Welcome to 'This is My Architecture'.
Today, I have with me Ronny from JFrog. Hi, Ronny.
Hi, Boaz. Tell us a bit about JFrog.
JFrog is an AWS ISV Accelerate partner.
We develop DevOps platform services that enable an end-to-end flow of binaries,
from build, and development stages all the way to production.
This includes our main service, a service most people are familiar with, JFrog Artifactory,
but also vulnerability scanning tools, CI/CD tools,
and solutions for software distribution.
Cool, so I know JFrog for a long time,
and I know that a lot of your customers are using JFrog on-premises,
but today we'd like to focus on your software as a service offering.
Can you walk us through the architecture of your SaaS solution?
Sure.
Our customers who wish to use our SaaS offering,
can go to our website and using a self-service process,
receive a unique environment under a unique domain,
in JFrog.io.
The environment is publicly accessible,
its request goes to our public NLB,
and into our EKS cluster,
and their unique, isolated customer namespace,
again, based on the domain.
This is how I can get to my Artifactory. Sure.
What can I do with that?
So Artifactory is a universal binary repository manager,
our customer use it in order to manage and distribute your artifacts.
That could be any type of artifacts,
from any type of environment or in between environments.
And we can take a Docker pull example, just to emphasize the process.
So we have a customer running a Docker pull command against its own environment,
adding Docker repo name, and the image name.
The request goes, again, the same flow, public NLB, EKS and Artifactory.
And once it reaches Artifactory,
it's utilizing RDS in order to gain metadata information on the relevant artifacts.
Reaching to S3,
S3 would hold several Docker layers in our example.
There could be additional types, such as generic files, jars, et cetera.
And then they're served back to Artifactory and to the customer.
Okay, so now I can use my files, I can deploy them anywhere.
But this is a general example for any user, what if I'm an AWS customer?
Or, for example, I want to access my Artifactory without going through the public Internet?
How can you help me with that?
Our AWS customers have a unique advantage by using AWS PrivateLink.
It provides us a non-public and hence more fast, secure and cost-effective environment.
Okay, that sounds cool, how can I set it up?
So our customers who wish to use it, would set up a VPC endpoint on their end,
and connect their production environment,
then redirect traffic using a specialized private endpoint subdomain.
So we will have the environment name,
.pe.JFrog.io.
Connecting to our VPC PrivateLink on our end
into our private NLB,
and then it behaves the same.
So now the entire process is fully secured end to end.
This is a top priority for our customers,
such as financial industries, which are highly regulated.
Okay, what other advantages do I get from this setup?
There are less public components involved, so there's much less latency.
What about cost?
Cost is also a great side effect of this architecture.
Since we're running on the same AWS region, cost for traffic is much less expensive.
Okay, let's make it a bit more complicated.
Let's say that I have an additional environment running on-premises,
so an additional production environment running on my servers in my own data center.
How can I use this architecture to enjoy the same benefits?
So suppose our customers would like to connect
their AWS VPC to an on-premises workload,
suppose it's a production environment,
they can use Direct Connect, with or without Transit Gateway,
and consume VPC endpoint and the rest of the services as they did before.
It will connect the VPC and bring it closer to their workload.
And obviously, it can be the same VPC, it can be a separate VPC,
or multiple VPCs. Sure.
Okay, so let's say I like this idea, and I would like to use Artifactory.
How can I start using JFrog on AWS?
The JFrog platform is available on AWS Marketplace,
with a unique built-in free trial, also from the JFrog.com website.
And once they start using it,
they can seamlessly upgrade their environment to our paid subscription
and gain access to all these features.
This is great, Ronny, thank you very much for sharing.
Thanks for having me.
And thank you for watching, 'This is My Architecture'.