Google Cloud FinOps

Skills Training

Google offers a 30 day trial training at https://inthecloud.withgoogle.com/cloud-learning-paths-22/register.html

The subscription which is usually $29/month - allows for as may credits as you can do in 30 days where 1 credit is $1.

Example course - https://www.cloudskillsboost.google/focuses/18940?catalog_rank=%7B%22rank%22%3A1%2C%22num_filters%22%3A0%2C%22has_search%22%3Atrue%7D&parent=catalog&search_id=15447242

Quickstart

https://obrienlabs.medium.com/cloud-finops-18a5e9942d84?sk=88b1852b11d4dfd6e8c84cca9fd83350

We watch the AWS Cost Explorer https://console.aws.amazon.com/cost-management/home?#/dashboard to manage our on-demand, reserved and spot costs.

Cloud Financing

Cloud Free Tier

Google Cloud Free Tier

Zero Cost Cloud#GoogleCloudFreeTier

Shift Left

https://cloud.google.com/architecture/estimate-gke-costs-early-using-github

Cloud Startup Programs

AWS Activate Founders

https://aws.amazon.com/activate/founders/

AWS Activate will require a project that is running 100% on amazon - you will receive the default $1000US one time funds - if you meet the criteria you can move up to 100K

Cloud Training

AWS Partner status

https://partnercentral.awspartner.com/APNLogin

https://www.exitcertified.com/it-training/aws/security/security-engineering-44510-detail.html?studenttype=ptnr

https://www.exitcertified.com/it-training/aws/architect/architecting-4-0-34767-detail.html

AWS Partner status has additional partner courses and 75% off select courses above at Exit Certified - even while you are in the "registered" status  - before you meet all criteria

AWS Customer Counsel

Assist in customer insight

$50 for surveys

$150 for meetings (I missed the one on the 2nd of Aug as I broke my shoulder with a quick last minute rollerblade 2h before the meet - first time in 30 years I went without foot inserts as I forgot them in my other rollerblades after the rivet on the 2021 models broke on my 2nd pair - hence the need lately to purchase 4+ blade pairs in advance from K2)

FinOps Principals

Favour Autoscaling to follow the demand curve very closely

The goal of efficient usage of resources is to pool ram/hd/ram/network resources into a single cluster.  A set of services can then follow very closely the demand curve by using a core set of reserved capacity with the rest on auto scaled or spot capacity.  Using spot has its disadvantages - the 2 min warning and cost fluctuations that must be pre-planned for when demand spikes the spot price.

All autoscaling is not equal

Autoscaling is not instant.  The underlying infrastructure of NLB autoscaling for example - is itself EC2 instances - that take time to replicate and start.  Even Lambda needs to be pre-warmed.  Therefore the disadvantage in placing some of a K8S cluster worker nodes under an auto scaler for example will be that that capacity will not be instantly available like it would if we over provisioned for excess capacity ahead of time.

Stateless Resilient Microservices reduce unused capacity

One of the factors that enabled Kubernetes to take over distributed computing was the fact that workloads were siloed and not cluster aware (each VM was managed in isolation).  Using for example docker compose to manage a set of containers per VM did not solve the problem of oversaturated or under provisioned VMs.  One VM would be at 90% utilization while another could be at 10.

The traditional cloud lift and shift where we go directly to IaaS (ECS and RDS) and not fully utilize managed services or auto scaling is not cost effective.  Using EC2 directly is the same as using docker compose pre 2016 before managed clusters through Kubernetes (OpenShift, ECS, EKS came around).  There is a reason applications do not go directly into fully auto scaled mode - microservices that can survive frequent crashes/stops/restarts are hard to design (circuit breakers and avoidance of local persistence and state lag minimization must be implemented as a start).

FinOps Best Practices

Planned Infrastructure is cost effective - use reserved or spot

AWS will lower the price in a couple ways - one of which is traditional reserved instances, another is bidding on excess capacity in the spot market (the reason why AWS was envisioned in the first place). When amazon started they purchased predicted load equipment in advance.  Soon however the difference between current and projected load mean that that reserved capacity was idle until it was needed in each 3 month cycle.  AWS was created to sell this temporary excess capacity - this is primarily the current spot market now.

Minimum Utilization

Blue/Green or Canary deployments need double the resources temporarily.  The first time you try to redeploy an application where the utilization is over 50% already will run into issues when you temporarily use over 100% during the transition.   Therefore set maximums below 50%.

Resource Tradeoffs

There is a granularity sweet spot for all resources.  For example a 16G VM will have up to 3G OS overhead - if your K8S cluster uses 8G VMs then over 1/3 of the RAM will be wasted on the base OS - switching to 16 it drops to 20%, 32 it drops to 10%.  However using larger VMs has other issues like rogue pods taking over an entire 32G VM (see Performance#FullKubernetesClusterCPUSaturation).  In a cluster of 4 x 32 that would be 25% saturation, in a cluster of 8 x 16 saturation would top out at 13% which is better. 

NoOps is possible with Infrastructure as Code

The current Kubernetes + Operators framework addresses the intent state machine (provisioner and scheduler - via Kubelet and etcd) and ongoing maintenance (restarts/upgrades - via Operators).   With the properly designed microservice architecture (CI/CD (continuous delivery and continuous deployment), stateless resiliency) there should be minimal need for hands on devops beyond coding up the system and deployment.

Infrastructure is throwaway

The more we treat deployments as stateless and throwaway (some persistence containers still require stateful sets though) - the more the system will be able to utilize the lowest cost etherial infrastructure (spot, lambda).

A workload at the container, service and infrastructure level that does not deviate from the original automated infrastructure as code deployment - will be able to restart with minimal impact on the system.  This is why one of the first implementations of Kubernetes outside of kubeadm - Rancher was named around the concept of "cattle" - as in we don't treat our infrastructure as "pets" and hand adjust each instance.

Costing Formulas

We need a couple simple derived formulas for several architectural scenarios to be able to rapidly plan the FinOps profile before going into more detail.  Some base costs around compute and persistence are required.

We also need to derive out the base case costs (overhead adjustment).

Costing Options

AWS Cost Calculator

It would be ideal if we could plan and track costs as pseudo Costs as Code (tied to Cloud Formation/terraform scripts).  There is a way to export estimates in the https://calculator.aws/#/ using https://docs.aws.amazon.com/pricing-calculator/latest/userguide/export-estimate.html 

see also https://s3.amazonaws.com/lambda-tools/pricing-calculator.html

There are issues with the cost calculator - it does not import estimate templates or break out details costs after the initial construction.

For example a IaaS T3a.medium 2vCPU/4Gb 100GB EBS DT outbound 10GB no peak scaling reserved 3y no upfront, snapshot weekly is US $31/month

Export and Share

Export to CSV

And share to public URL
https://calculator.aws/#/estimate?id=ec30ab632e0ef82e8aad565a2b42d03498380b85

Commercial Licenses

Presentation

Links

https://www.finops.org/events/

Form3 Cloud Native Payments (Startup) https://www.form3.tech/about