Migrating from Amazon EC2 to Amazon ECS can dramatically improve application scalability and deployment efficiency. This guide will walk you through the entire migration process, from containerizing your EC2 applications to leveraging ECS features for seamless management and cost optimization.
&gt;&gt;&nbsp;Read more: <a href="https://reliasoftware.com/blog/dockerize-a-node-js-application-and-deploy-to-ec2">How to Dockerize A Node.js Application &amp; Deploy it To EC2</a>?
<h2>Key Benefits of Migrating from EC2 to ECS</h2>
Amazon Elastic Container Service (ECS) is a fully managed container orchestration service that simplifies running, managing, and scaling <a href="https://reliasoftware.com/blog/how-to-create-containerizing-microservices-with-docker">Docker containers</a> on AWS. Migrating from EC2 to ECS offers numerous benefits, such as:
<ul>
<li>Enhance scalability: ECS makes it easy to scale applications by dynamically adding or removing containers.</li>
<li>Automate deployment: ECS integrates with AWS services like Elastic Load Balancing and CloudWatch, reducing the complexity of deployment and monitoring.</li>
<li>Optimize costs: By using ECS, you only pay for the resources your containers consume, potentially lowering operational costs.</li>
</ul>

In contrast, Amazon EC2, while flexible, requires manual effort for scaling, deployment configuration, and monitoring. EC2 instances also incur charges based on instance hours, regardless of actual usage, which can lead to higher operational costs if resources are underutilized. Therefore, EC2 to ECS migration can streamline your operations, reduce costs, and provide scalable, efficient solutions tailored to containerized applications on AWS.
<h2>Environment Setup</h2>
Currently, the infrastructure is deployed across three environments in the London (<code>eu-west-2</code>) AWS region:
<ul>
<li>Development</li>
<li>Staging</li>
<li>Production</li>
</ul>
These environments support the complete <a href="https://reliasoftware.com/blog/software-development-life-cycle-sdlc">lifecycle of application development</a>, testing, and production. Setting up these environments in ECS will provide a unified, streamlined approach, laying the groundwork for a smooth migration.
<h2>Infrastructure Setup</h2>
<h3>Container Images</h3>
<ul>
<li>Storage: Container images are securely stored in Amazon Elastic Container Registry (ECR).</li>
</ul>
<img style="display: block; margin-left: auto; margin-right: auto;" src="../../../../uploads/container_images_ca870f7bed.webp" alt="Container images are securely stored in Amazon Elastic Container Registry (ECR)." width="839" height="43">
<ul>
<li>Deployment: These images are deployed to an ECS cluster, ensuring seamless orchestration of containers.</li>
</ul>
<img style="display: block; margin-left: auto; margin-right: auto;" src="../../../../uploads/ecs_cluster_aaec2eac24.webp" alt="Container images are deployed to an ECS cluster" width="801" height="282">
<ul>
<li>Environment Variables:
<ul>
<li>In-line variables: These are defined directly in the task definition.</li>
<li>SSM Parameters: Securely store sensitive information like API keys and credentials using AWS Systems Manager (SSM) Parameters.</li>
</ul>
</li>
</ul>
<h3>Networking</h3>
<ul>
<li>Private Subnets: Containers are deployed within private subnets for enhanced security.</li>
<li>Application Load Balancers (ALB): ALBs manage traffic to your containers, ensuring that requests are routed efficiently based on health checks.</li>
</ul>
<h3>Database</h3>
<ul>
<li>RDS Postgres: The relational database is hosted on Amazon RDS and is tightly integrated with ECS applications, offering automated backups, failovers, and performance optimization.</li>
</ul>

<h2>Terraform Configuration</h2>
&gt;&gt;&nbsp;You may consider: How To <a href="https://reliasoftware.com/blog/provisioning-a-docker-container-with-terraform">Use Terraform for Provisioning A Docker Container</a>?
Using Terraform, you can efficiently manage the infrastructure with the following setup:
Backend Configuration:
<ul>
<li>AWS Region: <code>eu-central-1</code> (different from the application region to avoid conflicts).</li>
<li>State Management: Terraform state is stored in the <code>cis-terraform-state-management-bucket</code>.</li>
<li>State Locking: State Lock is managed via a DynamoDB in the <code>cis-terraform-state-lock</code> table.</li>
</ul>
Workspaces:
Environments are managed using Terraform Workspaces, each following this naming format: <code>&lt;env abbr&gt;_&lt;aws region id&gt;</code> (e.g., <code>dev_eu-west-2</code>).

