fxa-auth-server/awsboxen
Ryan Kelly 898bb68df0 Use pre-computed credentials for most loadtest operations.
This means we don't have to do the password-stretching at runtime,
giving much improved throughput on the loadtests.
2013-09-04 17:45:06 -07:00
..
Boxen Split up the loads boxes into their own cloudformation template. 2013-09-04 17:45:06 -07:00
loadsclient Use pre-computed credentials for most loadtest operations. 2013-09-04 17:45:06 -07:00
scripts Avoid race-condition between cloudinit and rc.local 2013-09-04 17:45:06 -07:00
AWSBoxenVersion.yml Refactoring the awsboxen deployment scripts. 2013-09-04 17:45:06 -07:00
Boxen.yml Refactoring the awsboxen deployment scripts. 2013-09-04 17:45:06 -07:00
Mappings.yml Refactoring the awsboxen deployment scripts. 2013-09-04 17:45:06 -07:00
Parameters.yml Refactoring the awsboxen deployment scripts. 2013-09-04 17:45:06 -07:00
README.txt Refactoring the awsboxen deployment scripts. 2013-09-04 17:45:06 -07:00
Resources.yml Use pre-computed credentials for most loadtest operations. 2013-09-04 17:45:06 -07:00

README.txt

AWSBoxen Deployment Config for picl-idp
=======================================

This directory specifies how to deploy picl-idp into AWS.  It's a templated
CloudFormation stack with some extra details about how to build AMIs. You
will need "awsboxen" to interpret and act on these instructions:

  https://github.com/mozilla/awsboxen

Most of the interesting stuff is in the "Resources.yml" file, where we
declare all the various resources needed in the deployment.

At a high level, the deployment consists of the following:

  * An auto-scaled group of *webheads* running the picl-idp nodejs
    application.  These are stateless machines which defer all their
    data-storage needs to...

  * An auto-scaled group of *cassandra* nodes.  These act as a dumb
    data store and have a bit of trickery to auto-configure themselves
    into a cluster.

  * Everyone sends logs to a stand-alone *log aggregator* using heka.
    This runs an elasticsearch+kibana interface for analysing the logs,
    view graphs, etc.


Things to do:

  - webheads:
    - local postfix relaying to SES
  - cassandra:
    - auto-clustering magic
    - add more vnodes, configure auto-bootstrapping, etc
  - VPCs and subnets
  - Use existing bastion hosts, lock down ssh to bastion hosts only