Self-Deploy a Single Tableau Server on AWS
This is archived content
Deployments on public clouds continue to be supported but the content for third-party public cloud deployments is no longer updated.
For the latest Tableau Server deployment content, see the Enterprise Deployment Guide(Link opens in a new window) and the Deploy(Link opens in a new window) section of Tableau Server help.
For those customers who have access, we recommend Tableau Cloud. For more details, see:
- Tableau Cloud Manual Migration Guide
- Tableau Cloud Trial for Admin(Link opens in a new window)
- Tableau Cloud: Get Started for Admin(Link opens in a new window)
Introduction
For the most flexibility in security, scaling and capacity, you can perform a self-deployment of Tableau Server on AWS. Building a cloud-based solution has many benefits over an on-premises installation. For example, the overall total cost of ownership for building a Tableau Server solution in the cloud is normally much less than a similar on-premises solution because you don’t need to buy all the expensive hardware. In addition, the cloud can provide better uptime, reliability and fault-tolerance, especially if you deploy your solution across different regions and Availability Zones.
When you deploy Tableau Server in a cluster in AWS, we recommend that you use Amazon Elastic Block Store (EBS) volumes with Amazon EC2. EBS provides persistent block-level storage volumes for use with Amazon EC2 instances. You should attach a separate EBS General Purpose (SSD) volume with a volume size of at least 100 GiB to allow room for installing Tableau Server. This volume size supports a baseline performance of 300 input/output operations per second (IOPS) with the ability to burst to 3,000 IOPS. For more information, see General Purpose SSD (gp2) Volumes(Link opens in a new window) in the Amazon EC2 User Guide for Windows Instances at the AWS website.
For heavy workloads where the storage subsystem must provide an absolute minimum number of IOPS for performance, you can either create a larger EBS General Purpose (SSD) volume to get up to 10,000 IOPS with the ratio of 3 IOPS per GiB, or use an EBS Provisioned IOPS (SSD) volume with the IOPS you need. In either case, we recommend that you use EBS-optimised instances if you plan to run heavy extracts and do a lot of data processing. For more information about Tableau Server performance, see Tableau Server Performance Overview.
Perform the following tasks to install and configure Tableau Server in the AWS cloud.
Step 1: Create a Virtual Private Cloud (VPC)
Your first step is to create a Virtual Private Cloud (VPC) and add an Amazon elastic network interface(Link opens in a new window) to provide a static MAC address for your Amazon EC2 instance.
Sign in to AWS and then navigate to the Amazon VPC console(Link opens in a new window) (https://console.aws.amazon.com/vpc/)
Use the region selector to choose the location where your other AWS resources are located. Often, this is the region closest to you.
Under Resources, click Start VPC Wizard, on the Step 1: Select a VPC Configuration screen, click VPC with a Single Public Subnet, and then click Select.
On the Step 2: VPC with a Single Public Subnet screen, give your VPC a name, and then click Create VPC. You can leave all other settings at their default values.
Step 2: Configure networking and security
To allow inbound traffic to reach your VPC, you should limit traffic to three standard ports (HTTP, HTTPS, and RDP). For more information, see Recommended Network ACL Rules for your VPC in the Amazon Virtual Private Cloud User Guide at the AWS website.
Navigate to the Amazon EC2 console(Link opens in a new window) (https://console.aws.amazon.com/ec2/).
Use the region selector to choose the location where you created your VPC.
In the navigation pane, click Security Groups, and then click Create Security Group.
On the Create Security Group screen, in the Security group name field, enter a name for your security group.
In the Description field, enter a description for the security group.
In the VPC field, select your VPC from the list.
Click the Inbound tab, click Add Rule, and then in the Type list, select HTTP (80), and in the Source column, choose My IP for each rule. This limits inbound traffic to your computer. To specify an IP address range instead, choose Custom, and then enter the range in CIDR notation.
For more information, see Adding Rules to a Security Group(Link opens in a new window) in the Amazon EC2 User Guide for Windows Instances at the AWS website.
Note: This port is required to receive incoming unencrypted web traffic.
Click Add Rule, in the Type list, select HTTPS (443), and in the Source column, choose My IP for each rule. This limits inbound traffic to your computer. To specify an IP address range instead, choose Custom, and then enter the range in CIDR notation.
For more information, see Adding Rules to a Security Group(Link opens in a new window) in the Amazon EC2 User Guide for Windows Instances at the AWS website.
Note: This port is required to receive incoming encrypted web traffic.
Click Add Rule, in the Type list, select RDP (3389), and in the Source column, choose My IP for each rule. This limits inbound traffic to your computer. To specify an IP address range instead, choose Custom, and then enter the range in CIDR notation.