<table id="12dbd508-a73e-80f9-9cfa-f28c2aff8464" class="simple-table" style="width: 67.3584%; border-collapse: collapse; height: 78.4px; margin-left: auto; margin-right: auto; border: 1px solid rgb(0, 0, 0);" border="1">
<tbody>
<tr id="12dbd508-a73e-80c6-b070-d0d40ac06825" style="height: 19.6px;">
<td id="==~A" class="" style="width: 37.1257%; border-color: rgb(0, 0, 0); text-align: center; height: 19.6px;">Environment</td>
<td id="|{AM" class="" style="width: 62.8282%; border-color: rgb(0, 0, 0); text-align: center; height: 19.6px;">Terraform Workspace</td>
</tr>
<tr id="12dbd508-a73e-8076-92d6-ce8cfd137c23" style="height: 19.6px;">
<td id="==~A" class="" style="width: 37.1257%; border-color: rgb(0, 0, 0); text-align: center; height: 19.6px;">Development</td>
<td id="|{AM" class="" style="width: 62.8282%; border-color: rgb(0, 0, 0); text-align: center; height: 19.6px;">dev_eu-west-2</td>
</tr>
<tr id="12dbd508-a73e-80af-8894-c7677839c87b" style="height: 19.6px;">
<td id="==~A" class="" style="width: 37.1257%; border-color: rgb(0, 0, 0); text-align: center; height: 19.6px;">Staging</td>
<td id="|{AM" class="" style="width: 62.8282%; border-color: rgb(0, 0, 0); text-align: center; height: 19.6px;">staging_eu-west-2</td>
</tr>
<tr id="12dbd508-a73e-8032-818a-d3df6932a477" style="height: 19.6px;">
<td id="==~A" class="" style="width: 37.1257%; border-color: rgb(0, 0, 0); text-align: center; height: 19.6px;">Production</td>
<td id="|{AM" class="" style="width: 62.8282%; border-color: rgb(0, 0, 0); text-align: center; height: 19.6px;">production_eu-west-2</td>
</tr>
</tbody>
</table>
Each workspace ensures that changes in one environment do not impact others, promoting a safer and more organized deployment process. 
Environment Variables: Managed separately for each workspace and must not be committed to the repository.
<pre class="language-markup"><code>_tfvars

|___[workspace]

|___[region_id].tfvars</code></pre>
Example:
<pre class="language-markup"><code>_tfvars

|___dev

|___eu-west-2.tfvars</code></pre>
<blockquote>
Note: Variables files must not be committed to version control (VSC) to prevent potential secret leaks.
</blockquote>
<h2>CI/CD Pipeline Setup</h2>
A well-designed <a href="https://reliasoftware.com/blog/5-best-practices-for-enhancing-ci-cd-pipeline-security">CI/CD pipeline</a> ensures fast and reliable updates to ECS services. This pipeline is implemented using GitHub Actions, and it automates critical tasks:
<ul>
<li>Building Docker images: Every time new code is pushed, the pipeline builds Docker images.</li>
<li>Deploying ECS services: Once images are built, the pipeline automatically deploys updates to the ECS cluster.</li>
<li>Reusable Actions: Shared actions are organized under <code>github/actions</code> to avoid redundant steps.</li>
<li>Environment Variables &amp; Secrets:&nbsp;</li>
</ul>
<img style="display: block; margin-left: auto; margin-right: auto;" src="../../../../uploads/environment_variables_and_secrets_3bf4bfbe3b.webp" alt="Environment Variables &amp; Secrets" width="486" height="177">
<ul>
<li>Credentials: Securely access AWS credentials via GitHub OIDC, assuming the&nbsp;<code>github-action-deployer-role</code> in the AWS account.</li>
</ul>
&gt;&gt; Read more: <a href="https://reliasoftware.com/blog/docker-network">Docker Networking</a> Fundamentals: Types, Working and Usage

