Google Anthos - Azure Stack - AWS Outposts :Comparison
1. ...Comparison of
→ Google Anthos
→ Azure Stack
→ AWS Outposts
By Krishna Kumar, CNCF Ambassador ,
A CCICI Presentation
Feb 2020
2. # Overview Google Anthos Azure Stack AWS Outposts
Product
Announced
●
April 2018 at Google Cloud NEXT ●
Azure Stack from Jan 2016 onward
●
Arc in Nov 2019 at Microsoft Ignite
●
Nov 2018 at AWS re:invent
Cloud Support ●
Hybrid & Multi Cloud
●
Anthos can run VMs and containers side-
by-side. GKE on-prem environment must
be able to reach Google's API endpoints.
●
Hybrid & Multi Cloud
●
Deploy Azure Stack Hub either connected
to the internet (and to Azure) or
disconnected mode.
●
Hybrid Cloud only
●
Outpost relies on connectivity to the parent
AWS Region. Outposts are not designed for
disconnected operations.
Software /
Services
●
GKE, CloudRun
●
Any standard container apps
●
Virtual machines, storage, networking,
Key Vault and Windows & Linux VM.
●
Azure Functions, App Service, Azure SQL
& PostgreSQL Hyperscale.
●
EC2, EBS, ECS, EKS
●
EMR, RDS, SageMaker, MSK
Hardware ●
No proprietary hardware needed. Can run
on VMware, Dell EMC, HPE, Intel, and
Lenovo racks.
●
Run on variety of partner vendors, such
as HPE, Dell EMC, Cisco, Huawei and
Lenovo.
●
Racks of 4-16 servers (scale unit) built by
trusted hardware partners and delivered
straight to your data center.
●
Based on AWS Nitro System - delivers pre-
configured stack to the customer's on-
premise.
●
Amazon customers subscribe to Outposts
service just like they consume EC2.
instances. They don’t own the infrastructure.
Management ●
Anthos Config Management console –
also manage 3rd party Kubernetes
clusters.
●
Arc – A multi cloud management layer
including AWS and GCP management.
●
Integrated with AWS management Console.
Outposts is a fully managed service by AWS.
Deployment ●
Google's Kubernetes Engine (GKE), GKE
On-Prem, Anthos Config management,
Istio integrated & topology Service graph.
●
100% Software based solutions
●
Azure Management Control Plane, Azure
Resource Manager and Arc.
●
Also includes Azure Stack Hub, Azure
Stack HCI, and Azure Stack Edge.
●
First Model - VMware(vSphere, vSAN, and
NSX ) Cloud on AWS.
●
Second Model - Run compute and storage
on-premises using the same native AWS
racks, APIs in the AWS cloud.
3. # Features Google Anthos Azure Stack AWS Outposts
Compute ●
GKE on-prem, all components are hosted
in the customer's on-prem virtualization
environment.
●
In Cloud, k8s node components in the
customer's project using instances in
Compute Engine.
●
Wide variety of VM templates supported from
A series to N series - VM up to 416 vCPUs
and 12 TB of memory.
●
Get up to 3.7 million local storage IOPS / VM.
●
Up to 30 Gbps Ethernet & Cloud’s first of 200
Gbps Infini Band.
●
Various templates supported as below:
●
General purpose (M5/M5d)
●
Compute optimized (C5/C5d)
●
Memory optimized (R5/R5d)
●
Graphics optimized (G4dn)
●
I/O optimized (I3en)
Storage ●
Market place supports various solutions
like etcd, Consul, JFrog, etc.
●
Blob storage & Queue storage
●
Managed Disks & Table Storage
●
Support local storage & EBS
●
S3 coming in 2020
Network ●
GKE and GKE on-prem clusters need IP
connectivity.
●
VPN or Dedicated/partner cloud
interconnect.
●
GKE on-prem uses an on-prem load
balancing appliance.
●
Connect two stack hubs through VNET
peering.
●
Azure ExpressRoute at bandwidths up to 100
Gbps.
●
Gateway Type stack hub only supports VPN
and Route based.
●
VPC extend through subnet and private IP to
zones/regions.
●
Local Gateway(LGW) connects outpost to
OnPrem network.
●
Extension of the AWS Region and so all
services can access through endpoints.
Containers ●
K8s clusters - The GKE Dashboard to
view the state of your k8s clusters.
●
GKE Connect - register your GKE on-
prem clusters with Google Cloud.
●
AKS (including .NET applications to Windows
Server containers).
●
Service Fabric (supports variety of
programming models).
●
ECS – Container Services
●
EKS – Managed k8s
Data ●
Market place supports various solutions
like Cassandra, InfluxDB, Flink, etc.
●
MySQL and Azure SQL DB
●
IoT Hub & Event Hub
●
RDS (MySQL, PostgreSQL) with disaster
recovery back to the AWS Region, read replica
bursting to Amazon RDS in the cloud.
●
EMR Service will be support as in the region.
4. # Features Google Anthos Azure Stack AWS Outposts
Developer Tools ●
Google deveolper tools for Kubernetes
is applicable like Gitlab, Grafana. Jenkin,
Jaeger, k8s java operator, etc.
●
Look for marketplace with Anthos logo
for more tools details.
