Tencent Cloud’s Deployment Practices For Servers In Malaysia And Case Studies Of Successful Enterprise Cloud Adoptions

1.

Project Background and Objectives Overview

1) Objective: Establish stable, low-latency service nodes in the Malaysia region to serve users in Southeast Asia.
2) Type of business: E-commerce platforms, API services, and static content distribution coexist.
3) Metric requirements: P99 latency <100ms、月可用率> 99.95% availability, with a peak concurrent processing capacity of 10,000 RPS.
4) Expected safety requirements: Basic anti-DDoS protection, with the capability to upgrade to on-demand advanced defense when necessary.
5) Consideration of costs: The monthly operations and maintenance budget is controlled within the range of 6,000 to 12,000 RMB.

2.

Network and bandwidth planning

1) Select the nearest available zone: The region of Malaysia (Kuala Lumpur) is chosen to reduce the number of international hop counts.
2) Bandwidth specifications: It is recommended to choose a bandwidth range of 100Mbps to 500Mbps based on the peak usage, and to use a pay-as-you-go plan for data consumption.
3) Elastic IP and BGP multiple connections: Critical services utilize EIPs and have BGP enabled to optimize international backhaul connections.
4) SLAs and Monitoring: Enable Tencent Cloud Monitoring to track bandwidth utilization and packet loss rates.
5) Cost estimation: The monthly cost for a 100Mbps bandwidth package (including data usage) is approximately 2,000 to 4,000 RMB, depending on the amount of data used.

3.

Best Practices for CVM/VPS and Storage Configuration

1) Recommended specification combinations: 2vCPU/4GB (for light applications), 4vCPU/8GB (for medium loads), 8vCPU/16GB (for peak loads).
2) Storage options: The system disk uses the cloud disk CLOUD_For SSDs, high-performance cloud block storage or file storage (CFS) should be used for business data.
3) Load sharing: On the front end, Nginx is used as a reverse proxy, and Keepalived is employed for VRRP primary/secondary setup; on the back end, a load balancing solution called CLB is used.
4) Snapshots and backups: Scheduled snapshots and cross-availability zone replication ensure that the RTO is maintained within 30 minutes.
5) Configuration example: 4 vCPUs/8 GB RAM + 100 GB SSD + 200 Mbps bandwidth; estimated to support 5,000 to 10,000 concurrent users (depending on the application).

4.

Security enhancements and DDoS defense strategies

1) Basic protection: Enabling Tencent Cloud Anti-DDoS Basic Protection will cover all EIPs.
2) Upgrade on demand: During peak traffic periods or for sensitive services, upgrading to Anti-DDoS Pro/Advanced can provide protection with peak rates exceeding dozens of Gbps.
3) WAF and security groups: The front end is connected to a Web application firewall, with security groups and ACL rules being refined accordingly.
4) Blocklist/Allowlist and frequency control: Implement IP allowlists and rate-limiting policies for login and API calls.
5) Logs and responses: Enable CLS log collection and establish an emergency response process to ensure that traffic cleaning is completed within 30 minutes.

5.

Best Practices for CDN and Domain Name Resolution

1) Selection of CDN service provider: Use Tencent Cloud CDN to cache static resources on nodes located in Malaysia and surrounding areas, thereby reducing the load on the origin server.
2) Caching strategy: Static resources are set with a long cache period (Cache-Control set for more than 7 days), while dynamic interfaces follow origin-pull rules.
3) DNS resolution: Use DNSPod (Tencent Cloud DNS) to configure intelligent resolution, which intelligently selects the optimal node based on the user's geographical location.
4) HTTPS and Certificates: Use a free SSL certificate and enable HTTP/2 and OCSP acceleration to improve handshake performance.
5) Monitoring: Use CDN and DNS statistics to monitor hit rates and resolution times, with the target CDN hit rate being >85%.

6.

Comparison of real corporate cases with performance data

1) Customer: Southeast Asian e-commerce company “ABC” has migrated to Tencent Cloud’s Malaysia node.
2) Scale of migration: 30 CVMs (4vCPU/8GB) are used for the application layer, and 3 database instances (primary and backup, each with 8vCPU/16GB) are used for the database.
3) Comparison of results: The comparison of latency, availability, and costs before and after the migration is shown in the following table.
4) Results: The latency of P99 was reduced from 320 ms to 70 ms, the monthly availability increased from 99.2% to 99.98%, and the operational maintenance costs were decreased by approximately 37%.
5) Technical Key Points: BGP multi-line routing, CDN distribution, Anti-DDoS Pro, and automated operation and maintenance scripts have all been enabled.

Item	Before migration (original overseas host)	After the migration (to Tencent Cloud Malaysia)
Average P99 latency	320 ms	70 ms
Monthly availability rate	99.2%	99.98%
Monthly operations and maintenance costs	~19,000 yuan	~12,000 yuan
CDN hit rate	—	88%
DDoS Protection Peak Capacity	Not deployed	Capable of withstanding speeds greater than 20 Gbps

7.

Summary and Recommendations

1) For applications targeting Southeast Asia, it is preferable to establish servers in nearby locations to reduce user experience latency.
2) Integrating CDN, DNS, and DDoS protection into the infrastructure significantly enhances stability and security.
3) Balance cost and scale; it is recommended to start with CVM instances of medium specifications and expand capacity as needed on an elastic basis.
4) It is recommended to establish an automated monitoring and alert system, in conjunction with regular drills of emergency response procedures.
5) If further implementation details are required, a detailed configuration plan and quotation based on the business traffic can be provided.