<h2>6 Steps to Migrate from EC2 to ECS</h2>
Step 1: Containerize Existing EC2 Applications
<ul>
<li>Use Docker to containerize current EC2 applications. This involves creating a Dockerfile that specifies the environment setup, dependencies, and runtime for your application.</li>
</ul>
Step 2: Create ECS Cluster
<ul>
<li>Use Terraform to provision an ECS cluster in the <code>eu-west-2</code> region.</li>
<li>Set up a VPC with private subnets, security groups, and network ACLs to isolate your containerized applications.</li>
</ul>
Step 3: Deploy Containers to ECS
<ul>
<li>Define ECS Task Definitions that specify the container image, resource limits (CPU and memory), environment variables, and IAM roles.</li>
<li>Deploy containers using Application Load Balancers (ALB) to ensure traffic routing and failover management.</li>
</ul>
Step 4: Integrate RDS with ECS
<ul>
<li>Ensure that the ECS tasks can seamlessly connect to RDS Postgres instance by configuring appropriate security groups and IAM roles.</li>
</ul>
Step 5: Update ECS Services
<ul>
<li>Use CI/CD pipeline to deploy updates automatically to ECS services when changes are pushed to the repository.</li>
<li>Ensure that any changes to the infrastructure or application code trigger pipeline runs.</li>
</ul>

Step 6: Test Application in All Environments
<ul>
<li>After migration, test the application in all environments (Development, Staging, Umbrella, and Bureau) to ensure it behaves as expected.</li>
</ul>
<h2>Updating ECS Cluster Instance Types</h2>
<h3>Using Terraform</h3>
<ul>
<li>Modify the <code>ecs/cluster.tf</code> file.</li>
<li>Find the <code>locals</code> block contains the following line: <code>instance_type = "t3.medium"</code></li>
<li>Update the instance type of the Environment.</li>
<li>Run <code>terraform plan</code> to review the changes and <code>terraform apply</code> to update the infrastructure.</li>
</ul>
<h3>Using AWS Console</h3>
<ul>
<li style="line-height: 1.5;">Navigate to EC2 &gt; Auto Scaling Groups &gt; [ASG name to update].</li>
<li style="line-height: 1.5;">Under the Details tab, select the Launch Template used by this ASG and navigate to the Launch Template page.</li>
</ul>
<img style="display: block; margin-left: auto; margin-right: auto;" src="../../../../uploads/navigate_to_the_launch_template_page_f9ad00b252.webp" alt="select the Launch Template used by this ASG and navigate to the Launch Template page" width="761" height="306">
<ul>
<li style="line-height: 1.5;">Select Modify template (Create new revision)</li>
</ul>
<img style="display: block; margin-left: auto; margin-right: auto;" src="../../../../uploads/select_modify_template_da641ecebd.webp" alt="3.	Select Modify template" width="761" height="278">
<ul>
<li style="line-height: 1.5;">Choose the desired Instance Type and click Create template version.</li>
<li style="line-height: 1.5;">Go back to ASG page, select Edit the Launch Template.</li>
<li style="line-height: 1.5;">Choose the newly created Version and click Update.</li>
<li style="line-height: 1.5;">Navigate to the Instance refresh tab, and click Start instance refresh</li>
</ul>
<img style="display: block; margin-left: auto; margin-right: auto;" src="../../../../uploads/navigate_to_the_instance_refresh_tab_ddb94a2a77.webp" alt="Navigate to the Instance refresh tab" width="820" height="153">
<ul>
<li style="line-height: 1.5;">In the Refresh settings section, choose Ignore:</li>
</ul>
<img style="display: block; margin-left: auto; margin-right: auto;" src="../../../../uploads/refresh_settings_81becae453.webp" alt="Refresh settings section" width="674" height="260">
<h2>EC2 to ECS Migration Tips</h2>
<ul>
<li>Instance Refresh: Leverage the Instance Refresh feature in Auto Scaling to minimize downtime when migrating or updating instance types.</li>
<li>Scale-In Protection: Properly configure scale-in protection to avoid premature termination of ECS tasks during scaling operations.</li>
</ul>
Steps:
<ul>
<li>Go to the Instance Management tab.</li>
</ul>
<img style="display: block; margin-left: auto; margin-right: auto;" src="../../../../uploads/instance_management_tab_7b300be688.webp" alt="instance-management-tab.webp" width="796" height="148">
<ul>
<li>Remove the Scale-in protection for one or more instances (but keep the minimum number of instances required for the Containers to run).</li>
</ul>
<img style="display: block; margin-left: auto; margin-right: auto;" src="../../../../uploads/remove_the_scale_in_protection_3c6d27639d.webp" alt="remove-the-scale-in-protection.webp" width="292" height="238">
<ul>
<li>Start instance refresh with Replace scale-in protected instances option selected.</li>
</ul>
&gt;&gt;&nbsp;You may be interested in:
<ul>
<li style="font-style: italic;">Exploring 6 <a href="https://reliasoftware.com/blog/deployment-strategy">Deployment Strategies</a> for Smooth Software Updates</li>
<li style="font-style: italic;">Top 9 Best <a href="https://reliasoftware.com/blog/devops-deployment-tools">DevOps Deployment Tools</a> for Businesses</li>
<li style="font-style: italic;">Top 20 <a href="https://reliasoftware.com/blog/infrastructure-as-code-tools">Infrastructure as Code (IaC) Tools</a> For Businesses</li>
</ul>
<h2>Conclusion</h2>
Migrating from EC2 to ECS simplifies cloud operations, improves scalability, and reduces operational overhead. By following this guide, you can transition smoothly and take full advantage of ECS's orchestration and integration capabilities.
<div id="article_content" class="inner_article__entries__X3PKd">
&gt;&gt;&gt; Follow and Contact&nbsp;<a href="https://reliasoftware.com/">Relia Software</a> for more information!
</div>

