About Client

India's leading asset and wealth management company, primarily catering to the HNI and UHNI market in India.

Industry

BFSI

Service

Application migration to Azure

Business Need

Our client was in midst of rapid business expansion and their existing infrastructure had limitations that were hampering its operations. Migrating their business applications to cloud without impacting services was an imperative as their applications had strong dependencies on network file systems (NFS).

Business Challenge

• On-premises hardware was running out of support and needed to be migrated in less than a month
• The client wanted to efficiently host their Windows and Linux - based applications for their Wealth Management System on cloud
• Since their user base was spread across the Central India region, this migration had to be achieved with no business disruptions or loss of accessibility
• Being a technical migration, requirements was to ensure near zero disruption to business
• Deliver a compelling TCO on Cloud.
• Existing core application could not cope with growing business needs which required an immediate Cloud solution
• Required a quick transformation to cloud with TCO considerations.
• On-Premise’s setup of Wealth Management Application to the Azure Cloud in Central India Region.
• DR and backup and restore mechanism for Cloud migration.
• Financial Data for all users must be kept in a place where the SLA for storage is high and there is near zero data loss

Business Solution

We analyzed the client’s physical infrastructure utilization for the past three months and provisioned the same infrastructure on Cloud by right sizing Virtual Machines with an intent to enhance client’s confidence in migration to the Cloud.

We developed a cloud reference architecture comprising of network security, network connectivity, Azure account, IAM. We also crested the deployment architecture of all applications, and provided a detailed migration plan, schedule and cost for the migration.

In the cloud build stage, we designed a virtual network which included networking, web application firewall (NGFW) and detailed cloud monitoring. We also provided significantly high apps availability by applying CloudOps and ITIL process.

Through this migration, we enabled the client in adjusting to the 'Cloud ways of working’ with extremely high SLA compliance at VM level and delivered high data resilience levels using “well architected framework” approach.

Project Scope

The Scope of work included:

1. Migrate on Premise Setup application to the Azure Cloud.
2. Deploy Azure set up with Azure Virtual Machines, Virtual Network in Central India region.
3. Assigned Public IP address to the Webserver Virtual Machine.​
4. Enable backups and take Snapshots for All machines
5. Create ASR (DR) in South India region
6. Enable Log-shipping from On Premise to Cloud for SQL Database migration
7. Install monitoring agent and monitor performance of the Server.

Our Approach

Assessment

1. CTO meeting to understand goals and objectives.
2. Discussion with key IT stakeholders and walkthrough of high-level IT topology.
3. Application portfolio inventory with data elements.
4. Identify long prevailing gaps and come up with de-risking mechanisms for a smooth migration.

Design

1. Hybrid cloud approach: we recommended DR on cloud and production on-premises to leverage the life of existing hardware and mitigate the client’s risk associated with the adoption of new technology.
2. Rehost or Lift & Shift methodology: To mitigate unknown risks, we recommended a lift & shift approach to rehosting. Post migration, the scope for refactoring and re-platforming is much more.
3. Creating Azure, a/c, create RG, users & Groups, create network components, deploy compute & storage for Dev, QA, and Production environment
4. Implement infra security – OS hardening, apply security policy etc.

Migration

1. Moving applications from the on-premises environment to the cloud with no changes to the underlying application.
2. Significant reduction of their on-premises data center footprint.
3. Strategy allows users to migrate quickly and easily with lesser application breakdown issues.
4. Setup Azure Site Recovery
5. Create RG, users & Groups, create network components, deploy compute & storage for Dev, QA, and Production environment
6. Implement security policy.

Validation and Cutover

1. Pre and Post Migration Benchmark validations for disk IOPS, to ensure uncompromised performance. Seamless cutover with minimal downtime for cutover < 3 hours
2. Pick the right type and size of Virtual Machines as a part of Cost Optimization Activity.
3. Reduce the configuration based on monthly utilization report analysis.
4. Perform & Validate backup and restore.

Business Impact

1. Infrastructure is more flexible to scale up and scale down as per customer requirement.
2. Non-Production infra will be run in Business hours only to avoid unnecessary cost.
3. Cost and SLA improved with No need to maintain physical server as a very difficult for huge amount infrastructure.
4. Free-up IT resources - Improve efficiency by freeing up valuable financial and staff resources.
5. Reduced Capital Expenditures - No longer needs to acquire, enterprise software, or hardware system. This eliminates the burden of budgeting for capital equipment well in advance as well as the capital expense.
6. Availability of data for restoring on cloud– No need to locate or retrieve on physical server. During critical events such as on-premises data center outage, when many applications must be restored simultaneously and as soon as possible.
7. Better uptime numbers, no waiting for hardware repairs and Leverage hardware spares at no additional cost.
8. Around 40% TCO reduction by using RI & instance start/stop.
9. Cost-effective low-cost cross region DR solution to address region level failure.
10. Solution with 99.95% SLA at VM level and 99.99% at data resilience level using “well architected framework” approach.

