Patchworks infrastructure

To view this content in our official product documentation, click here.

Introduction

A cutting-edge iPaaS platform requires a robust, versatile infrastructure that scales with its customers. The Patchworks infrastructure is built on Kubernetes, a technology that has revolutionised how we deploy, manage, and scale our applications:

 

MACH

Microservices are used to build the Patchworks platform - small, independent services that communicate with each other, allowing for flexibility, scalability, and easier maintenance." style="width:100px; height:auto;"

Microservices are used to build the Patchworks platform - small, independent services that communicate with each other, allowing for flexibility, scalability, and easier maintenance.

API first is key for powerful integrations. Our next-generation dashboard is driven by powerful APIs which means we can integrate with any other API simply and seamlessly." style="width:100px; height:auto;"

API first is key for powerful integrations. Our next-generation dashboard is driven by powerful APIs which means we can integrate with any other API simply and seamlessly.

Cloud-native development facilitates our microservice architecture, Kubernetes deployments, DevOps infrastructure as code, and much more!" style="width:100px; height:auto;"

Cloud-native development facilitates our microservice architecture, Kubernetes deployments, DevOps infrastructure as code, and much more!

Headless is exactly what you'd expect for an API-first platform. The Patchworks backend is built with our own API, which is then consumed by the dashboard for general use." style="width:100px; height:auto;"

Headless is exactly what you'd expect for an API-first platform. The Patchworks backend is built with our own API, which is then consumed by the dashboard for general use.

Performance & scalability

Kubernetes pod and node auto-scaling Ensure that integrations run consistently, even in the busiest times. See our auto-scaling page for more information." style="width:100px; height:auto;"

Kubernetes pod and node auto-scaling Ensure that integrations run consistently, even in the busiest times. See our auto-scaling page for more information.

We use AWS RDS for all critical databases. Our databases have full redundancy with one ‘read’ and one ‘write’ copy of each.

" style="width:100px; height:auto;"

We use AWS RDS for all critical databases. Our databases have full redundancy with one ‘read’ and one ‘write’ copy of each.

separate availability zone so, in the unlikely event of a failure in one zone, we can fall back to the other." style="width:100px; height:auto;"

Each database copy is hosted in a separate availability zone so, in the unlikely event of a failure in one zone, we can fall back to the other.

Issue identification & resolution

Real-time logs (via web sockets) can be viewed while a process flow runs, with visibility of request, response and payload information at every step." style="width:100px; height:auto;"

Real-time logs (via web sockets) can be viewed while a process flow runs, with visibility of request, response and payload information at every step.

retained for one month for retrospective problem-solving." style="width:100px; height:auto;"

Logs are retained for one month for retrospective problem-solving.

Webhooks, events, and inbound API requests can all be tracked through the Patchworks Dashboard - you don’t need to be an engineer to figure out when/where execution errors occur." style="width:100px; height:auto;"

Webhooks, events, and inbound API requests can all be tracked through the Patchworks Dashboard - you don’t need to be an engineer to figure out when/where execution errors occur.

Removal of complexity

API updates for our library of prebuilt connectors." style="width:100px; height:auto;"

We manage all API updates for our library of prebuilt connectors.

authentication mechanisms (OAuth, token, API key, etc.)." style="width:100px; height:auto;"

We take care of all supported authentication mechanisms (OAuth, token, API key, etc.).

building and maintaining new integrations." style="width:100px; height:auto;"

We've removed all the complexity when it comes to building and maintaining new integrations.

Multi-tenancy

multi-tenant architecture means that customers have the benefits of shared software and infrastructure, secure in the knowledge that each customer's data is isolated and invisible to other tenants." style="width:100px; height:auto;"

Our multi-tenant architecture means that customers have the benefits of shared software and infrastructure, secure in the knowledge that each customer's data is isolated and invisible to other tenants.

faster solution, since we only search one set of data rather than everything - all database operations and secret storage is per-tenant." style="width:100px; height:auto;"

Multi-tenancy provides a much faster solution, since we only search one set of data rather than everything - all database operations and secret storage is per-tenant.

flexibility for change - if necessary we can 'lift and shift' a tenant to a new database, or to a faster region, or even to a completely different cloud provider in a different continent!" style="width:100px; height:auto;"

Multi-tenancy allows flexibility for change - if necessary we can 'lift and shift' a tenant to a new database, or to a faster region, or even to a completely different cloud provider in a different continent!

Robust processes for assured uptime

IaC (Infrastructure as Code)." style="width:100px; height:auto;"

Infrastructure updates are made via IaC (Infrastructure as Code).

peer-reviewed and authorised before being merged." style="width:100px; height:auto;"

Infrastructure updates are peer-reviewed and authorised before being merged.

development and staging review cycles before release to production." style="width:100px; height:auto;"

All production code flows through development and staging review cycles before release to production.

automated and hands-on testing by our QA team." style="width:100px; height:auto;"

Every release must pass both automated and hands-on testing by our QA team.

Infrastructure security

penetration testing is performed annually by an external, CREST-accredited organisation." style="width:100px; height:auto;"

Product penetration testing is performed annually by an external, CREST-accredited organisation.

private subnets." style="width:100px; height:auto;"

Our Kubernetes nodes live in private subnets.

IP whitelisted." style="width:100px; height:auto;"

All key ingresses are IP whitelisted.

We adopt a 'least privilege' model for our development team, and also for users of our AWS and Kubernetes infrastructure.

All key business systems must be accessed via a VPN

All staff use LastPass to generate and store strong passwords - 2FA access to LastPass is mandated.

Platform account security

role-based permissions, so only authorised users can access integrations and data for their company profile(s)." style="width:100px; height:auto;"

Access is managed via role-based permissions, so only authorised users can access integrations and data for their company profile(s).

Audit logs provide a complete history of all user account activity, including Patchworks users." style="width:100px; height:auto;"

Audit logs provide a complete history of all user account activity, including Patchworks users.

control their own passwords - password resets are never performed on behalf of other users." style="width:100px; height:auto;"

Users always control their own passwords - password resets are never performed on behalf of other users.

Single sign-on via Google is supported." style="width:100px; height:auto;"

Single sign-on via Google is supported.