Learn how to migrate your workloads from Amazon EC2 to ECS for improved scalability, cost-efficiency, and simplified cloud application management.

How to Migrate Your AWS Workloads from EC2 to ECS? | Relia Software

How to Migrate Your AWS Workloads from EC2 to ECS?

large_migrating-from-ec2-to-ecs.webp

medium_migrating-from-ec2-to-ecs.webp

small_migrating-from-ec2-to-ecs.webp

thumbnail_migrating-from-ec2-to-ecs.webp

migrating-from-ec2-to-ecs.webp

Upgrade Your AWS Infrastructure with EC2 to ECS Migration

10 full-stack configuration management tools include Ansible, Chef, Puppet, SaltStack, ManageEngine, GitLab, Juju, OpenManage Enterprise, HP Infrastructure, etc.

Top 10 Full-Fledged Configuration Management Tools For Developers | Relia Software

large_configuration-management-tools.webp

medium_configuration-management-tools.webp

small_configuration-management-tools.webp

thumbnail_configuration-management-tools.webp

configuration-management-tools.webp

Top 10 Full-Fledged Configuration Management Tools For Developers

9 top DevOps deployment tools for businesses are AWS Cloud Computing &amp; Storage, Chef, Ansible, Jenkins, Docker, Kubernetes, Azure Cloud, Travis CI, and Selenium.

Top 9 Best DevOps Deployment Tools for Businesses | Relia Software

large_devops-deployment-tools.webp

medium_devops-deployment-tools.webp

small_devops-deployment-tools.webp

thumbnail_devops-deployment-tools.webp

devops-deployment-tools.webp

Top 9 Best DevOps Deployment Tools for Businesses

DataOps attempts to minimize the time from data requirement to data success, while DevOps focuses on product development.

DataOps vs DevOps: Similarities, Differences & Use Cases | Relia Software

large_dataops-vs-devops.webp

medium_dataops-vs-devops.webp

small_dataops-vs-devops.webp

thumbnail_dataops-vs-devops.webp

dataops-vs-devops.webp

DataOps vs DevOps: Similarities, Differences & Use Cases

Top 22 DevOps automation tools include AWS Cloud Formation, Ansible, Informatica PowerCenter, Google Cloud Datastream, CircleCI, Orca Security, Zapier, etc.

