M. Triana Waluja Djati or Djati, was assigned as Technical Advisor to DOKU back in 2008 and permanently joining DOKU on 2009. Ever since, he is trusted to manage DOKU’s network, system, and IT infrastructure. He has been working closely with IT developer and IT operations team. He is also in charge for IT security and product’s compliance. Djati began his career working as a developer in a software company in 1998. He worked at PT. Hariff DTE in 2014 as IT Supervisor for ERP System. Djati graduated from Institut Teknologi Bandung with a bachelor degree in Physics. *** This slide was shared at Tech in Asia Product Development Conference 2017 (PDC'17) on 9-10 August 2017. Get more insightful updates from TIA by subscribing techin.asia/updateselalu

1. Product Development Conference 2017
DOKU Under the Hood
Infrastructure and Cloud Services
Product Development Conference,August 09th 2017
Confidential - Do not duplicate or distribute without written permission.
© 2017 DOKU. All Rights Reserved. (Except stated otherwise)

2. Product Development Conference 2017
What is DOKU?
Indonesia’s Leading Payment Company
• Enabler for merchants to do an online payment and in-store payment
• Is a Payment Gateway
• Is an e-Wallet Provider

3. Product Development Conference 2017
Our History

4. Product Development Conference 2017
Service Overview
• Internet Payment Gateway
• Electronic Money (server based)
• Bill payment
• Remittance (Hong Kong, Taiwan, Korea)
• Payment Service Provider

5. Product Development Conference 2017
Our Position

6. Product Development Conference 2017
Credit Card Principal
Credit Card Acquiring
E-Commerce Banking
/ Direct Debit
In Store Payment
ConsumerFinancing
Bank Transfer
e-Wallet
Payment Channels

7. Product Development Conference 2017
Doku
internet
Online Store
Online Shopper
LC1
LC2
LC3
Bank
Financial ins
Convenient Store
Transaction Flow

8. Product Development Conference 2017
• Must support the business process with efficient cost and benefit.
• Support the target SLA.
• SupportAGILE Software Dev.
• Support IT Security and Encryption
• Support Compliance ( PBI, POJK , UU ITE, PCI DSS )
Infrastructure Goal

9. Product Development Conference 2017
• Pasal 40 UU Nomor11 Tahun2008 tentang Informasi dan Transaksi Elektronik yang mengatur
Pemerintah memfasilitasi data elektronik strategis dan rekam jejaknya ke pusat data.
• Pasal 17 PP82/ 2012 tentang Penyelenggara Sistem dan Transaksi Elektronik (PSTE) tentang kewajiban
penempatan pusat data dan DRC di wilayah Indonesia.
• Pasal 12 Peraturan Bank Indonesia No: 9/15/PBI/2007 tentang Penerapan Manajemen Risiko dalam
Penggunaan TI oleh Bank Umum tentang “kewajiban bank melakukan pengendalian fisik dan
lingkungan Pusat Data dan DRC”.
DC & DRC in Indonesia’s Border

10. Product Development Conference 2017
How to Implement

11. Product Development Conference 2017
• Linux Centos 7.x
• Apache
• Jboss
• Mysql
Software Infrastructure

12. Product Development Conference 2017
Separation of Responsibilities

13. Product Development Conference 2017
• On premise ( colocation on DC )
• IAAS on cloud ( cloud providerA**z*n & s*ftl*y*r ) . Development, Test,
internal support application.
• Virtualization, flexibility managing server resources.
Choice

14. Product Development Conference 2017
Data Center 1
Data Center 2
DOKU Ops
Cloud 1
Cloud 2
internet
Our Infrastructure

15. Product Development Conference 2017
BSD Serpong
DC1
Kuningan Barat
DC2
Operation Center
Jakarta Selatan
Infrastructure Data Centre

16. Product Development Conference 2017
Our Data Centre

17. Product Development Conference 2017
Server Hardware
Xeon
Web App Db
Server Hardware
Xeon
Web App Db
Server Hardware
Xeon
Web App Db
firewall
Dev SIT UAT
Dev and Test Environment
Development & Test

18. Product Development Conference 2017
Server Hardware Xeon
Web App App App Db Db log ntp vce
Production Environment
firewall
DOKU Production

19. Product Development Conference 2017
• Monitor all systems server , middleware , application
• Monitor all leased line connection to partners ( bank, financial institution, convenience store)
• Monitor all internet connection.
Operation Center

20. Product Development Conference 2017
Monitoring 24 x 7 Op-Center

21. Product Development Conference 2017
Data Encryption
Fraud Detection &
Prevention
Digital Certificate
PCI DSS
Certification
3D Secure
Security & Encryption

22. Product Development Conference 2017
• Regular Vulnerability patching on all software
• Quarterly Vulnerability Scan
• Annual Penetration Testing
• AnnualApplication Vulnerability Testing
• Annual PCI DSS Audit
Security Evaluation

23. Product Development Conference 2017
Cloud 1 Cloud 2
internal app 1
internal app 2
dev cluster
DOKU Cloud

24. Product Development Conference 2017
• Server create as needed , shutdown / remove after
finish
• Add or reduce number of servers on the service
depends on the load
Cloud Resources

25. Product Development Conference 2017
• On Premise is still the choice for DOKU Payment Gateway ( compliance )
• Clouds IAAS is for non sensitive data and development
Summary
Q&A

26. Product Development Conference 2017
Thank You
PT Nusa Satu Inti Artha
Plaza Asia Office Park Unit 3
Jl. Jend. Sudirman Kav. 59
Jakarta 12190
Indonesia
t. +62 21 515 0555
f. +62 21 515 0666
e. info@doku.com www.doku.com