up icon indicating copy to clipboard operation
up copied to clipboard

Multi-region support with StackSets

Open tj opened this issue 7 years ago • 17 comments

Support for multiple regions with Stack Sets.

tj avatar Jul 25 '17 22:07 tj

Any progress here? Getting this in will be a huge win.

stephenmathieson avatar Oct 11 '17 23:10 stephenmathieson

@stephenmathieson nope not yet

tj avatar Oct 13 '17 20:10 tj

Poking in to ask if anything from re:Invent made this possible?

lukeed avatar Dec 08 '17 05:12 lukeed

yep, still pretty low priority TBH, but at least now with Dynamo's replication there's more db options. In most a lot of cases one region + CDN is enough I think

tj avatar Dec 08 '17 19:12 tj

note to self: list of hosted zone ids are here http://docs.aws.amazon.com/general/latest/gr/rande.html

tj avatar Dec 13 '17 22:12 tj

Notes to @tj

  • API Gateway recently added support for regional endpoints (earlier API-GW endpoints already had an AWS managed CloudFront distribution in front of them).

    • This should allow deploying API-GWs multi region, and then setting them up on Route53 with Latency routing so the users are always sent to the closest region. Or create a CloudFront distro that will internally route to the nearest region.
  • Environment variables need to be region specific - different regions use different DB/DynamoDB

  • Might be nice to have automatic subdomains on all configured domains - like us-east-1.app.domain.com including the main app.domain.com configured using Route53 above.

sudhirj avatar Dec 22 '17 19:12 sudhirj

Also, ACM certs will have to be requested once for each region, might make sense to just do wildcards in every region.

sudhirj avatar Dec 22 '17 20:12 sudhirj

Yeah :( that part will be annoying (#452) they have support for DNS verification as well now at least too

tj avatar Dec 22 '17 20:12 tj

Hello 👋 Is there any progress on this? Thanks!

francocorreasosa avatar Apr 12 '18 00:04 francocorreasosa

For me the ACM verifications are the biggest blocker, it would be awful UX to receive like 150 emails, and dig through which ones are for which region you still need to verify. The DNS alternative isn't much better there either :'(. I'll see if maybe I can grab one from a region and replicate it to the others, that would unblock this I think.

Keep in mind your data has to be replicated too otherwise it's not really going to be much of an improvement over the default CloudFront -> API Gateway setup we have now.

tj avatar Apr 12 '18 00:04 tj

Ohh I misread the docs actually, the DNS verification should work across regions unlike email. That's not too bad. I'll try to get on this soonish!

tj avatar Apr 12 '18 02:04 tj

Awesome! Thanks @tj 🎉

francocorreasosa avatar Apr 13 '18 18:04 francocorreasosa

Hey @tj poking to see if this might be ready sometime soon? :)

sanjaypojo avatar Nov 09 '18 01:11 sanjaypojo

Hard to say, traction hasn't been as good as I was hoping so it might be too large of an addition, especially when lots of services are going this route by default (Lambda@edge, Cloudflare workers, etc)

tj avatar Nov 09 '18 13:11 tj

Is it possible to do a multi-region deployment yet? looking into serverless framework and that can currently do that. But really love up and want to continue with that. Is it possible in some other way, like manually, for now, adding to route53 etc?

pontusab avatar Jan 29 '19 09:01 pontusab

@pontusab not out of the box yet, the easiest manual route would probably be with https://aws.amazon.com/global-accelerator/

tj avatar Jan 29 '19 10:01 tj

@tj Thanks, will look into that 🥇

pontusab avatar Jan 29 '19 10:01 pontusab