Case studies/National Rail Enquiries - LSM Risk Removal

National Rail Enquiries - LSM Risk Removal

Rail Settlement Plan Limited (RSP) provides important services including ticketing, travel information, and refund facilities for passengers and staff on behalf of member companies.

CLIENT

National Rail Enquiries

INDUSTRY

Leisure & hospitality

SERVICE

Cloud

PARTNER

aws

The client

TheLiveSalesManagement(LSM)platformishostedonAWSandmanagedbyNasstar.

LSM underpins National Rail’s Ticket on Departure offering which allows customers to purchase a ticket online or through a 3rd party in advance of travel, and then collect the ticket at their convenience.

One of the core parts of the LSM service is a reconciliation process that compares ticket sales with ticket issues. This process provides key information to RSP and its retailers, allowing them to calculate profit and loss from ticket sales.

The challenges

Aspartofaregularservicereview,ourteamidentifiedseveralriskswithintheLSMreconciliationprocess.TheReconciliationRiskRemovalprojectsoughttomitigateoreliminatetheseconcernstoensuretheplatformremainedsecureandoperational.Therecognisedrisksincluded:

The Reconciliation Risk Removal project sought to mitigate or eliminate these concerns to ensure the platform remained secure and operational. The recognised risks included:

  • An outdated version of the Infobright database which underpins reconciliation reporting. This was no longer supported by AWS.

  • The high number of AWS access keys within the reconciliation process configuration. This increased the possibility of credentials being leaked via inclusion in code repositories or service compromise.

  • Interoperability with the AWS SDK version deployed. If the SDK version is not up-to-date, changes made by AWS could render it incompatible with Amazon’s services.

  • The Secure File Transfer Protocol (SFTP) server used by the reconciliation process required both an operating system (O/S) patch and an instance-type upgrade.

  • The EMR Hadoop/HIVE version used in the reconciliation to process large data sets had been assigned a “legacy” status by AWS.

Each had the potential to significantly impact the LSM’s reconciliation process, either by causing the process to fail outright or by preventing reports from being produced in a timely manner.

Our goal

TheconsequenceswouldseverelycompromisethebusinessoperationsofticketretailersandtrainoperatingcompaniesacrosstheUK.

The goal was to remove the risks our team had identified, but the new solution also improved security and performance while reducing costs.

The outcome

Find out how our expertise could transform your organisation.

Reliability

The migration of the Infobright-based reporting database from a hosted EC2 instance to an AWS Aurora MySQL serverless instance removed the instance, OS, and database risks. This move also reduced expenditure since serverless models only generate costs while in use.

Resilience

The use of a serverless Aurora MySQL instance has eliminated the need for a complex database disaster recovery process. In the unlikely event of a full loss of service, platform improvements have reduced Return-to-Operation time from more than 12 hours to 30 minutes.

Security

The use of instance role permissions eliminates the risk of credentials becoming compromised. Additionally, the isolation of the SFTP service improves the system’s security posture as a whole and allows additional improvements to the SFTP service if necessary.

Cost reduction

The removal of the EC2-hosted Infobright reporting database has reduced licensing and support costs, as has the transition to a managed event-driven serverless database. The version uplift has also resulted in a significant compute cost reduction associated with EMR processing.

Performance

Thanks to our team’s intervention, the LSM EMR process runtime has been reduced by approximately 2 hours while report processing has decreased by 3-4 hours. Overall, the total end-to-end reconciliation process has been reduced from 8-9 hours to 2-3 hours.

Observability

Our team deployed Amazon CloudWatch to monitor and observe the uplifted instances involved in the reconciliation process. The platform provides performance metrics and enables a high degree of end-to-end infrastructure observability, real-time alerting, and feedback. The new code structure also allows for improved auditing and tracking if required.

What Rail Delivery Group has to say...

"RDG and Nasstar have engaged regularly for several years now, providing solutions and services that continue to support and improve the LSM processes, the purpose and reasoning behind this activity was to remove risk, improve flexibility, enhance efficiency, cost, performance, and future-proof the platform for RDG LSM. This type of innovative thinking and expert advice is why we continue to trust Nasstar with our cloud estate. The reconciliation process is central to the service we provide to our customers and the migration project with Nasstar has not only reduced our costs but given us more visibility and potential for further options moving forward into the future, together with increasing the TOC/TIS communities efficiencies and reporting capabilities."

Giuliano Marrone

Senior Service Manager

•

Rail Delivery Group