Rakuten Technology Conference 2014 "Technologies that underlie service delivery" Hiroaki Nakada (Rakuten)

1. Technologies that underlie
service delivery
Hiroaki Nakada
Financial Service Department, Development Unit, Rakuten, Inc.
http://www.rakuten.co.jp/

2. 2
About me
Hikey
Nakada Hiroaki
Financial Services
Department

3. 3
Q. What is our mission?

4. 4
Q. What is our mission?
Service delivery

5. 5
Financial Services
 Our main financial services.

6. 6
Financial Services
 Our main financial services.
It requires very high Quality

7. 7
Financial Services
 Our main financial services.
It requires very high Quality
and Agility to deliver services

8. 8
Our requirements
High
High
Low
Low
Agility
Quality

9. 9
Our requirements
High
High
Low
Low
Agility
Quality

10. 10
Our requirements
High
High
Low
Low
Agility
Quality

11. 11
Our requirements
High
High
Low
Low
Agility
Quality

12. 12
Our requirements
High
High
Low
Low
Agility
Quality

13. 13
Our requirements
High
High
Low
Low
Agility
Quality

14. 14
It’s so exciting!!

15. 15
Keywords
Automation
Visualization
Analysis

16. 16
Targets
Deployment
Review
Monitoring

17. 17
1. Review
2. Deploy
3. Monitoring
Topics

18. 18
Issue - Review
 There are various review points.
 Coding Style
 Security
 Business Logic
 It was difficult to analyze the quality of the
source code
 It was difficult to do a accurate review of
several lines of code and avoid human error.

19. 19
Solution - Review
 Static code analyzer + CI
 SonarQube
 It allows to find “code style mistake” and “potential types of errors”
 It allows to check the result on web browser.
 Veracode Static Application Security Testing (SAST)
 Security white-box test
 It allows to find “potential types of security issue”
 It allows to check result on web browser.

20. 20
CI/CD environments
4. Check code quality report
3. build hourly
1. check repository
2. checkout
VERACODE
GIT

21. 21
After improvements
 Only one type of code review is required.
 Code Style
 Security
 Business Logic only!
Solved!
 It is possible to visually analyze the quality of
code.
 SonarQube and Veracode reduce the human error.

22. 22
1. Review
2. Deploy
3. Monitoring
Topics

23. 23
Issue - Deployment
 Release operation took long times.
 Each release operations were different every
time.
 It was necessary to write and review of release
procedure every time!

24. 24
Solutions - Deployment
 Standardization of operation
 Write automation scripts
– For checkout
– For build
– For deploy

25. 25
Release procedure
2. checkout
Release Script
3. build
Weblogic
GIT

26. 26
After improvements
• Release operation time is reduced 50%.
• We don’t need write release procedures every
time!

27. 27
1. Review
2. Deploy
3. Monitoring
Topics

28. 28
Issue - Monitoring
 Multiples servers must be checked (web, api,
DB…).
 It is required to log on in each server to obtain
the log files.
 Each log must be analyzed.
 Alert Driven Analyze
– Automatic mechanism to analyze the alert messages.

29. 29
Complex monitoring
Web API-X API-Z
logs logs logs
monitor monitor monitor

30. 30
Monitoring - Solutions
 Zabbix
 System status monitoring
 Applications monitoring
 Oracle Enterprise Manager
 Middleware status monitoring
 Flight Recorder
 To obtain Java VM detailed logs
 To obtain Weblogic detailed logs

31. 31
Simple monitoring
Web API-X API-Z
Deep Inspection
JVM
Middleware
Flight Recorder
Systems and Applications
Zabbix
Enterprise Manager

32. 32
After improvements
 Centralized monitoring systems.
 No need to logon in production servers every time.
– It is possible to access the logs from one access point.
 Predict Driven Analyze
– Allows to predict the problem based on detailed log and system
status analysis.
 It facilitates and increases the agility to solve the problem.
 It added the ability to receive various information before the
occurrence of the problem.

33. 33
Summary

34. 34
Keywords
Automation
Visualization
Analysis

35. 35
Targets
Deployment
Review
Monitoring

36. 36
Summary
 We did the following improvement to gain more
quality and agility.
We increased the automation, visualization
and analysis of our daily operation

37. 37

38. 38