ITC Infotech
Cloud Native Solution Framework

APRIL 2022

©2022 ITC Infotech. All Rights Reserved.

1

Topics
ITC Infotech Cloud Native Offering

Cloud Native Solution Framework

Common Solution Patterns

Legacy to Modernization
Cross Cutting –Common Concerns

Governance©2022 ITC Infotech. All Rights Reserved.

01
02

ITC Infotech Migration Strategy

04

Cloud Native – Modernization Themes

06

Tools & Accelerators

03

05







Application Containerization
Application Re-factoring
API First Methodology
DB Modernization
DevOps Modernization

07

2

ITC Infotech Cloud Native Offerings©2022 ITC Infotech. All Rights Reserved.

3

ITC Infotech - Service Offerings and Frameworks
Strategy & Consulting

Maturity Assessment & Roadmap

Migration Services

 Cloud Native application strategy,planning and implementation approach Cloud and Cloud native capabilities
assessment
 Adoption Plan, Reference architecture
blueprints

 Application migration on Cloud native
capabilities
 Enhance with Cloud containerization and
DevOpsEngineering

Technology

Value Adds & Accelerators

 Application Modernization with cloudnative technologies
 API and Microservices based design anddevelopment on cloud Serverless architecture services
development

 Azure Cloud native experience Large Scale Implementation experience API Led Digital transformation and
Digital Integration Experience Implementation Accelerators reduceoverall Implementation Effort– Microservices Assessment framework– Integrated Development &Deployment framework©2022 ITC Infotech. All Rights Reserved.

4

Our Cloud Native Solution - Benefits
Improve Time to Market

Roll Out New
Features Fast

Greater Scalability

Eliminate Application
Defects

Reduce App
Downtime

Easier Application
Management

Improve App
Performance

Automate Application
Development©2022 ITC Infotech. All Rights Reserved.

5

ITC Infotech Migration Strategy©2022 ITC Infotech. All Rights Reserved.

6

Migration Methodology - Phased Approach
Discovery & Assessment
Discovery

Migration

Plan & Design
Wave
Planning

Assessment

Tool based
Discovery

Build
App &
Data

MG-1
MG-2

Assessment
Framework

Network
Infrastructure
Application
Data
Integration

ManualDiscovery

Re-HostUpdate KR
Transition to BAU

MG-N
Test - Quality Checks
Build
App &
Data

7R Decision Framework
Application metadata,interfaces,
dependencies etc..

Transition

Containerization,
Code remediation, refactoring,
Native development etc..

MG-1

DesignMG-NHypercare

Migration Factory

Wave Planning
Network,
Infrastructure,
Server usage
etc..

Deploy

Test

Build

DesignPost Migration

DeployDevSecOps

Containerization,
Code remediation, refactoring,
Native development etc..

RetainRe-Platform

RetireRe-Factor

Re-PurchaseRe-Architect

Hypercare&
Transition

MG-2

Test - Quality Checks

DeployDevSecOps

Project Steering and Program Governance
Program Organization – ITC,
Customer, & RACI
©2022 ITC Infotech. All Rights Reserved.

ProgramGovernance

Customer Engagement &Priority identifications

Proactive Risk Identification &Mitigation

SLA &
KPIs

Command Center &Status updates

ChangeManagement
7

Our Cloud Native Solution Framework©2022 ITC Infotech. All Rights Reserved.

8

Cloud Native Solution Framework
GovernanceBusiness Outcome
Business strategy,
Goals and
RunbookStrategy and Assessment Approach

Standards & Policies

Process

Implementation
guidelines andstandards toestablish cloudnative capabilities

Establish
processes tomonitor violations
and adherence topoliciesProcess
Technology

Asset
PeopleBUSINESS

Assessment

MicroserviceGovernTECHNOLOGY, PROCESSAND PEOPLE

Manage

Agile

DevSecOps

Business Events/
Requirements
Architecture Style

Cloud

Development Process
Automation Process
Execution Platform

DefineStrategyManageAdopt

Criticality

ImpactBusiness Value

Document thecriticality andrelative businessvalue of eachservice

Establish clear
performance
expectations andbusiness KPIs

Document, track andreport oncommitments to costand performance

Operational Efficiency
Monitoring©2022 ITC Infotech. All Rights Reserved.



Platform Operations

Adopt and Optimize

Optimize

Build

Review

Optimize

Iterative build model tomeet defined customer
need /functional
behavior

Establish repeatableprocesses for iterative
review for design
betterment

Gather metrics
and optimize
services andprocessesContainerized Architecture
API & MicroserviceServerless Architecture
DevSecOps

9Cloud Native - Modernization Themes©2022 ITC Infotech. All Rights Reserved.

