Amazon Web Services (AWS)

<h2 id="geode-on-amazon-web-services-aws" class="position-relative d-flex align-items-center group"> Geode on Amazon Web Services (AWS) <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="geode-on-amazon-web-services-aws" aria-haspopup="dialog" aria-label="Share link: Geode on Amazon Web Services (AWS)"> Share link </button> </h2><div id="headingShareModal" class="heading-share-modal" role="dialog" aria-modal="true" aria-labelledby="headingShareTitle" hidden> <div class="hsm-dialog" role="document"> <div class="hsm-header"> <h2 id="headingShareTitle" class="h6 mb-0 fw-bold">Share this section</h2> <button type="button" class="hsm-close" aria-label="Close"> </button> </div> <div class="hsm-body"> <label for="headingShareInput" class="form-label small text-muted mb-1 text-uppercase fw-bold" style="font-size: 0.7rem; letter-spacing: 0.5px;">Permalink</label> <div class="input-group mb-4 hsm-url-group"> <input id="headingShareInput" type="text" class="form-control font-monospace" readonly aria-readonly="true" style="font-size: 0.85rem;" /> <button class="btn btn-primary hsm-copy" type="button" aria-label="Copy" title="Copy"> </button> </div> <div class="small fw-bold mb-2 text-muted text-uppercase" style="font-size: 0.7rem; letter-spacing: 0.5px;">Share via</div> <div class="hsm-share-grid"> <a id="share-twitter" class="btn btn-outline-secondary w-100" target="_blank" rel="noopener noreferrer"> Twitter </a> <a id="share-linkedin" class="btn btn-outline-secondary w-100" target="_blank" rel="noopener noreferrer"> LinkedIn </a> <a id="share-facebook" class="btn btn-outline-secondary w-100" target="_blank" rel="noopener noreferrer"> Facebook </a> </div> </div> </div> </div> <style> .heading-share-modal { position: fixed; inset: 0; display: flex; justify-content: center; align-items: center; background: rgba(0, 0, 0, 0.6); z-index: 1050; padding: 1rem; backdrop-filter: blur(4px); -webkit-backdrop-filter: blur(4px); } .heading-share-modal[hidden] { display: none !important; } .hsm-dialog { max-width: 420px; width: 100%; background: var(--bs-body-bg, #fff); color: var(--bs-body-color, #212529); border: 1px solid var(--bs-border-color, rgba(0,0,0,0.1)); border-radius: 1rem; box-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.25); overflow: hidden; animation: hsm-fade-in 0.2s ease-out; } @keyframes hsm-fade-in { from { opacity: 0; transform: scale(0.95); } to { opacity: 1; transform: scale(1); } } [data-bs-theme="dark"] .hsm-dialog { background: #1e293b; border-color: rgba(255,255,255,0.1); color: #f8f9fa; } .hsm-header { display: flex; justify-content: space-between; align-items: center; padding: 1rem 1.5rem; border-bottom: 1px solid var(--bs-border-color, rgba(0,0,0,0.1)); background: rgba(0,0,0,0.02); } [data-bs-theme="dark"] .hsm-header { background: rgba(255,255,255,0.02); border-color: rgba(255,255,255,0.1); } .hsm-close { background: transparent; border: none; color: inherit; opacity: 0.5; padding: 0.25rem 0.5rem; border-radius: 0.25rem; font-size: 1.2rem; line-height: 1; transition: opacity 0.2s; } .hsm-close:hover { opacity: 1; } .hsm-body { padding: 1.5rem; } .hsm-url-group { display: flex !important; align-items: stretch; } .hsm-url-group .form-control { flex: 1; min-width: 0; margin: 0; background: var(--bs-secondary-bg, #f8f9fa); border-color: var(--bs-border-color, #dee2e6); border-top-right-radius: 0; border-bottom-right-radius: 0; height: 42px; } .hsm-url-group .btn { flex: 0 0 auto; margin: 0; margin-left: -1px; border-top-left-radius: 0; border-bottom-left-radius: 0; height: 42px; display: flex; align-items: center; justify-content: center; padding: 0 1.25rem; z-index: 