Aruba Secures Their AWS Workloads Using Service AWS WAF, a Fully Managed Web Application Firewall

Challenges

Aruba, a Hewlett Packard Enterprise company, is a leading provider of next-generation network access solutions for the mobile enterprise. Aruba applications are accessible globally and mainly from the US,EMEA and APAC region. They were facing slowness in delivering the static and dynamic content to end users across the multiple regions. They want to give a seamless and reliable safe experience to their customers. Along with the end users of Aruba regularly face bandwidth issues and poor loading time while accessing the application. Another challenge with Aruba is that Though infrastructure is huge, they have provisioned the infrastructure manually. As they planned to move all their footprints to the cloud, Aruba needed end to end automation which should create their whole infrastructure and deploy applications seamlessly.Aruba Global Services need more workload compute intensive instances for data processing services within EKS.

Considering the above challenges, Searce has automated the environment as per the customer’s requirements and implemented field level encryption and CloudFront origin security using WAF and secrets manager.

Searce Solution

Added CloudFront distribution to the Aruba infrastructure by creating origin ALB with SSL termination and Route 53 record
Searce have implemented the CloudFront Origin Security using AWS WAF and Restricting Access to S3(OAI)
WAF implementation was done with managed rules as well as the custom rules requested by the customer
Each rule group had multiple rules that were configured and tested for functionality
Implemented the CloudFront Origin Security using Field-level Encryption as an Additional layer of Security(uses asymmetric Encryption)
Searce team has been actively involved in taking platform related decisions and also guiding customers on taking better decisions to achieve their goals
Proper guidance with reference to future sizing of the infrastructure was done . Ad-hoc calls were made to address customer doubts
Setup all Codebase and CI/CD Pipelines in a shared account and using VPC peering and cross account access deployed applications in different regions
Searce has suggested using different node groups with different instance types and labels. Node selectors are used in the deployment files to deploy applications in respective nodes
Searce suggested using AWS native DevOps tools, because AWS devops tools are elastic, Highly available, ephemeral and easily integrated with AWS services

Business Impact

With Searce’s expert guidance, and AWS’ state-of-the-art tech solutions, Aruba Global Services was able to achieve:

Post implementation of Cloudfront distribution Aruba’s 50% latency issue resolved
Before implementation of Cloudfront Distribution the latency was 10 ms and post implementation it reduced to 2ms
Reduced the complexity of the release process
Successful deployment of AWS infrastructure as per best practices with Terraform as Infrastructure as code(Iac). Due to this infrastructure provisioning and de provisioning has become easy and error free
Successful deployment of applications using AWS DevOps tools with no manual intervention. It helps to reduce the release cycle
Searce also configured AWS CloudFront for dynamic content distribution based on Application Load Balancer (ALB). Post that it has reduced the application load time or latency of the customer website
Setup Continuous Integration with Codecommit and code build and automated creation of images and pushed to ECR
Orchestrated EKS deployment using AWS CodeCommit, AWS CodeBuild and AWS CodePipeline
Better security of the front end servers due to AWS WAF implementation

About Aruba Global Services:

Aruba, a Hewlett Packard Enterprise company, is a leading provider of next-generation network access solutions for the mobile enterprise. The company designs and delivers Mobility-Defined Networks that empower IT departments and #GenMobile, a new generation of tech-savvy users who rely on their mobile devices for every aspect of work and personal communication.