tli
Magento
-
Meetup
#12- About me
Shkurko Alexandr
Technical Advisor at Atwix
Location: Kyiv, Ukraine
Superpower: high empathy, open-minded & love cats 🐈
tli
Magento
-
Meetup
#12-
For whom: developers, managers,
product owners and business owners.
Priority: high priority
Business value: high
Benefits: a lot of benefits in long term
Complexity: medium
Disaster Recovery Plan
tli
Magento
-
Meetup
#12-
Why is the Disaster Recovery
Plan is essential in the 20th of
21st century?
tli
Magento
-
Meetup
#12- Let’s describe 2020 - 2022 for E-
commerce in one picture!
tli
Magento
-
Meetup
#12-
2020, 2021,
2022
tli
Magento
-
Meetup
#12-
🌿 Natural
- Hurricanes
- Draw
- Earthquake
- Pandemic*
Types of disasters that MAY affect E-commerce
Technological
- Explosion
- Factory fire
- Failed
deployment*
👀 Security
- Password leak
- DDOS
- Fraud transactions
- Human factor*
👨💼 Management
- Overpressure
- Wrong assumption
- Toxic team
- Not defined
responsibilities*
⚔️ WAR
tli
Magento
-
Meetup
#12-
🌿 Pandemic
- Employes are sick
- Market downside
- Closed borders - no
shipping
- Public restrictions
*
Failed deployment
- The site is down
- Data missed
(transactions)
- Damaged SEO /
user experience
👀 Human Factor
- Password leak
- Destroy
infrastructure
- Inject malware
👨💼 Not defined
responsibilities
- Solutions take to
long in case of
disaster
tli
Magento
-
Meetup
#12-
Example, please!
tli
Magento
-
Meetup
#12-
Imagine that you have 100 transactions per
hour, with $100 per each. In sum, it is $10.000.
You invested tons of hours to be prepared for
the high season: development, marketing,
testing, again testing and again regression
testing.
And Black Friday is going to start in 3…2…1
GO!
Happiness!
tli
Magento
-
Meetup
#12-
It is not working for 2 hours.
Your sales managers are overloaded.
The dev team is going to switch you to
another provider soon but they will need
1 hour plus because they didn’t expect
to be in such a case.
Payment provider keep silence.
You loose :(
Your payment provider is down
tli
Magento
-
Meetup
#12- How to deal with all of this?
Create a Disaster Recovery Plan!
tli
Magento
-
Meetup
#12- Wait! Wait! Wait!
Before we will start preparing a plan you should understand that the E-
commerce is mostly about processes and their automation through
technologies.
Business loves process, documents, creativity and patience. This is why we
have so many best practises and other standards.
tli
Magento
-
Meetup
#12-
What benefits of having Disaster Recovery Plan?
🏭🏦 Business
- Reduce the downtime of
normal business operations
- Reduce reputation risks
- Minimise user retention
- Minimise data loses
🚀 Solution providers
- Easy to plan resource
- Sophisticated service
- Competitive offer through
guaranties
- Reputation
Every minute is valuable!
tli
Magento
-
Meetup
#12-
What do you need to do to create a DRP?
Define stakeholders that are responsible for:
- Business solutions from the client & agency side: COO, CEO, CTO etc.
from the C level and different domains
- Set up a workshop where you as a DRP maintainer define the goals of
the DRP:
- possible disasters in your physical area and area of
interests
- what you all want to achieve in case of the disaster recovery
action
- Define RTO & RPO
- Define Communication plan in case of disaster
- Define sensitive data
- Define accountable and responsible for DRP
tli
Magento
-
Meetup
#12-
RTO
RTO is Recovery Time Objective
It is a period in which businesses should return to the ordinary operation
process in case of disaster to prevent unacceptable losses.
Failed deployment
- return to normal state in 1hr
🌿 Earthquake destroyed servers
- migrate your infrastructure to another instance in a day
👀 Password leak
- change passwords and make a security scan in 1hr
tli
Magento
-
Meetup
#12-
RPO
RPO is Recovery Point Objective
It is the amount of data that the business identifies as applicable loose since
the disaster happens.
For example, the business decided that 4 hours of sales is the RPO. In that
case, backups SHOULD be done each 4 hours.
And backups SHOULD be stored safely to not depend on the infrastructure
where project is running.
tli
Magento
-
Meetup
#12-
Magento 2 Disaster recovery plan & preparation
👨💼 Management
- Sign in the SLA agreement:
- when and how will the team recover the project
- who is responsible for what
- what hosting provider can do, and what is the team's area of
responsibility
- Define the disaster recovery team
- Do a workshop with the team where the SLA and DRP should be
explained and reviewed
- Book a training hour for the DRP and maintenance
- Having a common language with the business: is crucial!
