Run your own private cloud with dess in AWS

Run your own private cloud with dess in AWS

In this step-by-step guide I will walk you through all steps required to setup your own private dess using AWS.

Subscribe to our newsletter and never miss any upcoming articles

Listen to this article

dess is the self-hosted option for secondary servers of an @ sign, and a great tool for developers to debug their applications! If you're not sure what an @ sign is check it out here! You can run several secondary servers on a single instance of dess, as each secondary scales to use 6MB of ram or less.

dess is an acronym which stands for:

d. Distributed e. Edge s. Secondary s. Server

Pre-requisites

  • Registered @ sign(s) to setup (get free/paid from here )
  • An AWS account (sign up/in here )
  • A Fully Qualified Domain Name (FQDN)

1. Registering your @ sign

This topic is already well documented! Please follow the guidance of The @ platform FAQs and register via the registrar site.

2. Sign-up for AWS account

If you are new to AWS, signing up for an account is free! The cost of running dess is about $10/month. You can create your account here and as of June 6th, 2021 there is a “free tier” available which was used during the original making of this guide which can be found on atsign.dev.

aws-free-trial.png

Follow the instructions on screen.

aws-sign-up.png

Once you are done with registration, you will be able to login to your aws console.

Make sure that you select the correct region in the top right corner.

aws-region.png

Select the region that is geographically closest to your location for best performance.

You are now setup on AWS and ready to prepare dess.

3. Register your own fully qualified domain name (FQDN)

This step can be performed at a variety of sites, all with different pricing models. You can use sites like Go Daddy, Namecheap, and many others. However, since we have AWS account, we can use it to register our domain through the Route 53 service.

In your AWS console navigate to services in top left corner and select Route 53.

a) Register domain name with AWS.

In your AWS console search for Route 53.

aws-route53.png

You can start looking for your domain directly from here:

image-20210726083635919.png

Based on the domain name you search, AWS will give you similar options, and their pricing. As I am looking for the best deal, the .link domain seems like a good option at a cost of 5$ / year.

In my case 4atsign.link is free and I will register it by clicking “Add to cart” and continue.

clip_image002.jpeg

Fill out DNS registration form:

clip_image004.jpeg

Continue review details and order. At this point if all is fine you should see your domain request pending:

clip_image006.jpeg

This can take some time so why don’t we move on to next step!

4. Preparing AWS instance

Now since I am new to AWS, the easiest way to get started is by using the LightSail service from service catalog. This will enable you to deploy small system which is more then capable of handling dess at pre-set price.

clip_image002-16272842283471.jpeg

Welcome to LightSail:

clip_image004-16272842283482.jpeg

First step is to create new instance. Fortunately, we have big orange button that can do just that!

There are several options we are presented at this moment. Since I am living in Europe I select “Frankfurt, Zone A (eu-central-1a)” as my instance location. Instance region will dictate how well will your instance response based on your geographical location. People located in India should selects APAC region where as people in US should select North America region. You can leave availability zone set as default.

clip_image006-16272842283483.jpeg

Next up will be selection of operating system we want to deploy. We know that dess works well with Ubuntu 20.04 LTS so let's select just that.

clip_image008.jpeg

You are presented with a couple more options, but unless you know what you are doing leave these as is.

clip_image010.jpeg

Now let’s select an instance plan. dess is relatively light weight so for testing purposes I will select the first instance plan for $3.5/Month. This will provide us with 512 MB of RAM, 1vCPU, 20GB of storage and 1TB of data transfer. This is more than enough to run our dess.

clip_image012.jpeg

Lastly we have to name our instance. This is the name you will be presented with in your dashboard.

clip_image014.jpeg

Last but not least is to press “Create instance”:

clip_image015.png

After a couple of seconds you should be re-routed to your dashboard and see your instance up and running:

clip_image016.png

5. Preparing your instance for network access

a) Assignment of Static IP

Next up, is to provide our instance with a static IP and linking our domain to it.

When you click on your instance name, it will take you to the management console, which should look like this:

clip_image002-16272853840264.jpeg

This is where you control hardware, connectivity and if needed can delete your instance.

Lets configure a static IP address for your new instance. Navigate to Networking and click on Create static IP:

clip_image003.png

Our region and instance is selected, so the only thing left is to name our static IP. I selected the name atsign-static, but it can be any name you like.

clip_image005.jpeg

Let's hit create:

clip_image007.jpeg

And voila, we now have a static IP address on the internet and it will not change. Now we can link our domain name with it.

clip_image009.jpeg

When you click on your instance name and navigate to Networking, the static IP is now assigned.

clip_image011.jpeg

b) Assignment of Domain name to your static IP

We can now move on to linking our static IP address to our domain. This is done via the AWS console which can be accessed in the top right of Lightsail.

clip_image001.png

Verify your email used for registering domain:

By now you should receive a verification email that will confirm registration of your domain. Click this link before moving on.

