A basic PHP Application that display php information using phpversion() method.
The application is based on two docker images(openresty and php-fpm) and have been modified using Dockerfile and docker-compose to be linked each other.
The application is running in a ECS cluster that needs a minimum of two instances at all times (in separate Availability zones for redundancy) and a maximum of 5 scaling up automatically the number of instances in case the cpu usage is higher than 75% for more than 1 minute and scale down if the cpu usage drops below 40% for more than 20 minutes.
The repository consists of a set of nested templates that deploy the following:
- A tiered VPC with two public subnets, spanning an AWS region.
- A highly available ECS cluster deployed across two Availability Zones in an Auto Scaling group and that are AWS SSM enabled.
- Two services in a cluster for HTTP and HTTPS listener respectively.
- An Application Load Balancer (ALB) to the public subnets to handle inbound traffic.
- ALB path-based routes for each ECS service to route the inbound traffic to the correct service(http and https).
- Centralized container logging with Amazon CloudWatch Logs.
- A Lambda Function and Auto Scaling Lifecycle Hook to drain Tasks from your Container Instances when an Instance is selected for Termination in your Auto Scaling Group.
The templates below are included in this repository and reference architecture:
| Template | Description |
|---|---|
| master.yaml | This is the master template - deploy it to CloudFormation and it includes all of the others automatically. |
| infrastructure/vpc.yaml | This template deploys a VPC with a pair of public subnets spread across two Availability Zones. It deploys an Internet gateway, with a default route on the public subnets. |
| infrastructure/security-groups.yaml | This template contains the security groups required by the entire stack. They are created in a separate nested template, so that they can be referenced by all of the other nested templates. |
| infrastructure/load-balancers.yaml | This template deploys an ALB to the public subnets, which exposes the various ECS services. It is created in in a separate nested template, so that it can be referenced by all of the other nested templates and so that the various ECS services can register with it. |
| infrastructure/ecs-cluster.yaml | This template deploys an ECS cluster to the public subnets using an Auto Scaling group using Launch Template for mixed Spot and On-demand instances and also installs the AWS SSM agent with related policy requirements. |
| infrastructure/lifecyclehook.yaml | This template deploys a Lambda Function and Auto Scaling Lifecycle Hook to drain Tasks from your Container Instances when an Instance is selected for Termination in your Auto Scaling Group. |
| services/service.yaml | This is the two ECS services are created used for display the phpinfo via the load-balanced URL. |
After the CloudFormation templates have been deployed, the stack outputs contain a link to the load-balanced URL of the deployed application.
The ECS instances should also appear in the Managed Instances section of the EC2 console.
This set of templates deploys the following network design:
| Item | CIDR | Description |
|---|---|---|
| VPC | 10.0.0.0/16 | The whole range used for the VPC and all subnets |
| Public Subnet 1 | 10.0.0.0/24 | The public subnet in the first Availability Zone |
| Public Subnet 2 | 10.0.1.0/24 | The public subnet in the second Availability Zone |
We need to have aws-cli configured, docker and docker-compose installed.
First step we need to do is create Two repositories and a SSL Certificate that are needed for these project
- Clone this repository
- Go to build/ folder
- Execute
bash prepenv.shto create repo, push docker images and create ssl certificate - Once script have finished, It will show two URL ECR repo that will be needed to continue with the provisioning process. Copy it to any text editor and continue with the other steps.
Now that ECR Repos and SSL Certificate are create you can launch this CloudFormation stack in your account to provision the infrastructure:
- In the parameter section, paste the url from prepenv script and continue.