2; } [data-bs-theme="dark"] .hsm-url-group .form-control { background: #0f172a; border-color: #334155; color: #e2e8f0; } .hsm-share-grid { display: flex; flex-direction: column; gap: 0.5rem; } .hsm-share-grid .btn { display: flex; align-items: center; justify-content: center; font-size: 0.9rem; padding: 0.6rem; border-color: var(--bs-border-color); width: 100%; } [data-bs-theme="dark"] .hsm-share-grid .btn { color: #e2e8f0; border-color: #475569; } [data-bs-theme="dark"] .hsm-share-grid .btn:hover { background: #334155; border-color: #cbd5e1; } </style> <script> (function(){ const modal = document.getElementById('headingShareModal'); if(!modal) return; const input = modal.querySelector('#headingShareInput'); const copyBtn = modal.querySelector('.hsm-copy'); const twitter = modal.querySelector('#share-twitter'); const linkedin = modal.querySelector('#share-linkedin'); const facebook = modal.querySelector('#share-facebook'); const closeBtn = modal.querySelector('.hsm-close'); let lastFocus=null; let trapBound=false; function buildUrl(id){ return window.location.origin + window.location.pathname + '#' + id; } function isOpen(){ return !modal.hasAttribute('hidden'); } function hydrate(id){ const url=buildUrl(id); input.value=url; const enc=encodeURIComponent(url); const text=encodeURIComponent(document.title); if(twitter) twitter.href=`https://twitter.com/intent/tweet?url=${enc}&text=${text}`; if(linkedin) linkedin.href=`https://www.linkedin.com/sharing/share-offsite/?url=${enc}`; if(facebook) facebook.href=`https://www.facebook.com/sharer/sharer.php?u=${enc}`; } function openModal(id){ lastFocus=document.activeElement; hydrate(id); if(!isOpen()){ modal.removeAttribute('hidden'); } requestAnimationFrame(()=>{ input.focus(); }); trapFocus(); } function closeModal(){ if(!isOpen()) return; modal.setAttribute('hidden',''); if(lastFocus && typeof lastFocus.focus==='function') lastFocus.focus(); } function copyCurrent(){ try{ navigator.clipboard.writeText(input.value).then(()=>feedback(true),()=>fallback()); } catch(e){ fallback(); } } function fallback(){ input.select(); try{ document.execCommand('copy'); feedback(true);}catch(e){ feedback(false);} } function feedback(ok){ if(!copyBtn) return; const icon=copyBtn.querySelector('i'); if(!icon) return; const prev=copyBtn.getAttribute('data-prev')||icon.className; if(!copyBtn.getAttribute('data-prev')) copyBtn.setAttribute('data-prev',prev); icon.className= ok ? 'fa-duotone fa-clipboard-check':'fa-duotone fa-circle-exclamation'; setTimeout(()=>{ icon.className=prev; },1800); } function handleShareClick(e){ e.preventDefault(); const btn=e.currentTarget; const id=btn.getAttribute('data-share-target'); if(id) openModal(id); } function bindShareButtons(){ document.querySelectorAll('.h-share').forEach(btn=>{ if(!btn.dataset.hShareBound){ btn.addEventListener('click', handleShareClick); btn.dataset.hShareBound='1'; } }); } bindShareButtons(); if(document.readyState==='loading'){ document.addEventListener('DOMContentLoaded', bindShareButtons); } else { requestAnimationFrame(bindShareButtons); } document.addEventListener('click', function(e){ const shareBtn=e.target.closest && e.target.closest('.h-share'); if(shareBtn && !shareBtn.dataset.hShareBound){ handleShareClick.call(shareBtn, e); } }, true); document.addEventListener('click', e=>{ if(e.target===modal) closeModal(); if(e.target.closest && e.target.closest('.hsm-close')){ e.preventDefault(); closeModal(); } if(copyBtn && (e.target===copyBtn || (e.target.closest && e.target.closest('.hsm-copy')))) { e.preventDefault(); copyCurrent(); } }); document.addEventListener('keydown', e=>{ if(e.key==='Escape' && isOpen()) closeModal(); }); function