Systems Integration
Implementing Service Mesh on stand-alone architectures (non-Microservices)
published on Wednesday, August 5th, 2020
Problem The government programme started with no security requirements for encryption information in transit (TLS). After a review, a new requirement came to encrypt all in-flight communications using TLS. Requirement Use Hashicorp Vault as central CA Implement encryption in transit for all in-flight communications Solution The solution was designed and implemented using the service mesh […]
Continue reading →Filed under: Case Study, Systems Integration
Keeping viruses out of the shared file system during file transfer
published on Wednesday, August 5th, 2020
Problem The existing file transfer solution does not process and perform Anti-Virus validation on a self-isolated environment per file. So any file opened potentially can contain a virus and infect the whole server and other files within the server. The current file transfer solution requires the provision of servers utilising a large amount of resources […]
Continue reading →Filed under: Case Study, Systems Integration
Securing your Hashicorp-Vault secrets avoiding storing secrets as unencrypted environment variables or files on the file system
published on Wednesday, August 5th, 2020
Problem Many applications need to use secrets (username, passwords, tokens, …) to connect with other services like databases or protected services. The classical way to provide secrets to an application is using environment variables, configuration files, JVM parameters or command line parameters, meaning if an attacker can get into the machine they will be able […]
Continue reading →Filed under: Case Study, Systems Integration
Reducing infrastructure costs and improving performance in Systems Integration; replacing ESB with Camel Microservices
published on Wednesday, August 5th, 2020
Problem The SOA solution implemented using WSO2 APIM and WSO2 EI, was following old guidelines and originally designed to live within a secure network. There were a number of issues to resolve: The solution was migrated to the cloud without any security uplift. This SOA solution was implemented on top of VMs and the product […]
Continue reading →Filed under: Case Study, Systems Integration
Enabling multi-Cloud security utilising Hashicorp-Vault
published on Wednesday, August 5th, 2020
Problem A government client is required to validate every incoming request from external systems to prevent attacks. The existing system: Only provided token validation for incoming requests. Did not support attack detection or encryption in transit for legacy internal applications. Allowed incorrect requests to pass through the system because it does not validate incoming JSON/SOAP/XMLpayloads. […]
Continue reading →Filed under: Case Study, Systems Integration
Experience of working with both traditional and modern interfaces and systems integration, to document proposals for possible solutions and drive the solution of choice with the developers and others
published on Tuesday, March 22nd, 2016
HMRC wanted to develop 12 file transfer journeys using SOS-Berlin JobScheduler and Java based Microservices. Our team worked with traditional/modern interfaces to drive the solutions forward: -Designing architectural-patterns to interface FTP and Microservices with legacy-services (messages->queues->flat files and vice versa); facilitating dual running during trader migration. -Worked closely with programme architects to discover viable solution-options, […]
Continue reading →Filed under: Agile Delivery, HMRC, Solutions, Systems Integration