Top 22 Best DevOps Automation Tools For Businesses 2024 | Relia Software

large_devops-automation-tools.webp

medium_devops-automation-tools.webp

small_devops-automation-tools.webp

thumbnail_devops-automation-tools.webp

devops-automation-tools.webp

Top 22 Best DevOps Automation Tools For Businesses 2024

The demand for DevOps Engineers is growing as businesses concentrate on digital transformation. However, there needs to be more suitable applicants in Vietnam, according to the ITviec report 2023.&nbsp;
Therefore, the DevOps Engineer salary is a &ldquo;hot&rdquo; topic for businesses and people who are concerned about the DevOps Engineer position. This blog will show you detailed information about DevOps Engineer salaries by title, experience, and working type.
<h2 dir="ltr">General DevOps Engineers Salary in Vietnam</h2>
<a href="https://reliasoftware.com/blog/what-is-devops">DevOps</a> Engineers' salary in Vietnam is an average of $20,000 per year and nearly $9 per hour. The monthly estimated increased salary is $1,883. Extra pay may include monetary bonuses, commission, tips, and profit sharing. Based on user incomes and our unique Total Pay Estimate algorithm, these statistics are the median.&nbsp;
&gt;&gt; Read more:&nbsp;
<ul>
<li dir="ltr" aria-level="1">
<a href="https://reliasoftware.com/blog/7-ways-devops-accelerate-digital-transformation">7 Ways DevOps Speeds Up the Digital Transformation</a>
</li>
<li dir="ltr" style="font-style: italic;" aria-level="1">
<a href="https://reliasoftware.com/blog/devsecops-integrating-security-into-devops">What is DevSecOps? 4 Steps To Integrate Security into DevOps</a>
</li>
<li dir="ltr" style="font-style: italic;" aria-level="1">Top 22 Best <a href="https://reliasoftware.com/blog/devops-automation-tools">DevOps Automation Tools</a> For Businesses</li>
</ul>
<figure class="image"><img src="../../../../uploads/devops_engineer_salary_by_title_cf6b8d52b4.jpg" alt="devops engineer salary by title" width="1172" height="781">
<figcaption>DevOps Engineer Salaries (Source: Internet)</figcaption>
</figure>
<h2 dir="ltr">DevOps Engineer Salary By Title</h2>
In Vietnam, a DevOps Engineer's salary is usually based on how much experience they have and what their job title is. The pay scale is usually broken up into four levels: junior, mid-senior, senior, and tech lead/manager. In this blog, we also give you information about the rates for internship positions.&nbsp;
<div dir="ltr" align="left">
<table style="border-collapse: collapse; border-color: rgb(0, 0, 0); border-style: solid; width: 99.937%; height: 498.312px;" border="1"><colgroup><col style="width: 20.6313%;" width="135"><col style="width: 18.5493%;" width="104"><col style="width: 18.7385%;" width="130"><col style="width: 20.8206%;" width="141"><col style="width: 21.1992%;" width="139"></colgroup>
<tbody>
<tr style="height: 47.5938px;">
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 95.1876px;" rowspan="2">
Title
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 95.1876px;" rowspan="2">
Experience
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 95.1876px;" rowspan="2">
Average Hour Rate&nbsp;
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 47.5938px;" colspan="2">
Monthly Rate
</td>
</tr>
<tr style="height: 47.5938px;">
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 47.5938px;">
Minimum
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 47.5938px;">
Maximum
</td>
</tr>
<tr style="height: 100.781px;">
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
Fresher
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
1-2 years
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
$15
(375,000 VND)
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
$410
(10,000,000 VND)
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
$818
(20,000,000 VND)
</td>
</tr>
<tr style="height: 100.781px;">
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
Junior
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
3-5 years
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
$35
(875,000 VND)
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
$1,228
(30,000,000 VND)
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
$1,637
(40,000,000 VND)
</td>
</tr>
<tr style="height: 100.781px;">
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
Senior
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
5-7 years
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
$41
(1,000,000 VND)
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
$1,842
(45,000,000 VND)
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
$2,500
(60,000,000 VND)
</td>
</tr>
<tr style="height: 100.781px;">
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
Lead
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
7+ years
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;">
$82
(2,000,000 VND)
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center; height: 100.781px;" colspan="2">
Over $2,800
(60,000,000+ VND)
</td>
</tr>
</tbody>
</table>
</div>
<h3 dir="ltr">Fresher DevOps Engineer</h3>
Fresher DevOps Engineers usually have less than two years of experience and only know the basics of the technology stack or language. Even though they can use technology to do simple jobs, they still need a lot of help and supervision because they make mistakes more often. Since this is the case, their salaries are usually between $40 and $800 (10 million and 20 million VND) per month.
<h3 dir="ltr">Junior DevOps Engineer</h3>
Developers at this level have been working in the field for at least two to four years. They have learned a lot about their chosen <a href="https://reliasoftware.com/blog/which-web-development-language-should-you-learn">programming language</a> or technology stack and have a lot of experience with it. They can easily do simple jobs with little help, but for bigger, more difficult projects, they might still need help and direction.
