Enkash

EXECUTIVE SUMMARY

EnKash is an all-in-one comprehensive commercial payments platform. Growing number of next gen businesses have trusted EnKash for frictionless payments experience. EnKash is one of the fastest growing platforms in the B2B space, enabling businesses to digitize and simplify their commercial payments.

EnKash has been able to create unique value with the combination of platform and cards. Businesses now can have much desired convenience, savings, control and visibility to improve business productivity & operational efficiencies.

EnKash is leading innovations by enabling simple and technological advance solutions. With state-of-the-art technology, EnKash is committed to help businesses in their cash flow management challenges.

THE CLIENT’S CHALLENGE

Client was looking to modernize its applications and automate the whole CI/CD process. They were keen on having a more modular infrastructure with a micro-services based architecture. Client was also looking forward to use the Infrastructure as a Code (IAAS) which will help to deploy the infrastructure as and when needed.

Since this is a startup, client’s intention was very clear that they need full automated setup which will not just launch the Infrastructure but also build and configure the application seamlessly. They are open to use Micro-services based approach either via Docker or Kubernetes.

The main goal is, there should not be any human interaction during deployment, auto-scaling and monitoring.

PROPOSED ARCHITECTURE

DEPLOYMENT AUTOMATION

CI/CD Process – For production deployment we configured Docker registry to hold versioned docker images. Jenkins jobs were configured to build docker image from code repository and configure it to automatically pull required docker images and deploy to the Kubernetes cluster.

INSIGHT TO ACTION

Techpartner team worked with client and suggested the use of Docker based approach which will reduce the cost of management of VM in terms of its usage. We used Kubernetes for docker orchestration in highly available mode using multiple master, thus making the cluster highly available in case of any base node failures.

We also setup the Application & Pod monitoring and logging which gives the single view to support team to view the current status of running Infra.

With Automated CI/CD process deployment became easy and we followed the Blue/Green deployment approach which helped us seamless deployment without any downtime (during deployment).

SECURITY BEST PRACTICES

BENEFITS

Client was able to benefit from the microservices architecture with streamlined CI/CD process. By moving to microservices architecture in a containerised environment, they were no longer tied to any proprietary platform. Also by using Jenkins and private docker registry, they were able to restrict deployment process to authorized user only with approval. This led to more streamlined and controlled CI/CD process with minimum downtime and human error.

With auto-scaling enabled. all the peak load was handled without even worrying about the infrastructure. IAAS helped to launch a copy of the infrastructure for Dev, Staging and UAT and DR environments within a few minutes.

WAF for SECURITY and COMPLIANCE

Amazon Web Services’ (AWS) Web Application Firewall (WAF) is a security service that helps protect web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. After implementing AWS WAF, there are several improvements that we have seen.

1. Enhanced security: AWS WAF helps protect web applications from common web exploits such as SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF). With AWS WAF, you can create custom rules to block known attack patterns or suspicious behavior.
2. Improved availability: By blocking malicious traffic, AWS WAF can help improve the availability of your web application by reducing the impact of DDoS attacks or other types of web exploits.
3. Reduced costs: By reducing the impact of web exploits, AWS WAF can help you save money on infrastructure costs and reduce the risk of reputational damage.
4. Simplified management: AWS WAF is a managed service, which means that AWS takes care of the underlying infrastructure and maintenance tasks. This can help simplify management and reduce the burden on your IT team.
5. Compliance: AWS WAF can help you comply with various regulatory requirements such as PCI DSS, HIPAA, and GDPR by providing controls to protect your web application from attacks and unauthorized access.

AWS STACK