© 2021 DXC Technology Company. All rights reserved. Agenda • Welcome • Cloud Native Applications • Reference cases • Q&A

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 2 Welcome

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 3 Kristof De Wel

DevOps Engineer [email protected]

• 15 Years experience in various Industries • DevOps adept • Archery

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 4 Stijn Van Renterghem

AWS Solution Architect Lead [email protected]

• 20 Years Experience in various Industries • Love Teaching and building • AWS Cloud • Biking and Running

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 5 What is a Cloud Native Application / Architecture (CNA)

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 6 What is Cloud Native?

Cloud Native is set of practices and technologies that allows organizations to build, deploy and operate software applications more frequently, predictably and reliably.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 7 What do Vendors tell us about Cloud Native

Red Hat “‘Cloud-native’ is an adjective that describes the applications, architectures, platforms/infrastructure, and processes, that together make it economical to work in a way that allows us to improve our ability to quickly respond to change and reduce unpredictability.”

IBM “Cloud-native is a term used to describe container-based environments. Cloud-native technologies are used to develop applications built with services packaged in containers, deployed as microservices and managed on elastic infrastructure through Agile DevOps processes and continuous delivery workflows.”

Build once, deploy anywhere The build-cloud-native approach boasts more flexibility over legacy systems while it boosts development, speed, and performance. Cloud-native development is the path to innovation with velocity.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 8 What do Vendors tell us about Cloud Native

Cloud Native Computing Foundation Cloud native technologies empower organizations to build and run scalable applications in modern, dynamic environments such as public, private, and hybrid clouds. Containers, service meshes, microservices, immutable infrastructure, and declarative APIs exemplify this approach. These techniques enable loosely coupled systems that are resilient, manageable, and observable. Combined with robust automation, they allow engineers to make high-impact changes frequently and predictably with minimal toil.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 9 What do Vendors tell us about Cloud Native

• Deploy existing apps in AWS with minimal re-design • Good strategy if starting out on AWS, or if application can’t be re-architected due Lift-and-shift to cost or resource constraints • Primarily use core services such as EC2, EBS, VPC

• Evolve architecture for existing app to leverage AWS services Cloud-optimized • Gain cost and performance benefits from using AWS services such as Auto Scaling Groups, RDS, SQS, and so on

• Architect app to be cloud-native from the outset Cloud-native • Leverage the full AWS portfolio Architecture • Truly gain all the benefits of AWS (security, scalability, cost, durability, low operational burden)

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 10 What are the benefits? • Faster time to market: can be deployed quickly • Scalability: easier to scale according to demand • Ease of management: iterative improvements occur using Agile and DevOps processes. • Non-intrusively Improvements: no downtime or disruption of the end-user experience. Example. Small number of users that use new feature. • Reduced cost: through containerization and cloud standards • More reliable systems: through containerization and cloud standards • Developer productivity

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 11 Why you should start with Cloud Native Applications!

Over 75% of organizations will experience digital disruption because of skills gaps. Gartner. Predicts 2018: IT Operations. 2018

Approximately three out of four non-cloud applications will move to the cloud within the next three years.

Evolving toward Cloud Native application development and delivery is multidimensional, affecting culture, processes, architecture, and technology. As such, this is a journey rather than a destination, representing a cycle of change that can be challenging to embrace.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 12 Use cases for cloud-native applications

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 13 When to modernize or build new? When to modernize In many cases, you don’t need to start writing new applications from scratch. Modernizing existing applications can help you leverage previous investments and business logic while capitalizing on the agility, flexibility, and scalability of the cloud. Whether you containerize, extend, decompose or refactor, you can update your traditional monolithic application into a cloud-native app.

When to build new In some instances, it may be easier to develop new applications utilizing cloud-native development practices instead of working with a current monolith. The reasons for building new can vary. Your corporate culture, perceived risks, or regulatory compliance constraints are some factors that contribute. Building new applications provides teams with the ability to deliver innovation to users unencumbered by previous design decisions and allows developers to experiment.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 14 Cloud Native Computing Foundation (CNCF)

The Cloud Native Computing Foundation is a Foundation project that was founded in 2015 to help advance container technology and align the tech industry around its evolution. CNCF technology projects are cataloged with a maturity level of Sandbox, Incubated, and Graduated, in ascending order. The defined criteria include rate of adoption, longevity and whether the open source project can be relied upon to build a production-grade product.

Collect and share insights on • How organizations are using the cloud. • How companies are managing their software development cycles. • The adoption of Kubernetes and containers. • Challenges in using and deploying containers

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 15 Cloud Native Computing Foundation The Linux Foundation is much more than Linux today

Security Networking Cloud Automotive Blockchain Web

We are helping We are creating We are creating a We are creating the We are creating a Node.js and other global privacy ecosystems around portability layer for platform for permanent, secure projects are the and security networking to the cloud, driving de infotainment in the distributed ledger application through a improve agility in the facto standards and auto industry that that makes it easier development program to evolving software- developing the can be expanded to create cost- framework for next encrypt the defined datacenter. orchestration layer into instrument efficient, generation web, entire internet. for all clouds. clusters and decentralized mobile, serverless, telematics systems. business networks. and IoT applications.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 16 CN Computing Foundation The Cloud Native Trail Map is CNCF's recommended path through the cloud native landscape. Other maps: • Cloud native landscape • Serverless landscape • Member landscape https://landscape.cncf.io