As they get more experience, Junior DevOps Engineers often take on more tasks and may be asked to help guide younger developers. Their pay is usually better than that of fresher developers. Each month, they make around 30 million VND. This shows they have more knowledge and experience and can handle more difficult tasks.
<h3 dir="ltr">Senior DevOps Engineer</h3>
Senior DevOps developers have worked as professionals for 4 to 6 years and have a lot of information and experience with their programming language or tech stack. It's easy for them to handle complicated jobs without much help, and they often help lower-level developers solve problems.&nbsp;
Senior-level developers usually make over 40 million VND per month, which is 30% to 50% more than mid-senior-level developers because they have more experience and more responsibility.
<h3 dir="ltr">DevOps Engineer Lead</h3>
Leads are often startups' and SMEs' first hires. They need knowledge to comprehend the project's scope and needs and good communication skills to work with other DevOps developers. Compared to seniors, their salaries are usually 30% to 40% more.
As software companies grow and add teams, they must pay over 60 million VND for a qualified lead or manager. They plan long-term product development and hire additional team members.
<h2 dir="ltr">DevOps Engineer Salary By Working Types</h2>
<div dir="ltr" align="left">
<table style="border-collapse: collapse; border-color: rgb(0, 0, 0); border-style: solid;" border="1"><colgroup><col width="173"><col width="235"></colgroup>
<tbody>
<tr>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
Working Types
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
Rate
</td>
</tr>
<tr>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
On-site
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
Up to $3,000 per month
(60,000,000 VND/ month)
</td>
</tr>
<tr>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
Hybrid
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
Up to $2,000 per month
(40,000,000 VND/ month)
</td>
</tr>
<tr>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
Freelance
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
$15 to $70 more per hour
(300,000 - 1,000,000 VND/ hr)
</td>
</tr>
</tbody>
</table>
</div>
The average gross pay for an on-site DevOps Engineer in Vietnam can be up to $3,000 per month, which is about $19 per hour. If you are looking for a DevOps job in Vietnam, this title could pay you 43% more in 5 years, which is a pretty good deal.
If your business prefers a DevOps freelancer, Upwork features useful comparative tools if you need help deciding which freelance platform to choose. These sites show that freelance DevOps Engineer salary in Vietnam ranges from $15 to $70 per hour. This rate depends on past work, client evaluations, and more.
&gt;&gt; Read more:
<ul>
<li dir="ltr" style="font-style: italic;" aria-level="1">
<a href="https://reliasoftware.com/blog/software-development-outsourcing-vs-it-staff-augmentation">Staff Augmentation VS. Outsourcing: Which Is Better?</a>
</li>
<li dir="ltr" style="font-style: italic;" aria-level="1">
<a href="https://reliasoftware.com/blog/how-to-hire-remote-developers-in-2023-in-depth-guide">An In-Depth Guide To Hire Remote Developers in 2023</a>
</li>
<li dir="ltr" style="font-style: italic;" aria-level="1">
<a href="https://reliasoftware.com/blog/in-house-vs-outsourcing-software-development">In-house VS Outsourcing Software Development</a>
</li>
</ul>
<figure class="image"><img src="../../../../uploads/devops_vs_other_cloud_engineers_aecc7c213a.jpg" alt="devops vs other cloud engineer" width="758" height="632">
<figcaption>DevOps vs. Other Cloud &amp; Infrastructure Engineers' Salary (Source: Internet)</figcaption>
</figure>
<h2 dir="ltr">DevOps Engineer Salary vs. Other Cloud &amp; Infrastructure Engineers</h2>
<div dir="ltr" align="left">
<table style="border-collapse: collapse; border-color: rgb(0, 0, 0); border-style: solid;" border="1"><colgroup><col><col><col></colgroup>
<tbody>
<tr>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
Positions
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
Avg. Hour Rate
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
Avg. Monthly Rate
</td>
</tr>
<tr>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
System Engineer
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
$6
(156,250 VND)
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
$1,023
(25,000,000 VND)
</td>
</tr>
<tr>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
DevOps Engineer
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
$10
(253,125 VND)
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
$1,658
(40,500,000 VND)
</td>
</tr>
<tr>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
Cloud Engineer
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
$11
(281,250 VND)
</td>
<td style="border-color: rgb(0, 0, 0); text-align: center;">
$1,842
(45,000,000 VND)
</td>
</tr>
</tbody>
</table>
</div>
The possible salary for both Cloud Engineers and DevOps Engineers is about the same, DevOps Engineers can make an average of $1,600 per month more. Cloud programmers, on the other hand, make an average of around $1,800 a month.&nbsp;
Pay ranges are also different. The range for Cloud Engineering is higher than the range for DevOps in Vietnam. The average base pay for cloud Engineers is $24,565 per year, but the average base pay for DevOps Engineers is $20,000 per year.
&gt;&gt; Read more: <a href="https://reliasoftware.com/blog/python-developer-salary-worldwide-in-2023">Python Developer Salary Worldwide In 2023</a>
<h2 dir="ltr">Conclusion</h2>
Hiring software Engineers in Vietnam might be an affordable option for firms wishing to establish a dedicated tech team. However, to ensure success, the hiring process must be approached with caution and sufficient investment. Overpaying or underpaying developers might put your company in danger and stymie your growth plans.&nbsp;
Hope this blog helps you and your business have a suitable plan for hiring a DevOps Engineer position!
&gt;&gt;&gt; Follow and Contact <a href="https://reliasoftware.com/">Relia Software</a> for more information!

