FastSpring's SpringBoard® e-commerce platform utilizes multiple Amazon® EC2 (Elastic Compute Cloud) instances running within a virtual private cloud. Amazon EC2 presents a true virtual computing environment, allowing web service interfaces to launch instances with a variety of operating systems, load them with a custom application environment, manage the network’s access permissions and other security configurations, and run AMIs (Amazon Machine Images) using as many or few systems as needed. Capacity is automatically scaled, hence the "elastic" design of this innovative hosting environment..
Transactional email is a crucial part of FastSpring's communications infrastructure, including order fulfillment and other mission-critical notifications. To ensure the highest delivery rate, SpringBoard uses Amazon SES, a highly scalable bulk and transactional email-sending service for businesses and developers. The service integrates with other AWS services, making it easy to send emails from applications being hosted on EC2. Amazon SES uses content filtering technologies to meet ISP standards and provides a built-in feedback loop, which includes notifications of bounce backs, failed and successful delivery attempts, and spam complaints. The service ensures that FastSpring's email notifications to clients and end-user customers arrive dependably in the Inbox.
Hosting for common assets used in FastSpring stores (such as graphics and CSS) is optimized in the SpringBoard platform using Amazon's Cloudfront global content delivery networks. This service allows faster page load times for the many FastSpring clients whose stores target a global customer base.
File downloads are hosted using Amazon's S3® network, allowing secure and redundant storage for the downloadable files purchased within FastSpring stores. This sequestering of data downloads into the Gigabyte range ensures that our core store hosting performance never suffers from high-volume download activity. Regular, systematic data integrity checks, self-repair and checksum calculation of data packets when storing or retrieving data greatly increases reliability and durability.
FastSpring uses a 3rd-party monitoring service as a second method of gaining insight into our servers' and stores' performance. This piece of our technical infrastructure allows an independent, detailed view of server and store uptime and other statistics. Over the last six months, the service has reported uptime of 99.94%, and this rate is consistent with the uptime rates experienced over the past few years.
One important part of this service is geographical testing, showing store performance for multiple locations around the world. It also provides host-independent advanced warning services, along with notification services to cell phones, SMS and email.
We deploy a globally-distributed 3rd-party DNS service with 100% uptime. This service enables enhanced speed of domain lookup and resolution across the globe, with built-in fail-safes for individual DNS nodes. A globally-distributed service for DNS resolution reduces latency, scales for audience size and geography, and provides an additional layer of security for web applications.
All FastSpring stores are served securely over https using high-grade VeriSign® SSL certificates. We deploy hardware-accelerated SSL as part of our technical infrastructure to speed up the secure transactions between server and client. Hardware acceleration of SSL optimizes the most computationally expensive part of an SSL session, the handshake, where server and client agree on a number of parameters that establish the security of the connection. Hardware acceleration of SSL results in faster page load times. FastSpring stores, in addition to serving pages using SSL, are in full complliance with the PCI Data Security Standard.
Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides resizable compute capacity in the cloud. It is designed to make web-scale computing easier for developers. Amazon EC2 presents a true virtual computing environment, allowing you to use web service interfaces to launch instances with a variety of operating systems, load them with your custom application environment, manage your network’s access permissions, and run your image using as many or few systems as you desire. Amazon EC2 reduces the time required to obtain and boot new server instances to minutes, allowing you to quickly scale capacity, both up and down, as your computing requirements change.. Amazon EC2 provides developers the tools to build failure-resilient applications and isolate themselves from common failure scenarios.
Amazon Simple Email Service (Amazon SES) is a highly scalable and cost-effective bulk and transactional email-sending service for businesses and developers.The service integrates with other AWS services, making it easy to send emails from applications being hosted on services such as Amazon EC2. Amazon SES takes proactive steps to prevent questionable content from being sent, so that ISPs receive consistently high-quality email and therefore view the service as a trusted email origin. This maximizes deliverability and dependability for all senders.
Amazon S3 provides a highly durable storage infrastructure designed for mission-critical and primary data storage. Objects are redundantly stored on multiple devices across multiple facilities in an Amazon S3 Region. To help ensure durability, Amazon S3 PUT and COPY operations synchronously store your data across multiple facilities before returning SUCCESS. Once stored, Amazon S3 maintains the durability of your objects by quickly detecting and repairing any lost redundancy. Amazon S3 also regularly verifies the integrity of data stored using checksums. If corruption is detected, it is repaired using redundant data. In addition, Amazon S3 calculates checksums on all network traffic to detect corruption of data packets when storing or retrieving data.
Amazon CloudFront is an easy to use, high performance content delivery service that lets you quickly and cost-effectively deliver content to your customers using a global network of edge locations in the United States, Europe and Asia.
The Domain Name System (DNS) is a hierarchical naming system built on a distributed database for computers, services, or any resource connected to the Internet or a private network. It associates various information with domain names assigned to each of the participating entities. Most importantly, it translates domain names meaningful to humans into the numerical identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide.
Java is a programming language originally developed by James Gosling at Sun Microsystems (which is now a subsidiary of Oracle® Corporation) and released in 1995 as a core component of Sun Microsystems' Java platform. The language derives much of its syntax from C and C++ but has a simpler object model and fewer low-level facilities. Java applications are typically compiled to bytecode (class file) that can run on any Java Virtual Machine (JVM) regardless of computer architecture. Java is a general-purpose, concurrent, class-based, object-oriented language that is specifically designed to have as few implementation dependencies as possible.
The PCI DSS is a multi-faceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations proactively protect customer account data. Most notably, PCI DSS-compliant merchants do not store cardholder data in electronic format. PCI DSS and related security standards are administered by the PCI Security Standards Council.
SSL stands for Secure Sockets Layer, a cryptographic protocol that provides communications security over the Internet. SSL encrypts the segments of network connections above the Transport layer, using symmetric cryptography for privacy and a keyed message authentication code for message reliability.
If you have any additional questions regarding FastSpring's technical infrastructure, please contact us at .
Amazon® and all Amazon web services (EC2, SES, Cloudfront and S3) are registered trademarks of Amazon.com, Inc. Oracle® and Java® are registered trademarks of Oracle Corporation. Sun Microsystems® is a division of Oracle America, Inc. VeriSign® is a registered trademaark of VeriSign,Inc.