AWS integration

1 Introduction to Abiquo and AWS
2 Display billing dashboards
3 Public cloud regions
4 AWS credentials for testing Abiquo
5 Managing AWS partner accounts
6 Onboard a standard AWS account
7 Hardware profiles
8 VM template catalogue
9 Virtual datacenters
10 Public IP addresses
11 AWS firewalls
12 Virtual machines
13 Load balancers
14 Volumes
15 VPNs
16 Related links for Abiquo and AWS

Introduction to Abiquo and AWS

Abiquo has an integration with AWS for compute and billing.

Abiquo creates virtual datacenters that correspond to virtual private clouds (VPCs) in AWS. You can also onboard VPCs and their associated resources, to create virtual datacenters in Abiquo.

Abiquo manages VPCs in AWS

For a summary of the AWS compute features supported, please see https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652343129.

Abiquo XaaS also enables you to offer AWS PAAS services as part of your cloud platform, including RDS, and Route 53. For more details, see https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652345841 and https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652345803.

Display billing dashboards

Abiquo displays the billing data from Amazon (AWS) on the billing widgets. The billing widgets are part of the default Hybrid dashboard. See https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652344757, which is for AWS partners and their customers, and https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652344797.

Abiquo displays AWS billing data on the dashboard

Public cloud regions

To use AWS in Abiquo, the first step is to create a public cloud region.

Creating an Abiquo public cloud region for AWS is a similar process to creating a datacenter. But you can create multiple regions at the same time. And you can share the remote services with datacenters and other public cloud regions.

Amazon may require separate credentials for some groups of regions, and the user should select the separate provider for these regions.

For more details, see https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652306748

AWS credentials for testing Abiquo

You can add credentials for each Amazon account to ONE Abiquo enterprise only.

If you would like to try the AWS compute and billing features, you can use a standard account, which is an account that was purchased directly from Amazon, and not from a partner or part of an organization.

See https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652343252.

To try billing features, add the following properties to your Abiquo enterprise, with the appropriate values for your AWS account.

"amazon_discount" : "0"
"amazon_bucket": "my_bucket_name"
"amazon_bucket_region": "my_bucket_region_such_as_us-east-1"
"amazon_report_name": "from amazon_bucket/amazon_bucket_prefix/amazon_report_name/file.csv"
"amazon_bucket_prefix": "from amazon_bucket/amazon_bucket_prefix/amazon_report_name/file.csv"
"amazon_billing_compress_format": "ZIP or GZ"

Some regions, such as those in China, may require separate credentials, and for these regions, the administrator must select a separate provider, for example, AWS (China).

Managing AWS partner accounts

If you have a Partner or Organization account, you can give customers access to compute and/or billing features. To create a tenant hierarchy to manage your customer accounts, see https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652321204/Onboard+an+Azure+CSP+or+AWS+organization+account.

You can also add a customer’s standard or organization account to a key-node for them to use their accounts in tenant enterprises.

Onboard a standard AWS account

If you would like to try the AWS compute and billing features, you can use a standard account, which is an account that was purchased directly from Amazon, and not from a partner or part of an organization.

You can also onboard standard accounts into your reseller hierarchy.

To use a standard account in Abiquo, first https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652343252 for compute and billing, and add the credentials to an Abiquo enterprise.

And for billing features, add the following properties to your Abiquo enterprise, with the appropriate values for your AWS account.

"amazon_discount" : "0"
"amazon_bucket": "my_bucket_name"
"amazon_bucket_region": "my_bucket_region_such_as_us-east-1"
"amazon_report_name": "from amazon_bucket/amazon_bucket_prefix/amazon_report_name/file.csv"
"amazon_bucket_prefix": "from amazon_bucket/amazon_bucket_prefix/amazon_report_name/file.csv"
"amazon_billing_compress_format": "ZIP or GZ"

Hardware profiles

Abiquo will automatically retrieve the hardware profiles for your public cloud region. The platform also registers if a hardware profile is Active and if it belongs to the Current generation.

See https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652306203

VM template catalogue

After you create a public cloud region and add credentials, you can go the Catalogue and onboard a selection of AWS VM templates for your users.

You can find the AMI IDs of some common templates in the Amazon EC2 quick launch wizard
For Marketplace templates, users should accept the EULA in the Amazon console because this cannot be done using the AWS API by Abiquo

For more details, see https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652319068

Abiquo should set the correct Operating System and Username for the template for SSH connections to the VM. For more details, see https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652341878.

Virtual datacenters

In AWS, Abiquo virtual datacenters are Virtual Private Clouds (VPCs). Abiquo always creates an address space and VPC network. Then the user can select an option to create networks or none.

If the user decides to create a virtual datacenter with a Default or Custom private network, then Abiquo creates a VPC with networking Scenario 2 as described in the AWS documentation. See https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html.

If the user selects the option of None, Abiquo will create the VPC and VPC network only. So the user must enter the Address range for the VPC network.

When you create a VDC with a custom private network, you can also specify the address range of the virtual network. And you can create, onboard, and delete address ranges from AWS. See https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652314768.

Public IP addresses

In AWS, you can allocate and assign public IPs as in other public cloud providers. The platform will onboard and synchronize Elastic IPs as public IPs within virtual datacenters. To be able to connect to a VM, add a private IP address in a public subnet, and a public IP address.

The Optimization dashboard in the Home view will display your unused public IPs.

AWS firewalls

Abiquo supports firewall policies, which are AWS Security Groups. In Abiquo, you can apply one firewall to a VM and the firewall will apply to all vNICs. Abiquo will onboard the default firewall policy, which will allow all outbound traffic.

To be able to connect to your VMs, add an inbound firewall rule to the firewall policy to allow the SSH protocol. Allow connections from the desired IP address (in this case we used 0.0.0.0/0 for convenience, but we don’t recommend this for security reasons).

See https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652313737

Virtual machines

To create a VM in AWS, select a template and enter the VM Name.

Then select a Hardware profile as in other public cloud providers.

To be able to connect to your VM, edit your VM and add a private IP and a public IP address in the first vNIC sequence position.

To be able to connect to the VM, also select the firewall to allow connections.

After you deploy your VM, you should be able to connect using the VM template Username and the private key that corresponds to the SSH public key of your Abiquo user.

Do not rename an Amazon instance directly in AWS or you will break the link between Abiquo and the VM. If the link is broken, you will not be able to manage the VM with Abiquo again. Do not delete the tags created by Abiquo.

If you need to manage your Abiquo Elastic IPs in Amazon, synchronize them to update changes in Abiquo or you may see unexpected results.

Load balancers

Abiquo supports Classic load balancers and Application load balancers in AWS.

For more details of the integration, see https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652314183.

And for details of how to use the load balancer features, see https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652313917 and https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652314449.

Volumes

You can create volumes of external storage in AWS at the virtual datacenter or location level. Abiquo volumes are EBS disks in AWS. Abiquo support for EBS storage includes encryption and delete on termination volumes. For more details, see https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652308450

Then when you create or edit a VM, you can go to the Storage tab to drag a volume into the VM configuration.

After you detach a volume from a VM or delete a VM, the synchronization process will make the volume available in the public cloud region.

When you undeploy a VM, the platform will delete the boot volume because it defines the boot volume as a hard disk. But the platform will keep the other disks as volumes in the virtual datacenter. Users can add these volumes to other VMs and move the volumes to other virtual datacenters in the same public cloud region.

When you onboard resources, if a VM has persistent volumes attached, the platform will add them to the VDC and VM. Otherwise, it will add them to the cloud location.

For more details, see https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652315082

VPNs

Abiquo supports AWS VPNs. For more details, see https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652314022.