trapFocus(){ if(trapBound) return; trapBound=true; modal.addEventListener('keydown', f=>{ if(f.key==='Tab' && isOpen()){ const focusable=[...modal.querySelectorAll('a[href],button,input,textarea,select,[tabindex]:not([tabindex="-1"])')].filter(el=>!el.hasAttribute('disabled')); if(!focusable.length) return; const first=focusable[0]; const last=focusable[focusable.length-1]; if(f.shiftKey && document.activeElement===first){ f.preventDefault(); last.focus(); } else if(!f.shiftKey && document.activeElement===last){ f.preventDefault(); first.focus(); } } }); } if(closeBtn) closeBtn.addEventListener('click', e=>{ e.preventDefault(); closeModal(); }); })(); </script>Amazon Web Services provides a comprehensive cloud platform for deploying Geode graph database. This guide covers AWS-specific deployment patterns, service integrations, and optimization strategies for running production Geode workloads on AWS infrastructure. <h3 id="aws-deployment-options" class="position-relative d-flex align-items-center group"> AWS Deployment Options <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="aws-deployment-options" aria-haspopup="dialog" aria-label="Share link: AWS Deployment Options"> Share link </button> </h3> <h4 id="1-ec2-elastic-compute-cloud" class="position-relative d-flex align-items-center group"> 1. EC2 (Elastic Compute Cloud) <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="1-ec2-elastic-compute-cloud" aria-haspopup="dialog" aria-label="Share link: 1. EC2 (Elastic Compute Cloud)"> Share link </button> </h4>Direct deployment on EC2 instances provides maximum control and performance: Instance Type Selection: For Geode, memory-optimized instances provide the best price/performance: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># R6g instances (ARM-based Graviton2, best price/performance) r6g.large # 2 vCPU, 16 GiB RAM - Dev/test r6g.xlarge # 4 vCPU, 32 GiB RAM - Small production r6g.2xlarge # 8 vCPU, 64 GiB RAM - Medium production r6g.4xlarge # 16 vCPU, 128 GiB RAM - Large production r6g.8xlarge # 32 vCPU, 256 GiB RAM - Enterprise # R6i instances (Intel-based, for x86-64 compatibility) r6i.2xlarge # 8 vCPU, 64 GiB RAM r6i.4xlarge # 16 vCPU, 128 GiB RAM r6i.8xlarge # 32 vCPU, 256 GiB RAM </code></pre></div>Launch EC2 Instance with AWS CLI: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Create key pair aws ec2 create-key-pair \ --key-name geode-key \ --query 'KeyMaterial' \ --output text > geode-key.pem chmod 400 geode-key.pem # Create security group aws ec2 create-security-group \ --group-name geode-sg \ --description "Security group for Geode database" \ --vpc-id vpc-0123456789abcdef0 # Allow Geode client port (3141) aws ec2 authorize-security-group-ingress \ --group-id sg-0123456789abcdef0 \ --protocol tcp \ --port 3141 \ --cidr 10.0.0.0/8 # Allow Prometheus metrics (9090) - internal only aws ec2 authorize-security-group-ingress \ --group-id sg-0123456789abcdef0 \ --protocol tcp \ --port 9090 \ --source-group sg-0123456789abcdef0 # Launch instance aws ec2 run-instances \ --image-id ami-0c55b159cbfafe1f0 \ --count 1 \ --instance-type r6g.2xlarge \ --key-name geode-key \ --security-group-ids sg-0123456789abcdef0 \ --subnet-id subnet-0bb1c79de3EXAMPLE \ --block-device-mappings '[ { "DeviceName": "/dev/sda1", "Ebs": { "VolumeSize": 100, "VolumeType": "gp3", "Iops": 3000, "Throughput": 125, "DeleteOnTermination": false, "Encrypted": true } } ]' \ --tag-specifications 'ResourceType=instance,Tags=[ {Key=Name,Value=geode-production}, {Key=Environment,Value=production}, {Key=Application,Value=geode} ]' \ --user-data file://install-geode.sh </code></pre></div>User Data Script (<code>install-geode.sh</code>): <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">#!