4 ms·

I use Nomad a lot in my company and I really like it. Our team tried to migrate to AWS ECS a few times and found it much harder to abstract stuff from devs / c

I use Nomad a lot in my company and I really like it. Our team tried to migrate to AWS ECS a few times and found it much harder to abstract stuff from devs / create self-service patterns. That said it's not a walk in the park. You will need to scratch your head a little bit to setup consul + nomad + vault + a load balancer correctly.

doctor_eval 5y ago
Thanks. We're going to start small with just nomad, then vault, and as our needs grow we will probably adopt consul (we already use terraform so hopefully not a huge stretch) and maybe boundary. This is thing I like about the HashiCorp tools. You don't have to eat the whole cake in a single sitting.
diragon 5y ago
>You will need to scratch your head a little bit to setup consul + nomad + vault + a load balancer correctly. I've been wondering, would it make sense to try to package all that into a single, hopefully simple and easily configurable, Linux image? And if it might be, why hasn't anyone done that yet?
alephu5 5y ago
There are some good ansible playbooks on GitHub for nomad, consul and vault. I personally don't use vault because it's overkill for the proeuct in working on at the moment. To avoid the pain of managing a CA and passing out certificates for TLS between services, I use a wireguard mesh and bind nomad, consul and vault to these wg interfaces. This includes all the chatter of these components, as well as the services I deploy with nomad. It's configured such that any job can join the "private" wireguard network or "public" internet gateway. It takes a few days to set up, but it's very easy to manage.
- nsomaru 5y ago
  Do you have somewhere to point me to set things up in this configuration? I’m a freelancer that hosts client stuff and I need something between “SSH into server” and “kubernetes.” No, I never did buy the docker hype. Seem to be doing okay.
  - cpach 5y ago
    Have you looked into Fly.io or AWS Fargate?

doctor_eval 5y ago

Thanks. We're going to start small with just nomad, then vault, and as our needs grow we will probably adopt consul (we already use terraform so hopefully not a huge stretch) and maybe boundary. This is thing I like about the HashiCorp tools. You don't have to eat the whole cake in a single sitting.

diragon 5y ago

>You will need to scratch your head a little bit to setup consul + nomad + vault + a load balancer correctly. I've been wondering, would it make sense to try to package all that into a single, hopefully simple and easily configurable, Linux image? And if it might be, why hasn't anyone done that yet?

alephu5 5y ago

There are some good ansible playbooks on GitHub for nomad, consul and vault. I personally don't use vault because it's overkill for the proeuct in working on at the moment. To avoid the pain of managing a CA and passing out certificates for TLS between services, I use a wireguard mesh and bind nomad, consul and vault to these wg interfaces. This includes all the chatter of these components, as well as the services I deploy with nomad. It's configured such that any job can join the "private" wireguard network or "public" internet gateway. It takes a few days to set up, but it's very easy to manage.

nsomaru 5y ago
Do you have somewhere to point me to set things up in this configuration? I’m a freelancer that hosts client stuff and I need something between “SSH into server” and “kubernetes.” No, I never did buy the docker hype. Seem to be doing okay.
- cpach 5y ago
  Have you looked into Fly.io or AWS Fargate?