10Modernization Themes – Application Containerization
Evaluate Enterprise Legacy (Monolith) Inventory Applications

Gather Application
Requirements
Authentication
Security
Architecture
PerformanceHigh Availability
Monitoring
Scalability
Re-usability
Downtime
Database
Filesystems©2022 ITC Infotech. All Rights Reserved.

Analyze and gather all the system requirements
required for Containerization

Application Containerization











Tools & Services

Identify applications
Choose a base Image.
Install the necessary packages.
Add your custom files.
Define which user will (or can) run your container.
Define the exposed ports.
Define the entry point.
Define a Configuration method.
Externalize your data.
Set up container Security & GovernanceContainer
Infrastructure Planning

Containerization ofApplications

CI-CD / DevOps
Integration

 Identity
key
Infrastructurecomponents
requiredfor
converting the monolith application
into a containerized application

 Set up Containerization for
identified
anddefinedapplications in the portfolio

 Set up CICD / DevOps
Integration for theapplications

Feedback & Optimizations
 Review user’s feedback and overall application
usability and performance and optimize as anwhen required.

Container
Governance

Performance& Monitoring

Test &
Rollout to cloudContainer
Security Identity
key
performance metrics

 Testand
Rollout
application in Phases

 Set up Container
Security11Modernization Themes – Application Containerization Contd.
 Package once , deploy everywhere with less risk.

App1

App2

App3

 Portability
 Supports Infrastructure-as-a-Code principles

bins/libs

bins/libs

bins/libs

 DEV/PROD environment parity from desktop to
production environments
 Better community support including Docker

Container Engine

 Supports scalable workload
 Provides application and process isolation

Operating System

 Better Performance Ease of deployment

Infrastructure©2022 ITC Infotech. All Rights Reserved.

 More control on the technology stack Prefer more serverless architecture over infrastructure12Modernization Themes – Application Refactoring
No of Interfaces –Inbound and Outbound2
No of Lines of Code /function points tobe refactored for
migration

No of Cloud Services
intended to be utilized
DevOpsStandardized
Setup

1

Application Refactoring

5
7

4
3

6

Database or OS changes required– homogeneous orheterogeneous migration

Architecture and Type ofApplication like Monolithic or
Service oriented

Data Architecture Master Data Management
 Reference Data Flat Object Structure Independent Tables
 Blob Storage

Deployment
 EARs Packaging
 Containerization
 Container Orchestration
 Infra Pipeline – IaC
 Application Pipeline

Technology
Stack Maturity

Considerations
Application Architecture No Existing Webservices
 Existing Macro Services
 REST or JMS
 SOAP or EJB
 Servlet / JSP
 JSF / Spring Portlet©2022 ITC Infotech. All Rights Reserved.

 Identify key enterprise apps
 Define Application parameters like authentication ,security , performance etc.
 Identify the lines of code and touch points forrefactoring Define no of Interfaces – Inbound and Outbound Setup CICD process Define well defined Architecture Leverage serverless cloud platform Continuous Health Monitoring Automated Alerts and Notifications
Tools &
Services

Re-factoring Macro Service to Micro Services
 Serverless App Component Dependencies
 Flatten & Refactor Components
 Component Grouping API Proxy & Facade

Cross-cutting Concerns
 AuthN & AuthZ
 Service Mesh
 Shared services/domainmodel Log Aggregation & Tracing Service Monitoring NFRs13

Candidate API
Catalog

Project Pipeline APIsWork Ahead
Discovery APIs

API Proposals-New or
Change or Retire

Business IT JointAPI Design
CouncilFunding
Decision

Specification

Demand Driven
Execution

API Release Planning /Sprint Planning

MONITOR

Approve to Plan

Ownership
Decision

Platform API-fication

BUILD &PUBLISH API

API

API Identification

Modernization Themes - API First Strategy

Work Ahead
Execution

API Specifications
and Design

Approve to Build
Review Report

API TechnicalArchitecture Board

Approve to Publish
Create/Change /Retire API

Build & Deploy API

Monitor API

API Analytics

Test APIAPI Test Results(Production
Readiness)

API Product Release
Management

Unlocking legacy assets
API-centric app integration
Multi-channel user experiences
B2B integration©2022 ITC Infotech. All Rights Reserved.