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 17 Cloud Native Computing Foundation

Graduated Projects

Policy Software Container Service Network Key/Value Package Distributed Monitorin Key/Value Logging Registry Orchestration Storage Update Storage Runtime Discovery Proxy Store Management Tracing g Store Spec

Incubating Projects

Ingress Monitoring Container Image Continuous Packaging Spec Serverles Networking Container Remote Controller Runtime Distribution Integration & s API Security Procedure Call Deployment

Service Identity Monitorin Edge Messaging GitOps Operator Identity Spec Mesh Security Distributed Lifecycle g Tracing API Management

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 18 Cloud Native Computing Foundation

Sandbox Projects

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 19 Cloud Native Computing Foundation

CNCF Survey 2020 • The use of containers in production has increased to 92%, up from 84% last year, and up 300% from our first survey in 2016. • Usage of cloud native tools: • 82% of respondents use CI/CD pipelines in production. • 30% of respondents use serverless technologies in production. • 27% of respondents use a service mesh in production, a 50% increase over last year. • 55% of respondents use stateful applications in containers in production.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 20 CNCF Survey 2020

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 21 CNCF Survey 2020

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 22 CNCF Survey 2020

A shift away from fully- automated cycles, which dropped to 33% from 40%

Many organizations are not ready to jump to fully automated cycles because of the complexity of setting them up, or they wish to retain control over certain aspects of application deployment.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 23 CNCF Survey 2020

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 24 CNCF Survey 2020

Technical Challenges Decrease

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 25 CNCF Survey 2020

CI/CD pipelines are critical for automating the building, testing, and deployment of applications. As an essential aspect of DevOps, CI/CD is used widely in production

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 26 CNCF Survey 2020

The three most used CI/CD tools are: • Jenkins (53%) • GitLab (36%) • GitHub Actions (20%)

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 27 CNCF Survey 2020

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 28 CNCF Survey 2020

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 29 Cloud Native Jokes

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 30 What is Cloud Native? Cloud Native is set of practices and technologies that allows organizations to build, deploy and operate software applications more frequently, predictably and reliably.

1. DevOps (Practices) 2. Containers (Technologies) 3. Microservices (Technologies) 4. Application development (Practices) 5. …

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 31 1. DevOps

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 32 DevOps • What • Why • How

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 33 What is DevOps?

• A fundamentally new way of working with tangible benefits. • Use of a specific set of principles and practices. • With the ultimate goal of bringing quality products and services to the market at high velocity.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 34 DevOps Principles

Fast Flow Feedback Loop

Culture Of Continuous learning Collaboration Ownership Systematic improvement

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 35 DevOps Principles Principles - Small increments of work - Constantly identify & evaluate Feedback Fast Flow constraints Loop - Make work visible - Reduce handoffs Culture Of - Automate by default Continuous learning - Maximize developer productivity Collaboration Ownership Systematic improvement

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 36 DevOps Principles Supporting Patterns & Practices - Value stream mapping - Everything through a single delivery Feedback Fast Flow pipeline Loop - Automated Continuous Everything - CI/CD Culture Of - Testing Continuous learning - Inspection Collaboration Ownership - Security Systematic improvement - Trunk-based devlopment practices; Short-lived feature branches - Environments on demand; Infra-as-code

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 37 DevOps Principles Principles - See problems as they occur - Push for quality closer to the source Feedback Fast Flow - Continuous shift left Loop - Shorten and amplify feedback loops

Culture Of Continuous learning Collaboration Ownership Systematic improvement

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 38 DevOps Principles Supporting Patterns & Practices - Transparant CICD pipeline - Shift security left Feedback Fast Flow - Peer review process Loop - Agile methodology (many small sprints) - Telemetry Culture Of - Codify acceptance tests Continuous learning - Short-lived feature branches Collaboration Ownership Systematic improvement

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 39 DevOps Principles Principles - Global optimization - Improvements as part of daily work Feedback Fast Flow - Continuous learning / sharing Loop - Blameless culture

Culture Of Continuous learning Collaboration Ownership Systematic improvement

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 40 DevOps Principles Supporting Patterns & Practices - DevOps Kaizen - Chatops Feedback Fast Flow - Pull requests and code reviews in Loop - MTTR analysis - Blameless post mortems Culture Of - Hackatons Continuous learning - Addressing technical debt Collaboration Ownership - Chaos testing to enable resilience and Systematic improvement learning

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 41 What is DevOps ?

Business Dev Test Ops

Design, Build Quality Staging and Waterfall Requirements and Unit Test Assurance Production

Business Dev Test

Design, Build and Unit Test Ops Agile Quality Assurance Staging and Production Iterations 0 1 2 3 4 5 … n

Business + Dev + Ops + Test DevOps

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 42 Why DevOps ? Why now?

Because technology is available now: Virtualization, Cloud services, Serverless Computing, Containers and Orchestrators …

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 43 Why DevOps?

