We use cookies to keep our website secure, personalize your experience and for web analytics purposes. Read our Privacy Policy to learn more. By clicking Accept, you agree to our use of cookies.

Kanda Software Logo
Seamless Cloud Migration for Superior Performance and 70% Cost Savings image
CyberSecurity

Seamless Cloud Migration for Superior Performance and 70% Cost Savings

About the Customer

The client is a leading US-based cybersecurity company that specializes in providing advanced security solutions to help organizations manage information security risks. Their core platform, powered by sophisticated algorithms, delivers daily security ratings that help companies manage third-party risks, streamline cyber insurance underwriting, benchmark performance, and assess aggregate risk.

Leveraging their extensive infrastructures, the client has become a trusted partner to 2,100 customers. Notably, 20% of Fortune 500 companies and 4 out of the top 5 investment banks rely on the client’s services to stay on top of their cyber risks.

The Challenges

Due to their rapidly expanding client base and increasing demand for real-time security ratings, the client faced several operational bottlenecks that were impeding their efficiency and growth trajectory.

  • High operational costs

The client’s existing infrastructure was hosted on Amazon Web Services (AWS), a platform they had utilized since their inception due to its robustness and scalability. However, over time, the costs associated with maintaining and expanding this infrastructure have become prohibitively high. 

  • Scaling limitations

The ability to scale infrastructure seamlessly is crucial for a company providing real-time security ratings and risk assessments. That said, the client’s AWS setup was struggling to keep up with the growing volume of requests, leading to performance issues.

To address these challenges and future-proof its operations, the client made a strategic decision to migrate its infrastructure to Google Cloud Platform (GCP).

Why Kanda?

Being a recognized Google Cloud Partner with a proven track record of successful cloud migration and infrastructure optimization projects, Kanda Software was recommended by GCP as an experienced vendor for the task at hand.

Given the client’s security concerns, additional meetings were held and legal agreements were signed to protect the client’s intellectual property rights. 

The Team

Kanda Software assembled a team of four experienced DevOps engineers to undertake the project. We closely collaborated with the client’s in-house team through daily meetings to ensure utmost transparency and alignment with their goals.

Coding the Secure Online Solution

The Solution

The project primarily focused on migrating the client’s infrastructure from AWS to GCP while optimizing their system architecture. We kicked off with the migration of two critical services — Decentralized DNS and Sinkhole.

Migrating Decentralized DNS

DNS, or the Domain Name System, is a service that translates domain names into IP addresses. With the ever-growing number of customers, the client’s decentralized DNS system was no longer able to handle huge numbers of requests during peak hours.

While migrating the DNS system to GCP, we implemented auto-scaling mechanisms that can quickly ramp up to maintain the required performance levels. After peak workloads, these mechanisms scale down for cost optimization purposes. This strategy allowed the client to ultimately reduce expenses by 70%.

Sinkhole Optimization

Sinkhole is a server that aims to capture malicious DNS requests and take them away from the intended target. Our comprehensive approach included:

  • Elastic infrastructure design

    Elastic, highly available, and fault-tolerant architecture to prevent data flow throttling by design.

    • Scalable network load balancer (L3) which ensures the right capacity for incoming traffic flow.
    • Autoscale group of high-throughput instances of proxy component responsible for traffic mirroring for IDS/Suricata analysis and subsequent downstream traffic after classification.
    • Collecting logs from all backend instances and IDS/Suricata by dedicated scalable, Google-managed Pub/Sub services that process and store logs in Cloud Storage.
  • Traffic flow management

    • Public endpoint IP rotation: Using reserved external IP addresses provided by Google.
    • Traffic capture and categorization: Implementing traffic mirroring to separate Suricata IDS and keep compute instances solely for traffic categorization.
    • Canaries: Every component of the Sinkhole project provides metrics.
    • Managed or unmanaged authoritative NS: Using decentralized DNS or switching to Google DNS resolvers.
  • Real-time certificate provisioning

    Managed option: Wildcard certificates by Google Certificate Manager attached to Google Load Balancers.

  • Logging

    Implementing a scalable log streaming pipeline with a 90-day retention period.

In addition, all system components are protected by Google Cloud Armor and support Web Application Firewall (WAF) customization.​​

The Results

As a result of the migration, the client now has an infrastructure that scales seamlessly with demand, ensuring consistent performance during peak hours. The new GCP-based infrastructure achieves the performance goal of 100,000 requests per second, while the projected costs are reduced by 70%. 

We also suggested a number of further improvements and trained the client’s team on how to use GCP effectively, empowering them to manage and optimize their new infrastructure moving forward.

Both the client and GCP provided positive feedback, highlighting our cloud migration expertise. The client acknowledged our seamless communication and technical proficiency, which led to significant performance improvements and substantial cost savings. GCP also recognized our effective use of their platform.

Technology Stack:
Back to All Case Studies