Como llevar un Banco a la nube?

Una estrategia que incluye la infraestructura actual de los bancos, y cómo se puede ir al Cloud realizando pequeños pasos que aseguren el éxito de la migración y puesta en marcha de la operación en la nube. #DirectConnect #VPC #EC2 #Networking

Por Mauricio Ferreira - CTO @Incluit

Transcript

1. Como llevar un banco 
 a la nube?
2. Why?
3. 1. CHOOSING THE RIGHT PROVIDER
4. Benchmark Service Level Agreements (SLA) Uptime Guarantees Security, Compliance and Privacy Standards Data Ownership Pricing Model Where the Data Centers Are Located Support
5. 2. ALL IN
6. The Problem
7. By 2020, 90 Percent of Organizations Will Adopt Hybrid Infrastructure Management https://www.gartner.com/newsroom/id/3666917
8. Benefits of a Smoothly Migration Keep the business up & running Security every step Learning
9. 3. Connections
10. VPC VPN Direct Connect Toolset
11. What’s VPC? https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Introduction.html “Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you've defined. This virtual network closely resembles a traditional network that you'd operate in your own data center, with the benefits of using the scalable infrastructure of AWS.”
12. What’s VPN? “Internet Protocol Security (IPsec) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. “
13. What’s Direct Connect? “Dedicated, private pipes into AWS Create private (VPC) or public virtual interfaces to AWS Reduced data-out rates (data-in still free)) Consistent network performance At least 1 location to each AWS region Option for redundant connections Multiple AWS accounts can share a connection Inter-Region enables connectivity to multiple regions in US Uses BGP to exchange routing information over a VLAN”
14. VPN vs Direct Connect?
15. La primer VPN
16. How to create a VPN? 1. Create a VGW 2. Attach it to the VPC 3. Create a CGW 4. Create a VPN 5. Update Route Tables 6. Configure CGW
17. Create a Customer Gateway
18. Create a Virtual Private Gateway And attach it to a VPC
19. Create VPN
20. High Availability
21. Direct Connect
22. Direct Connect: Letter of Authorization
23. Create VIF
24. VIF
25. VIF
26. Final Solution Direct Connect with VPN Backup
27. Arquitectura Simplificada VPC
 peering Banco APi Manager AWS Apps Apps Internet AWS Direct Connect NAT App Server Legacy
28. 4. How to Operate
29. Security ultra first priority Multi VPC VPC Peering Log Everything Practices
30. mauricio.ferreyra@incluit.com @mauriff mferreyra GRACIAS!