• DevOps is a shift of modern IT practices required to remain relevant in today’s market. • Benefits

Improved collaboration Rapid delivery Reliability

Security Scale Speed

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 44 How to adopt DevOps?

- Use Agile principles applied to software development - Continuous, small, incremental, frequent changes - Learn & iterate - Change gradually, no big bang transformation - In-place transformation based on starting point of a value stream - Culture & practices led (tools are less important)

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 45 How to adopt DevOps?

Value Stream Devops Mapping Dojo Workshops

DevOps Kaizen

https://dxc-technology.github.io/about-devops-dojo/ DevOps Transformation

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 46 Value Stream Mapping

IT Value Streams are the processes and steps of getting changes and feature implementations into production for business value Value Stream Mapping (VSM) is the process of aligning the entire team on the steps, process, timings, and constraints of each value stream and prioritizing improvement steps Why - Without VSM, teams typically locally optimize and automate (in silos) - VSM focuses DevOps work on improvements which achieve the largest end-to-end business value

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 47 Metrics

Deployment frequency Availability Change volume Service level agreements Deployment time Failed deployments Lead time Error rates Customer tickets Application usage and traffic Automated test pass % Application performance Defect escape rate Mean time to detection (MTTD) Mean time to recovery (MTTR)

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 48 DevOps and Cloud synergy

Commitment to either Cloud or DevOps will bring significant gain but commitment to both is even better

+ = MAX WIN

• DevOps and Cloud are complementary • Combination brings boost in KPIs, especially: - Speed & Agility - Project Cost control

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 49 Cloud infra - metaphores

Pet versus cattle

• Has a name • Has a number • Is unique • Automated feeding and cleaning • Part of the family • Each cow is treated the same • Requires love and attention • Replaced by other cow when health fails

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 50 Cloud infra - metaphores

Make use of the cloud herd

By making extensive use of public cloud resources: - Less machines need to be managed - High availability often comes out of the box - Less time spent setting up monitoring This all leads to more time for actual business functionality

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 51 Cloud and DevOps synergy

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 52 Infrastructure as code

Infrastructure as code is a practice where traditional infrastructure management techniques are supplemented and often replaced by using code-based tools and software development techniques

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 53 DevSecOps

Pre-commit Commit Acceptance Production Operations

Check in Compile Code Integration Deployment to Monitor source code Unit test testing production Detect Peer review Stye checkers Load testing Code metrics UI testing Create Pen testing container images

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 54 DevSecOps

Pre-commit Commit Acceptance Production Operations

- Security & - Static Code - Infra-as-code - Security Smoke - Chaos testing privacy stories analysis - Security testing test - Blameless - Peer reviews - Infra-as-code - Cloud - Cloud secret post-mortems - Pre-commit analysis configuration Mngmnt - Cloud hooks - Container Mngmnt - Configuration monitoring - IDE security Hardening - Infra Safety Checks - Pen testing plugins - Dependency compliance - Secure coding Managment checks standards - Container security

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 55 2. Containers

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 56 What are containers? Containers offer a logical packaging mechanism in which applications can be abstracted from the environment in which they actually run. Like virtual machines, containers allow you to package your application together with libraries and other dependencies, providing isolated environments for running your software services. Containerization provides a clean separation of concerns, as developers focus on their application logic and dependencies, while IT operations teams can focus on deployment and management without bothering with application details such as specific software versions and configurations specific to the app.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 57 What are containers?

Containers and virtual machines have similar resource isolation and allocation benefits, but function differently because containers virtualize the Host operating system instead of hardware. Containers are more portable and efficient.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 58 What are container benefits?

Virtual Machine Benefits Container Benefits

Consistent Runtime Yes Yes Environment Application Sandboxing Yes Yes

Small Size on Disk Yes

Low Overhead Yes

Boot fast (seconds) Yes Different OS, Hardware Yes platforms or Cloud Providers

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 59 Container adoption

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 60 Container Use Cases

SOURCE: THE EVOLUTION OF THE MODERN SOFTWARE SUPPLY CHAIN, DOCKER SURVEY 2016

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 61 Sources of risk across the container lifecycle

Image Creation Registry Orchestration Runtime *

• Insecure access or • Vulnerabilities within the • Rouge containers ineffective authorization packages used in • Insecure access to • Container drift boundaries for images. registries • Host OS security – orchestrators • Configuration issues • Stale images access, file system • Uncontrolled inter- • Malware • Untrusted images tampering, container network • Clear text secrets vulnerabilities,… connections

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 62 Containers Orchestrators

Use container orchestration to automate and manage tasks such as: • Provisioning and deployment • Configuration and scheduling • Resource allocation • Container availability • Scaling or removing containers based on balancing workloads across your infrastructure • Load balancing and traffic routing • Monitoring container health • Configuring applications based on the container in which they will run • Keeping interactions between containers secure

Example : Kubernetes, AWS ECS and EKS, Azure AKS, Red Hat OpenShift

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 63 3. Microservices

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 64 What are Microservices? A Microservice is an architectural style that structures an application as a collection of services that are: • Highly maintainable and testable • Loosely coupled • Independently deployable • Organized around business capabilities • Owned by a small team • Use the right technology for a problem

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 65 Monolithic vs Microservice Architecture

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 66 Monolithic vs Microservice Architecture

A Microservice application can look the same from the outside. The number and granularity of APIs that a microservice-based application exposes should not be any different than if the API was built as a siloed application.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 67 Microservices Architectural patterns

Introductory patterns • Fine-grained SOA • Layered APIs over fine-grained SOA

Managed state patterns • Message-oriented state management over layered APIs • Event-driven state management over layered APIs • Isolating state in layered APIs

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 68 Service-Oriented Architecture (SOA) vs Microservices Architecture (MSA)

• Both rely on services as the main component.

