• Title/Summary/Keyword: MSA(microservice architecture)

Search Result 3, Processing Time 0.016 seconds

Open Policy Agent based Multilateral Microservice Access Control Policy (개방형 정책 에이전트 기반 다자간 마이크로서비스 접근제어 정책)

  • Gu Min Kim;Song Heon Jeong;Kyung Baek Kim
    • Smart Media Journal
    • /
    • v.12 no.9
    • /
    • pp.60-71
    • /
    • 2023
  • A microservice architecture that accommodates the heterogeneity of various development environments and enables flexible maintenance can secure business agility to manage services in line with rapidly changing requirements. Due to the nature of MSA, where communication between microservices within a service is frequent, the boundary security that has been used in the past is not sufficient in terms of security, and a Zerotrust system is required. In addition, as the size of microservices increases, definition of access control policies according to the API format of each service is required, and difficulties in policy management increase, such as unnecessary governance overhead in the process of redistributing services. In this paper, we propose a microservice architecture that centrally manages policies by separating access control decision and enforcement with a general-purpose policy engine called OPA (Open Policy Agent) for collective and flexible policy management in Zerotrust security-applied environments.

A Study on Designing a Next-Generation Records Management System (차세대 기록관리시스템 재설계 모형 연구)

  • Oh, Jin-Kwan;Yim, Jin-Hee
    • Journal of Korean Society of Archives and Records Management
    • /
    • v.18 no.2
    • /
    • pp.163-188
    • /
    • 2018
  • How do we create a next generation Records Management System? Under a rapidly changing system development environment, the records management system of public institutions has remained stable for the past 10 years. For this reason, it seems to be the key cause of the structural problem of the Records Management System, which makes it difficult to accommodate user requirements and apply a new recording technology. The purpose of this study is to present a redesigned model for a next-generation records management system by analyzing the status of the electronic records management. This study analyzed "A Study on the Redesign of the Next-Generation Electronic Records Management Process," records management technology of advanced records management system, and a case of an overseas system. Based on the analysis results, the improvement direction of the records management system was analyzed from several aspects: functional, software design, and software distribution. This study thus suggests that the creation of a microservice architecture-based (MSA) and an open source software-oriented (OSS) records management system should be the focus of next-generation record management.

Stream-based API composition for stable API Gateway (안정적인 API 게이트웨이를 위한 스트림 기반 API 조합)

  • Dong-il Cho
    • Journal of Internet Computing and Services
    • /
    • v.25 no.1
    • /
    • pp.1-8
    • /
    • 2024
  • In the API gateway, API composition is an essential function that can reduce the number of client calls and prevent over-fetching and under-fetching. API composition that operate with IMJ (In-Memory Join) consume a lot of resources, putting a burden on the performance of the API gateway. In this paper, to improve the problem of IMJ-style API composition, we propose SAPIC (Stream-based API Composition), which delivers the data to be composed to the client by streaming. SAPIC calls each MSA API that makes up the client response data and immediately streams the received response data to the client, reducing the resource consumption of the API gateway and providing faster response time compared to IMJ. As a result of a comparison experiment with GraphQL, a representative API combination technology, SAPIC recorded a maximum CPU occupancy rate of approximately 21 to 70 % lower, a maximum heap usage rate of approximately 16 to 74 % lower, and a throughput rate that was 1 to 2.3 times higher than GraphQL.