What was proposed:

Recently, Superfrio received a series of investments aimed at accelerating the business and making it the main refrigerated logistics operator in Latin America. Considering this challenge, one of the goals was to implement a world-class infrastructure, in a public cloud, supported by partners who could maintain the entire chain of technology services, end to end. However, the company was challenged to migrate its entire workload to the cloud, which previously ran in two different data centers. With the choice of AWS and Valcann, the entire project was conducted with the scope of:

• Map and model the entire technology architecture;

• Propose technical migration scenarios;

• Conduct a capacity planning and infrastructure dimensioning study;

• Optimize systems architectures and business applications;

• Migrate dozens of Windows Servers and databases (SQL Server, Oracle, MySQL)

• Migrate vertical business applications;

• Predict backup and disaster recovery strategy;

• Migrate TOTVS Protheus business application;

• Migrate JDA business application;

• Migrate TOTVS RM business application;

• Migrate Pentaho business intelligence infrastructure;

• Implement an integrated connectivity layer with VPN;

• Provide specialized support in cloud computing architecture and technology operation.

Technical enablement

Migration took place in 2 stages, the first stage being vertical business systems - running on other platforms; and the second stage, being the migration of ERP TOTVS Protheus. Since the migration was in two steps, as the customer had the previous workload running in Brazil, it had to provision the entire workload in São Paulo first, and then provision it in Virginia. As all the previous operation was being performed in a data center in São Paulo, this movement was necessary due to latency issues between AWS and the previous data center during the project. Since the entire migration playbook is provisioned with infrastructure as code (using Hashicorp Terraform), moving between regions has become more agile and effective. Another peculiarity is the fact that some of the workloads that were migrated went through an automatic rehost, using the Cloudendure tool. This was because some of these workloads were legacy systems and could not go through a manual rehost.

AWS Services deployed: 

• Amazon EC2, Amazon RDS, Amazon S3, Amazon CloudWatch, Amazon EFS, Amazon GuarDuty, AWS CloudTrail, CloudEndure.

Customer issues and concerns that have been overcome:

1. Operational excellence

1.1. Implementation of continuous monitoring with Amazon CloudWatch;

1.2. Integrated connectivity with high available multi zone (Multi-AZ);

2. Security

2.1. Implementation of Amazon GuardDuty for intelligent monitoring of infrastructure perimeter;

2.2. Restriction of external access to the environment, with segregation between private and public subnets for back and front end, respectively;

2.3. Access to the AWS environment for VPN-only administration;

2.4. Encryption of data at rest and in transit.

3. Reliability

3.1. Multiple instance nodes, making it possible to balance reading and writing operations;

3.2. Minimal failover between nodes;

3.3. Using Amazon Data Lifecycle Manager to implement snapshot-level backups.

3.4. Automatic backups of the database layer;

4. Excellence in performance

4.1. Calculation of expected environment demand for rightsizing.

5. Cost optimization

5.1. The monitored environment, with a continuous flow of monitoring for rightsizing.

Third-party solutions applied:

• • TSPlus: Remote Terminal Service;

  • SonicWall UTM: Firewall and VPN connectivity;

  • Hashicorp Terraform: Infrasctructure as Code;

  • Hashicorp Vault: Secrets and key management service.

Project schedule:

Project Start: March, 2022

Projet End: December, 2022

Key Results:

• • AWS managed infrastructure service;

  • Professional managed services provided;

  • 17% improvement of TOTVS application response time;

  • 100% assertiveness of capacity planning;

  • 11% cost reduction from the original AS-IS sizing landscape, considering the implementation of managed services and rearchitecture.

Lessons learned:

• • Considering the phasing of large migration projects reduces risk and increases customer value perception;

  • It is critical to clearly establish previous baselines of infrastructure metrics in order to measure the gains generated by the project;

  • Establishing systematic communication with the client's business areas increases sponsorship and support for the project.