Omise provides easy-to-deploy payment gateway services for merchants on Google Cloud Platform
Founded in 2014 as an e-commerce provider, Omise has evolved to provide payment gateway services to businesses in Southeast Asia. These services include the tools needed to connect and accept payments from customers. Headquartered in Thailand and operating out of hubs in Indonesia, Japan and Singapore, Omise has expanded from 8 to 90 employees and supports thousands of accounts.
“We developed our gateway in three months from July 2014, and complied with the Payment Card Industry Data Security Standard (PCI DSS) required to provide payment services,” explains Frederico Araujo, Chief Information Officer, Omise. “We processed our first credit card transaction in November 2014 and subsequently received a license from the Bank of Thailand that allowed us to operate a full-scale service.” The Omise customer base comprises businesses of all sizes that appreciate the ease with which they can access tools to customise checkout forms without compromising security; integrate payment forms; and enable one-click payments.
To enable businesses to sell products and services online, Omise set down key criteria for its underlying technology. These criteria included near 100 percent uptime and enabling the rapid processing and completion of payments. Omise started operations in a public cloud service but found its costs escalated quickly. Following a review, Omise decided to move its payment gateway environment to the Google Cloud Platform (GCP). “We opted for GCP for three key reasons: we only had to use what we needed when we needed to; the performance met our requirements; and we could scale easily,” says Araujo.
Omise was most interested in running Docker containers on Google Kubernetes Engine developed using Kubernetes. “We determined that this platform would allow us to complete deployments quickly and often and eliminate concerns about the underlying infrastructure,” says Araujo. The business migrated its payment gateway and associated systems to GCP in the Asia Pacific Asia-East 1 Region in Taiwan. Omise is now running a Kubernetes Engine cluster comprising Google Compute Engine instances running Kubernetes. Eighty percent of the cluster is dedicated to production and the remaining 20 percent is used for testing and staging. Node instances managed from a master endpoint provide the services for the Docker containers used to run the Omise applications and associated systems.
Running its microservices-based applications in Kubernetes has enabled Omise to cut the time for developers to release new versions of their software from up to two hours to a few minutes. The business uses a Jenkins automation server to enable continuous integration and deployment to Kubernetes, and has gained the ability to monitor the number of requests directed to individual Docker containers.
Reduced network latency and high availability delivered through GCP
Moving to Kubernetes Engine has enabled Omise to reduce network latency from 400 milliseconds to only 250 milliseconds, increasing the speed that payments are processed through its gateway services and improving the experience for merchants and consumers. Furthermore, Omise has been able to maintain availability levels at 99.999 percent to ensure that the payment services critical to the viability of most businesses selling online can be accessed as needed. The business has also been able to scale quickly to support spikes in demand that occur when customers undertake promotions or make available tickets to high-demand events.
“In some cases, we have had to support up to 3,000 credit card transactions in a minute when tickets are made available to in-demand artists,” says Araujo. “We have been able to do this by creating preview Docker images of our architecture that can be deployed in seconds; in fact we can double our architecture in just five minutes if necessary.”
Omise has also been able to use GCP firewalls to control access to its Compute Engine instances. This has helped protect highly sensitive merchant and payment data from leakage or unauthorized access. “Being able to secure this data is critical to our reputation with merchants and their customers as a safe, reliable provider of payment services,” says Araujo. “Thanks to GCP, the data is in safe hands.”
While the business does not directly attribute revenue gains to running its payment gateway service on GCP, Araujo points to the stability and performance of the platform as a key contributor to improved sales. He is more definitive about the reductions in system administration achieved since moving to GCP: “I estimate we’ve saved about 10 hours a week that we are now devoting to building our core business,” he says. Overall, the business is extremely pleased with GCP and believes the culture underpinning the cloud platforms aligns closely with its own direct, collaborative approach.