Ferry Interactive has improved the stability and security of mobile payment applications through MSE _ Finance

keep on record Console

Based on the MSE cloud native gateway, Ferry Interactive combines the traffic gateway, microservice gateway and security into one to build a new generation gateway with high integration, high performance, easy expansion and hot update.

Customer introduction

Ferry Interactive is affiliated to China Telecom Agis Ansopa Group, focusing on mobile marketing O2O、 Innovation and R&D in social media and mobile e-commerce. The operation and maintenance of the We Media platform independently developed by Ferry Interactive has exceeded 200 million fans; More than 40000 offline stores have adopted Ferry O2O solution. Ferry's main customers include Uniqlo, Pizza Hut, KFC, Starbucks, SPG， Loreal, Innisfree， Decathlon, Dingxin Group, etc.

Business challenges

Gateway layer performance is limited : The customer's business application runs in the container, using the Nginx based kubernetes Ingress gateway. As the gateway and service are deployed in the same cluster, the gateway layer has limited capacity for horizontal expansion and contraction in the face of burst traffic, resulting in limited performance. In addition, when a large number of users initiate HTTPS requests, they need to perform a large number of TLS encryption and decryption operations, which puts great pressure on the server CPU. When the performance cannot be carried, the stability of the business system will be affected.

High complexity of gateway link operation and maintenance : The customer's north-south gateway and east-west gateway are independently deployed, operated and maintained. There are many jumps in the entire access link from the gateway layer to the back-end services, which increases the difficulty of troubleshooting online problems and leads to high complexity of operation and maintenance of the gateway link.

Alibaba Cloud solutions

Shorten gateway forwarding link and improve gateway performance

forty %

QPS is about 40% higher than Nginx

eighty %

HTTPS QPS increased by 80%

MSE Cloud Native Gateway is one of the core capabilities provided by AliCloud microservices engine MSE (Microservices Engine). The route management capability of MSE cloud native gateway can be used to achieve north-south and east-west traffic scheduling. Cloud native gateway direct connection service Pod IP, Lower RT. By tuning OS kernel parameters and components, QPS is about 40% higher than Nginx. Hardware offload TLS certificate verification acceleration, HTTPS QPS increased by 80%.

Expand service governance and security capabilities and improve stability

As an exclusive instance of hosting, MSE Cloud Native Gateway is decoupled from the resources of deployed business applications, directly connects to back-end services, opens up multiple service sources, supports overload protection, fault self-healing, flow limiting and degradation, and ensures stability during peak traffic. The cloud native gateway has a built-in WAF module, which enables the user's request link to complete WAF protection, traffic distribution, micro service governance, improve link RT, and reduce the complexity of the gateway's operation and maintenance.

Rich observability

The MSE cloud native gateway provides access logs Tracing、Metrics The full stack capability of alarm helps customers locate problems more efficiently.

Business Value

Performance improved by 90% and response time reduced by 50%

Ferry Interactive has built a zero trust architecture through the MSE cloud native gateway. It can smoothly migrate without re configuring Nginx Ingress rules. Its performance has been improved by 90%, response time has been reduced by 50%, and the stability and security of the business entrance have been greatly improved. It efficiently supports the mobile payment demand of 100 million+fans interaction every day, 40000+offline stores, and 30 million+transactions every month.

AliCloud products used

Micro service engine Application real-time monitoring service performance testing Container Service Kubernetes Edition

Free trial