Updated Published
API Catalog

Tools & Services

Considerations

Publish(New / Change) /Retire Decision






API Developer Portal
API Discovery
API Consumption
ScalingAPI Gateway
Subscription & Token AuthCaching
CI/CD - DevOps






Integrations
Security
Monitoring
Analytics

API
Management

Azure
FunctionsAPI
Gateway14

Modernization Themes – DB Modernization






SourceConvert Schema Using automated tool or manually
Apply Reverse Engineering to convert stored
procedure and functions
Create Schema Mapping rules
Apply new schema to target DB engine

Assessment










SchemaConversation

Database
Migration

Extract embedded SQL or
scripts
Identify Changes
Convert schema changes©2022 ITC Infotech. All Rights Reserved.

Define data replication policy
Offline Migration
Flash-cut Migration
Active- Active Migration
Incremental Migration

Data
Replication

Test & ValidateVerify and validate DB objects
Run the test scripts on both
source and target
Check affect DB object andmatch in bothTargetMonitor Instance
health, log andexception report
Validate
Define Rollback
plan
Apply appropriate
alarm & notification

Tools & Services

ExamplesHomogenous
Oracle 8x/9x/11x → Oracle 19c
MySQL 5.x → MySQL 8







Setup Replication InstanceDefine data replication tasks
Apply Configuration Changes
Parallel executions
Data Reconciliation

Script ChangesCurrent Architecture
Platform Compatibility
Regulatory Compliance
Security assessment
Identify DB Objects
Identify target DB engine
Device Migration Strategy
Generate Assessment Report







Heterogenous
Oracle 12 → MSSQLMySQL → Postgres

Cloud PaaS
Oracle → Azure SQLMS SQL → Azure SQL

Azure DMS

ADF

Azure SQL
15

Modernization Themes – DevSecOps
Guiding Principles






No code DevSecOps - GUI based,
automation
Cloud First - scalable across hybrid
Cloud ecosystem
Secure by Design – RBAC and Policy
control
DevSecOps compliant templates
Value Stream – AI/ML based analytics

Integrated
development
environment

ManageComprehensive
Security
Vulnerabilities

Potential BenefitsCloud agnostic DevSecOps platform GitLab based reusable, scalable Core
Automating the deployment workflow
and change approval process
Infra-as-code pipeline architecture forreusable library development
Implementing AI/ML Ops based onneed and requirements©2022 ITC Infotech. All Rights Reserved.

Key Considerations

Agile ProjectManagement&
Collaboration

ITC
Infotech
DevSecOps
FrameworkReleaseAutomation
CI/CD

Test & DefectManagement
Environmentbuild, configure
and application
deployment










Customized process as per application type
(Custom/COTS)
Automated provision of infra resource (Iac)
Use pre-built templatized architecture
blueprint library
Constantly vulnerability scan
Real time monitoring to track system
performance
Scalable across the application landscape
Promote reuse
Rationalization of toolsets
Future ready for any cloud changes
Course of Actions

Potential tools that can be leveraged as appropriate

All trademarks are the registered property of the respective companies and are acknowledged.

16

Solution Patterns©2022 ITC Infotech. All Rights Reserved.

17

Solution Pattern - Monolith Java/.NET App to Containerization App
Target State

Legacy StateWeb Applications

3 Web/App Layer

4

Database Layer

Azure Kubernetes Service (AKS)
Java/.NET

StaticAssetsConfigXMLs

Azure Container
Instances(ACI)

Libraries

1

Batch Applications

Primary Azure SQL(Geo-Replication)

2

Secondary

5
Java/
.NET

ConfigXMLs

Schedulers

Libraries

Load Balancers

DNS

FirewallApplication Integration
Kubernetes Cluster
VNET

Integration
Channels

Database

On Premise

Users

Logic
App

Functions

KeyVault

Storage AccountServiceBus

6 Management & Governance

ACR
Azure DevOps

AAD

1

3

2
Azure DNS will berouting internet
traffic to application
domain name.

Azure Firewall inspects requests
coming to CloudFront andperform allow or block as per
defined rules. Allowed request
passes to Azure Load balancer.

©2022 ITC Infotech. All Rights Reserved.

