reference deployment

IBM WebSphere Liberty on AWS

Java application server based on open-source Open Liberty project

This Quick Start automatically creates a secure deployment of IBM WebSphere Liberty version on the AWS Cloud, into a configuration of your choice. WebSphere Liberty is a fast, dynamic, and easy-to-use Java application server that combines IBM technology with open-source software built on the Open Liberty Project. WebSphere Liberty provides a solid foundation for developing and running service-oriented architecture (SOA) applications on AWS, because of its fast startup times, ability to pick up changes without requiring server restarts, and simple XML configuration.

The Quick Start deploys WebSphere Liberty servers in a highly available, Multi-AZ environment, and configures Auto Scaling and Elastic Load Balancing so you can scale instance capacity up or down, based on CPU thresholds that you specify. Amazon CloudFront is included as an optional content delivery service, to enable caching of static content at edge locations. This architecture also includes an end-to-end SSL/TLS implementation using AWS Certificate Manager (ACM) Certificates.

This Quick Start was developed by
AWS solutions architects.

  •  What you'll build
  • The Quick Start architecture for IBM WebSphere Liberty includes:

    • A virtual private cloud (VPC) configured across two Availability Zones. In each Availability Zone, this Quick Start provisions one public subnet and one private subnet. This creates a logically isolated networking environment that you can connect to your on-premises data centers or use as a standalone environment.*
    • An internet gateway to provide internet access to each subnet.*
    • Managed network address translation (NAT) gateways deployed into the public subnets and configured with an Elastic IP address for outbound internet connectivity. These instances provide internet access for all EC2 instances launched within the private network.*
    • A Linux bastion host in the public subnet to allow inbound Secure Shell (SSH) access to the WebSphere Liberty instances in the private subnets.*
    • In the private subnets, WebSphere Liberty server instances across both Availability Zones, to ensure high availability.
    • Auto Scaling enabled for the WebSphere Liberty cluster, to automatically add or remove servers based on their use, providing additional servers during peak hours and lowering costs by removing servers during off hours. This functionality is tightly integrated with the Application Load Balancer and automatically adds and removes instances from the load balancer. The default installation sets up CPU-based thresholds for scaling the instance capacity up or down. You can modify these thresholds during launch and after deployment.
    • The Elastic Load Balancing service, which provides HTTP and HTTPS load balancing across the WebSphere Liberty instances. This Quick Start uses an Application Load Balancer, which is configured to use HTTP.
    • An IAM role with fine-grained permissions for access to AWS services necessary for the deployment process.
    • Appropriate security groups for each instance or function to restrict access to only necessary protocols and ports. For example, access to HTTP(S)­ server ports on Amazon EC2 web servers is limited to the Application Load Balancer.
    • Amazon CloudFront as an optional content delivery network. This service enables caching of static content at the edge locations and results in lower latency in delivering content to end users. The edge locations include many Points of Presence (PoPs) across the globe to ensure low latency.
    • In case of SSL/TLS implementation, AWS Certificate Manager (ACM) to provision certificates for the Application Load Balancer and CloudFront. If you’re using the default CloudFront certificate, ACM is not required.

    * The template that deploys the Quick Start into an existing VPC skips the tasks marked by asterisks and prompts you for your existing VPC configuration.

  •  How to deploy
  • You can deploy your WebSphere Liberty environment on AWS in about 40 minutes by following a few easy steps:

    1. If you don't already have an AWS account, sign up at
    2. Launch the Quick Start. You can choose from two options:
    3. Test the deployment by accessing the WebSphere Liberty console or the optional sample application.

    To customize your deployment, you can configure VPC and bastion host settings, specify instance types for resources, configure SSL settings, and set up CPU-based thresholds for scaling the instance capacity up or down. You can also optionally deploy CloudFront for content delivery, and deploy a sample application from the WASdev repository.

    Amazon may share user-deployment information with the AWS Partner that collaborated with AWS on this solution.  

  •  Cost and licenses
  • WebSphere Liberty is free for development, small-scale testing, and production use. You are entitled to use up to 2 GB of JVM heap space for running Liberty in test or production. For additional details about licensing and upgrading to a production license that includes support, see the WASdev website.

    You are responsible for the cost of AWS services used while running this Quick Start reference deployment. However, there is no additional cost for using the Quick Start.

    Prices are subject to change. See the pricing pages for each AWS service you will be using for full details. Note that this Quick Start includes nested AWS CloudFormation templates that launch multiple stacks.