The Payment Gateway is one of the most crucial features of engineering undertaken at CAKE LABS, and in this Innovation Session, Dinidu Bathiya and Dumindu Karunathilaka from the Software team talk about the process of keeping payments running via Payment Gateway.

2. Keep Payments
Running

3. •Being a payment Facilitator
•Nginx as a Shield
•Simulating Production Load
•Monitoring and Alerting
Contents

4. •Facilitate payments
•Onboard merchants with third parties.(worldpay,vantiv Litle, vantiv
PWS)
•Payments with POS (swipe/keyed In)
•Online payments
•Payments adjustments (refund,partial refunds,Reaurth.....)
•Ledgering and billing
•Support services
•Administration tools
•Finance tools
•Warning and Alerting
•Reporting
•ReportNG reports
•Finance reports
What We Do.......

5. Challenges
•Depend on few third parties (Magensa,
Idology, WorldPay, Vantiv Litle, Vantiv
PWS)
•High responsibility
•Security
•Variation in traffic

6. •Security
•Provide TLS 1.2 protection
•avoid clickjacking
•content-type sniffing
•Cross-site scripting
•Secure supporting applications
•Routing
•Throttling
•IP wise throttling
•API wise throttling
Nginx as a Shield

7. •Find the breaking point of payment
gateway
•Test effectiveness of remedies
•throttle with IPs and APIs
•Find bottlenecks
•Mono
•Nginx
•Gateway
•Operating system
Simulating Production Load

8. Available Approaches
•Use Load testing tool (Jmeter, Locust)
•uses one IP
•network and performance limitation
•Use online distributed loading testing
services (Apica LoadTest, loader.io,
loadfocus)
•High cost.
•Write our own testing tool
•Much dev effort

9. Redline 13

10. Demonstration

11. •Pros
•Low cost
•Facilitate both spot instances and on-
demand Instances
•Can customize server regions and types.
•Analytical results
•Cons
•Troubles with allocating spot instances.

12. Monitoring and Alerting

13. What is Graylog ?
● Graylog is a powerful log
management and analysis tool
that has many use cases, from
monitoring SSH logins and
unusual activity to debugging
applications. It is based on
Elasticsearch, Java, MongoDB,
and Scala.

14. Graylog vs other tools
● Other similar tools require
paid subscriptions.
● Graylog is open source

15. Why we need Graylog?
● Several production servers
● Many application logs - nginx,
gateway and payment
scheduler
● Automated alerting system

16. Features of Graylog
● Search
● Dashboards
● Archive
● Alerts and triggers
● Users and roles
● Rest API

17. Demonstration