4
The containerized
web/app layer will be
deployed using AKS
service via the ACR

MonitorLog Analytics

5
Azure SQL is used for
application databasewith Replication
option6 Application resource access managed by IAM roles andApplication Integration can be achieved
with multiple Azure offerings. Some ofthe examples are Logic App , Functions,
Event Hub and Service Bus

policies. Monitor and Log Analytics OMS is used to do
logging. Key Vault is used to store Keys and Secrets ofApplications. Storage Account is used to store
application data to maintain sources of truth andapplying life cycle rules.
18

Solution Pattern - Monolith Java/.NET App to Azure PaaS
Target State

Legacy StateWeb Applications
Java/
.NET

3 Web/App Layer
Azure App Service

Static Assets Config
Libraries
XMLs

1

2

WebAppBatch Applications
Java/
.NET

4 Database
Layer

DNS
ConfigSchedulers XMLs

Libraries

Azure App
ServiceAzure Front
Door

Primary
Azure SQL
(Geo-Replication )Secondary
Azure SQL
5

Application
Integration

WebAppIntegration
Channels

Database

Users

WAF

6 Management & Governance

Logic Functions Service
Bus
App

On Premise
AAD
1

2
Azure DNS will berouting internet
traffic to application
domain name4

3
Azure Load Balancer isused in AKS and After
creating an AKS cluster,
the cluster is ready touse the load balancer©2022 ITC Infotech. All Rights Reserved.

The containerized
web/app layer will
be deployed using
AKS with ACI

Monitor Log Analytics KeyVault

5 Azure Container Registry. Use Container Registry to store 6
Azure SQL is used
for application
database with
geo-replication

private Docker images, which are deployed to the cluster.
AKS can authenticate with Container Registry using its
Azure AD identity. Note that AKS does not require Azure
Container Registry. You can use other container registries,
such as Docker Hub.

Storage AccountApplication resource access managed by AAD IAM roles
and policies. Azure Monitor and Log Analytics is used to
do logging. Key Vault is used to store Keys and Secrets ofApplications.
Storage Account is used to store application data tomaintain sources of truth and applying life cycle rules.
19Solution Pattern - Microservices Architecture on Azure Kubernetes Service
AKS Cluster Subnet
4

5
Data Tier Subnet

2

1

AKS Managed
Load Balancer

Ingress Insightcontroller

UX
Utility Services

Application
Gateway

Azure SQL
6

Elastic Search
3

Azure Kubernetes Cluster

Prometheus

Namespace

Users
7

WAF

Management & Governance

RBAC
AAD

MonitorLog Analytics

KeyVault

Storage AccountPrimary VNET

1
Azure DNS will berouting internet
traffic toapplication domain
name.

2

API Gateway will centrally
manage all request androute to specific resources
and block unwanted
requests©2022 ITC Infotech. All Rights Reserved.

3
AKS will take the input
request and pass on to
AKS LB via the Ingresscontroller

AKS will launch theapp front end via
Ingress Routing
Controller

7 Application resource access managed by AAD IAM

6

5

4

Services will run
from various AKS
PODS

Azure SQL Will be used tostorage data in the central
DB from the AKS nodes
apps

roles and policies. Azure Monitor and Log Analytics isused to do logging. Key Vault is used to store Keys andSecrets of Applications.
Storage Account is used to store application data tomaintain sources of truth and applying life cycle rules
20Solution Pattern - DevSecOps with GitHub

Microsoft
Authenticator

Azure Policy

Azure Active
Directory

8

7

GitHubCodespaces

1

Microsoft Defender

2
5
a

3

GitHub Actions

6
Azure
Resource
Manager

GitHub
Actions

New Branch

GitHubSecurity

GitHubDepenedabot

4
b
4
c

UpgradePull Request©2022 ITC Infotech. All Rights Reserved.

GitHub do developer SAML authentication using
MS authenticator2

Developers use pre-built dev env with security
extensions

3

On new code commit - GitHub Actions
automatically scan the code to quickly findvulnerabilities and coding errors

4

GitHub Dependabot, a DevOps bot agent,
automatically detects vulnerability in dependencies

5

Trigger code builds and automated testing
through GitHub Actions

6

Deploy build artifacts to Azure App Service while
making changes to other cloud resources, such asservice endpoints

7

Azure Policy evaluates Azure resources that are in
deployment

8

Microsoft Defender for Cloud identifies
attacks targeting applications that are
running in deployed projects

App Service
9

Azure Monitor

4a
4

1

5b

Merge

9

Azure Monitor continuously tracks and evaluates
app behavior. When threats materialize, thisservice sends alerts to start the process of rollingcode back to previous commits
21

Cross cutting Solution Pattern – Handling Technical Debt
Causes for Tech debt

DiscoverRemediate/RespondPossible areas to look into it

Discover through process andmeasures

ExecuteCustom▪ Rebuild/Migrate to newer technologies▪ Evaluate and identify choices for SaaS
adoption