• Microservices, are the next step in the evolution of Service Oriented Architectures.

• MicroServices = Fine-Grained SOA

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 69 SOA vs MSA

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 70 SOA vs MSA

SOA Microservices Architecture “share-as-much-as-possible” “share-as-little-as-possible” Component sharing Frequently involves component sharing Typically, does not involve component sharing Governance Common governance and standards People collaboration and freedom of choice Granularity Larger, more modular services Fine-grained services Each service can have an independent data Data storage Involves sharing data storage between services storage Database Uses traditional relational databases more often Uses modern, non-relational databases Size and scope Better for large scale integrations Better for smaller and web-based applications Single-threaded usually with use of Event Loop Processes Multi-threaded with more overheads to handle I/O features for non-locking I/O handling Communication Communicates through an ESB Communicates through an API layer Coupling and Relies on sharing resources More focused on decoupling cohesion Remote services Uses protocols like SOAP and AMQP Uses REST and JMS Deployment Less flexibility in deployment Quick and easy deployment Containers Use of containers is less popular Containers work very well in MSA

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 71 SOA vs MSA SOA • Is better suited for larger, complex enterprise application environments that require integration with many other applications. • Smaller applications are not a good fit for SOA as they don’t need a messaging middleware component.

Microservices • Is better suited for smaller and well-partitioned, web-based systems. Also, if you are developing a mobile or web application, then microservices give you much greater control as a developer.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 72 Monolithic vs Microservice Architecture

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 73 Keep different databases Synchronized

Create Product

Catalog Service Search Service

Create Create Index Product Product Product

MySQL Message Bus Elasticsearch or Event Bus Product #1 Product #1

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 74 Best practices for Microservices

ANTI-FRAGILE SOFTWARE • Ensure that your software is designed to be robust in the face of failure on all fronts. You can’t rely on your infrastructure to be resilient. Think about “Chaos Engineering”.

HEALTHZ • Apps exposing a known endpoint that returns a simple health check.

“INFINITE” SCALE • Developers need to think about the patterns of data and storage they are using and seek a way to perform the task that can support high scale. Ex. Eventually consistent clustered storage.

MINIMIZE DEPENDENCIES • It is important to ensure that your component has minimal dependencies on external systems. Ex. Using queues for communication rather than synchronous request/reply patterns

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 75 Best practices for Microservices

MONITOR EVERYTHING • A sufficiently complex infrastructure requires visibility.

REDUCE BATCH SIZE • The smaller the unit you work with, the simpler each unit is to operate. Ex. Implementing smaller, more frequent changes are valuable.

CONTAINERIZATION • The use of containers to structure, isolate, and manage units of deployment is generally useful, even when applied to monolithic software.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 76 Microservices adoption

You can adopt microservices in a way that meshes with your culture, your goals, and your own organization. There’s no need to adopt every aspect of microservices all at once Not every company has to be a Netflix or a Spotify.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 77 4. Application development

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 78 Cloud Native application development

12-Factor is a set of best practices for developing and deploying Cloud Native software that translate into platform features and workflow requirements.

Principles • Declarative formats for Automation • Clean Contracts with underlying systems • Able to deploy to modern cloud platforms • Keep your prod and dev systems similar • Easily scale up without changes to architecture, tooling, development etc.

Twelve-Factor App design: https://12factor.net

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 79 Cloud Native application development

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 80 Methodology for building software-as-a-service apps Start with Twelve-Factor App design: https://12factor.net 1. Codebase : One codebase tracked in revision control, many deploys 2. Dependencies : Explicitly declare and isolate dependencies 3. Config : Store config in the environment 4. Backing services : Treat backing services as attached resources 5. Build, release, run : Strictly separate build and run stages 6. Processes : Execute the app as one or more stateless processes 7. Port binding : Export services via port binding 8. Concurrency : Scale out via the process model 9. Disposability : Maximize robustness with fast startup and graceful shutdown 10. Dev/prod parity : Keep development, staging, and production as similar as possible 11. Logs : Treat logs as event streams 12. Admin processes : Run admin/management tasks as one-off processes

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 81 Evolution to Cloud Native

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 82 References

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 83 AWS References

• FG Mobiliteit en Openbare Werken • Chiron (TaxiDecreet) • Enterprise Service Bus • FG Digitaal Vlaanderen • WEBIDM3 • Visitors Registration • FG Wonen Vlaanderen • Central log management • FG Agentschap Innoveren & Ondernemen • Corona Hinderpremie

