How we built the Asian Games 2018

infrastructure on Cloud

Andik Susilo
Cloud Engineer Team Lead of Asian games 2018
Lead Engineer PT. Yafii Solusi International
andik@ysi.co.id
 Challenge

200 Virtual Machine

10.378 GB Memory

2.692 vCore 60 TB Storage

Data Center
 Azure DRC

AzureVM01 AzureVM02

Azure DC
Hybrid Cloud
VPN
Gateway
AzureStackVM03 AzureStackVM-N

AzureVM01 AzureVM02
VPN
Gateway

Azure Stack

AzureVM03 AzureVM-N
ExpressRoute

AzureStackVM01 AzureStackVM02

VPN
Gateway
AzureStackVM03 AzureStackVM-N
 Azure ExpressRoute Connection Status
Azure ExpressRoute is our primary connection for GMS Network. Primary Line and Secondary Line of
Azure ExpressRoute are ready to use.
Always UP

Single instance Azure VM

Downtime 43.83 minutes per month

Multi-instance Azure VM
Downtime 21.92 minutes per month
 Application
Gateway

Virtual Network
Availability set

Availability set Application Application

HA Architecture
Server Server

Azure Files
Active Directory

Azure load
balancer

Availability set
Active Directory

Database Server Database Server

File Share
Withnes
 High Availability (SLA 99,95%)*

Application Servers Database Servers

Database Monitoring
Data Corrupt Data Loss

Keep it safe

Virus Cyber Attack

Virtual Machine Backup
VM Backup Dashboard
Database Backup
Database Backup Dashboard
File Share
Backup
File Share Backup Dashboard
 Cyber Attack
Disaster
Malware
Azure Site Recovery for DR
 Backup
File Share
Azure Sire Recovery Dashboard
 Continue
Disaster Occur
transaction

Reprotect

Check SQL Sservice No Bring up listener Transaction OK

lListener serviuces

Yes Real IP
Disaster Recovery
SQl Service listerner
OK User Access by
domain / real IP?
Domain
Change IP onDNS
Record Execution Procedure

Failover virtual
Bring up the services Failover Commit
machine application

No
VM application
already failover to Check application
Yes Started
DR started or not?
 Infrastructure Design
Development
①
Environment

②
① ② Testing
Environment

Production (Test
③Event)
③
Production
④Environment
⑤
Azure Stack
⑦ ⑤ Environment

④ Disaster
⑥ Recovery
⑥ Environment

ExpressRoute to
⑦ Venues (GMS
Network)
Monitoring
Azure Alert
&
Security
Dashboard
Azure Alert & Security Dashboard
Checking Tools
Checking Tools
Database Server Monitoring
Operation Management Suites
 Securing the environment

Network Security Groups

Advanced Threat Protection

DDOS Protection
Application gateway
Azure Security Center
Microsoft Azure Team
IT Inasgoc Team
Thank You

Q/A
Andik Susilo
andik@ysi.co.id