The technology CRC develops is designed to monitor areas of the internet not owned by a corporate entity but primarily driven by computers that are connected to a network. Since there is no corporate ownership of this technology, there is no consistent or easy way to report abuse. CRC has trained more than 12,000 investigators across 98 countries on their technology which has led to the arrest of 14,000 individuals and the rescue of more than 3,200 children.
Image: One minute of illicit activity captured by Child Rescue Coalition technology
An organization with massive amounts of data operations and a small staff had several challenges before opting to use KrakenD as its API gateway solution. Here are some of them:
Child Rescue Coalition’s infrastructure is Kubernetes based, and the first line of entry into all API services is KrakenD. By using the Virtual Hosts and Wildcard routes plugins, inbound traffic is coordinated and directed to the appropriate load-balanced workload. In some cases, it functions as the actual ingress controller.
Due to KrakenD’s OAuth2 support and sharing of claims, it is possible to extract permissions from a JWT token before it even hits a workload. In addition, the usage of API keys with assigned roles facilitates service-to-service communications. This also prevents degraded service by rate limiting, based on an API key RBAC (Role Based Access Control).
By leveraging KrakenD’s endpoint customization options, converting calls made by legacy applications, and directing inbound traffic based on the revision stated in the path, it is possible to reroute workloads and keep backward compatibility. For example:
Each of the calls above is to the same API - but different versions. Both remain online, and our partners can continue to use the endpoint until they transition to the new. The code itself, and the testing and deployment process don’t change internally.
KrakenD logging, telemetry, and analytics are the tools and data that make it easy to make important infrastructure decisions.
Ingesting partner data, with a diversity of formats and requirements, requires conversion processes. Async Agents and Event Driven Gateway solutions, together with custom plugins, may replace obsolete and less efficient workloads and processes.
This case study has been written by the development team at Child Rescue Coalition and facilitated by Roberto Machorro, Software Programmer at CRC
About Child Rescue Coalition
Visit Child Rescue Coalition