3. Deploying Magma Access Gateway

Create an EC2 instance on AWS

Create the EC2 instance

Create an AWS EC2 instance running Ubuntu 20.04:

aws ec2 run-instances \
  --security-group-ids <your security group ID> \
  --image-id ami-0568936c8d2b91c4e \
  --count 1 \
  --instance-type t2.xlarge \
  --key-name <your ssh key name> \
  --tag-specifications 'ResourceType=instance,Tags=[{Key=Name,Value=magma-access-gateway}]' \
  --block-device-mapping "[ { \"DeviceName\": \"/dev/sda1\", \"Ebs\": { \"VolumeSize\": 50 } } ]"

Replace <your security group ID> and <your ssh key name> with the appropriate values.

Note the InstanceId of the created instance and use it to retrieve its public IP address:

aws ec2 describe-instances --filters "Name=instance-id,Values=<your instance ID>" --query 'Reservations[*].Instances[*].[PublicIpAddress]' --output text

Note this address, you will need it very soon.

Attach a secondary network interface to the instance

Using SubnetId of the S1 subnet that was created during step 1, create a new network interface:

aws ec2 create-network-interface --subnet-id <your subnet ID> --group <your security group>

Note the NetworkInterfaceId and use it to attach the network interface to the EC2 instance:

aws ec2 attach-network-interface --network-interface-id <your network interface ID> --instance-id <your instance ID> --device-index 1

Downgrade the Kernel on the instance

Unfortunately, the default kernel on the AWS Ubuntu 20.04 AMI image is too new for Magma Access Gateway to work properly. We need to downgrade it to the LTS version 5.4.0. SSH into the AWS instance using its public IP and follow the instructions in this blog post. In the end, the GRUB_DEFAULT entry in the GRUB menu should look like 'Advanced options for Ubuntu>Ubuntu, with Linux 5.4.0-1099-aws'.

Deploy Magma Access Gateway

Create a new Juju model for machines:

juju add-model edge aws/us-east-2

Wait for the instance to boot up and be accessible via SSH, then add it as a Juju machine:

juju add-machine --private-key=<path to your private key> ssh:ubuntu@<EC2 instance IP address>

Note the Juju machine ID and deploy Magma Access Gateway to it:

juju deploy magma-access-gateway-operator --config sgi=eth0 --config s1=eth1 --channel=1.8/stable --to <Machine ID>

You can see the deployment's status by running juju status. The deployment is completed when the application is in the Active-Idle state.

ubuntu@host:~$ juju status
Model  Controller     Cloud/Region   Version  SLA          Timestamp
edge   aws-us-east-2  aws/us-east-2  2.9.42   unsupported  11:41:52Z

App                            Version  Status  Scale  Charm                          Channel  Rev  Exposed  Message
magma-access-gateway-operator           active      1  magma-access-gateway-operator  stable    29  no

Unit                              Workload  Agent  Machine  Public address  Ports  Message
magma-access-gateway-operator/0*  active    idle   0        18.188.161.66

Machine  State    Address        Inst id               Series  AZ  Message
0        started  18.188.161.66  manual:18.188.161.66  focal       Manually provisioned machine