For more information, see Adding Rules to a Security Group(Link opens in a new window) in the Amazon EC2 User Guide for Windows Instances at the AWS website.
Note: This port is required to accept Remote Desktop Protocol (RDP) requests so that you can connect to the EC2 instance.
Click Create.
Step 3: Launch an Amazon EC2 instance
After you create your VPC, you can launch an Amazon EC2 instance into it.
For more information about how to launch and connect to a Windows instance, see Getting Started with Amazon EC2 Windows Instances(Link opens in a new window) in the Amazon EC2 User Guide for Windows Instances at the AWS website.
Navigate to the Amazon EC2 console(Link opens in a new window) (https://console.aws.amazon.com/ec2/).
Use the region selector to choose the location where you created your VPC.
Under Create Instance, click Launch Instance.
Select an Amazon Machine Image (AMI) that meets the system requirements for Tableau Server.
On the Step 2: Choose Instance Type screen, select the instance size you want (for example, m4.2xlarge).
Note: For Tableau Server v10 on a 64-bit virtual machine, you need a minimum of 4 physical cores. On AWS, this means 8 vCPUs. For more information, see Amazon EC2 Instance Types(Link opens in a new window) at the AWS website.
Click Next: Configure Instance Details.
On the Step 3: Configure Instance Details screen, in the Network list, select your VPC.
Click through the steps in the wizard until you get to Step 6: Configure Security Group.
On the Step 6: Configure Security Group screen, click Select an existing security group, and then select the security group that you created earlier.
Click Review and Launch, review your configuration, and then click Launch.
When you are prompted, create a new key pair, download it as a .pem file, and keep it in a safe place. You need the key pair in order to create a password that you can use to log into the Amazon EC2 instance.
When you have finished creating and downloading your key pair, click Launch Instances.
Click View Instances and locate your instance in the list.
Copy the instance ID. You’ll need this in the next step.
Step 4: Create an elastic IP address for the VPC
After you launch your Amazon EC2 instance, you can create and allocate a static public IP address to your VPC.
Navigate to the Amazon VPC console(Link opens in a new window) (https://console.aws.amazon.com/vpc/).
Use the region selector to choose the location where you created your VPC.
In the navigation pane, click Elastic IPs.
Click Allocate new address, and then click Allocate.
In the New address request succeeded dialog box, click the Elastic IP address.
On the Action menu, click Associate address.
In Resource type, select Instance.
In the Instance drop-down list box, select your instance, and then click Associate.
Copy the new private IP address. You’ll need this later.
Step 5: Log in to Amazon EC2
To run Tableau Server on AWS, you install it on the Amazon EC2 instance or instances that you just configured. To begin, you log into the Amazon EC2 instance where you want to install Tableau Server.
Use Remote Desktop Protocol (RDP) from a computer running Microsoft Windows to connect to your Amazon EC2 instance running Microsoft Windows. If you're connecting from a computer running Linux, you can use rdesktop to connect to your Amazon EC2 instance running Microsoft Windows. For more information, see Connecting to Your Windows Instance in the Amazon EC2 User Guide for Windows Instances at the AWS website.
Navigate to the Amazon EC2 console(Link opens in a new window) (https://console.aws.amazon.com/ec2/).
Use the region selector to choose the location where you launched your instance.
In the EC2 Dashboard, click Instances.
Select the check box next to your instance, and then on the Actions menu, click Connect.
In the Connect To Your Instance dialog box, click Download Remote Desktop File to create an .rdp file that's configured to connect to the instance. The .rdp file is configured to connect to the public IP address of your VPC, which you specified in the Elastic IP address that you created.
Click Get Password, and then select the .pem file for the key pair you created earlier. This fills in the private key from your key pair.
Click Decrypt Password. When the password is displayed, make a note of the Public DNS address, user name (such as Administrator), and password.
Double-click the .rdp file that you downloaded earlier.
Click Connect. (You can ignore any messages that indicate that the publisher is unknown.)
Enter the user name and password that you recorded a few steps ago, and then click OK.
You can safely ignore any warnings that the publisher of the remote connection is unknown. Click Yes to connect.
Step 6: Install Tableau Server
Now that you’re logged in to your EC2 instance, you can install Tableau Server. The installation steps on an EC2 instance are the same as they are for any other computer. For instructions, see Install and Configure.
After you install Tableau Server and create a Tableau Server administrator account and sign in, you can add users.
If you want to run a Tableau Server cluster, install additional Tableau Servers on additional Amazon EC2 instances. For more information, see Self-Deploy Tableau Server on AWS in a Distributed Environment.