/bin/bash set -e # Update system apt-get update apt-get upgrade -y # Install dependencies (assumes Zig 0.1.0+ available) apt-get install -y git make jq # Build Geode from source 0.2.18="v0.2.18" git clone https://github.com/codeprosorg/geode cd geode git checkout ${0.2.18} make build cp ./zig-out/bin/geode /usr/local/bin/geode chmod +x /usr/local/bin/geode # Create geode user useradd -r -s /bin/false geode # Create data directory mkdir -p /var/lib/geode chown geode:geode /var/lib/geode # Create systemd service cat > /etc/systemd/system/geode.service <<'EOF' [Unit] Description=Geode Graph Database After=network.target [Service] Type=simple User=geode Group=geode ExecStart=/usr/local/bin/geode serve --listen 0.0.0.0:3141 --data /var/lib/geode Restart=on-failure RestartSec=10s LimitNOFILE=65536 [Install] WantedBy=multi-user.target EOF # Start Geode systemctl daemon-reload systemctl enable geode systemctl start geode echo "Geode installation complete" </code></pre></div> <h4 id="2-ebs-elastic-block-store-configuration" class="position-relative d-flex align-items-center group"> 2. EBS (Elastic Block Store) Configuration <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="2-ebs-elastic-block-store-configuration" aria-haspopup="dialog" aria-label="Share link: 2. EBS (Elastic Block Store) Configuration"> Share link </button> </h4>Geode requires fast, persistent storage. EBS provides several volume types: Volume Type Comparison: <table> <thead> <tr> <th>Type</th> <th>Use Case</th> <th>IOPS</th> <th>Throughput</th> <th>Price</th> </tr> </thead> <tbody> <tr> <td>gp3</td> <td>General</td> <td>16,000</td> <td>1,000 MB/s</td> <td>$</td> </tr> <tr> <td>io2</td> <td>High perf</td> <td>64,000</td> <td>1,000 MB/s</td> <td>$$$</td> </tr> <tr> <td>io2 Block Express</td> <td>Enterprise</td> <td>256,000</td> <td>4,000 MB/s</td> <td>$$$$</td> </tr> </tbody> </table> Recommended Configuration: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Create gp3 volume for production aws ec2 create-volume \ --availability-zone us-east-1a \ --size 1000 \ --volume-type gp3 \ --iops 16000 \ --throughput 1000 \ --encrypted \ --kms-key-id arn:aws:kms:us-east-1:123456789012:key/... \ --tag-specifications 'ResourceType=volume,Tags=[ {Key=Name,Value=geode-data}, {Key=Application,Value=geode} ]' # Attach to instance aws ec2 attach-volume \ --volume-id vol-0123456789abcdef0 \ --instance-id i-0123456789abcdef0 \ --device /dev/sdf # Format and mount (SSH into instance) mkfs.ext4 /dev/nvme1n1 mkdir -p /var/lib/geode mount /dev/nvme1n1 /var/lib/geode echo '/dev/nvme1n1 /var/lib/geode ext4 defaults,nofail 0 2' >> /etc/fstab </code></pre></div>EBS Optimization: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Enable EBS optimization on instance aws ec2 modify-instance-attribute \ --instance-id i-0123456789abcdef0 \ --ebs-optimized # Create snapshot for backup aws ec2 create-snapshot \ --volume-id vol-0123456789abcdef0 \ --description "Geode data backup $(date +%Y-%m-%d)" \ --tag-specifications 'ResourceType=snapshot,Tags=[ {Key=Name,Value=geode-backup}, {Key=Date,Value='$(date +%Y-%m-%d)'} ]' </code></pre></div> <h4 id="3-elastic-load-balancer-elb" class="position-relative d-flex align-items-center group"> 3. Elastic Load Balancer (ELB) <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="3-elastic-load-balancer-elb" aria-haspopup="dialog" aria-label="Share link: 3. Elastic Load Balancer (ELB)"> Share link </button> </h4>Distribute traffic across multiple Geode instances: Network Load Balancer (recommended for Geode): <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Create NLB aws