Microsoft workloads migration on AWS
Nkid Group is running a number of Microsoft workloads in various environments including on-premises, local data center in Vietnam, Microsoft Azure and AWS.
Industry:
Retail
Technology:
AWS
CUSTOMER CHALLENGE
With more than 44 TiniWorld Centers, 35 TiNiStore shops as well as 2079 retail shops serving 8 million customers all over Vietnam. The group is on a continuous expansion with opening of new centers and shops to serve customers all over the country.
Nkid Group is running a number of Microsoft workloads in various environments including on-premises, local data center in Vietnam, Microsoft Azure and AWS. Recently, Nkid see the need to move more workloads to AWS to utilize the benefits of AWS’s scalability, service integration and stability. A high priority were two .NET Core 2.2 web applications running on Windows Server 2016 with a Microsoft SQL Server 2016 Standard database. These two web applications, one of which also includes a reporting server, are all running in 2 standard Windows virtual machines with manually set up IIS web server.
Nkid needed the following:
– Migration Web server and Database server to AWS Cloud platform
– Monitoring and quick response to issues on Production
– Easy administration and maintenance of resources (should not have to remote to Windows Server and configure IIS web server)
– Leverage AWS services for full digital and online services, remote and automation, services monitoring and notification
– Auto scaling and elasticity to scale according to demand
– Infrastructure costs optimization
These needs should be covered by a service that supports auto scaling and allows customer to manage servers from the UI (AWS Console) with a good support for Microsoft – Windows Server and IIS.
SOLUTION
Renova Cloud migrated Nkid Group’s workloads to EC2 for Microsoft Windows Server environment where the resources are provisioned by Elastic Beanstalk managed platform .NET on Windows. In this managed platform, IIS web server is configured to run the .NET Core apps using deployment manifest.
The solution runs Elastic Beanstalk with a CloudFormation template that can be automatically updated using a CI/CD workflow from 3rd party platform Travis CI. Elastic Beanstalk is set to auto-scale in to 1 instance outside operational hours and out up to 8 instances during times of high traffic. For new instances, Microsoft PowerShell script is implemented to adjust certain app pool settings in IIS, and to download certain files required by the app from a private S3 bucket. CloudWatch logs are used for all logging purposes, and metrics and alarms are applied to alert on the health of the solution.
Both Elastic Beanstalk apps EC2 instances and the separately deployed RDS for MS SQL Server are located in private subnets with security group rules restricting inbound traffic, while NAT Gateway and a bastion host in the same VPC are facilitating outgoing connections to internet and remote connections. The public-facing front of web apps are Application Load Balancer which also handles routing the traffic to EC2 instances. Route 53 is used to associate custom domain DNS to the load balancer, and ACM for applying the SSL certificate in ALB so that the sites are accessible only through secure HTTPS protocol. The Web Application Firewall (WAF) was setup in front of ALB and geo-blocking rules were applied.
Renova Cloud supported to modify app code and configuration to ensure functioning in auto scaling environment. This is necessary so that the app is not dependent on locally stored state in the hosting instance. In particular, the target of Nlog .NET logging framework was changed to store application logs in CloudWatch, instead of saving into the local file system of the Windows Server instance.
Highlights of the solution:
Elastic Beanstalk for both .NET Core workloads
Using managed platform: .NET on Windows Server
Advantages of Elastic Beanstalk
Managed platform which is pre-configured to run .NET Core
Load balancing and auto scaling support
Monitoring UI from AWS Console
Ease of use for Nkid
RDS with MS SQL Server Standard
Using RDS, database is managed and stable with backups, resilience
S3, EBS snapshots and RDS snapshot copy for backups
CloudWatch for monitoring and logging, event sourcing/scheduling
Lambda functions for scheduling, event bus with EventBridge
VPC services; VPN connections and NAT Gateway
BENEFITS
The solution brings many benefits to Nkid Group. The right-sizing that is achieved due to better monitoring of the system and the combination of scheduled and dynamic auto scaling of the environments, answers two key business needs: firstly the system is capable of responding to highly variable and increasing traffic in a short time, allowing it to perform well and keeping end user experience excellent; secondly eliminating the waste of having to oversize instances, as the system can be scaled in to minimal number of instances during times of low traffic and outside operational hours. Cost optimization is one of the major benefits. The unified monitoring experience in CloudWatch allows Nkid to have a real-time overview of the system and respond quickly to any issues experienced.
The automation includig all the scripts, yaml files, CloudFormation templates and deployment manifests documented by Renova Cloud provides Nkid the means to fully understand the apps and the system. With this Infrastructure as Code (IaC) approach, everything in the system becomes reproducible. If an instance experiences a problem, it can be stopped or terminated, and new instance automatically set up. No manual access to IIS web server or app’s physical file system in the Windows Server instance is required. Troubleshooting can be done with CloudWatch Logs, instead of having to remote desktop into the hosting instance to analyze the app’s status and download logs. This significantly reduces the admin and operations workload and allows the team to focus on other tasks.
