EASYProcess Platform Architecture on AWS1

EASYProcess Platform Architecture on AWS
  • 1 EASYProcess can also be deployed on Azure, OCI or OnPrem using the same architecture.
  • 2 ECC (EASYCloud Connector) is how we connect to your network/JDE/Databases. See ECC architecture diagram.
  • 3 VPC: AWS Virtual Private Cloud.
  • 4 ALB: AWS Application Load Balancer.
  • 5 RDS: AWS managed SQL Server.

EASYCloud Connector (ECC) Architecture

EASYCloud Connector (ECC) Architecture

Technology

EASYCloud Connector uses WebSocket to establish a connection between your enterprise network and EASYProcess cloud applications. The WebSocket connection is initiated by an on-prem .NET component. WebSocket then provides a full-duplex connection between cloud and on-prem applications, mainly JD Edwards. WebSocket is a W3C standard: https://www.w3.org/TR/websockets/.

Security

  • TLS 1.2.
  • WebSocket connections are opened over an SSL port.
  • It is outbound only, meaning no port needs to be opened in your firewall. It is equivalent to you browsing a website from inside your network.
  • ECC does not use IIS to connect to JDE. This makes the ECC server a “JDE Hub”, which means the server cannot be compromised. To maintain this security, ECC should not be installed on a shared-use server. Creating a new server for ECC use only is recommended as best practice.
  • IP whitelist: the EASYProcess application will only accept incoming connections from whitelisted IP addresses. The server ECC is running on must have a public static IP; this can be achieved through a gateway as well.