Java 8 auf >=17 Upgrade - Lessons Learned und Best Practices

Slide 1

Slide 1 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Java 8 auf >=17 Upgrade Lessons Learned und Best Practices Dennis Kieselhorst Principal Solutions Architect Amazon Web Services

Slide 2

Slide 2 text

Slide 3

Slide 3 text

Slide 4

Slide 4 text

Slide 5

Slide 5 text

Slide 6

Slide 6 text

Slide 7

Slide 7 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. What is Amazon Corretto? • Downstream distribution of OpenJDK • Quarterly security releases • No-cost long-term releases – JDK 8, JDK 11, JDK 17, JDK 21 • Feature release train (JDK 15, JDK 16, JDK 18, JDK 19, JDK 20, JDK22 …) • Drop-in OpenJDK replacement • certified using the Java Technical Compatibility Kit (TCK) to ensure it meets the Java SE standard • is available on Linux, Windows, and macOS

Slide 8

Slide 8 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Custom AWS silicon with 64-bit Arm cores Available in e.g. Amazon EC2, AWS Lambda, AWS Fargate, Amazon Relational Database Service Up to 40% better price performance over comparable current generation x86-based instances Up to 60% less energy for the same performance than comparable EC2 instances AWS Graviton2, Graviton3 & Graviton4 Graviton Corretto runs great on ARM & AWS Graviton processors

Slide 9

Slide 9 text

Slide 10

Slide 10 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. N A M E R I C A Available Region Announced # Availability Zone A S I A P A C I F I C A U S T R A L I A & N E W Z E A L A N D S A M E R I C A São Paulo 3 E U R O P E Frankfurt Ireland London Milan Paris Spain 3 3 3 3 3 3 Stockholm Zurich Germany 3 3 A F R I C A Cape Town 3 M I D D L E E A S T Bahrain Tel Aviv UAE Kingdom of Saudi Arabia 3 3 3 Canada Central Canada West GovCloud US-East GovCloud US-West Northern California Northern Virginia 3 3 3 3 3 6 Ohio Oregon Mexico 3 4 *Beijing *Ningxia Hong Kong Hyderabad Jakarta Mumbai 3 3 3 3 3 3 Osaka Seoul Singapore Tokyo Malaysia Taipei 3 4 3 4 Thailand Melbourne Sydney Auckland 3 3 AWS Global Infrastructure Regions & Availability Zones

Slide 11

Slide 11 text

Slide 12

Slide 12 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS Shared Responsibility Model SOFTWARE COMPUTE STORAGE DATABASE NETWORKING HARDWARE/AWS GLOBAL INFRASTRUCTURE REGIONS AVAILABILITY ZONES EDGE LOCATIONS AWS RESPONSIBILITY FOR SECURITY ‘OF’ THE CLOUD OPERATING SYSTEM, NETWORK & FIREWALL CONFIGURATION PLATFORM, APPLICATIONS, IDENTITY & ACCESS MANAGEMENT CUSTOMER DATA NETWORKING TRAFFIC PROTECTION (ENCRYPTION, INTEGRITY, IDENTITY) SERVER-SIDE ENCRYPTION (FILE SYSTEM AND/OR DATA) CLIENT-SIDE DATA ENCRYPTION & DATA INTEGRITY AUTHENTICATION CUSTOMER RESPONSIBILITY FOR SECURITY ‘IN’ THE CLOUD

Slide 13

Slide 13 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Application Performance Shared Responsibility Model Application (You!) Runtime (Community!) DATA STRUCTURES Framework JVM/JDK Language (Java, Kotlin, …) ALGORITHMS SYSTEM DESIGN Libraries

Slide 14

Slide 14 text

Slide 15

Slide 15 text

Slide 16

Slide 16 text

Slide 17

Slide 17 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. • 7% fleet utilization improvement • Millions in savings • 98% cold start fault reduction • 19% p99 PUT latency reduction J D K 8 T O 1 7 Another Monitoring Service 2/5

Slide 18

Slide 18 text

Slide 19

Slide 19 text

Slide 20

Slide 20 text

Slide 21

Slide 21 text

Slide 22

Slide 22 text

Slide 23

Slide 23 text

Slide 24

Slide 24 text

Slide 25

Slide 25 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. JDK 17 upgrade regression case study 1 Previously accessible methods became unreferenceable in JDK 17. • Test your application, fix flakey tests • Scan logs for exceptions • Gradual rollout java.lang.reflect.InaccessibleObjectException: Unable to make field private final {type} accessible: module java.base does not "opens {module}" to unnamed module {module}

Slide 26

Slide 26 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. • ParallelGC parallelized the reference processing using more CPU during full pause • Triggered CPU spikes because failed to take into account other JVMs on host. • Had to explicitly set –XX:ParallelGCThreads when sharing a host. JDK 17 upgrade regression case study 2

Slide 27

Slide 27 text

Slide 28

Slide 28 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Java 17 still has bugs! JDK-8305994: Guarantee eventual async monitor deflation Moving monitor cleanup out of safepoints (Java 12/15) JDK-8313678: SymbolTable can leak Symbols during cleanup Triggered by Groovy/LambdaForms (introduced in Java 12) We still find a couple of these every month! This is why Update releases are so important to us and you. Both fixed upstream - backport to 17.