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 84 “API-first” approach

What is the importance of API ? • Functionalities more and more available in the form of API • API mindset, a new way of developing applications • Modernizing classic applications

Evolution Targets Modern Application Modern Application Modern Application • Exchanging functionalities, both internally and externally

Data Functional • Avoiding Modernization Costs Exchange Interface • Digitization Classic Application ClassicClassic Application Application Classic Application

Classic approach Unmanaged API’s Managed API’s

More Integration

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 85 Chiron – Vo Mobiliteit en Openbare Werken Referentie “API-first”

Affiliated taxi companies Reusable building blocks Via 24/7 self-service portal

Collect travel information

24/7 self-service portal with automated validity and authorization checks

Expansion / improvement Agile Scrum project approach of the Mobility mix for Flemish citizens

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 86 Chiron – AWS CI/CD

- Multiple accounts - Orchestration from CICD account - Full AWS Native services

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 87 Chiron – Lambda functions

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 88 MOW ESB – Own Technology / security

AWV Mijn Bestekbewerker eDelta WebIDM Gateway Burgerprofiel

ESB

De Vlaamse CRM RijopleidingROV Orafin Waterweg

2-ssl Service-Oriented Architecture (SOA)

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 89 Azure References

• FG Mobiliteit en Openbare Werken • Analytics environment • Travel & Transportation • DXC provided a containerization & Azure integration solution to improve agility with a CI/CD pipeline, deploying applications to Azure Kubernetes Service and OpenShift. Upgraded applications to the latest .NET specifications and migrated databases to Azure SQL • Consumer Packaged Goods • ~300 applications supporting multiple business functions were migrated to Microsoft Azure in under 12 months • Implemented an API gateway and set up a developer portal and an Enterprise Integration Center to drive their “API-First” strategy • Open Grid Europe • Azure Kubernetes Service with a mix of Azure native services to leverage benefits such as persistent storage and containerized application requirements.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 90 Analytics environment

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 91 Code versus Low Code / No Code Code Low Code / No Code

Code is still largely written 'manually' and scripts With visual design tools, solutions are built, and processes are used to test and deploy the code tested and rolled out immediately with minimal hand coding  requires good IT knowledge  requires limited IT knowledge  is labor intensive  is simple and efficient  has a longer lead time  there are fast results  requires coordination  joint & iterative

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 92 Low Code

• FG Wonen Vlaanderen • From new regulations to “open for business” < 1 month • FG Agentschap Informatie Vlaanderen • Orchestrated data collection & business rules for automated advice • FG Vlaamse Energie- en Klimaatagentschap • Transfer of interest subsidy files by lenders with automatic check and payout • FG Vlaams Rampenfonds • High flexibility in drafting digital disaster handlings • FG Cultuur, Jeugd & Media • Corona premiums for the culture sector, open for application < 1 month • FG Mobiliteit en Openbare Werken • Generic application module for smart digitization of recognition processes • Brussels • A front office for all file handlers & IT representatives

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 93 Low Code – Azure Power Apps

Agentschap Integratie & Inburgering Trefdag Digitaal Vlaanderen Hackathon 3 Apps in één maand CIT (Crisis Information Translated) - 2nd place: Harvesting license App - Vacation Planner speed up and - 3rd place: VO Cab Taxi App - Reservation app automation of - Access control app translation procedures

Agentschap Zorg & Gezondheid VX Centra – Voorraadbeheer app (Operationeel in 18 dagen)

Agentschap Overheidspersoneel (AgO) - Bulk upload selection criteria in recruiting - Distribute Maillog Cornerstone to different target groups

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 94 Low Code - AWS Amazon Honeycode

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 95 FG Security Building blocks

Encryptie at rest Antimalware PAMaaS Network filtering - AWS KMS (+ virtual patching) - Onprem - Reverse Proxy - Azure Keyvault - AWS - Forward Proxy - Onprem (Vormetric) - Azure - ACD proces

SIEMaaS - Infrastructure Pen testing FG ACM/IDM Virtual waiting room - OS (Win/Linux) Vulnerabilty scanning - Application

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 96 FG Security Building blocks In development …

Data anonymization (context of Software development) LogaaS

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 97 DXC Differentiators

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 98 Top five reasons to choose DXC

DXC Cloud Offering DXC Cloud Offering have formed a Practice to support client digital transformation at a global scale. Positioning both DXC and our Cloud Partners (AWS/Azure/Google) to ensure our customers derive maximum ROI from the Cloud with minimal risk.

End-to-end services DXC is the only vendor that delivers the full life cycle of cloud professional services: advisory, transformation, integration, and management, backed by strong collaboration with our Cloud Partners . DXC provides a full spectrum of IT, applications, security, analytics and workplace services from consulting through management.

Flexible services DXC offers managed service bundles suited to meet client IT and financial objectives. Whether you have critical workloads that demand a full suite of services or are just looking for a light-touch service that helps control costs and aligns consumption with need, we can scale and align to meet those needs.

Global presence DXC Managed Services for supports all industries, regions and geographies, and scales to enterprise needs to suit the demands of our clients, no matter the business, industry or regulatory drivers.