elbv2 create-load-balancer \ --name geode-nlb \ --type network \ --scheme internal \ --subnets subnet-0bb1c79de3EXAMPLE subnet-0bb1c79de3EXAMPLE2 \ --tags Key=Name,Value=geode-nlb # Create target group aws elbv2 create-target-group \ --name geode-targets \ --protocol TCP \ --port 3141 \ --vpc-id vpc-0123456789abcdef0 \ --health-check-protocol TCP \ --health-check-port 3141 \ --health-check-interval-seconds 10 \ --healthy-threshold-count 2 \ --unhealthy-threshold-count 2 \ --tags Key=Name,Value=geode-targets # Create listener aws elbv2 create-listener \ --load-balancer-arn arn:aws:elasticloadbalancing:us-east-1:... \ --protocol TCP \ --port 3141 \ --default-actions Type=forward,TargetGroupArn=arn:aws:elasticloadbalancing:... # Register instances aws elbv2 register-targets \ --target-group-arn arn:aws:elasticloadbalancing:... \ --targets Id=i-0123456789abcdef0 Id=i-0123456789abcdef1 Id=i-0123456789abcdef2 </code></pre></div> <h4 id="4-eks-elastic-kubernetes-service" class="position-relative d-flex align-items-center group"> 4. EKS (Elastic Kubernetes Service) <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="4-eks-elastic-kubernetes-service" aria-haspopup="dialog" aria-label="Share link: 4. EKS (Elastic Kubernetes Service)"> Share link </button> </h4>Deploy Geode on managed Kubernetes: Create EKS Cluster with eksctl: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml"># cluster-config.yaml apiVersion: eksctl.io/v1alpha5 kind: ClusterConfig metadata: name: geode-cluster region: us-east-1 version: "1.28" iam: withOIDC: true managedNodeGroups: - name: geode-nodes instanceType: r6g.2xlarge desiredCapacity: 3 minSize: 3 maxSize: 10 volumeSize: 100 volumeType: gp3 volumeIOPS: 3000 volumeThroughput: 125 privateNetworking: true labels: role: geode workload: database tags: Name: geode-node Environment: production iam: attachPolicyARNs: - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly withAddonPolicies: ebs: true cloudWatch: true addons: - name: vpc-cni - name: coredns - name: kube-proxy - name: aws-ebs-csi-driver </code></pre></div>Create cluster: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">eksctl create cluster -f cluster-config.yaml # Install EBS CSI driver kubectl apply -k "github.com/kubernetes-sigs/aws-ebs-csi-driver/deploy/kubernetes/overlays/stable/?ref=release-1.25" # Create storage class kubectl apply -f - <<EOF apiVersion: storage.k8s.io/v1 kind: StorageClass metadata: name: geode-ebs-gp3 provisioner: ebs.csi.aws.com parameters: type: gp3 iops: "16000" throughput: "1000" encrypted: "true" kmsKeyId: arn:aws:kms:us-east-1:123456789012:key/... allowVolumeExpansion: true volumeBindingMode: WaitForFirstConsumer EOF </code></pre></div>Deploy Geode StatefulSet: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">apiVersion: apps/v1 kind: StatefulSet metadata: name: geode namespace: geode spec: serviceName: geode replicas: 3 selector: matchLabels: app: geode template: metadata: labels: app: geode spec: nodeSelector: role: geode containers: - name: geode image: public.ecr.aws/geodedb/geode:0.2.18 ports: - containerPort: 3141 name: client - containerPort: 9090 name: metrics volumeMounts: - name: data mountPath: /var/lib/geode resources: requests: memory: "48Gi" cpu: "6" limits: memory: "56Gi" cpu: "8" env: - name: GEODE_LOG_LEVEL value: "info" - name: AWS_REGION value: "us-east-1" volumeClaimTemplates: - metadata: name: data spec: accessModes: ["ReadWriteOnce"] storageClassName: geode-ebs-gp3 resources: requests: storage: 1Ti </code></pre></div> <h4 id="5-ecs-elastic-container-service" class="position-relative d-flex align-items-center group"> 5. ECS (Elastic Container