Cloud Solution Design - Replatform to Alibaba Cloud

This whitepaper will introduce you Solution Design Replatform to Alibaba Cloud, the cloud computing division of Alibaba Group.

Cloud Solution Design - Alibaba Cloud

DISCOVERY 

Why you are moving to the cloud 

- Financial Reasons 

o Reduce expenses 

o Increase operations 

o Enhance outcomes 

- Improve overall ROI

- Meet competitive challenges  

PRESENTING A SOLUTION

Current Architecture 

2-tier solution:

- Web

- Database 

Access 

- Web tier: customers on web ports 

- Database tier: web tier on database ports 

Nightly database backups to tape 

Proposed Solutions 

Alibaba Cloud - moving applications to the cloud without major changes, but taking advantage of benefits of the cloud environment on below services 

To Be Cloud Architect 

- Virtual Private Cloud (VPC) - Helps you construct a logically isolated networking environment where you can customize your own IP address range, subnets, route tables, and network gateways.

- Web tier (Web Proxy) - Web (web traffic) Internet 

- App tier (App Server) - App (app traffic) Web 

- DB tier (ApsaraDB for RDS) - Databases (db traffic) App

- Load balancing - Server Load Balancer (SLB)

- Auto Scaling Group – Auto Scale 

- Database migration - Data Transmission Service (DTS)

- Alibaba Cloud Security - Bastion hosts (management traffic) – Small instance type 

- Resource Access Management (RAM) – least privilege  

- Security 

o Only the web hosts in public subnet 

o Security groups 

 Web - only allow internet traffic on 80/443

 App hosts - only allow web proxy on app port 

 ApsaraDB Relational Database Service (ApsaraDB for RDS) - only allow app host on 3306

 The management of Bastion Host with Alibaba Cloud - Elastic Compute Service

(ECS) Systems

o Alibaba Cloud Security Groups - NACL (Network Access Control Lists) - as an additional layer 

o Object Storage Service (OSS) Storage spaces have security features enabled 

o Resource Access Management (RAM) policies configured along the principles of least privilege 

o Monitoring and logging 

DELIVERING A PROOF OF CONCEPT (POC)

Evaluating the solution in the Alibaba Cloud’s environment 

Let’s start Alibaba Cloud A Free Trial - https://www.alibabacloud.com/campaign/free-trial?spm=a3c0i.7911826.2886971040.1.244714b3hLUrv9 

IMPLEMENTING SOLUTION

Production Solution Implementation post POC everything is OK

KEY TAKEAWAYS

• Moving applications to the cloud as-is

- App/DB Servers -> Elastic Compute Service (ECS) 

- Storage  Object Storage Service (OSS)

Tools: Alibaba Cloud VM Import/Export 

• Moving applications to the Alibaba Cloud without major changes, but taking advantage of benefits of the Alibaba Cloud environment

- Migrating databases to ApsaraDB for RDS

- Migrating applications to Alibaba Cloud Web Hosting

• Improving the Design of Existing Code 

- Using cloud native features (Cloud-Native Applications Management https://www.alibabacloud.com/solutions/container)

Alibaba Cloud Architecture Best Practices  

- Design for failure and nothing fails

o Avoid single points of failure 

o Multiple instances 

o Multiple Zones 

o Separate single server into multiple tired application 

o For ApsaraDB for RDS, use Multi Zone feature  

- Build security in every layer

o Encrypt Data at rest and in transit 

o Enforce principle of least privilege in Resource Access Management

o Implement both Security Groups and Network Access Control Lists (NACL) (Alibaba Cloud Security Groups) 

o Consider advanced security features and services 

- Leverage different storage options

o Move static web assets to Object Storage Service (OSS) 

o Use Alibaba Cloud CDN to serve globally 

o Store session state in Table Store

o Use ApsaraDB for Redis between hosts and databases  

- Implement elasticity

o Implement Auto Scaling policies 

o Architect resiliency to reboot and relaunch 

o Leverage managed services like Object Storage Service (OSS) and Alibaba Cloud Table Store

- Think parallel

o Scale horizontally, not vertically 

o Decouple compute from session/state 

o Use Server Load Balancer (SLB)

o Right-size your infrastructure  

- Loose coupling sets you free

o Instead of a single, ordered workflow, use multiple queues 

o Use 

Alibaba Cloud Message Queue (MQ) 

and 

Alibaba Cloud - Message Service 

o Leverage existing services 

- Don’t fear constraints

o Better Input/output operations per second (IOPS) for databases

Download

Solution Design Replatform to Alibaba cloud

Source: Alibaba Cloud