Reduce cost and risk Seasoned advisors and consultants deliver savings and reduce risks by evaluating your applications portfolio for suitability for public cloud, and by using DXC’s tools, processes and services for risk mitigation, security & regulatory compliance.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 99 Digital Talent Masterclass

Session 1 Session 2 Session 3 Session 4 Session 5 Session 6 Certification

45 min 45 Applicable Principles

Closing 1. Mixed form of theory and presentations case studies 2. Sessions on location of the school 3. Cases submitted by customers 4. Mandatory participation in

115 min 115 the entire process 5. Max. 25 students 6. Screening by faculty and DXC

Digital Talent Masterclass Customers, university students and DXC think together about the use of new technologies for concrete customer projects

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 100 DXC Agile Arms and DevOps Dojo

White Basic training (the “what”) Skill and reskill for DevOps with DevOps Dojos by Olivier Jacques Yellow hands-on modules with the cultural and technical aspects (the “how”) Green principles, objectives and ➢ The DXC DevOps Dojo importance (the “why”) trainings are also open to our customers, some trainings are Black hands-on workshops where multi- even available on YouTube. disciplinary teams work together to implement the skills and methods

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 101 DXC’s Application modernization methodology

DXC Modernization Studio

Advise Assess Plan Migrate Modernize Manage

Operational Sharpening the Inventory and assess Determine future Effective migration of the “Refactor” existing management in a Client's objectives and current application architecture, team and lead applications to another applications to increase secure way challenges landscape time infrastructure their value environment

DXC Services► Transformation Easy ► Application portfolio ► Migration planning ► Image migration ► Digital integration ► DevSecOps Planner assessment / Tools ► Architecture & Strategy ► Database hosting ► Database transformation ► Application management ► Application Rapid ► Migration assessment ► Integration roadmap ► Replatform ► UI/UX ► Application security Predictive Assessment ► Rationality assessment ► Automation ► Database transformation ► mainframe ► Transformation ► Integration assessment ► Enterprise Integration ► Physical “lift and shift” ► Cloud Native accelerator workshop ► Blueprint assessment Center blueprint ► Application reinstall ► Rationalization ► Tactical and strategic ► Upgrade and Migration ► Optimization advice ► containers ► Automation

► business case ► App destination ► Future Architecture ► Applications migrated to ► Applications modernized to ► Flexible exploitation Result ► Migration strategy and ► App treatment folder ► Migration blueprint and sprint the target platform with Cloud Native processes tailored to the roadmap ► “Cloud readiness” heat plan maximum use of ► Optimized, with the ability to needs of the Customer ► Alignment with the map ► Capacity plan “platform native” integrate with Cloud, SaaS, ► High degree of automation services and automation business ► Transformation effort ► “Wave” plan and timeline mobile, IoT devices and on- ► “Site Reliability Engineering” premise databases ► Positioning against industry ► “Single source of truth” benchmarks database

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 102 A broad ecosystem of partners: International, local and Flemish start-ups

• Flemish startups • Local Flemish partner • Focus on innovative trends : • Founder and authority Blockchain, IoT, AI, VR/AR • DevOps & Open Source

• Access to very broad expertise

• Continuous (r)evolution of supply

• Incubator network, to stimulate local Flemish start-ups

• Collaboration with Professor Omar Application Services Mohout Customers Core Team • Favorable conditions from international partners thanks to “buying power”

• Service provider local authorities • Innovative solutions • Data integration

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 103 The industry-leading DXC Partner Network

Strategic Partners Solution Partners Channel Sales Partners Supplier/Reseller Partners

Deep, comprehensive, global partnerships Regional, industry, offering or frontier Ability to scale globally and market and Providing the essential components that with joint business objectives and a drive to relationships with specialized expertise to resell DXC offerings and services through complete DXC solution offerings with continuously solve complex, critical client exceed our clients’ expectations experienced sales teams consistent, replicable outcomes for each client challenges

Note: Partner list not exhaustive

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 104 DXC offering families

Cloud & Workplace & Analytics Platform Services Mobility Our portfolio of analytics services and robust partner We help clients maximize their private cloud, public Our workplace, mobility and IoT services provide a ecosystem helps clients gain rapid insights and cloud and legacy infrastructure, as well as securely consumer-like experience with enterprise security and accelerate their digital transformation journeys. manage their hybrid environments. instant connectivity for our clients.

Security Application Business Process Our security solutions help predict attacks, proactively Services Services respond to threats, ensure compliance and protect Our comprehensive services help clients modernize, We provide seamless digital integration of front and data, applications, infrastructure and endpoints. develop, test and manage their applications back offices. The result: unlimited business outcomes.

Enterprise & Consulting Industry Software & Cloud Apps We help clients accelerate their digital transformations Solutions We provide industry, business process, systems and business results with industry, business, Our industry-specific solutions enable businesses to integration and technical delivery experience to technology, and complex integration services. quickly integrate technology, transform their operations maximize value from enterprise application portfolios. and develop new ways of doing business.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 105 DXC and AWS Public Cloud Services Partnership at a glance

5+ 2,000+ 1,800+ 115+ Year partnership: AWS Certified AWS accounts under Clients Premier member Individuals management or of AWS Partner Network (APN) governance

50+ DXC Technology and Amazon Web Services (AWS) 47% collaborate to modernize the IT services industry and Migrations to AWS YoY Growth accelerate client transformations on AWS.

