×
Community Blog Application Management: Best Practices for Cloud Resources DevOps

Application Management: Best Practices for Cloud Resources DevOps

This article explains O&M and control from the resource dimension to the application group perspective.

By Alibaba Cloud ECS

The following article highlights a speech entitled Application Management: Best Practices for Cloud Resources DevOps by Hongjun Yang (an Alibaba Cloud Technical Expert). This article is divided into three parts:

  1. Tools for Cloud Resource Management and O&M
  2. Management of Application Group Dimension Resources
  3. O&M and Monitoring of Application Group Dimension Resources

Tools for Cloud Resource Management and O&M

1

Currently, there are five major problems with the control and O&M of ECS:

  1. The number and variety of resources on enterprises’ clouds continue to increase with business development, which brings challenges to management.
  2. Resource users and financial providers have demands for accounting and cost optimization based on the management perspective.
  3. As more business parties use cloud accounts and resources, it brings challenges to resource managers on safe use.
  4. Knowing how to manage O&M and improve efficiency brings challenges to O&M personnel as the resource scale increases.
  5. There are too many entrances for cloud resource management and O&M. It is hard to find the best practice.

2

Standardized, automated, data-based, and process-based operations should be implemented to address the pain points of cloud resource management and O&M. It is necessary to realize grouping and decentralization management, get through account permissions, and speed up the approval process.

In terms of automation, it is necessary to improve efficiency, reduce human operations, ensure regular alert O&M, and pay attention to the use of resources.

Management of Application Group Dimension Resources

3

Application grouping involves three concepts.

  1. The Configuration of Application Groups: Different application groups can be created for each application based on different environments or regions. This realizes grouping with multiple deployment environments and multiple architectures.
  2. Resource Management: It is supported to import required resources in group resources, application group scenarios, and auto scaling.
  3. Resource O&M: When a vulnerability or security risk occurs in a resource group, security and risk management are used to trigger monitoring and event mechanisms. In addition, compilation and deployment of CICD code are supported.

4

Cloud resources' problems include large quantities, numerous varieties, and difficulty managing and finding the control entrance. Alibaba Cloud allows users to import more than 30 cloud resources and manage them in a unified manner.

Alibaba Cloud puts best practices together through group management to solve the problem of fragmentation of products and facilitate quick use of these capabilities.

Alibaba Cloud associates all resources together through labels to solve the problem of resource decentralization and billing. Users can view the cost distribution of current resources, monthly bills, etc. in the expense center of their accounts.

5

Let’s use DingTalk as an example to mount some ECS instances to the load balancing. Select DingTalk from the application group to create an application. All associations are automatically created in the form of resource sites during creation. These resources are automatically imported to the application group to facilitate subsequent control.

6

Next, let's talk about auto scaling. Application management integrates auto scaling. Each application group can be associated with an auto scaling group. Users can make auto scaling rules based on their business. The system scales based on scaling rules.

Auto scaling also supports automatically joining RDS, associating SLB/ALB, and scaling configurations and lifecycle adhesive hooks.

O&M and Monitoring of Application Group Dimension Resources

7

Automated O&M supports group-level resource O&M. It can be associated with resource events and alerts. Users can orchestrate O&M tasks at any time.

In terms of instance management, common O&M tasks include sending remote commands, uploading files, cleaning disks, and starting and stopping instances. In terms of image management, users can update, delete, and create images.

In the custom template of Operation Orchestration Service (OOS), automated O&M supports scheduled start and stop, temporary bandwidth upgrade, and scheduled execution of any template. Automated O&M supports over 120 threshold alerts for cloud products and more than 40 system event alerts for cloud products.

8

Next, let's talk about monitoring and events. If users import some resources to an application group, they can view all monitoring data, such as CPU utilization and load balancing metrics in a group. Users can also be equipped with alert-related capabilities, CloudMonitor capabilities, and more.

In addition, event O&M integrates five system events. They include scheduled O&M events, unexpected O&M events, instance fee events, instance security events, and instance migration events due to underlying upgrades.

9

Security risk management mainly contains cloud security scanners and baseline and cloud platform configuration detection. Cloud security scanner regularly scans Linux software vulnerabilities, Windows software vulnerabilities, application vulnerabilities, and emergency vulnerabilities.

10

As shown in the preceding figure, when building code, users need to bind an Apsara DevOps enterprise, create pipelines, authorize the release of ECS, and associate the pipeline to scan, build, deploy, and test the code. Finally, publish it to a Kubernetes cluster, Alibaba Cloud container service, ECS, or hosts.

11

This article helps you understand O&M and control from the resource dimension to the application group perspective.

Application groups can import all resources and manage and maintain these resources. In addition, application groups support auto scaling, automated O&M, monitoring and alerting, and resource control capabilities.

Q&A

Q1: What factors will prompt an organization or enterprise to consider introducing DevOps?

A1: When there is a large number of resource controls with complex business and high O&M costs. Automation tools of DevOps can be used to reduce costs and increase efficiency.

Q2: What security-related issues will be encountered in DevOps?

A2: When it is related to user permissions, users with different permissions can perform automation-related tasks. They can grant different permissions by labels.

Q3: Is the API of the automation function open?

A3: Yes, it is. Resource import, CloudMonitor, and auto scaling are capabilities of the Open API. They can be called through Alibaba Cloud or SDK.

Q4: What difficult problems may be encountered in the process of business growth?

A4: As the business grows, users are decentralized and billed. Different roles can be associated by grouping or different labels. As resources grow, some automated work can be set up in the application group or user orchestration console. Improve resource utilization and save costs through visualization, monitoring and alerting, and auto scaling.

0 1 0
Share on

Alibaba Cloud Community

864 posts | 196 followers

You may also like

Comments

Alibaba Cloud Community

864 posts | 196 followers

Related Products