COMPENSAR

Publication Date:

03 November, 2026

Offset strengthens your hybrid connectivity on AWS

To keep up with the growth of its digital services, Compensar needed to modernize its network architecture on Amazon Web Services (AWS). Hand in hand with their organization, we implemented a hybrid connectivitysolution that allowed them to centralize communications, strengthen cloud security, and establish a scalable infrastructure, prepared to guarantee operational continuity.

THE CHALLENGE

Compensar’s digital operation required an infrastructure capable of connecting multiple environments on Amazon Web Services (AWS) with its on-premises systems and Microsoft Azure. In this context, the organization needed to strengthen its hybrid connectivity, reducing the complexity of point-to-point connections and facilitating secure communication between its different technological environments.

In addition to maintaining the continuity of its services, it was essential to improve security in the cloud by centrally inspecting inbound, outbound, and inter-virtual network traffic. In addition, Compensar requireda high-availability hybrid cloud architecture that would maintain connectivity in the event of major main link failures, without impacting the operation of its applications.

WHAT DID WE DO?

We modernized Compensar’s infrastructure on AWS through a Hub & Spoke architecture that allowed us to integrate hybrid cloud environments, centralize security inspection, and automate the management of its infrastructure, strengthening operational continuity.

This allowed us to:

Integration of hybrid cloud environments.We connected five AWS environments with On-Premise infrastructure and Microsoft Azure through AWS Transit Gateway, simplifying communication between platforms.
Centralized traffic inspection.We implemented Gateway Load Balancer and Palo Alto VM-Series firewalls to strengthen cloud security and protect communications between environments.
Continuity in the face of connectivity failures.We incorporated AWS Direct Connect 100 Mbps and a contingency VPN with BGP, enabling automatic switching to maintain hybrid connectivity.
AWS infrastructure automation.We standardize deployments using Terraform, Terragrunt and Azure DevOps, incorporating validations and controls for more consistent management.

RESULTS

Modernizing Compensar’s infrastructure on Amazon Web Services (AWS) enabled benefits such as:

- Five centralized AWS environments using AWS Transit Gateway with seven connections.

- Hybrid connectivity between AWS, on-premises infrastructure, and Microsoft Azure, reducing reliance on point-to-point connections.

- Capacity sized to inspect up to 70 TB of traffic per month and approximately 480,000 new connections per minute.

- Increased operational continuity using AWS Direct Connect 100 Mbps and contingency Site-to-Site VPN.

- Strengthened cloud security through centralized traffic inspection with Gateway Load Balancer and Palo Alto VM-Series firewalls.

- Automated, standardized deployments using Terraform, Terragrunt and Azure DevOps CI/CD.

These results allowed Compensación to strengthen security in the cloud, simplify the management of its infrastructure, and consolidate a more organized and scalable hybrid connectivity model. The solution also incorporated monitoring tools and performance targets, including response times (RTT) of less than 35 ms and additional inspection latency of less than 5 ms, as a reference to evaluate and optimize the operation.

Ready to become a success story?

Compensar is a Colombian Family Compensation Fund dedicated to offering services that contribute to the well-being and quality of life of its members.

Solution Components: