Eko Supriyono
Hire Me ✦
Back to Projects & Case StudiesEnterprise Systems
Strict Multi-Tenant Governance & Air-Gapped Deployment

National Gov Data Integration Gateway

Enterprise multi-agency interoperability gateway and API governance platform built for secure cross-department data exchange.

My RoleSenior Full Stack Engineer & API Architect
Duration8 Months
Deployment TierOn-Prem Air-Gapped
Confidential Enterprise System Notice

“Sistem ini berjalan di infrastruktur privat pusat data dengan protokol enkripsi mTLS dan kepatuhan SPBE - tidak ada demo live publik untuk menjaga integritas gateway antar-unit.”

1. Context & Scope

Project Context

OrganizationEnterprise Tech / Inter-Agency Ecosystem
User Scale12+ Government Sub-Agencies & Millions of Monthly API Queries
Team Composition5 Engineers

Architected an API integration gateway allowing heterogeneous government databases to safely exchange standardized JSON/XML data feeds with role-based masking.

2. Technical Constraints

Engineering Constraints

Operating under strict government air-gapped guidelines meant zero access to public cloud services (AWS/GCP/Azure), no third-party SaaS APIs, and strict validation against local SPBE cybersecurity standards.

  • Zero External Telemetry / 100% On-Premise Execution
  • Strict Data Sovereignty & Audit Traceability
  • Heterogeneous Legacy Database Interoperability
3. The Problem

The Challenge Before Intervention

Setiap unit organisasi menggunakan basis data tersendiri dengan format legacy berbeda, menyebabkan duplikasi data, proses verifikasi manual berhari-hari, dan ketiadaan visibilitas audit integritas data.

Silo data antar-unit kerja memperlambat layanan publik dan pengambilan keputusan strategis.
Pertukaran data manual lewat spreadsheet berisiko kebocoran data pribadi (PII).
Ketiadaan API Gateway terpusat dengan rate limiting dan masking otomatis.
4. Architectural Decisions

Technical Choices & Rationale

Technologies & Infrastructure
Next.js 16 (App Router)TypeScriptNode.js API GatewayPostgreSQL (Multi-tenant)Apache Kafka / RabbitMQTailwind CSS

01. Dynamic Field Masking Engine

Mengimplementasikan middleware yang secara otomatis menyamarkan (mask) NIK, nomor telepon, atau data sensitif berdasarkan level otorisasi token caller.

02. Asynchronous Queue dengan Kafka/RabbitMQ

Menghindari timeout saat sinkronisasi data antar-database legacy yang lambat dengan memproses transaksi data via event-driven queue.

// High-Level Architecture Topography

+-----------------------------------------------------------------------+
|                    GOVERNMENT DATA INTEROPERABILITY                   |
|                                                                       |
|   +--------------------+     mTLS      +--------------------------+   |
|   |  Sub-Agency A DB   | <-----------> | Multi-Agency API Gateway |   |
|   +--------------------+               +--------------------------+   |
|                                                    |                  |
|   +--------------------+                           v                  |
|   |  Sub-Agency B DB   | <----------->  [ Dynamic PII Masking ]       |
|   +--------------------+                           |                  |
|                                                    v                  |
|                                         +---------------------+       |
|                                         | Event Bus (Kafka)   |       |
|                                         +---------------------+       |
|                                                    |                  |
|                                                    v                  |
|                                         +---------------------+       |
|                                         | Unified Analytics UI|       |
|                                         +---------------------+       |
+-----------------------------------------------------------------------+
5. Results & Impact

Measurable Outcomes

Gateway terbukti berhasil memfasilitasi pertukaran data otomatis antar-unit kerja secara aman.

Memotong waktu verifikasi data antar-unit dari 3 hari menjadi hitungan detik.

Mencegah eksposur data sensitif PII dengan 100% automated field-level redaction.

Dapat memproses jutaan permintaan API bulanan dengan ketersediaan tinggi.

6. Visual Evidence & Sanitized Code

System Artifacts & Proof of Concept

Interoperability Topology

Sanitized Artifact

Diagram arsitektur pertukaran data berstandar SPBE dengan skema pemetaan atribut dinamis.

Redacted Data Flow Monitor

Sanitized Artifact

Dashboard statistik lalu lintas API, pemeta skema data, dan grafik transaksi real-time antar-sub-unit.

[REDACTED INSTANCE DASHBOARD]STATUS: AIR-GAPPED ONLINE
Active Threads
2,048 rq/s
P99 Latency
18.4 ms
SPBE Audit Log
100% Immutable

Sanitized Code Snippet: PII Data Redactor Middleware

Sanitized Artifact

Fungsi TypeScript untuk menyamarkan atribut PII secara otomatis berdasarkan role skop token JWT.

// Sanitized PII Redactor Middleware
export function sanitizeRecord<T extends Record<string, any>>(
  record: T,
  userScope: string[]
): Partial<T> {
  const sanitized = { ...record };
  const canViewPII = userScope.includes("pii:read");

  if (!canViewPII) {
    if (sanitized.nik) {
      sanitized.nik = String(sanitized.nik).replace(/^(\d{6})\d{6}(\d{4})$/, "$1******$2");
    }
    if (sanitized.email) {
      sanitized.email = String(sanitized.email).replace(/(^.{2})(.*)(?=@)/, "$1***");
    }
    if (sanitized.phone) {
      sanitized.phone = String(sanitized.phone).replace(/(\d{4})$/, "****");
    }
  }

  return sanitized;
}
Back to All ProjectsDiscuss Enterprise Architecture →