- Find a reliable contact with the hosting provider
- Improve your communication skills
tli
Magento
-
Meetup
#12-
Magento 2 Disaster recovery plan & preparation
👩🔧🔧⚙️🚀 Engineering part#1
- Follow best practices
- code quality
- security (for example, OWASP)
- profile your application (if project is down because of load() in
foreach it is a disaster ;) )
- Set up the project backup system:
- codebase
- media (use AWS S3, for example)
- database (replication!)
- Use monitoring tools such as Newrelic, CloudWatch
- Use password managers
- Have an alternative energy supply and internet provider
- Keep the work-life balance: if you burn out this is a disaster
tli
Magento
-
Meetup
#12-
Magento 2 Disaster recovery plan & preparation
👩🔧🔧⚙️🚀 Engineering part #2
- Have a “private packagist” in case of vendors issues - this will save time
- Build your team: teamwork is a key to success in all cases
- Commit every day: epic feature on your laptop that was destroyed by the
hurricane? It is a disaster!
- Try to upgrade the core when it is possible and no risks of BIC
- Have a backup plan for the payment and shipping providers
- Use health check tools: it is better to be notified about errors by the 3rd
party system than be the hundred of customer calls
tli
Magento
-
Meetup
#12-
Magento 2 Disaster recovery plan & preparation
🏄🏄🏄 People management
- Have a phone base of employees
- Have an emergency contact list of contacts for employees
- Empathy! If you know your team and feel it, you are ready for any tornado
or hurricane
- Prepare an evacuation plan with a clear vision of what to do and how:
directions, transport etc.
- Have a Plan B for the office setup
- Have a plan for blocking/saving IT equipment
tli
Magento
-
Meetup
#12-
Magento 2 Disaster recovery plan & preparation
👨💼📈💵💰Business
- Trust your team
- Have Plan B for shipping and payment providers
- Control your team through the professional relationship and reporting
- Have a good infrastructure architecture - it costs but it rocks
- Be ready for losses - define RPO & RTO. Help your team to reach their
goal
- Keep your eye on the Magento 2 Open Source & Adobe Commerce Trends
tli
Magento
-
Meetup
#12-
But may be there already existed solutions?
tli
Magento
-
Meetup
#12-
Good news everyone!
tli
Magento
-
Meetup
#12-
The list of recovery plans
Council Of Foundations
IBM Disaster Recovery Plan
Evolve IP
Adobe Commerce (Cloud) recommendations
tli
Magento
-
Meetup
#12-
Thank you all!

Magento Meetup #12. Alex Shkurko.pptx

  • 2.
    tli Magento - Meetup #12- About me ShkurkoAlexandr Technical Advisor at Atwix Location: Kyiv, Ukraine Superpower: high empathy, open-minded & love cats 🐈
  • 3.
    tli Magento - Meetup #12- For whom: developers,managers, product owners and business owners. Priority: high priority Business value: high Benefits: a lot of benefits in long term Complexity: medium Disaster Recovery Plan
  • 4.
    tli Magento - Meetup #12- Why is theDisaster Recovery Plan is essential in the 20th of 21st century?
  • 5.
    tli Magento - Meetup #12- Let’s describe2020 - 2022 for E- commerce in one picture!
  • 6.
  • 7.
    tli Magento - Meetup #12- 🌿 Natural - Hurricanes -Draw - Earthquake - Pandemic* Types of disasters that MAY affect E-commerce Technological - Explosion - Factory fire - Failed deployment* 👀 Security - Password leak - DDOS - Fraud transactions - Human factor* 👨💼 Management - Overpressure - Wrong assumption - Toxic team - Not defined responsibilities* ⚔️ WAR
  • 8.
    tli Magento - Meetup #12- 🌿 Pandemic - Employesare sick - Market downside - Closed borders - no shipping - Public restrictions * Failed deployment - The site is down - Data missed (transactions) - Damaged SEO / user experience 👀 Human Factor - Password leak - Destroy infrastructure - Inject malware 👨💼 Not defined responsibilities - Solutions take to long in case of disaster
  • 9.
  • 10.
    tli Magento - Meetup #12- Imagine that youhave 100 transactions per hour, with $100 per each. In sum, it is $10.000. You invested tons of hours to be prepared for the high season: development, marketing, testing, again testing and again regression testing. And Black Friday is going to start in 3…2…1 GO! Happiness!
  • 11.
    tli Magento - Meetup #12- It is notworking for 2 hours. Your sales managers are overloaded. The dev team is going to switch you to another provider soon but they will need 1 hour plus because they didn’t expect to be in such a case. Payment provider keep silence. You loose :( Your payment provider is down
  • 12.
    tli Magento - Meetup #12- How todeal with all of this? Create a Disaster Recovery Plan!