About the Partner

cloudxchange.io offers you unrivalled choice and flexibility so you can pick the Cloud services best suited for your applications, workloads, and business requirements i.e., Amazon Web Services, Microsoft Azure, Google Cloud Platform and Others.

cloudxchange.io team is passionate about understanding and meeting the unique business requirements of the clients. Our team focuses on applying their diverse range of knowledge and skills to earn trust and confidence. Leveraging years of proven experience, we strive to anticipate the needs of our clients and exceed their expectations. We develop a deep understanding of our clients' business challenges and objectives and take a personal interest in helping them to achieve their goals.

About Client

Education company that provides online and blended education options through Career Learning Programs

Industry

Education

Service

Infrastructure migration to Microsoft Azure

Business Need

Our client had its entire IT infrastructure hosted on-premises and co-located in East USA and had its internal team managing it. The client wanted to migrate the IT infrastructure on to the Cloud to enable ease and simplicity in managing IT and reduce its capital expenditure towards IT infrastructure, enhance security and compliance, improve options for scalability for business growth and achieve operational agility.

Business Challenge

1. Full capacity in-house data center that needed to be migrated to Cloud with DR, backup, and restore mechanism and plans
2. Being a technical migration, requirement was to ensure near zero disruption to business
3. Integration of applications with Cloud to deploy game-changing solutions for customer
4. Quick migration to Cloud with TCO considerations
5. Financial Data for all users had to be kept in a place where the SLA for storage is high and there is minimum recovery point objective (RPO)

Business Solution

The cloudxchange.io team worked upon Proof of Concept (PoC) for the client after evaluating the infrastructure utilization of the customer and created an Azure Landing Zone through provisioning Virtual Machines (VMs)for a seamless migration.

We developed a Cloud reference architecture comprising of network, security, network connectivity, Azure account, IAM, deployment architecture of all applications and detailed migration plan that including schedule and cost of implementation.

In the Cloud build stage, we helped the client to design a virtual network which included networking, Palo Alto firewall and WAF as an Application Gateway to route their Application URLs with detailed Cloud monitoring. We also ensured uninterrupted availability by applying CloudOps and ITIL process.

Project Scope

The Scope of work included:

1. Deploying IAAS (VM, VNET, Storage…) in East US region.
2. Configure network security.
3. Install Monitoring agent on Virtual Machines.
4. Configure VNET Peering
5. Configure Backup policies on the infrastructure.
6. Install Patches/Updates on the servers.
7. Check the Security recommendations.
8. Troubleshoot Infra related issues.

Our Approach

Design Architecture: -

• Multi segmentation of Azure landscape
• Architectural design as per Azure and industry standard best practices.
• Hub and spoke modal used with Azure.

Security: -

• Detailed comparison and analyses of security in Cloud and On-premises security components
• Networking backbone and architecture with multiple branch locations
• Consultation for improvement of Azure security center score
• Next generation firewall features
• Centralized login to virtual machines. Azure AD and centralized VM login using Azure AD
• WAF for customer rules of Geo fencing.
• Improvement roadmap for security vulnerabilities

Migration solution: -

• Creation of Plan of action for enhancement of platform with advanced Azure services
• Plan of action for NGFW implementation
• Understanding networking topology and design Azure backbone
• Azure architecture design various Azure services like VM, SQL DB PaaS, etc.
• Storage blob with LRS for storing backup data..
• Security Center Configuration
• Creation of log analytics workspace
• Configure services like Just in time access.
• Adding Application Servers behind WAF and Firewall
• Meeting SLA uptime for uninterrupted service

Business Impact

1. Enabled Azure Security Centre with Azure AD protection
2. Due to Hub and spoke model the servers can be accessed only through Log Me in Server
3. Any third-party Application URLs or unauthorized access are strictly as per least privilege and have to undergo through Palo Alto Firewall.
4. DR and backup and restore mechanism for Cloud migration was successfully implemented with near zero disruption to business
5. Entire Data Centre has been moved on Azure Cloud Virtually
6. Achieved reliable backup storage, disaster recovery & redundancy, secure data access, scalability & high availability through the migration.
7. Financial Data for all users has been secured and encrypted with SLA for high storage and near zero data loss
8. Successfully implemented Disaster Recovery with Test Failover run
9. DR with minimum recovery point objective (RPO) and recovery time objective (RTO) was achieved