Renova Cloud’s solution leveraging Elastic Beanstalk .NET on Windows platform, RDS for SQL Server, and other AWS services is architected with the highest security, but without compromising the operational excellence or the cost effectiveness. The potential attack surface is minimized through the proper use of VPC, private subnets, security groups and WAF rules. As such, Nkid can be assured of the security.`
RELATED STORIES
GSM
GSM’s Journey with Amazon EKS
GSM has decided to adopt Amazon EKS, entrusting its container orchestration capabilities would provide a robust solution for GSM’s complex IT infrastructure.Read more>
Ngân hàng Thương mại Cổ phần
Joint Stock Commercial Bank successfully accelerated growth by migrating to AWS
The competitive digital race among banks is increasingly fierce, focusing on attracting technology-savvy customers. The commercial bank wanted to stay ahead of the competition and required scalable, reliable and cost-effective back-end infrastructure for rapid growth.Read more>
IMV
IMV’s Business Intelligence Empowered by AWS Data Management Solution
The former infrastructure of IMV lacked the scalability required to accommodate the growing volumes of data and the increasing demand for business intelligence and analytics. Read more>
E-wallet
Vietnam’s Prominent E-wallet Migrated Its Two Most Critical Workloads to AWS
The E-wallet in question is one of Vietnam’s largest online payment platforms, developed and published by one of the most dominant technology players in the region. Read more>
F88
F88’s Journey to a Secure and Centralized Data Management with AWS Cloud Solutions
Established in 2013, F88 stands as the forerunner network of secure lending in Vietnam, focusing on serving micro & small enterprises as well as individual customers. Receiving substantial financial support from renowned global Read more>
Greenfeed
Greenfeed Data optimization solution with AWS
Greenfeed's mission is to provide consumers with a clean food chain from farm to table with the 3F Plus process - FARM FEED FOOD. Read more>
Startup oi
RENOVA – STARTUP OI – SUCCESS STORY
Startup Oi is a new social media and tech talent platform. Startup Oi has an ambitious goal to focus on professional needs of tech engineers and developers, building a digital community and connecting with job opportunities and tech events. Read more>
Vietcetera
VIETCETERA – MIGRATION JOURNEY TO AWS
Founded in 2016, Vietcetera is a first-of-its-kind multimedia digital platform producing editorial content along with video series and podcasts in both Vietnamese and English.Read more>
IMV
IMV – ON-PREMISE TO CLOUD JOURNEY
International Minh Viet Joint Stock Co. is a distribution company which entails general trade, modern trade, as well as an e-commerce channel. Read more>
Smartpay
SmartPay Rehost and Replatform Migration on AWS
SmartPay is an important contender in the Vietnamese payment apps landscape and experiencing growth with new vendors, partners, and users. Read more>
Pepsi Co Myanmar
Accelerate SAP S/4HANA Transformation With AWS
Pepsi Co Myanmar was looking to modernize their existing systems and launch a new platform for their users and applications utilizing the up-to-date technology solutions and choose SAP S/4HANA on AWS. Read more>
Nutifood Group
AWS Immersion Day with Nutifood Group
The goal of this educational workshop was to empower N Group's IT team and leadership to confidently use the AWS platform for their benefit, and unlock new business opportunitiesRead more>
Tadiran
Serverless application implementation on AWS for Tadiran Group
Tadiran is a leading technical and electrical appliances manufacturer company. Some of the company’s more famous product lines include batteries and air conditioners. Read more>
Scratchpay
Scratchpay Security best practices and well-built architecture on GCP
Evaluation and assessment of the existing GCP environment for best practices and well-built architecture methodologiesRead more>
UAB - Connect. Create. Change.
UAB BANK CLOUD NATIVE APPS
As a part of the modernisation and digitalisation strategy, UAB is expanding its services to build mobile apps for payment and e-Wallet purposes to serve the growing Myanmar consumer banking marketRead more>
Yoma
Yoma Transformation to AWS Cloud
The increasing demand for Yoma’s applications and business across different verticals requires to have a digital transformation journey with an effective migration to the cloud.Read more>
AQUA
AQUA – Migration & CI/CD
AQUA is able to improve operations as result of the migration and CI/CD on AWS as well as able to release new features faster with minimal time and disruption to the end users.Read more>
SOVIGAZ
Sovigaz – migrating to AWS
The agility of the new infrastructure help Sovigaz to relieve the burden of on premise infrastructure management and limitations as well as access to advanced services offered on AWS platform. Read more>
KAOPIZ
Kaopiz’s Infrastructure Automation
Automate the processes on AWS and create an environment to test new features to support the Development & QA team to deliver jobs faster, automated and without a deep level of experience and skills on AWS.Read more>
NAVIGOS
Navigos’ journey to the Cloud
As part of the company commitment to it’s customers, it is essential to secure a robust disaster recovery process. Navigos’ application requires to have a fast and effective reaction in the disaster recovery scenarios.Read more>
SABECO
Sabeco Case Study
Having migrated to AWS, Sabeco is capable of quickly responding to increased traffic and services’ usage when necessary, making running marketing campaigns and launching new features less risky.Read more>
NKID’S
Nkid’s journey to the Cloud
Nkid Group is running a number of Microsoft workloads in various environments including on-premises, local data center in Vietnam, Microsoft Azure and AWS.Read more>