"DOKU under the hood : Infrastructure and Cloud Services Technology" by M. Triana Waluja Djati...

Product Development Conference 2017

DOKU Under the HoodInfrastructure and Cloud Services

Product Development Conference, August 09th 2017

Confidential - Do not duplicate or distribute without written permission.© 2017 DOKU. All Rights Reserved. (Except stated otherwise)


What is DOKU?

Indonesia’s Leading Payment Company• Enabler for merchants to do an online payment and in-store payment

• Is a Payment Gateway

• Is an e-Wallet Provider


Our History


Service Overview

• Internet Payment Gateway

• Electronic Money (server based)

• Bill payment

• Remittance (Hong Kong, Taiwan, Korea)

• Payment Service Provider


Our Position


Credit Card Principal

Credit Card Acquiring

E-Commerce Banking / Direct Debit

In Store Payment

Consumer Financing

Bank Transfer

e-Wallet

Payment Channels


Doku

internet

Online Store

Online Shopper

LC1

LC2

LC3

Bank

Financial ins

Convenient Store

Transaction Flow


• Must support the business process with efficient cost and benefit.

• Support the target SLA.

• Support AGILE Software Dev.

• Support IT Security and Encryption

• Support Compliance ( PBI, POJK , UU ITE, PCI DSS )

Infrastructure Goal


• Pasal 40 UU Nomor11 Tahun2008 tentang Informasi dan Transaksi Elektronik yang mengaturPemerintah memfasilitasi data elektronik strategis dan rekam jejaknya ke pusat data.

• Pasal 17 PP82/ 2012 tentang Penyelenggara Sistem dan Transaksi Elektronik (PSTE) tentang kewajibanpenempatan pusat data dan DRC di wilayah Indonesia.

• Pasal 12 Peraturan Bank Indonesia No: 9/15/PBI/2007 tentang Penerapan Manajemen Risiko dalamPenggunaan TI oleh Bank Umum tentang “kewajiban bank melakukan pengendalian fisik danlingkungan Pusat Data dan DRC”.

DC & DRC in Indonesia’s Border


How to Implement


• Linux Centos 7.x

• Apache

• Jboss

• Mysql

Software Infrastructure


Separation of Responsibilities


• On premise ( colocation on DC )

• IAAS on cloud ( cloud provider A**z*n & s*ftl*y*r ) . Development, Test, internal support application.

• Virtualization, flexibility managing server resources.

Choice


Data Center 1

Data Center 2

DOKU Ops

Cloud 1

Cloud 2

internet

Our Infrastructure


BSD SerpongDC1

Kuningan BaratDC2

Operation CenterJakarta Selatan

Infrastructure Data Centre


Our Data Centre


Server Hardware Xeon

Web App Db


Web App Db


Web App Db

firewall

Dev SIT UAT

Dev and Test Environment

Development & Test



Web App App App Db Db log ntp vce

Production Environment

firewall

DOKU Production


• Monitor all systems server , middleware , application

• Monitor all leased line connection to partners ( bank, financial institution, convenience store)

• Monitor all internet connection.

Operation Center


Monitoring 24 x 7 Op-Center


Data Encryption

Fraud Detection & Prevention Digital Certificate

PCI DSS Certification

3D Secure

Security & Encryption


• Regular Vulnerability patching on all software

• Quarterly Vulnerability Scan

• Annual Penetration Testing

• Annual Application Vulnerability Testing

• Annual PCI DSS Audit

Security Evaluation


Cloud 1 Cloud 2

internal app 1

internal app 2

dev cluster

DOKU Cloud


• Server create as needed , shutdown / remove after finish

• Add or reduce number of servers on the service depends on the load

Cloud Resources


• On Premise is still the choice for DOKU Payment Gateway ( compliance )

• Clouds IAAS is for non sensitive data and development

Summary

Q&A


Thank You

PT Nusa Satu Inti ArthaPlaza Asia Office Park Unit 3Jl. Jend. Sudirman Kav. 59Jakarta 12190 Indonesia

t. +62 21 515 0555f. +62 21 515 0666e. [email protected] www.doku.com

Date post:	22-Jan-2018
Category:	Technology
Upload:	tech-in-asia-id
View:	201 times
Download:	3 times