COTS

Support Model/Governance/Process▪

Old/EOL Software/Hardware Version▪

Poor design/architecture▪

Manual testing/Code deploy approach▪

Version/software obsolescence▪ COTS support programs and cadence calls▪ Leverage/engage with enterprisearchitecture /strategy groups▪ Code Linting and Profiling▪ Regression and Performance TestingTools and accelerators

Legacy COTS products

Design & Development▪ Decoupled architecture and Microservice
adoption
Testing & Quality▪ Quality Gate and Measures

Deployment▪ Container based deployment models
Tools/Standards Adoption▪ Adopt Code scanning and productscanning tools
Planning and Delivery▪ Product Risk analysis and Mitigation©2022 ITC Infotech. All Rights Reserved.

All trademarks are the registered property of the respective companies and are acknowledged.

22

Cross cutting Solution Pattern – Version Upgrade
Key Considerations▪

Downtime and Application Availability▪

Reduced Deployment risks▪

Slow Rollback (vs) Instant Rollback▪

Sticky sessions▪

Cost & Operational Overhead▪

Observability▪

Ability to test live production traffic▪

Testing new backend features byusing the production load

Patterns

Best Practices
▪
▪
▪
▪
▪
▪
▪
▪
▪

Version Lifecyle management
Backward compatibility checks & scripts - for
UI, App layer, DB schema changes
Continuous integration/continuous
deployment/Continuous testing (CI/CD/CT)
Automated pipelines- Managing Environment
Operating & Configuration Management
Rollback strategy
Release Automation Tools
Post Deployment Monitoring
Infrastructure as Code (IaC)
Monitoring tools

Deployment Pattern▪
▪
▪
▪

Recreate
Rolling Update
Blue/green
CanaryTesting Pattern▪
▪

A/B
Shadow

Software Deployment Best practices©2022 ITC Infotech. All Rights Reserved.

23

TOOLS AND ACCELERATORS©2022 ITC Infotech. All Rights Reserved.

24

Cloud Native Modernization - Tools & Accelerators
Monolith 2 Microservices
Assessment tool

ITC Infotech Tools

Intelligent Monitoring
Platform

CSP PaaS offerings

Azure ADApp Service

Function

Service Mesh

Blob
Storage

ServiceBus

API
management

AKS

ACR

DevOpsDMS

ADF

Azure SQL

StorageAccount

Monitor3rd Party Tools
Version Control

KeyVault

Log Analytics

API Management

Secure Code Review

DevSecOps

IaC and Configuration
Management

Web Application Pen Testing

Infra VAPT and Vulnerability
Management

Standards©2022©2022ITC
ITCInfotech.
Infotech.All
AllRights
RightsReserved.
Reserved.

All trademarks are the registered property of the respective companies and are acknowledged.

25

GOVERNANCE©2022 ITC Infotech. All Rights Reserved.

26

Migration Governance – Collaboration Model
Assessment
Discovery & Assessment

Plan & Design

Migration
Build

Wave planning & Design

Test

Post Migration
DeployHypercare

Review Migration
Strategy

Create Wave Plan

Technical Migration

Performance & Security
Testing

Data flow cut-overResolve Defects
Reported in Production

Provide Access to
Existing Document(s) &resources

Create Move Groups(MGs)

Application Remediation

Acceptance Testing

Application cut-over

Build Pre-prod using
system copy

Check Pre-Requisites for
Migration

Product (COTS/3rd
Party) Design

Unit Testing

Migration DefectResolution

Support in Cutover
Activities

Perform tool andmanual discovery

Migration detailed
design for MG

Functional Testing

Provide Input for
Cutover Planning

Product (COTS/3rd Party)
Specific Migration inputs

Deployment ( prodcutover) Plan Preparation©2022 ITC Infotech. All Rights Reserved.

Knowledge Transition to
Support Team

Migration in PROD
Provide Input for Go/ NoGo Decision

Perform assessment andpropose disposition
App Disposition,
Multi-Cloud decisions

Business validation
before/after

Document Lessons Learnt

Simulate Disaster Recovery
and Failover

Technical Go-Live in
PROD

JOINT

ITC

CUSTOMERVENDOR
27

THANK YOU
Email: contact.us@itcinfotech.com

Web: www.itcinfotech.com©2022 ITC Infotech. All Rights Reserved.
All trademarks are the registered property of the respective companies and are acknowledged.