  • 13.
    tli Magento - Meetup #12- Wait! Wait!Wait! Before we will start preparing a plan you should understand that the E- commerce is mostly about processes and their automation through technologies. Business loves process, documents, creativity and patience. This is why we have so many best practises and other standards.
  • 14.
    tli Magento - Meetup #12- What benefits ofhaving Disaster Recovery Plan? 🏭🏦 Business - Reduce the downtime of normal business operations - Reduce reputation risks - Minimise user retention - Minimise data loses 🚀 Solution providers - Easy to plan resource - Sophisticated service - Competitive offer through guaranties - Reputation Every minute is valuable!
  • 15.
    tli Magento - Meetup #12- What do youneed to do to create a DRP? Define stakeholders that are responsible for: - Business solutions from the client & agency side: COO, CEO, CTO etc. from the C level and different domains - Set up a workshop where you as a DRP maintainer define the goals of the DRP: - possible disasters in your physical area and area of interests - what you all want to achieve in case of the disaster recovery action - Define RTO & RPO - Define Communication plan in case of disaster - Define sensitive data - Define accountable and responsible for DRP
  • 16.
    tli Magento - Meetup #12- RTO RTO is RecoveryTime Objective It is a period in which businesses should return to the ordinary operation process in case of disaster to prevent unacceptable losses. Failed deployment - return to normal state in 1hr 🌿 Earthquake destroyed servers - migrate your infrastructure to another instance in a day 👀 Password leak - change passwords and make a security scan in 1hr
  • 17.
    tli Magento - Meetup #12- RPO RPO is RecoveryPoint Objective It is the amount of data that the business identifies as applicable loose since the disaster happens. For example, the business decided that 4 hours of sales is the RPO. In that case, backups SHOULD be done each 4 hours. And backups SHOULD be stored safely to not depend on the infrastructure where project is running.
  • 18.
    tli Magento - Meetup #12- Magento 2 Disasterrecovery plan & preparation 👨💼 Management - Sign in the SLA agreement: - when and how will the team recover the project - who is responsible for what - what hosting provider can do, and what is the team's area of responsibility - Define the disaster recovery team - Do a workshop with the team where the SLA and DRP should be explained and reviewed - Book a training hour for the DRP and maintenance - Having a common language with the business: is crucial! - Find a reliable contact with the hosting provider - Improve your communication skills
  • 19.
    tli Magento - Meetup #12- Magento 2 Disasterrecovery plan & preparation 👩🔧🔧⚙️🚀 Engineering part#1 - Follow best practices - code quality - security (for example, OWASP) - profile your application (if project is down because of load() in foreach it is a disaster ;) ) - Set up the project backup system: - codebase - media (use AWS S3, for example) - database (replication!) - Use monitoring tools such as Newrelic, CloudWatch - Use password managers - Have an alternative energy supply and internet provider - Keep the work-life balance: if you burn out this is a disaster
  • 20.
    tli Magento - Meetup #12- Magento 2 Disasterrecovery plan & preparation 👩🔧🔧⚙️🚀 Engineering part #2 - Have a “private packagist” in case of vendors issues - this will save time - Build your team: teamwork is a key to success in all cases - Commit every day: epic feature on your laptop that was destroyed by the hurricane? It is a disaster! - Try to upgrade the core when it is possible and no risks of BIC - Have a backup plan for the payment and shipping providers - Use health check tools: it is better to be notified about errors by the 3rd party system than be the hundred of customer calls
  • 21.
    tli Magento - Meetup #12- Magento 2 Disasterrecovery plan & preparation 🏄🏄🏄 People management - Have a phone base of employees - Have an emergency contact list of contacts for employees - Empathy! If you know your team and feel it, you are ready for any tornado or hurricane - Prepare an evacuation plan with a clear vision of what to do and how: directions, transport etc. - Have a Plan B for the office setup - Have a plan for blocking/saving IT equipment
  • 22.
    tli Magento - Meetup #12- Magento 2 Disasterrecovery plan & preparation 👨💼📈💵💰Business - Trust your team - Have Plan B for shipping and payment providers - Control your team through the professional relationship and reporting - Have a good infrastructure architecture - it costs but it rocks - Be ready for losses - define RPO & RTO. Help your team to reach their goal - Keep your eye on the Magento 2 Open Source & Adobe Commerce Trends
  • 23.
    tli Magento - Meetup #12- But may bethere already existed solutions?
  • 24.
  • 25.
    tli Magento - Meetup #12- The list ofrecovery plans Council Of Foundations IBM Disaster Recovery Plan Evolve IP Adobe Commerce (Cloud) recommendations
  • 26.