first, let’s define what we are discussing.

What is Amazon’s Auto Scaling service?

Amazon’s Auto Scaling feature pairs with their new CloudWatch service.

CloudWatch:

“….tracks and stores a number of per-instance performance metrics including CPU load, Disk I/O rates, and Network I/O rates. The metrics are rolled-up at one minute intervals and are retained for two weeks. Once stored, you can retrieve metrics across a number of dimensions including Availability Zone, Instance Type, AMI ID, or Auto Scaling Group.”

The Auto Scaling service:

“….allows you to automatically scale your Amazon EC2 capacity up or down according to conditions you define. With Auto Scaling, you can ensure that the number of Amazon EC2 instances you’re using scales up seamlessly during demand spikes to maintain performance, and scales down automatically during demand lulls to minimize costs. Auto Scaling is particularly well suited for applications that experience hourly, daily, or weekly variability in usage.”

A Different View: Dynamic Scaling

George Reese makes a distinction between dynamic scaling and auto-scaling. Reese is CTO for EnStratus, a cloud service provider. He is the author of Cloud Application Architectures published by O’Reilly. He also writes a blog for O’Reilly about cloud computing.

Here’s his definition:

Auto-scaling takes advantage of a critical feature of the cloud called dynamic scaling. Dynamic scaling is the ability to add and remove capacity into your cloud infrastructure on a whim—ideally because you know your traffic patterns are about to change and you are adjusting accordingly.

His point? He explained it today for me in a Twitter exchange:

Reese wrote last December that Amazon and other cloud providers can not respond fast enough to increases in capacity needs. It can take 10 minutes before Amazon responds. That may be too late.

He says there are security risks that can lead to a whole set of problems without “governors” in place. Governors may prove to be ineffective, too, without any guidelines in place that deal with capacity.

* Capacity demands you should have planned for, and thus don’t need auto-scaling for.
* Capacity demands you could not have planned for, and thus you have no idea whether the governor level you have set is even appropriate to the traffic.

And what about getting Slashdotted?

You want the site to scale to the traffic of unexpected attention but auto scaling can be a bit blind in its approach:

But you don’t want it to auto-scale. Auto-scaling cannot differentiate between valid traffic and non-sense. You can. If your environment is experiencing a sudden, unexpected spike in activity, the appropriate approach is to have minimal auto-scaling with governors in place, receive a notification from your cloud infrastructure management tools, then determinate what the best way to respond is going forward.

At what point should there be human intervention?

Reuven Cohen of ElasticVapor chimed in after Reese wrote his post last December:

No scaling operation should be fully or completed automated, it should be a series of controls / rules, policies, quotas and monitors that are tailored to reduce the need for human operators involvement or for the purposes of achieving a set of requirements such as the quality of my users experience.

I’m personally all for a Dynamic Automated Infrastructure.

Tags: , , , , , , , , , ,



Share
                                                 
sharebar end


This entry was posted on Tuesday, May 19th, 2009 at 12:42 AM and is filed under Community Manager. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Reply
 

 

 
 
 





 
Related Tweets




Syndicated Content
  Impact of Design On Trust
We attended RSA 2010 this week where VeriSign was a Platinum Sponsor. Executive Chairman, Jim Bidzos, gave a Keynote Address on the 'Internet and Trust' explaining that without trust, people are less likely to freely share information or transact online....

Launch of VeriSign Trust Seal
With the launch of the VeriSign TrustTM Seal last week, we introduced a new section to the Website dedicated to the Trust Seal. The Seal enables Websites to communicate that they are a trusted site to do business with and...

New Video Player Experience
Videos on www.verisign.com have a new look and feel. Users will experience an improved delivery of videos that are optimized for their available bandwidth. During playback when hovering over the video, users now have the ability to quickly share (e-mail,...

  PayPal UK Launch Security Key - Guest Posting from PayPal
I am happy to say they are using VeriSign Identity Protection to deliver this, which means that PayPal Customers will be able to use their token at other sites who join the VIP network. PayPal are the first UK members of the network, but there are around 30 other members in different countries around the world so you can expect to see more places where you can use your token in the UK appearing shortly.

Facebook scam - Part 2
This just in from the BBC web site, Symantec have identified a virus that steals user names and passwords, nothing new there. But, if I understand this right, it is delivered through a Facebook invitation from someone you don't know and delivers malware which can then steal user names / passwords and also keylog credit card info.

Survey finds passwords are not secure - well d'uh!
I don't think the vendor community has been crying wolf about the problems that stronger authentication solves, more like highlighting that this problem is here and growing. Well the discussion I have had recently with many different organisations across many different industries are now resulting in more and more consumer projects in this area

  Open Identity Exchange: enabling all the VISAs of identity
The Open Identity Exchange was launched this morning at the RSA conference in San Francisco. It is a significant step for federated identity as it will enable US government web sites such as the NIH to embrace open identity standards...

Rethinking Internet Trust and Reputation
Today, we are launching the VeriSign Trust Seal, a new service for small and medium businesses with an online presence. It is a big day for everyone at VeriSign who has been working really hard on the new service the...

Google Hacked or Why the Cyber World Could Get M.A.D**
As the world already knows, Google and a few other prominent US companies got severely hacked around Christmas time last year. Sophos has an interesting analysis of the exploit. Web malware and a zero day vulnerability in IE6 were...

Search
 Whitepaper   Webcasts  Videos  All

     


Member Login
User Name  :    Password  : 

Register | Forgot Password

Sponsors
        

Sign up to receive email notifications about our newest white papers
.........................................................................
           Full Name  : 
Email Addresss  : 
   Confirm Email  : 


Breaking News
 
Featured stories