Service) <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="5-ecs-elastic-container-service" aria-haspopup="dialog" aria-label="Share link: 5. ECS (Elastic Container Service)"> Share link </button> </h4>Run Geode on AWS Fargate or EC2-backed ECS: ECS Task Definition: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-json" data-lang="json">{ "family": "geode", "networkMode": "awsvpc", "requiresCompatibilities": ["FARGATE"], "cpu": "8192", "memory": "61440", "containerDefinitions": [ { "name": "geode", "image": "public.ecr.aws/geodedb/geode:0.2.18", "portMappings": [ { "containerPort": 3141, "protocol": "tcp" }, { "containerPort": 9090, "protocol": "tcp" } ], "mountPoints": [ { "sourceVolume": "geode-data", "containerPath": "/var/lib/geode" } ], "logConfiguration": { "logDriver": "awslogs", "options": { "awslogs-group": "/ecs/geode", "awslogs-region": "us-east-1", "awslogs-stream-prefix": "geode" } } } ], "volumes": [ { "name": "geode-data", "efsVolumeConfiguration": { "fileSystemId": "fs-0123456789abcdef0", "transitEncryption": "ENABLED" } } ] } </code></pre></div>Create ECS Service: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">aws ecs create-service \ --cluster geode-cluster \ --service-name geode-service \ --task-definition geode:1 \ --desired-count 3 \ --launch-type FARGATE \ --network-configuration "awsvpcConfiguration={ subnets=[subnet-0bb1c79de3EXAMPLE,subnet-0bb1c79de3EXAMPLE2], securityGroups=[sg-0123456789abcdef0], assignPublicIp=DISABLED }" \ --load-balancers "targetGroupArn=arn:aws:elasticloadbalancing:...,containerName=geode,containerPort=3141" </code></pre></div> <h3 id="aws-service-integration" class="position-relative d-flex align-items-center group"> AWS Service Integration <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="aws-service-integration" aria-haspopup="dialog" aria-label="Share link: AWS Service Integration"> Share link </button> </h3> <h4 id="s3-for-backups" class="position-relative d-flex align-items-center group"> S3 for Backups <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="s3-for-backups" aria-haspopup="dialog" aria-label="Share link: S3 for Backups"> Share link </button> </h4>Automated backups to S3: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">#!/bin/bash # backup-to-s3.sh TIMESTAMP=$(date +%Y%m%d-%H%M%S) BACKUP_FILE="/tmp/geode-backup-${TIMESTAMP}.tar.gz" S3_BUCKET="s3://geode-backups" # Create backup /usr/local/bin/geode backup --output "$BACKUP_FILE" # Upload to S3 aws s3 cp "$BACKUP_FILE" "${S3_BUCKET}/$(date +%Y/%m/%d)/" # Clean up local backup rm "$BACKUP_FILE" # Lifecycle policy will archive old backups to Glacier </code></pre></div>S3 Lifecycle Policy: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-json" data-lang="json">{ "Rules": [ { "Id": "Archive old Geode backups", "Status": "Enabled", "Prefix": "", "Transitions": [ { "Days": 30, "StorageClass": "STANDARD_IA" }, { "Days": 90, "StorageClass": "GLACIER" }, { "Days": 365, "StorageClass": "DEEP_ARCHIVE" } ], "Expiration": { "Days": 2555 } } ] } </code></pre></div> <h4 id="cloudwatch-monitoring" class="position-relative d-flex align-items-center group"> CloudWatch Monitoring <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="cloudwatch-monitoring" aria-haspopup="dialog" aria-label="Share link: CloudWatch Monitoring"> Share link </button> </h4>CloudWatch Metrics from Geode: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-python" data-lang="python">import boto3 from geode_client import Client cloudwatch = boto3.client('cloudwatch', region_name='us-east-1') async def publish_metrics(): client = Client(host="geode.internal", port=3141) async with client.connection() as conn: # Query Geode metrics result, _ = await conn.query(""" MATCH (n) RETURN count(n) AS total_nodes """) node_count = result.bindings[0]['total_nodes'] # Publish to CloudWatch cloudwatch.put_metric_data( Namespace='Geode/Production', MetricData=[ { 'MetricName': 'TotalNodes', 'Value': node_count, 'Unit': 'Count', 'Timestamp': datetime.utcnow(), 'Dimensions': [ {'Name': 'Environment', 'Value': 'production'}, {'Name': 'Cluster', 'Value': 'main'} ] }, { 'MetricName': 'QueryLatency', 'Value': result.execution_time_ms, 'Unit': 'Milliseconds', 'Timestamp': datetime.utcnow(), 'Dimensions': [ {'Name': 'QueryType', 'Value': 'COUNT'} ] } ] ) </code></pre></div>CloudWatch Alarms: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># High error rate alarm aws cloudwatch put-metric-alarm \ --alarm-name geode-high-error-rate \ --alarm-description "Geode error rate > 1%" \ --metric-name ErrorRate \ --namespace Geode/Production \ --statistic Average \ --period 300 \ --evaluation-periods 2 \ --threshold 0.01 \ --comparison-operator GreaterThanThreshold \ --alarm-actions arn:aws:sns:us-east-1:123456789012:geode-alerts # High latency alarm aws cloudwatch put-metric-alarm \ --alarm-name geode-high-latency \ --alarm-description "Geode P99 latency > 500ms" \ --metric-name QueryLatencyP99 \ --namespace Geode/Production \ --statistic Average \ --period 300 \ --evaluation-periods 2 \ --threshold 500 \ --comparison-operator GreaterThanThreshold \ --alarm-actions arn:aws:sns:us-east-1:123456789012:geode-alerts </code></pre></div> <h4 id="aws-secrets-manager" class="position-relative d-flex align-items-center group"> AWS Secrets Manager <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="aws-secrets-manager" aria-haspopup="dialog" aria-label="Share link: AWS Secrets Manager"> Share link </button> </h4>Store Geode credentials securely: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Create secret aws secretsmanager create-secret \ --name geode/production/credentials \ --description "Geode production credentials" \ --secret-string '{ "username":"admin", "password":"secure-password-here", "tls_cert":"<paste-pem-certificate-here>", "tls_key":"<paste-pem-private-key-here>" }' # Retrieve in application aws secretsmanager get-secret-value \ --secret-id geode/production/credentials \ --query SecretString \ --output text | jq -r .password </code></pre></div>Use in Python: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-python" data-lang="python">import boto3 import json from geode_client import AuthClient, Client def get_geode_credentials(): client = boto3.client('secretsmanager', region_name='us-east-1') response = client.get_secret_value(SecretId='geode/production/credentials') return json.loads(response['SecretString']) async def connect_to_geode(): creds = get_geode_credentials() client = Client(host="geode.internal", port=3141) async with client.connection() as conn: auth = AuthClient(conn) await auth.login(creds['username'], creds['password']) result, _ = await conn.query("MATCH (n) RETURN count(n) AS total") return result.rows[0]["total"] if result.rows else 0 </code></pre></div> <h4 id="route-53-dns" class="position-relative d-flex align-items-center group"> Route 53 DNS <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="route-53-dns" aria-haspopup="dialog" aria-label="Share link: Route 53 DNS"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Create hosted zone aws route53 create-hosted-zone \ --name geodedb.internal \ --vpc VPCRegion=us-east-1,VPCId=vpc-0123456789abcdef0 \ --caller-reference $(date +%s) # Create A record for NLB aws route53 change-resource-record-sets \ --hosted-zone-id Z1234567890ABC \ --change-batch '{ "Changes": [{ "Action": "CREATE", "ResourceRecordSet": { "Name": "geode.geodedb.internal", "Type": "A", "AliasTarget": { "HostedZoneId": "Z215JYRZR1TBD5", "DNSName": "geode-nlb-1234567890.elb.us-east-1.amazonaws.com", "EvaluateTargetHealth": true } } }] }' </code></pre></div> <h3 id="cost-optimization" class="position-relative d-flex align-items-center group"> Cost Optimization <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="cost-optimization" aria-haspopup="dialog" aria-label="Share link: Cost Optimization"> Share link </button> </h3> <h4 id="reserved-instances" class="position-relative d-flex align-items-center group"> Reserved Instances <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="reserved-instances" aria-haspopup="dialog" aria-label="Share link: Reserved Instances"> Share link </button> </h4>Save up to 72% with 3-year reservations: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># View available offerings aws ec2 describe-reserved-instances-offerings \ --instance-type r6g.2xlarge \ --offering-class standard \ --product-description Linux/UNIX # Purchase 1-year RI aws ec2 purchase-reserved-instances-offering \ --reserved-instances-offering-id <offering-id> \ --instance-count 3 </code></pre></div> <h4 id="savings-plans" class="position-relative d-flex align-items-center group"> Savings Plans <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="savings-plans" aria-haspopup="dialog" aria-label="Share link: Savings Plans"> Share link </button> </h4>More flexible than RIs: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Commit to $100/hour compute usage aws savingsplans create-savings-plan \ --savings-plan-offering-id <offering-id> \ --commitment 100 \ --upfront-payment-amount 0 </code></pre></div> <h4 id="spot-instances" class="position-relative d-flex align-items-center group"> Spot Instances <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="spot-instances" aria-haspopup="dialog" aria-label="Share link: Spot Instances"> Share link </button> </h4>Use for non-critical workloads (up to 90% discount): <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Launch spot instance aws ec2 run-instances \ --instance-type r6g.2xlarge \ --instance-market-options '{"MarketType":"spot","SpotOptions":{"MaxPrice":"0.10"}}' \ --image-id ami-0c55b159cbfafe1f0 </code></pre></div> <h3 id="related-topics" class="position-relative d-flex align-items-center group"> Related Topics <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="related-topics" aria-haspopup="dialog" aria-label="Share link: Related Topics"> Share link </button> </h3><ul> <li><a href="/tags/cloud/" >Cloud</a> : General cloud deployment</li> <li><a href="/tags/gcp/" >GCP</a> : Google Cloud Platform</li> <li><a href="/tags/azure/" >Azure</a> : Microsoft Azure</li> <li><a href="/tags/containers/" >Containers</a> : Container technologies</li> <li><a href="/tags/orchestration/" >Orchestration</a> : Kubernetes orchestration</li> <li><a href="/tags/deployment/" >Deployment</a> : Deployment strategies</li> </ul> <h3 id="further-reading" class="position-relative d-flex align-items-center group"> Further Reading <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="further-reading" aria-haspopup="dialog" aria-label="Share link: Further Reading"> Share link </button> </h3><ul> <li>AWS Deployment Guide: <code>/docs/deployment/aws/</code></li> <li>EKS Best Practices: <code>/docs/deployment/eks-best-practices/</code></li> <li>AWS Cost Optimization: <code>/docs/operations/aws-cost-optimization/</code></li> <li>CloudWatch Integration: <code>/docs/monitoring/cloudwatch/</code></li> <li>AWS Security: <code>/docs/security/aws-security/</code></li> </ul>

Popular

Related Articles