How Vyapar Reduced the Attack Surface and Improved Their Overall Security Posture by Leveraging AWS WAF

Challenges

Vyapar, a free Business Accounting Software made for Indian Small Businessmen to deal with invoicing, inventory, accounting needs, and more partnered with Searce to improve their infrastructure, and in turn enhance their overall user experience.

The end users in India were facing latency issues as Vyapar's infrastructure was hosted in the Oregon region while their major user base was in India. All the resources like Databases, Applications, Cache all are placed in a public subnet which resulted in diminished security.

Vyapar Team used Application Load Balancer which is Client facing to access the application. End users were impacted whenever the team was adding targets and when the resources were fully utilized as they were added manually.

Searce Solution

The proposed solution architecture ensures that most of the tasks are automated without the need for manual intervention which was the traditional process followed by the client.

  • Created a new Separate VPC in Mumbai region and migrated all the components from Oregon region to Mumbai region
  • Created 4 tier architecture and separated all the components in different layers like Load Balancer Layer, Application layer, database layer and cache layer
  • Configured Autoscaling behind the Load Balancer so that depending on the usage the Target can be Scale-in/out
  • Deployed AWS WAF for filtering Web traffic to the frontend servers
  • In addition to the managed rules, enabled some rules to block traffic from blacklisted IP's and customer rules based on customers requirement
  • Created CodePipelines to automate the application deployment by using CodeCommit and CodeBuild
  • We used terraform to automate the creation of infrastructure and also leveraged the use of AWS CICD tools to deploy the infrastructure for newer environments
  • We architected existing architecture to meet Highly Available, Secure, Reliable and secure architecture by following a well architected framework
Business Impact
  • Re-architecting the architecture to ensure secure, cost effective, highly available and reliable deployments
  • Configured Auto Scaling behind the Load Balancer so that their speed and performance issue resolved
  • Enabled WAF for protecting the workloads that are internet facing to harden the network security as well as to reduce the attack surface
About Vyapar

Vyapar is a FREE Business Accounting Software made for Indian Small Businessmen to deal with invoicing, inventory, accounting needs, and much more! The goal is to make a businessman's daily routine less tiring and let them focus more on growing their business, less on paperwork.

Industry: Financial Services
Location: India