Linking domain with your static address:

Let's navigate to “Route 53” from Services menu.

clip_image003.jpeg

From your dashboard click on “Domain” which will take you to the “Registered Domains” tab.

clip_image005-16272854399076.jpeg

Here you can click on your registered domain which will take you to overview page with domain status and contacts.

clip_image007-16272854399087.jpeg

Click on “Manage DNS”:

clip_image009-16272854399088.jpeg

And click on your domain name.

This will show you your DNS records for your domain. We now need to link A type record to your domain linking it to IP address of your instance.

This is done simply by typing your static IP address from previous step into field “Value” and clicking Create record:

clip_image011-16272854399089.jpeg

If everything goes well you should see following in your domain dashboard:

clip_image013.jpeg

To test if you are successful open command line and ping your domain. You should see your instance static IP address. It will not respond which is normal due to IPv4 firewall. It is actually good thing!

clip_image014.png

At this point we have created a DNS record we will use to link our dess. We created an instance name which will be running our dess and we have opened a port range which is exposed to the internet and we can communicate with the @ sign root server and our apps.

c) Setting up Firewall

Next up, we need to make sure we have ports open for our dess to communicate with the root server and our apps. In Section networking go to section “IPv4 Firewall” and click “+ Add rule”. Our rule will be “Custom” on TCP protocol with Port range in a number higher than 1024. In my case, I have selected port range 8000-8010. This will enable me to run up to 10 @ signs in parallel.

clip_image002-16272854074665.jpeg

Click create and verify that your new rule is in list:

clip_image002-16272854074665.jpeg

6. Instance setup and dess deployment

Open your LightSail console

By now you should see your instance in “Running state”

clip_image002-162728546025210.jpeg

Open it and on the tab Connect click on “Connect using SSH”

clip_image003-162728546025211.png

You should be presented by a new window with command line:

clip_image005-162728546025212.jpeg

Before we do anything else, we should update the system:

sudo apt update && sudo apt upgrade

This might take some time, but it will make sure we have latest repository information and the system is up-to-date.

Next make sure curl is installed, we will use curl to pull the dess installation file:

sudo apt install curl

Finally, run the dess installer:

curl -fsSL https://getdess.atsign.com | sudo bash

Once the installer is finished you should be prompted like so:

Dess installed, please move on to the sudo dess-create command.

7. Registration of @ sign in your private dess

At this step, you should already have your @ sign registered at atsign.com. If not go do it!

I have registered my own free @ sign (@ 44likelycanary) which I will link to my dess.

In your instance console, navigate to dess folder.

We now need to create the service that will host our @ sign by executing the dess-create command:

$ sudo dess-create @44likelycanary 4atsign.link 8000 <email address> likelycanary

To make it more understandable:

I will be registering my @ sign @44likelycanary.

I will be using my domain 4atsign.link which I have registered through AWS.

I am using port 8000 which I have opened in my instance firewall.

My registration email address is \ (this email is used to sign the SSL certificates).

The last likelycanary is the name that docker will use to track the service.

If everything is successful you should see output like this:

clip_image004-162728549379914.jpeg

At this moment your @ sign is registered on your dess.

8. Activation of @ sign

Next up we need to activate it

Login to your dashboard here

Open “my @ signs”

clip_image001-162728550968115.png

Open “managed” of @ sign you are registering”

clip_image003-162728550968116.jpeg

Navigate to Advance settings:

clip_image005-162728550968117.jpeg

If you have already activated your @ sign you will be prompted to erase all your data first

clip_image007-162728550968118.jpeg

Once done you are able to link your @ sign with your private dess. Use your domain and port number with which you have created service on your cloud instance and press Activate.

clip_image009-162728550968119.jpeg

You should see that your @ sign is being activated in your dashboard:

clip_image011-162728550968120.jpeg

This can take several minutes so go get cup of coffee, some tea maybe, stretch your body and pray you haven’t made any mistakes!

Once the activation process completes you are welcomed by green Activated.

clip_image013-162728550968121.jpeg

You can now open @ buzz or @ wavi and register your @ sign via QR code and generate your keys!

CONGRATULATIONS YOU'RE FINISHED!

 
Share this
Proudly part of