Cloud

A collection of 12 posts

VMware SD-WAN in Azure vWAN

Bandwith usage is increasing exponentially, especially for companies moving fast to cloud services. At Michelin we have struggled to optimize network traffic routing as our usage of cloud services has increased. Context As many Microsoft Azure clients, we dispatch our cloud workloads to several regions to improve performance and redundancy,

Jan 19, 2023 4 min read

Architecture

Horizon Cloud VDI - Change Subscriptions or Build New & Universal Broker

Moving our Horizon Cloud VDI from a shared subscription to a dedicated one was not going to be as simple as I thought.

Dec 20, 2022 7 min read

Architecture

Migrate Applications from Kafka On-Premise to Confluent Cloud

Michelin introduced Kafka back in 2018 with some on-premises clusters. In my previous article, I shared how Kafka helped Michelin to learn distributed architectures as well as the complexities and difficulties we faced when managing these Kafka clusters. In this article I would like to explain how we migrated all

Nov 30, 2022 9 min read

Architecture

A story on how Michelin continuously modernizes its information system

Introduction Over the past years, we at Michelin Group, have been trying to think about how to deeply change the way we plan, build and operate our information system to adapt to the VUCA [https://en.wikipedia.org/wiki/Volatility,_uncertainty,_complexity_and_ambiguity] world and we have many transformations

Jul 22, 2021 12 min read

Architecture

Drupal on Kubernetes (a.k.a stateful application)

The production implementation detail of our API portal developed on top of Drupal and hosted as a stateful application on a Kubernetes cluster.

Jun 7, 2021 11 min read

Cloud

Azure Private Endpoints implementation at scale // DNS deep-dive

The intent of this article is to explain how we deployed widely Azure Private Link on PaaS Services and how we tackled the DNS part of this technology, both for on-premise and Azure machines/workstations. Azure Private Link Azure Private Link [https://docs.microsoft.com/en-US/azure/private-link/private-link-overview] is

May 18, 2021 7 min read

Cloud

Kubernetes Vanilla @ Michelin - Why? How?

This article will retrace Michelin journey around containers and container-orchestration (Kubernetes) systems over the last 3 years. We believe that this feedback is interesting because we made strong choices from both a technical and an operational point of views. First things first, why have Michelin invested efforts on such technologies?

Apr 19, 2021 10 min read

Infrastructure

Cloud Management Gateway connectivity - A case study

For my first post here I will be going through a recent case (not so much anymore but hey, that is life !) we spent time on, last Summer. Hopefully you will find it interesting. Abstract (aka "I have no time, tell me what I need to know") : always issue PKI

Apr 1, 2021 7 min read

Architecture

Managing Gitlab instance on Azure

Details about our Gitlab architecture and deployment process mainly based on Azure managed services with databases, cache and file storage.

Mar 25, 2021 6 min read

EventDriven

From Kafka to Delta Lake using Apache Spark Structured Streaming

Using Spark Structured Streaming to consume Avro events from Kafka and consolidate them with Delta Lake format on Azure Data Lake Storage

Feb 16, 2021 7 min read

Network

Azure ExpressRoute and VPN Gateways coexisting - Conditional routing for web-surfing to third party solution

Context Azure implementation at Michelin follows Microsoft recommendations: we have several virtual Data Centers (vDC) in different regions connected to our "on-premises" network through Express Route. In terms of network topology, we leverage the traditional hub and spoke model: The vast majority of the workload are Virtual Machines (VMs) with

Feb 8, 2021 6 min read

Cloud

Azure Network Insights with Traffic Analytics

Within Michelin, we have connections from several geographic points to Azure regions, through Express Route circuits. An important requirement from our Network and Security teams is the capability to inspect and analyze the network traffic between all our assets. We already had visibility of network traffic between "on-premise" and Azure

Jul 21, 2020 4 min read

Page 1 of 1