CloudHub Administration Guide

This guide provides essential guidelines for CloudHub administration, tailored to customer needs based on their subscription. It serves as a practical reference, complementing the knowledge gained from the “Anypoint Platform Operations: CloudHub” training.

Best Practices for CloudHub Administration

• Training for Administrators: Individuals or teams responsible for administration should complete the Anypoint Platform Operations: CloudHub training.

• Account Setup: Maintain at least one non-federated account along with an organization owner account before creating a federated account.

• Stay Informed: Subscribe to updates on component statuses at MuleSoft Status.

• SSO and Role Mapping: Implement Single Sign-On and ensure proper role mapping in access management.

• Environment Management: Exercise caution when renaming or deleting environments to prevent inconsistencies.

• VPC Security: All firewall rules in a Virtual Private Cloud (VPC) should be security team-approved. Avoid unauthorized changes to prevent security risks.

• Dedicated Load Balancer (DLB) Usage:

  • Be cautious with mapping rules in DLB to prevent overexposure of APIs. Refer to DLB Mapping Rules.
  • Disable the Shared Load Balancer if using a Dedicated Load Balancer, particularly by adjusting the VPC firewall settings.
  • Ensure the TLS certificate for the DLB is certified by a recognized Certificate Authority.

• Role-Based Access Control: Assign roles based on the environment. For example, developers might have full access to the Development environment but only view permissions in Production.

• VPC and VPN Sharing: If sharing VPCs and VPNs across Business Groups is necessary, configure these in the Master organization.

• Subscription Monitoring: Regularly monitor subscriptions for various components to ensure business continuity and avoid last-minute issues.

• Alerts and Monitoring:

  • Set up alerts for all applications in the CloudHub production environment.
  • Regularly review audit logs.
  • Monitor API health and policy compliance through Runtime Manager and API Manager dashboards.
  • If using log4j for Splunk integration, enable “Disable CloudHub logs” post-deployment.

• Alert Formats: Standardize alert formats with dynamic variables for efficient integration with ticketing systems.

• Email Configuration for Alerts: Ensure alerts are sent to the correct team email addresses.

• Polling Management: Adjust polling intervals in Runtime Manager without needing to restart applications.

• VPC Sizing: Allocate VPC subnet size to accommodate up to ten times the maximum anticipated CloudHub workers.

• Automation: Leverage Anypoint CLI or platform APIs for automating frequent administrative tasks.

Advanced Configuration and Best Practices

• Disaster Recovery Planning: Establish and regularly test disaster recovery procedures to ensure minimal downtime in case of system failures.

• Performance Tuning: Regularly analyze application performance and adjust resource allocations (like CPU, memory) to optimize efficiency and reduce costs.

• API Throttling and Rate Limiting: Implement API throttling and rate limiting policies to manage traffic and prevent overloading of services.

• Data Backup and Encryption: Ensure regular backups of critical data. Implement encryption both in transit and at rest to enhance data security.

• Custom Domain Configuration: Use custom domains for your APIs and services to enhance branding and ensure consistent user experience.

• Logging Strategy: Develop a comprehensive logging strategy that includes log retention policies, log format standardization, and integration with centralized logging solutions for easier analysis.

• Error Handling and Notifications: Implement robust error handling mechanisms and configure notifications for critical errors to enable quick responses.

• Continuous Integration/Continuous Deployment (CI/CD): Integrate CloudHub with CI/CD pipelines to automate deployment processes, reduce manual errors, and improve efficiency.

• API Versioning Strategy: Implement a clear API versioning strategy to manage updates and changes without disrupting existing users.

• User Access Audits: Regularly conduct audits of user access and permissions to ensure compliance with security policies and to minimize the risk of unauthorized access.

• Cost Management: Monitor and optimize resource usage to control costs. Utilize CloudHub’s built-in tools for tracking and analyzing resource utilization.

• Environmental Segregation: Maintain clear segregation between development, testing, and production environments to prevent accidental changes or data breaches in the production environment.

• Incident Response Plan: Develop and maintain an incident response plan to quickly address and mitigate any security incidents or operational issues.

• Scalability Planning: Plan for scalability to handle increased load, either through manual scaling or by setting up auto-scaling policies based on specific triggers.

• Dependency Management: Regularly update and manage dependencies for your applications to avoid security vulnerabilities and ensure compatibility.

• Custom Metrics and Dashboards: Utilize custom metrics and dashboards for more granular monitoring and real-time visibility into system performance and health.