135+ 24 DXC AWS Industry SaaS Professional Services PARTNER PROGRAMS AWS COMPETENCIES Solutions on AWS resources Managed Service Provider SAP Consulting AWS Public Sector Partner Migration Consulting AWS Solution Provider IoT Consulting AWS Public Sector Solution Mainframe Migration Consulting Provider Financial Services Consulting 8+ Well Architected Leader Hybrid APN Immersion Days Everest Group 2021: deployments with System Integrator (SI) AWS SERVICE VALIDATIONS AWS Capabilities on AWS - Amazon Connect Delivery PEAK Matrix™ Assessment

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 106

DXC’s end-to-end AWS portfolio SERVICES SOLUTIONS & Manage Migrate Architect Secure Insight Connect

Cloud Services Cloud Migration Application Security Analytics as a Cloud Network for AWS Services for Modernization Services for Service Service AWS AWS Accelerated automated DXC’s application DXC Global Risk center This industrialized, fully Our unique, fully DXC combines cloud-native migration services to AWS includes tools and monitoring and management modernization capabilities managed environment integrated software including application, data, range from refactoring and automation to secure your collects and analyzes a platform, the DXC Agility tools from our Cloud and OS migration services. Services for AWS with re-platforming to full AWS environment and wide variety of data Platform, provides policy- monitoring and management This managed suite of conversion and rebuilding workloads. sources at volume. based governance and capabilities of our DXC services enables rapid of the application with AWS control over applications We leverage several Global Risk management migration of cloud-ready in mind. Hosting BDPaaS on AWS and services. Center. workloads into AWS. partners in supporting this provides instant scalability, Combine this with Cloud Benefits include better highly integrated service ease of use and rapid DXC’s partnership with DXC works closely with our Services for AWS to migrate utilization, performance, with our DXC Services for application development. AT&T NetBond services DXC OFFERING DXC partners (CloudStrike, and manage your developer productivity, and AWS to provide provides on-demand, Symantec, AppDynamics, Infrastructure and application innovation using the full comprehensive Obtain data to make informed secure AWS Direct Puppet, Chef, CloudCheckr real estate. management and security decisions about optimizing AWS ecosystem. your business through a big Connect for clients to and more) to provide an for your AWS environment. interoperable suite of tools data toolset. extend their corporate for 24x7 support. network directly to the AWS cloud.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 107 The DXC and Microsoft partnership Unmatched depth, breadth and quality of customer-driven services and solutions from a global innovation leader with a 30-year commitment to enriching the Microsoft platform

30 Year >$50M 20,000 135 #2 400 Microsoft Annual investment MSFT-trained Countries - Pure Play Services Of the Fortune 500 partnership in partnership professionals Global reach Company Worldwide are our customers DXC Technology Microsoft Azure made easy to accelerate to the hybrid cloud Global Cloud Solutions that are secure and scalable

Azure Early Adoption Initiatives Certifications - More certification than any other Hybrid IT Secure cloud provider for the Enterprise SAP Future DXC offers full support for traditional, proof SAP on communications – private cloud and Azure Azure offers a wide range of encryption Expertise – Microsoft Cloud capabilities Azure Solution Provider, Expert MSP 715 million Virtual Desktop With Azure agility Migration services include Azure Active Directory users Security – Security designed into your Azure workload migration and design architecture. architecture

19M+ Exchange & 1M+ SharePoint 120,000 Server seats deployed/under Integration with Identity and New Azure customer subscriptions/month management Access Management (IAM) on Azure 120 billion hits to websites run on 150 billion Azure Web App Service DXC Analytics on Azure Multi-cloud Security Maturity Assessment Azure SQL query requests processed/day

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 108 DXC Managed Services for Microsoft Azure At a glance

Fast facts Did you know?

• More than 30 years partnership for Microsoft • DXC has over 6000 clients globally product experience across all industries • DXC has 15 strategic partners (including • Over 1000 Azure-certified specialists Microsoft and ServiceNow), and 250 global • Azure Expert MSP, Gold Partner, Inner Circle partner relationships • DXC and Microsoft operate together in over • DXC is the #1 provider of Insurance software 70 countries and services globally • Microsoft’s largest integrator gold partner • DXC has provided leading solutions to the Public Sector for over 50 years • >$50m annual investment in DXC-Microsoft partnership • DXC safeguarded the 2012 London Olympics • 24 Gold and Silver competency areas • 8M+ user devices, 5.7M+ Office 365 seats managed, 42K licensing agreements by DXC • Over 60 customers for Managed Services for Microsoft Azure Learn more at www.dxc.technology/microsoft

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 109 DXC Managed Services for Microsoft Azure

Global reach enterprise-class service Microsoft One of the largest communities of cloud ITIL solutions professionals in the industry 20,000+ professionals 12,000+ certifications Value added service configuration Certified Microsoft Cloud Solution Provider (CSP) Design Microsoft Gold Partner

Certified Expert MSP Deploy All industries, regions, geographies and scale DXC Managed Deliver Services with Azure Migrate

