Upload
tech-in-asia-id
View
204
Download
3
Embed Size (px)
Citation preview
Product Development Conference 2017
DOKU Under the HoodInfrastructure and Cloud Services
Product Development Conference, August 09th 2017
Confidential - Do not duplicate or distribute without written permission.© 2017 DOKU. All Rights Reserved. (Except stated otherwise)
Product Development Conference 2017
What is DOKU?
Indonesia’s Leading Payment Company• Enabler for merchants to do an online payment and in-store payment
• Is a Payment Gateway
• Is an e-Wallet Provider
Product Development Conference 2017
Service Overview
• Internet Payment Gateway
• Electronic Money (server based)
• Bill payment
• Remittance (Hong Kong, Taiwan, Korea)
• Payment Service Provider
Product Development Conference 2017
Credit Card Principal
Credit Card Acquiring
E-Commerce Banking / Direct Debit
In Store Payment
Consumer Financing
Bank Transfer
e-Wallet
Payment Channels
Product Development Conference 2017
Doku
internet
Online Store
Online Shopper
LC1
LC2
LC3
Bank
Financial ins
Convenient Store
Transaction Flow
Product Development Conference 2017
• Must support the business process with efficient cost and benefit.
• Support the target SLA.
• Support AGILE Software Dev.
• Support IT Security and Encryption
• Support Compliance ( PBI, POJK , UU ITE, PCI DSS )
Infrastructure Goal
Product Development Conference 2017
• Pasal 40 UU Nomor11 Tahun2008 tentang Informasi dan Transaksi Elektronik yang mengaturPemerintah memfasilitasi data elektronik strategis dan rekam jejaknya ke pusat data.
• Pasal 17 PP82/ 2012 tentang Penyelenggara Sistem dan Transaksi Elektronik (PSTE) tentang kewajibanpenempatan pusat data dan DRC di wilayah Indonesia.
• Pasal 12 Peraturan Bank Indonesia No: 9/15/PBI/2007 tentang Penerapan Manajemen Risiko dalamPenggunaan TI oleh Bank Umum tentang “kewajiban bank melakukan pengendalian fisik danlingkungan Pusat Data dan DRC”.
DC & DRC in Indonesia’s Border
Product Development Conference 2017
• Linux Centos 7.x
• Apache
• Jboss
• Mysql
Software Infrastructure
Product Development Conference 2017
• On premise ( colocation on DC )
• IAAS on cloud ( cloud provider A**z*n & s*ftl*y*r ) . Development, Test, internal support application.
• Virtualization, flexibility managing server resources.
Choice
Product Development Conference 2017
Data Center 1
Data Center 2
DOKU Ops
Cloud 1
Cloud 2
internet
Our Infrastructure
Product Development Conference 2017
BSD SerpongDC1
Kuningan BaratDC2
Operation CenterJakarta Selatan
Infrastructure Data Centre
Product Development Conference 2017
Server Hardware Xeon
Web App Db
Server Hardware Xeon
Web App Db
Server Hardware Xeon
Web App Db
firewall
Dev SIT UAT
Dev and Test Environment
Development & Test
Product Development Conference 2017
Server Hardware Xeon
Web App App App Db Db log ntp vce
Production Environment
firewall
DOKU Production
Product Development Conference 2017
• Monitor all systems server , middleware , application
• Monitor all leased line connection to partners ( bank, financial institution, convenience store)
• Monitor all internet connection.
Operation Center
Product Development Conference 2017
Data Encryption
Fraud Detection & Prevention Digital Certificate
PCI DSS Certification
3D Secure
Security & Encryption
Product Development Conference 2017
• Regular Vulnerability patching on all software
• Quarterly Vulnerability Scan
• Annual Penetration Testing
• Annual Application Vulnerability Testing
• Annual PCI DSS Audit
Security Evaluation
Product Development Conference 2017
Cloud 1 Cloud 2
internal app 1
internal app 2
dev cluster
DOKU Cloud
Product Development Conference 2017
• Server create as needed , shutdown / remove after finish
• Add or reduce number of servers on the service depends on the load
Cloud Resources
Product Development Conference 2017
• On Premise is still the choice for DOKU Payment Gateway ( compliance )
• Clouds IAAS is for non sensitive data and development
Summary
Q&A
Product Development Conference 2017
Thank You
PT Nusa Satu Inti ArthaPlaza Asia Office Park Unit 3Jl. Jend. Sudirman Kav. 59Jakarta 12190 Indonesia
t. +62 21 515 0555f. +62 21 515 0666e. [email protected] www.doku.com