AWS EMR
- Amazon EMR is a web service that utilizes a hosted Hadoop framework running on the web-scale infrastructure of EC2 and S3
- EMR enables businesses, researchers, data analysts, and developers to easily and cost-effectively process vast amounts of data
- EMR
- uses Apache Hadoop as its distributed data processing engine, which is an open source, Java software that supports data-intensive distributed applications running on large clusters of commodity hardware
- is ideal for problems that necessitate fast and efficient processing of large amounts of data
- lets the focus be on crunching or analyzing big data without having to worry about time-consuming set-up, management or tuning of Hadoop clusters or the compute capacity
- can help perform data-intensive tasks for applications such as web indexing, data mining, log file analysis, machine learning, financial analysis, scientific simulation, and bioinformatics research etc
- provides web service interface to launch the clusters and monitor processing-intensive computation on clusters
- is a batch-processing framework that measures the common processing time duration in hours to days, if the use case is to have processing at real time or within minutes Apache Spark or Storm would be a better option
- EMR seamlessly supports On-Demand, Spot, and Reserved Instances
- EMR launches all nodes for a given cluster in the same EC2 Availability Zone, which improves performance as it provides higher data access rate
- EMR supports different EC2 instance types including Standard, High CPU, High Memory, Cluster Compute, High I/O, and High Storage
- Standard Instances have memory to CPU ratios suitable for most general-purpose applications.
- High CPU instances have proportionally more CPU resources than memory (RAM) and are well suited for compute-intensive applications
- High Memory instances offer large memory sizes for high throughput applications
- Cluster Compute instances have proportionally high CPU with increased network performance and are well suited for High Performance Compute (HPC) applications and other demanding network-bound applications
- High Storage instances offer 48 TB of storage across 24 disks and are ideal for applications that require sequential access to very large data sets such as data warehousing and log processing
- EMR charges on hourly increments i.e. once the cluster is running, charges apply entire hour
- EMR integrates with CloudTrail to record AWS API calls
NOTE: Topic mainly for Solution Architect Professional Exam Only
EMR Architecture
- Amazon EMR uses industry proven, fault-tolerant Hadoop software as its data processing engine
- Hadoop is an open source, Java software that supports data-intensive distributed applications running on large clusters of commodity hardware
- Hadoop splits the data into multiple subsets and assigns each subset to more than one EC2 instance. So, if an EC2 instance fails to process one subset of data, the results of another Amazon EC2 instance can be used
- EMR consists of Master node, one or more Slave nodes
- Master Node
- EMR currently does not support automatic failover of the master nodes or master node state recovery
- If master node goes down, the EMR cluster will be terminated and the job needs to be re-executed
- Slave Nodes – Core nodes and Task nodes
- Core nodes
- host persistent data using Hadoop Distributed File System (HDFS) and run Hadoop tasks
- can be increased in an existing cluster
- Task nodes
- only run Hadoop tasks
- can be increased or decreased in an existing cluster
- EMR is fault tolerant for slave failures and continues job execution if a slave node goes down.
- Currently, EMR does not automatically provision another node to take over failed slaves
- EMR supports Bootstrap actions which allow
- users a way to run custom set-up prior to the execution of the cluster.
- can be used to install software or configure instances before running the cluster
EMR Security
- EMR cluster starts with different security groups for Master and Slaves
- Master security group
- has a port open for communication with the service.
- has a SSH port open to allow direct SSH into the instances, using the key specified at startup
- Slave security group
- only allows interaction with the master instance
- SSH to the slave nodes can be done by doing SSH to the master node and then to the slave node
- Security groups can be configured with different access rules
- EMR enables use of security configuration
- which helps to encrypt data at-rest, data in-transit, or both
- can be used to specify settings for S3 encryption with EMR file system (EMRFS), local disk encryption, and in-transit encryption
- is stored in EMR rather than the cluster configuration making it reusable
- gives flexibility to choose from several options, including keys managed by AWS KMS, keys managed by S3, and keys and certificates from custom providers that you supply
- At-rest Encryption for S3 with EMRFS
- EMRFS supports Server-side (SSE-S3, SSE-KMS) and Client-side encryption (CSE-KMS or CSE-Custom)
- S3 SSE and CSE encryption with EMRFS are mutually exclusive; either one can be selected but not both
- Transport layer security (TLS) encrypts EMRFS objects in-transit between EMR cluster nodes & S3
- At-rest Encryption for Local Disks
- Open-source HDFS Encryption
- HDFS exchanges data between cluster instances during distributed processing, and also reads from and writes data to instance store volumes and the EBS volumes attached to instances
- Open-source Hadoop encryption options are activated
- Secure Hadoop RPC is set to “Privacy”, which uses Simple Authentication Security Layer (SASL).
- Data encryption on HDFS block data transfer is set to true and is configured to use AES 256 encryption.