Support

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 110 DXC Composer

Deploy these on-demand:

plus many more…

On

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 111 DXC Composer process

Analyse Build Deploy Test Operate

• Rolling out the application • Analyze the source code • Unit testing for • To an environment • logs created by Composer • Stress testing •bugs • Compiles the application • Alarms • Or a dedicated server • Performance testing •Security issues • Creates binary files • Problem treatment • Or a SaaS provider • Security testing •Best Practices • Monitor • Or to a service on a public • Functional tests •Standards or private cloud

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 112 Available Tools (1) Additional tools can be added on request

Code Analysis Collaboration Sonarqube Clair xWiki Confluence Continuous Integration Anchore Engine Issue Tracking Bamboo Jenkins Code Review GitLab Spinnaker Gerrit

Phabricator Wekan Zuul CI Test Automation Artifact Repository Cucumber Selenium Source code Repository Artifactory Nexus Git Operations Console Gogs Gitea Logging and Monitoring Rundeck StackStorm Cluster Management ELK Prometheus Flow automation Rancher Grafana Node-RED

Additional license costs apply Recommended standard toolset © 2021 DXC Technology Company. All rights reserved. * Indicates DXC best practices June 9, 2021 113 Available Tools (2) Additional tools can be added on request

Registries / Storage ChatOps ChartMuseum Minio Mattermost RocketChat Helpdesk and Ticketing Cache Databases Zammad RequestTracker Redis

MariaDB MySQL ALM Authentication/Authorization MongoDB PostgreSQL Codebeamer Tuleap OpenLDAP Keycloak

Project Management Docker Registries Backup OpenProject Docker Registry Portus Stash Velero

Additional license costs apply On Roadmap to be added Recommended standard toolset © 2021 DXC Technology Company. All rights reserved. * Indicates DXC best practices June 9, 2021 114 DXC Composer- High Level Overview

DevOps tools and DevOps tools that are preconfigured to be secure and implement DXC best practices and are integrated with processes each other.

Security The cluster is automatically configured with encryption at rest, encryption in transit and network security configurations policies.

Kubernetes/ The cluster is automatically created on a public or OpenShift private cloud according to the users requirements Cluster

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 115 Demo Contact us

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 116 Cloud Native Development Cloud Native Application AWS Example

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 117 Cloud Native - IDE: AWS Cloud9

• Cloud-based integrated development environment (IDE) • Collaborating on code easy • Share development environment with your team in just a few clicks and pair program together. • While collaborating, your team members can see each other type in real time • Instantly chat with one another from within the IDE

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 118 Cloud Native - Code quality improvement: CodeGuru

• Uses machine learning and automated reasoning to identify critical issues, security vulnerabilities, and hard-to-find bugs during application development and provides recommendations to improve code quality • Identify an application’s most expensive lines of code

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 119 Cloud Native - Project environment: AWS CodeStar

A unified user interface, to easily manage your software development activities in one place

• Develop • Build • Deploy applications • Project management dashboard • Integrated issue tracking capability powered by Atlassian JIRA Software • Project dashboard

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 120 Cloud Native - CI/CD

• AWS CodeCommit • AWS CodePipeline • AWS CodeBuild • AWS CodeDeploy

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 121 Cloud Native - Container Registry: ECR

• Fully managed container registry that makes it easy to store, manage, share, and deploy your container images and artifacts

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 122 Cloud Native - Container Platform: ECS/EKS Fargate

• Serverless compute engine for containers • Fargate removes the need to provision and manage servers

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 123 Cloud Native - FaaS: Lambda

• A serverless compute service that lets you run code without provisioning or managing servers • Upload your code as a ZIP file or container image • Scale to 1000 functions in seconds

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 124 Cloud Native - Monitoring: CloudWatch

• Monitoring and observability service • Logs • Metrics • Events

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 125 Cloud Native - Monitoring: Grafana

• Visualize and analyze your operational data • Analyze your metrics, logs, and traces without having to provision servers • Connect with Prometheus, Amazon CloudWatch and Amazon Elasticsearch Service and more • Analyze your AWS data across multiple accounts and Regions

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 126 Cloud Native - Container monitoring: Prometheus

• Open-source monitoring and alerting solution optimized for container environments • Automatically scales as your workloads grow or shrink • Integrated with AWS security services to enable fast and secure access to data • Collect Prometheus metrics from Amazon Elastic Kubernetes Service (Amazon EKS) and Amazon Elastic Container Service (Amazon ECS) environments

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 127 Cloud Native - Operations service: DevOps Guru

• Detects behaviors that deviate from normal operating patterns • machine learning

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 128 Questions and Answers

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 129 No solution is perfect All solutions have challenges

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 130 About DXC Technology

DXC Technology (NYSE: DXC) helps global companies run their mission critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private and hybrid clouds. With decades of driving innovation, the world’s largest companies trust DXC to deploy our enterprise technology stack to deliver new levels of performance, competitiveness and customer experiences. Learn more about the DXC story and our focus on people, customers and operational execution at www.dxc.technology.

© 2021 DXC Technology Company. All rights reserved. June 9, 2021 131 © 2021 DXC Technology Company. All rights reserved.