Slide 29

Slide 29 text

Slide 30

Slide 30 text

Slide 31

Slide 31 text

Slide 32

Slide 32 text

Slide 33

Slide 33 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. • Upgrade your dependencies! § Especially test frameworks: e.g. at least Mockito 5.x. § Libraries, e.g., need at least Lombok 1.18.22, Guice 5.1.0. • Strong encapsulation. § No access to what were ”public” JDK implementation classes. • JDK 17/21 GC behavior is different (better!). § Default collector is G1 (not Parallel) starting in JDK 11. § Concurrent Mark-Sweep (CMS) collector is gone. § New collectors: Shenandoah and ZGC. JDK 17/21 Simplified Migration Guide

Slide 34

Slide 34 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. • Developers • Services and Applications • Dependencies § Open Source / 3rd party § Internal / 1st Party § Custom tooling (build/ deploy/ test) It gets complex when you have a lot of “stuff”

Slide 35

Slide 35 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. • Use less dependencies, a lot less • Remove unsupported dependencies • Use libraries that only use public supported APIs • If you can avoid § Mocks § Aspect oriented programming • Relentlessly keep your code and dependencies up to date T H I S C O U L D B E C O N T R O V E R S I A L How do you get future proof?

Slide 36

Slide 36 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. • Unit tests (non mocks) • Integration tests that cover all mainline, and critical edge case scenarios • Load tests – Observe latency, error rates, anomalies • Fix Flakey tests T E S T How do you get future proof?

Slide 37

Slide 37 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. • Metrics § Measure success rates, Latency, Memory, Memory/action, CPU § Observe and fix anomalies • Log analytics, eliminate anomalies • Pipelines, Beta, Fractional Deployments, Auto-Rollbacks, Canaries. How do you get future proof? Metrics Traces Logs

Slide 38

Slide 38 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. • Don’t leave broken windows behind. • Use the opportunity to modernize your application. • Upgrades become a lot less scary. How do you get future proof?

Slide 39

Slide 39 text

Slide 40

Slide 40 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. < one hour coding time The median developer spends less than one hour a day writing code1 © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved 1 Software.com, “Global Code Time Report,” January 2022.

Slide 41

Slide 41 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Where are developers spending time in the SDLC? Test and secure Operate Plan Create Maintain and modernize Plan • Find accurate and specific technical guidance from relevant documentation, code examples, resources, and so on • Design changes based on business and technical requirements Create • Generate code • Manage infrastructure Test and secure • Apply proper test cases for code changes • Scan for security vulnerabilities in code Operate • Identify and mitigate code issues • Monitor performance and efficiency Maintain and modernize • Modernize and update old code languages and dependencies

Slide 42

Slide 42 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. • Tools do static & dynamic code analysis • They have a knowledge base of known upgrade issues. • They can use LLMs to detect patterns not in the database. • Some well-known tools: § OpenRewrite § Eclipse Migration Toolkit for Java § Windup/ Migration Toolkit for Runtimes § Amazon Q Developer Agent for Code Transformation Automatic Upgrade & Migration Tools

Slide 43

Slide 43 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Q Developer Reimagines the experience across the entire software development lifecycle (SDLC) Helps developers and IT professionals build and manage secure, scalable, and highly available applications Helps you write, debug, test, optimize, and upgrade your code faster Converses with you to explore new AWS capabilities, learn unfamiliar technologies, and architect solutions Amazon Q is built with security and privacy in mind from the start, making it easier for organizations to use generative AI safely.

Slide 44

Slide 44 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Q Developer supports developers across the SDLC Plan • Amazon Q Developer in the AWS Management Console (best practices, AWS WAF, Amazon EC2 instance optimization) • Business-specific application • Explain code with conversational coding Create • Inline coding companion in IDE and CLI • Software development • Conversational coding Test and secure • Unit test generation • Security scanning and remediation Operate • Troubleshoot errors (Amazon S3, AWS Lambda, Amazon EC2, Amazon Elastic Container Service) • VPC Reachability Analyzer • Debug and optimize code with conversational coding • Helps you optimize your AWS resources and costs [NEW] Maintain and modernize • Update code with Amazon Q Developer agent for code transformation Test and secure Operate Plan Create Maintain and modernize

Slide 45

Slide 45 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Explore and plan Ask questions and get guidance from 17 years of AWS knowledge, best practices, and well- architected advice Create a business- expert application using your data, systems, and more.

Slide 46

Slide 46 text

Slide 47

Slide 47 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Create: Customize code recommendations Use Amazon Q Developer chat in the IDE to ask questions about your internal code base Help understand your internal code base Generate code based on your private repositories

Slide 48

Slide 48 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Create: Advanced capability: Amazon Q Developer agent for software development Write and implement entire application features in minutes right from a simple natural language prompt in your IDE Interactive step-by-step instructions, code, tests, and best practices

Slide 49

Slide 49 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Test and secure Generate unit tests Scan entire project for security vulnerabilities Generate remediations to improve security and code quality

Slide 50

Slide 50 text

Slide 51

Slide 51 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Q Developer knows your AWS account resources and billing List, describe, and get guidance based on resources in your AWS account Retrieve and analyze cost data from AWS Cost Explorer (preview)

Slide 52

Slide 52 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Build and test (Java 8) Apply knowledge base Build and test (Java 17) Gen AI fixes errors Upgraded code Source code M O D E R N I Z E L A N G U A G E V E R S I O N S I N A F R A C T I O N O F T H E T I M E Maintain and modernize: Amazon Q Developer agent for code transformation Knowledge database

Slide 53

Slide 53 text

Slide 54

Slide 54 text

Slide 55

Slide 55 text

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Retire tech debt at scale Modernize projects and upgrade language version and dependencies with Amazon Q Developer Agent for code transformation Summary of core use cases Drive developer productivity Get inline coding recommendations, summarize and document code, scan for security issues, diagnose and troubleshoot bugs, and write unit tests Improve security and code quality Ship more secure code with less effort with code scanning and automated code remediation

Slide 56

Slide 56 text