- LUKS
. In addition to HDFS encryption, the Amazon EC2 instance store volumes (except boot volumes) and the attached Amazon EBS volumes of cluster instances are encrypted using LUKS
- In-Transit Data Encryption
- Encryption artifacts used for in-transit encryption in one of two ways:
- either by providing a zipped file of certificates that you upload to S3,
- or by referencing a custom Java class that provides encryption artifacts
EMR Cluster Types
- EMR has two cluster types, transient and persistent
- Transient EMR Clusters
- Transient EMR clusters are clusters that shut down when the job or the steps (series of jobs) are complete
- Transient EMT clusters can be used in situations
- where total number of EMR processing hours per day < 24 hours and its beneficial to shut down the cluster when it’s not being used.
- using HDFS as your primary data storage.
- job processing is intensive, iterative data processing.
- Persistent EMR Clusters
- Persistent EMR clusters continue to run after the data processing job is complete
- Persistent EMR clusters can be used in situations
- frequently run processing jobs where it’s beneficial to keep the cluster running after the previous job.
- processing jobs have an input-output dependency on one another.
- In rare cases when it is more cost effective to store the data on HDFS instead of S3
EMR Best Practices
- Data Migration
- Two tools – S3DistCp and DistCp – can be used to move data stored on the local (data center) HDFS storage to S3, from S3 to HDFS and between S3 and local disk (non HDFS) to S3
- AWS Import/Export and Direct Connect can also be considered for moving data
- Data Collection
- Apache Flume is a distributed, reliable, and available service for efficiently collecting, aggregating, & moving large amounts of log data
- Flume agents can be installed on the data sources (web-servers, app servers etc) and data shipped to the collectors which can then be stored in persistent storage like S3 or HDFS
- Data Aggregation
- Data aggregation refers to techniques for gathering individual data records (for e.g. log records) and combining them into a large bundle of data files i.e. creating a large file from small files
- Hadoop, on which EMR runs, generally performs better with fewer large files compared to many small files
- Hadoop splits the file on HDFS on multiple nodes, while for the data in S3 it uses the HTTP Range header query to split the files which helps improve performance by supporting parallelization
- Log collectors like Flume and Fluentd can be used to aggregate data before copying it to the final destination (S3 or HDFS)
- Data aggregation has following benefits
- Improves data ingest scalability by reducing the number of times needed to upload data to AWS
- Reduces the number of files stored on S3 (or HDFS), which inherently helps provide better performance when processing data
- Provides a better compression ratio as compressing large, highly compressible files is often more effective than compressing a large number of smaller files.
- Data compression
- Data compression can be used at the input as well as intermediate outputs from the mappers
- Data compression helps
- Lower storage costs
- Lower bandwidth cost for data transfer
- Better data processing performance by moving less data between data storage location, mappers, and reducers
- Better data processing performance by compressing the data that EMR writes to disk, i.e. achieving better performance by writing to disk less frequently
- Data Compression can have an impact on Hadoop data splitting logic as some of the compression techniques like gzip do not support it
- Data Partitioning
- Data partitioning helps in data optimizations and lets you create unique buckets of data and eliminate the need for a data processing job to read the entire data set
- Data can be partitioned by
- Data type (time series)
- Data processing frequency (per hour, per day, etc.)
- Data access and query pattern (query on time vs. query on geo location)
- Cost Optimization
- AWS offers different pricing models for EC2 instances
- On-Demand instances
- are a good option if using transient EMR jobs or if the EMR hourly usage is less than 17% of the time
- Reserved instances
- are a good option for persistent EMR cluster or if the EMR hourly usage is more than 17% of the time as is more cost effective
- Spot instances
- can be a cost effective mechanism to add compute capacity
- can be used where the data is persists on S3
- can be used to add extra task capacity with Task nodes, and
- is not suited for Master node, as if it is lost the cluster is lost and Core nodes (data nodes) as they host data and if lost needs to be recovered to rebalance the HDFS cluster
- Architecture pattern can be used,
- Run master node on On-Demand or Reserved Instances (if running persistent EMR clusters).
- Run a portion of the EMR cluster on core nodes using On-Demand or Reserved Instances and
- the rest of the cluster on task nodes using Spot Instances.
EMR – S3 vs HDFS
- Storing data on S3 provides several benefits
- inherent features high availability, durability, lifecycle management, data encryption and archival of data to Glacier
- cost effective as storing data in S3 is cheaper as compared to HDFS with the replication factor
- ability to use Transient EMR cluster and shutdown the clusters after the job is completed, with data being maintained in S3
- ability to use Spot instances and not having to worry about losing the spot instances any time
- provides data durability from any HDFS node failures, where node failures exceed the HDFS replication factor
- data ingestion with high throughput data stream to S3 is much easier than ingesting to HDFS