About the Partner

cloudxchange.io offers you unrivalled choice and flexibility so you can pick the Cloud services best suited for your applications, workloads, and business requirements i.e., Amazon Web Services, Microsoft Azure, Google Cloud Platform and Others.

cloudxchange.io team is passionate about understanding and meeting the unique business requirements of the clients. Our team focuses on applying their diverse range of knowledge and skills to earn trust and confidence. Leveraging years of proven experience, we strive to anticipate the needs of our clients and exceed their expectations. We develop a deep understanding of our clients' business challenges and objectives and take a personal interest in helping them to achieve their goals.

About Client

Our client is one of the premier asset management companies in India, with over two decades of a track record in investment excellence.

Industry

Capital Markets

Service

Cloud Hosting

Business Need

The client wanted to move its It infrastructure on Cloud to ensure a stable, secure, and flexible IT infrastructure that could be available around the clock to implement intelligent automation solutions. These automation solutions were required to handle high-volume requests, which would help with the service level consistency and optimization of workforce alignments.

Business Challenge

Business Solution

Our deep domain expertise and proven credentials backed by our AWS Advanced Consulting Partner status made us a partner of choice for our client to deploy and manage their on-premises infrastructure on AWS cloud and leverage the many cloud benefits.

Following services were shortlisted for deployment on the AWS cloud:

• Amazon Identity and access management
• Amazon Simple storage service
• Amazon EC2
• Amazon VPN
• Amazon Relational Database service
• AWS Trusted Advisor
• Amazon CloudWatch
• Amazon KMS
• Amazon CloudTrail
• Amazon Flow log
• Amazon Guard Duty
• AWS Config
• AWS Inspector
• Amazon Cloud Formation
• AWS Elastic Kubernetes service
• AWS Lambda
• AWS Relational Database service AWS Glacier

Solution Approach

Our solution approach involved an accurate plan that entailed comprehending the current challenges of the client and creation of a roadmap to where the client intended to reach. We proposed a complete upgrade. Hosting monolithic IIS MSSQL standard application on AWS was built using the below listed well architected standards:

• Single source of truth with separate landscape for production and non-production environment
• Next generation firewall to protect against Gen-5 attacks
• Communication of App and DB traffic via NGFW
• Identity and access management with least privilege mechanism, MFA for the user credentials
• SQL log shipping for HA and Near DR and direct connect using different ISP for redundancy
• HA for required applications and its placement behind the internal application load balancer
• VPC endpoints to access AWS services privately from AWS LAN network instead of letting them traverse internet. Example of such services- EKS cluster, AWS S3
• Snapshot policy for all the servers apart from the Commvault backup that has been configured on a virtual machine
• Configuration of Application servers at multiple AZ with load balanced using AWS Application load balancer
• Enablement of CloudTrail logs for the user activity logging for customer account and moved the logs to S3 bucket for audit purpose and long-term retention
• Kubernetes Cluster deployment
• Configuration of Servers with auto start/stop mode for cost optimization
• Restriction of access to Production servers via bastion hosts for additional layer of security
• Configuration of Lambda for achieving custom DNS query resolving from on-premises to Application load balancer
• Configuration of AWS inspector for findings that are non-compliant to CIS benchmarks in the architecture components deployed
• Using AWS Config for CMDB management
• Configuration of Guard Duty for analysis of DNS, VPC and CloudTrail logs
• Configuration of Snapshot Lifecycle Policy for the servers in AWS
• Configuration of VPC flow logs to monitor traffic coming in to the NIC of the server and outgoing traffic

Third-party Tech-stack

• Third party monitoring using Site 24 x 7
• Incident management using Fresh Service
• Commvault for backup using native snapshots
• Access management using Acros
• Next-gen firewall using Palo Alto
• Firewall and log management using Minefield
• Third party SaaS using Cloudflare
• WAF Application monitoring using New Relic

Platform

Business Impact

Incident management

• Service desk web portal for managing the incidents, alerts, sending alerts to user
• 24 X 7 help desk on Phone, Email, web-based support for customers
• Users enabled to raise tickets via email, self-service portal, phone, in person as per ITIL standards

