February 2025 Summaries

The financial services industry is experiencing increasing service disruptions due to cloud migration challenges, with 53% of companies reporting weekly outages. To address this, Bank Automation News hosted a webinar on "Best practices in cloud migration for financial services" featuring panelists from Cockroach Labs and Google Cloud, among others. The discussion centered around the benefits of cloud migration, including increased velocity and scalability, as well as ensuring data safety and compliance across multiple clouds. The panel emphasized the importance of database modernization, with CockroachDB being highlighted as a geo-aware relational database that can facilitate AI innovation in public clouds for key financial use cases such as fraud detection. With regulatory concerns like DORA regulations now in effect throughout Europe, financial institutions must navigate data safety issues while supporting compliance and high availability of data. The panelists agreed that modernizing the database is crucial to making maximum use of AI technologies.

Application modernization refers to the process of updating and transforming traditional applications to make them more scalable, resilient, and efficient. This involves adopting a microservices architecture, deploying on container infrastructure, and utilizing distributed SQL as the transactional data layer. Distributed SQL has gained significant traction in recent years, following the trends of microservices and containerization, and offers key benefits such as resilience, scalability, data governance, and ease of management. By understanding these fundamental primitives, developers can modernize their applications and take advantage of the latest technologies to increase agility, reduce risk, and improve ROI.

CockroachDB 25.1 has achieved a nearly 20% performance improvement, focusing on reducing the cost of ownership by enhancing resilience and performance capabilities, including leader leases that enable faster recovery from node failures without sacrificing performance. With these improvements, customers and employees can judge companies more effectively based on local app availability and speed, making business operations more efficient globally. The new release also introduces various capabilities to improve resilience and performance, allowing users to deploy multi-region clusters with up to 12 vCPUs for extended periods at no additional cost.

February 8, 2025, marks Cockroach Labs' ten-year anniversary, reflecting on a decade of continuous innovation and exponential growth in data-under-management. Databases are the lifeblood of modern businesses, powering applications and services worldwide. CockroachDB has bridged legacy enterprise data architectures to a future where applications can be built above or across private and public clouds, delivering always-on customer experiences that can accommodate success at any scale globally. The company aims to continuously bring game-changing new technology to its customers, enabling their success as the ultimate prerequisite for Cockroach Labs' success. With over 3,650 days of distributed SQL, CockroachDB is looking forward to an exciting year ahead improving its `pgvector` support to power operationalized AI use cases, enhancing resilience and performance at scale while driving down cost to serve.

Cockroach Labs' approach to vulnerability management is a critical aspect of their software development process. The company prioritizes Quality and focuses on delivering the highest performing, most resilient transactional database platform on the market. Vulnerability Management is an essential part of this process, involving a layered and complex space owned by multiple teams. Cockroach Labs scans their code base nightly to identify new vulnerabilities and addresses them according to their internal SLA for vulnerability management. The company takes a nuanced approach to triaging vulnerability reports, weighing severity against the code base itself to reclassify vulnerabilities as false positives or lower-severity issues. This process is crucial in reducing the likelihood of breaches and minimizing disruption to the engineering development process.

The CockroachDB Physical Cluster Replication (PCR) feature allows organizations to recover from disasters by adding "warm standby" clusters to their most critical deployments, providing an added layer of resilience and disaster preparedness. The primary design goal for PCR is to supply a recovery solution for full-cluster loss events with a much lower Recovery Time Objective (RTO) than restoring from backups. To achieve this, the system replicates every write, from an active cluster to a standby cluster, so that the standby can serve as a low-RTO failover. The replication process operates at scale, is asynchronous, and provides transactional consistency after recovery. The PCR process runs almost entirely on the standby cluster, where it divides the primary cluster into partitions, assigns them to nodes, and then connects to a node in the primary cluster to receive notifications of every change to every row in its assigned partition. The standby node buffers and applies these changes, keeping track of the timestamp as of which it knows it has applied all changes, and forwards this information to a central coordinator process. After failover, the system can "revert" any partially applied changes that violate transactional consistency by finding and removing every KV stored with an MVCC timestamp greater than the timestamp to which they are failing over, effectively restoring the content of the cluster as of that timestamp.

Migrating from legacy mainframe systems to distributed database architectures is a complex endeavor that promises enhanced scalability, cost-efficiency, and performance. The transition involves significant organizational and cultural changes, requiring effective change management strategies to ensure smooth adoption and alignment with business goals. Key strategies include building a clear vision, engaging stakeholders, providing comprehensive training, and fostering a culture of adaptability. Additionally, risk mitigation and contingency planning are crucial to managing technical, operational, and organizational risks, such as data integrity issues, downtime, and security vulnerabilities. Techniques like phased migration, rigorous testing, and technical safeguards help minimize disruptions and ensure data reliability. Post-migration, organizations must focus on performance monitoring and optimization to maintain stability, employing tools like Prometheus or CockroachDB's built-in monitoring features. Proactive alerts, regular health checks, and a commitment to continuous improvement are vital for adapting to evolving business needs and leveraging technological advancements. Ultimately, a successful migration is not just a technical achievement but a strategic investment that positions organizations for long-term success in a competitive landscape.