Multi-tier architecture & Deployment

Depending if the project justify it, at Antidot we use a common 4-tier architecture : development, testing, acceptance and production (dev/test/qa/prod alias DTAP). DTAP is a (software) development method defining clear environments and sequential steps. A developer starts working on a feature and when he thinks it’s ready, he sends the feature to a test environment. The test environment is used to test if the feature behaves as expected. This is done either manually or through automated tests. If everything is okay the tester sends the feature from the test environment to the acceptance environment.  The customer will see and ‘accept’ the feature if he’s satisfied (or if the feature is legally correct). Now the feature is ready to be move on to the production environment.

Continuous Integration

As mush as possible, deployment to the dev, test or qa architecture is done automatically using Jenkins (automatic test, build, deployment). Jenkins is an open source continuous integration tool written in Java. Jenkins provides continuous integration services for software development. It is a server-based system running in a servlet container such as Apache Tomcat.

Builds can be started by various means, including being triggered by commit in a version control system, by scheduling via a cron-like mechanism, by building when other builds have completed, and by requesting a specific build URL. Sometimes deployment is done outside of this regular process, primarily to provide urgent or relatively minor changes, without requiring a full release. This may consist of a single patch, a large service pack, or a small hotfix.

jenkins-webhook
ansible

Configuration Management

At Antidot, we use configuration management tools to setup and maintain our servers. This allow use to quickly be able to create and configure new VM on our infrastructure for any new project that might come. This also allows us to manage our different production servers easily. We use Ansible for this task, Ansible is a free-software platform for configuring and managing computers which combines multi-node software deployment, ad hoc task execution, and configuration management. It manages nodes over SSH or over PowerShell. Our solution is easy to maintain and it’s easy to add new blocs to your construction. With this level of automation, we can have a server ready within the hour with correct software, backup, monitoring and users access.

HTTPS over HTTP

The most important way to protect data exchange on a website is an SSL certificate, or “Secure Socket Layer.” This type of network protocol allows for the secure transmission of data, and encrypts data that is exchanged between a website and its visitors. Unauthorized users are unable to access this data which is especially important when querying sensitive user data such as passwords, email addresses or bank account information.

Visible protection by lock symbol


In addition to the letter “s” you can identify an SSL-secured page by the lock icon displayed in front of the Internet address (URL) shown in the browser. Clicking on the icon displays further information about the website’s SSL certificate, such as issuer and expiration date. If you enter such a website after opening a link, you know that your information is encrypted and therefore transmitted safely.

Optimized search with SSL protection


By encrypting the exchange of customer data according to the latest safety standards, you not only create confidence with your audience, but your website is more easily discovered. Search engines reward sites with SSL connection with higher rankings in search results. Market leader Google has already changed its search algorithm in 2014 so that websites with secure encryption achieve better search rankings.

Security made simple


Today with the low cost of  HTTPS certificates and free solution like Let’sEncrypt, there is no excuse for not having a website available in HTTPS.

At Antidot, we use can use Let’s Encrypt, a free, automated, and open certificate authority (CA), run for the public’s benefit. Let’s Encrypt is a service provided by the Internet Security Research Group (ISRG).

DNS

Antidot can help you for your DNS needs, acting as a DNS registrat and hosting DNS server giving you full control over your domains.

Monitoring

Our infrastructure is watch closely with monitoring. We use Zabbix, a enterprise open source monitoring software for networks and applications. It is designed to monitor and track the status of various network services, servers, and other network hardware.
From common items to monitor like CPU, RAM, disk to custom items developed to monitor a specific application, our infra team will get notification (emails, SMS) in case of abnormal value making sure the infrastructure is always up and running.

Backups

All our servers are backed up daily; Backups are kept on 2 different sites for security purposes. In addition, the restore procedure is tested regularly to assure minimum restore time in case of incident.

zabbix

© 2016 Antidot. All rights reserved.