Security

• Multi-level data security with password and data encryption
• Enterprise Grade Next generation firewall implementation (Palo Alto)
• Advanced Threat Prevention
• Advanced cyber security

Reliability

• Durable data storage provided by Amazon S3

Cost Optimization

• Servers can now run only for the duration as per requirements
• Reduced capital expenditures on hardware, software

Server Monitoring

• A quick weekly summary on the status and performance of server

Report

• Availability summary, Busy Hours, Health Trend, Performance reports
• History of all interactions between customer and help desk

Productivity

• Improved efficiency by freeing up valuable financial and IT staff resources

DR

• Availability of data restoration of applications on cloud in case of outages

About the Partner

cloudxchange.io offers you unrivalled choice and flexibility so you can pick the Cloud services best suited for your applications, workloads, and business requirements i.e., Amazon Web Services, Microsoft Azure, Google Cloud Platform and Others.

cloudxchange.io team is passionate about understanding and meeting the unique business requirements of the clients. Our team focuses on applying their diverse range of knowledge and skills to earn trust and confidence. Leveraging years of proven experience, we strive to anticipate the needs of our clients and exceed their expectations. We develop a deep understanding of our clients' business challenges and objectives and take a personal interest in helping them to achieve their goals.

About Client

Our client is an international oil and gas engineering group.

Industry

Oil & Gas

Service

Cloud Backup and DR

Business Challenge

The client was looking for cloud-based DR with zero RPO & 2 hours RTO. They wanted to archive 25 TB data on cloud & DR for 9 servers. All their engineering workstations with more than 200 GB data, needed to be backed up on cloud and all their user PST as backup.

Business Solution

We proposed the following solution:

• A Cloud-based DR with many to one server replication using Double Take DR
• Real time replication of data to Cloud
• 1 Gbps direct connect to AWS for faster replication and quick restoration of data
• Cloud-based backup to AWS S3 for workstations
• 25 TB data archived to AWS Glacier

Process

• Direct connect to VPN with throughput of 1gbps
• Arranged 3rd party replication tool doubletake on AWS server
• 9 server replications on single server
• Via direct connect, tape library data uploaded on AWS server
• Cloudberry backup installation, Backup uploaded on S3

Business Solution

The cloudxchange.io team worked upon Proof of Concept (PoC) for the client after evaluating the infrastructure utilization of the customer and created an Azure Landing Zone through provisioning Virtual Machines (VMs)for a seamless migration.

We developed a Cloud reference architecture comprising of network, security, network connectivity, Azure account, IAM, deployment architecture of all applications and detailed migration plan that including schedule and cost of implementation.

In the Cloud build stage, we helped the client to design a virtual network which included networking, Palo Alto firewall and WAF as an Application Gateway to route their Application URLs with detailed Cloud monitoring. We also ensured uninterrupted availability by applying CloudOps and ITIL process.

Business Impact

1. Lower TCO for cloud with many to 1 server DR
2. Zero data loss due to real time replication
3. Secure connectivity to Cloud with Direct Connect & VPN
4. Low cost and reliable data storage of compliance data on AWS glacier, customer removed traditional tape based archival to cloud archival

About the Partner

cloudxchange.io offers you unrivalled choice and flexibility so you can pick the Cloud services best suited for your applications, workloads, and business requirements i.e., Amazon Web Services, Microsoft Azure, Google Cloud Platform and Others.

cloudxchange.io team is passionate about understanding and meeting the unique business requirements of the clients. Our team focuses on applying their diverse range of knowledge and skills to earn trust and confidence. Leveraging years of proven experience, we strive to anticipate the needs of our clients and exceed their expectations. We develop a deep understanding of our clients' business challenges and objectives and take a personal interest in helping them to achieve their goals.

About Client

Our client is India’s leading retail ERP solution provider.

Industry

ERP

Service

Microsoft Azure Cloud Services

Business Challenge

Traditionally, our client used to provide dedicated IT infrastructure for each customer and used to host it on their on-premises traditional Datacenters. However, as their customer base grew, this practice started incurring huge operational costs as they had to manage multiple setups and application binaries. These multiple setups resulted in high pricing for the end customer due to high input cost.

To counter this problem and to provide fair pricing to the end customer, our client wanted to set up cost effective virtual machines to run production for limited time of business hours. However, they wanted to do this ensuring a very secure access to environment with a solid backup solution and an ITIL service life cycle tool to maintain all events for Audit.