●
Azure Stack Development Kit (ASDK) for
Single node.
●
Support Azure Dev Spaces, Azure Resource
Manager templates & Azure Stack Hub policy
module.
●
Dapr – an Event driven runtime & Rudr, an
implementation of OAM (Open Application
Model) to target k8s infrastructure.
●
As in AWS, use Cloud9 - cloud-based
integrated development environment (IDE)
that lets you write, run, and debug your code
with just a browser.
●
AWS CloudFormation, Amazon CloudWatch,
AWS CloudTrail and others to run and
manage applications.
Migration ●
Migrate for Anthos (Formerly called
Velostrata) – Convert Physical server or
VM to GKE containers.
●
It can also convert workloads from
VMware vSphere, Amazon EC2 and
Microsoft Azure Vms.
●
Azure Migration Service – VMs, SQL Server.
●
Storage Migration Service.
●
Partner Solutions – Carbonate, Cloudbase,
CommVault, Corent & ZeroDown.
●
Cloud Endure for migration - Continuous Data
Replication technology, resulting in minimal
cutover windows.
●
Support for physical, virtual, and cloud-based
source infrastructure.
Monitoring ●
On GKE, use Stackdriver Kubernetes
Engine Monitoring but is not yet
available for GKE on-prem.
●
On GKE, Cloud Audit Logs allows you to
capture and analyze but is not yet
available for GKE on-prem.
●
OMS Cloud Monitoring - System Center
Management Pack for Azure Stack Hub
enables you to monitor multiple Stack Hub
deployments with a single Operations Manager
instance. Can use plugins Nagios, etc. in
addition to it.
●
CloudWatch - Observability of your AWS
resources and applications on AWS and on-
premises.
Security ●
Configuration management workflow
using a configuration-as-code.
●
Securing of microservices using Anthos
Service Mesh and Mesh CA, providing
in-cluster mTLS and certificate
management.
●
Azure AD or ADFS (disconnected)
●
Extension Host to enhance security
OAM design and deploy applications based on
Rudr and Dapr.
●
Azure Key Vault to encrypt keys and small
secrets.
AWS Nitro system technologies that enables
the enhanced security that continuously
monitors, protects, and verifies your Outpost’s
instance hardware and firmware.
●
Data encrypted both at rest and motion. All
EBS volumes and snapshots are fully
encrypted by default.
5. # Features Google Anthos Azure Stack AWS Outposts
Components ●
GKE & GKE Onprem
●
Migrate for Anthos, Anthos Config, Multi
cluster Management & Market Place.
●
Traffic Director, Service Mesh & CloudRun.
●
Global Azure, Azure Stack Hub(On
Premises), and Azure Stack HCI.
●
Manage Azure Stack Hub (operator) with the
administrator portal, user portal, or
PowerShell.
●
Customers will order racks with the same
hardware AWS uses in all of regions, with
software with AWS services on it.
Configurations /
Get Start
●
Setup GKE Cluster in GCP & then GKE
On-Prem cluster.
●
Migrating over an existing OnPrem
application.
●
Install the Istio to achieve workload visibility,
enable Anthos Config Management across.
●
Install Azure Stack Hub Powershell, Azure
Stack Hub Tools, ASDK, Azure CLI and
Azure Storage Explorer.
●
Azure Arc customers can use Azure Portal,
Azure CLI, SDK, and 3rd party tools like
Terraform to automate resource
management.
●
Select your Outposts configuration and
place order with Enterprise support plan.
AWS personnel will install the Outpost at
the desired location and configure.
●
You can then launch Amazon EC2
instances and EBS volumes and deploy
applications to your Outpost.
Multi Region
Support
●
Traffic Director adds multi region load
balancing and health Checks.
●
Each Anthos installations are associated
with zones/Region of the GKE.
●
Each Azure Stack Development Kit (ASDK)
has one region, named local.
●
A Azure stack hub makes up a single
regions. Deploy a second Azure Stack Hub
integrated system, or you set up another
instance of the ASDK on separate hardware,
this Stack Hub cloud is a different region.
●
Outposts is part of the parent AWS Region
with continues connectivity but in case of
network failure it can operate local.
HA / DR ●
GKE On Prem HA is in Pre-release beta.
This has 3 user control plane.
●
HA for Admin control plane is not supported
but you can enable vSphere High
Availability for your vSphere cluster.
●
Offers Azure Site Recovery (ASR) & also
multi node Azure Stack Hub.
●
Hardware vendors provide their own HA/DR.
●
Azure Stack cloud physical boundary, one
region/one scale unit, can choose to deploy
multiple Azure Stack cloud.
●
Redundant top of rack networking switches,
power elements, and built-in hot spare
capacity.
●
Auto recovery workflows for easy fail over
and also deploy multiple Outposts at a site,
each tied to a different Availability Zone for
even higher availability.
7. Google Anthos Azure Stack AWS Outposts
Partner Integration (Some references...)
Partner Services Architecture: Partner integration
Acqua as workload deployment in Anthos Cisco integrated system with Commvault for Stack
Syslog Monitoring integration in Stack
Juniper QFX based Data Center in Outposts
Cohesity Data Management in Outposts