Business Solution

Considering the requirements of the client, we proposed Azure Cloud Services to achieve the following:

• Azure cloud services.
• Azure automation.
• Azure IPSec VPN.
• Cloud protect as backup solution.
• Service desk tool for ticketing.
• Cloud support for monitoring system

Our Approach

Our solution entailed creation of a SaaS based ERP with single ERP software for multiple customers. This helped our client with:

• Application load balancing with auto scaling.
• Dynamic content moved from application servers to Azure blob storage.
• Always on SQL active configuration for highest availability.
• DR setup on other Azure region with Azure site recovery.

Business Impact

• Production environment migrated to Azure platform as legacy content.
• Cost optimization achieved by automation to run the resources.
• Installed and configured the cloud protect as a backup solution.
• Ability to restore data as and when required.
• Even a restoration can be done as a complete Virtual Machine. With this option we achieve Minimum RPO & RTO.

About the Partner

cloudxchange.io offers you unrivalled choice and flexibility so you can pick the Cloud services best suited for your applications, workloads, and business requirements i.e., Amazon Web Services, Microsoft Azure, Google Cloud Platform and Others.

cloudxchange.io team is passionate about understanding and meeting the unique business requirements of the clients. Our team focuses on applying their diverse range of knowledge and skills to earn trust and confidence. Leveraging years of proven experience, we strive to anticipate the needs of our clients and exceed their expectations. We develop a deep understanding of our clients' business challenges and objectives and take a personal interest in helping them to achieve their goals.

About Client

Our client is a leading NBFC in business of giving credits to merchants.

Industry

Finance

Service

IT Infrastructure Cloud Hosting

Business Need

Our client wanted to run its entire IT setup on cloud including DR to avoid creation and management of Datacenter.

The client wanted the following features:

• Across service provider DR with zero RPO.
• 15 minutes RPO backup for critical servers.
• Secure access from HO, Branches & remote users.
• Production systems wanted to run on stable, robust, user-friendly platform.
• Environment must be secured for operations financial institutions.
• Secure connection between on premise and the production environment.
• Disaster recovery on stable and secure platform geographically different locations.
• Backup solution
• ITIL based complete life cycle of technology

Business Solution

Considering the client requirements, we proposed the following:

• Primary site hosted on Azure Chennai & DR on AWS Mumbai.
• DR configuration with near zero RPO & 30 Minutes RTO.
• Unified IP SEC VPN connectivity from offices & unified VPN access across Cloud service providers for roaming users.
• Dynamic scaling for application servers based on workload.
• Unified AD authentication for server infrastructure & users.
• Azure data center for running production environment.
• AWS data center for running Disaster recovery.
• Service desk as an ITIL based complete life cycle of technology for ticketing and alerting.
• Cloudxsupport as Cloud monitoring tool.

Following applications hosted on cloud

• Core lending ERP
• Online credit authorization system with integration with CIBIL.
• Online payment gateway with Yes bank integration.
• Active Directory
• Service desk tool
• Complete Development

Business Impact

• Azure is user-friendly cloud platform.
• Old production was running on Microsoft Windows platforms so moving to Azure was a smooth process been a same technology family.
• Secure enough to run financial institutions business process like multifactor authentication for accessing Prod and UAT environment, limited access to environment by allowing authorized IPs
• The client was able to achieve secured connection between on premise and Cloud platform with VPN
• Very cost-effective solution to run 24 x7 production system
• Disaster recovery deployed on AWS. Successful connection between both cloud platforms for transfer of data to DR site without VPN.
• Deployed low cost and low resources on DR site to utilize DR very efficiently. Installed and configured the snapshot based backup solution.
• Ability to take snapshot with 15 min time interval to achieve business requirement of minimum RPO & RTO.
• Environment is made secure to face Ransomware attack.
• Maintain all records to achieve compliance.
• Service desk to log all the events and Cloudxsupport as a monitoring tool to get alerted by all events and to Act as and when required to address the incidents to resolutions.

About the Partner

cloudxchange.io offers you unrivalled choice and flexibility so you can pick the Cloud services best suited for your applications, workloads, and business requirements i.e., Amazon Web Services, Microsoft Azure, Google Cloud Platform and Others.

cloudxchange.io team is passionate about understanding and meeting the unique business requirements of the clients. Our team focuses on applying their diverse range of knowledge and skills to earn trust and confidence. Leveraging years of proven experience, we strive to anticipate the needs of our clients and exceed their expectations. We develop a deep understanding of our clients' business challenges and objectives and take a personal interest in helping them to achieve their goals.