DevOps Engineers' salary in Vietnam is an average of $20,000 per year and nearly $9 per hour. The monthly estimated increased salary is $1,883 including bonuses.

What is the DevOps Engineer Salary in Vietnam? | Relia Software

large_devops-engineer-salary-in-vietnam.jpg

medium_devops-engineer-salary-in-vietnam.jpg

small_devops-engineer-salary-in-vietnam.jpg

thumbnail_devops-engineer-salary-in-vietnam.jpg

devops-engineer-salary-in-vietnam.jpg

What is the DevOps Engineer Salary in Vietnam?

In today's rapidly evolving technological landscape, software development has become a critical aspect of business operations. <a href="https://reliasoftware.com/blog/what-is-devops">DevOps</a>, a set of practices that aim to unify software development (Dev) and IT operations (Ops), has gained immense popularity due to its ability to accelerate the development cycle and enhance collaboration.
However, as the digital world faces an increasing number of cyber threats, the need for robust security measures has become paramount. This has given rise to the concept of DevSecOps, which integrates security seamlessly into the DevOps process. This article delves into the world of DevSecOps, its significance, benefits, challenges, and best practices.
<h2 style="text-align: justify;">What is DevSecOps?</h2>
DevSecOps, a portmanteau of Development, Security, and Operations, is an evolution of the DevOps philosophy that emphasizes the importance of incorporating security practices into the entire <a href="https://reliasoftware.com/blog/software-development-life-cycle-sdlc">software development lifecycle</a>. 
Unlike traditional approaches, where security is often an afterthought, DevSecOps aims to ensure that security is an integral part of the development process from the very beginning. This alignment of development, security, and operations teams enables organizations to create a culture of shared responsibility and proactive security measures.
<h2 style="text-align: justify;">Why Is DevSecOps Important in Software Development?</h2>
<ul style="text-align: justify;">
<li>
Early Detection and Mitigation of Vulnerabilities: DevSecOps promotes the identification of security vulnerabilities early in the development cycle. Automated testing and continuous monitoring enable developers to identify and address vulnerabilities before they escalate, reducing the likelihood of security breaches.
</li>
<li>
Faster Response to Threats: By integrating security practices into the development pipeline, organizations can respond quickly to emerging threats. Automated security testing, continuous monitoring, and real-time alerts enable rapid response and mitigation.
</li>
<li>
Enhanced Collaboration: DevSecOps encourages collaboration between development, security, and operations teams. This collaboration breaks down silos and ensures that security considerations are understood and implemented across all stages of development.
</li>
<li>
Compliance and Regulation Adherence: With stricter regulations governing data privacy and security, organizations must ensure compliance. DevSecOps provides a framework for implementing security controls that align with regulatory requirements.
</li>
<li>
Cost-Effective Security: Addressing security issues early in the development process is more cost-effective than trying to fix them post-production. DevSecOps reduces the potential financial and reputational costs associated with security breaches.
</li>
</ul>
<h2 style="text-align: justify;">4 Key Steps to Seamlessly Integrate Security into DevOps</h2>
The integration of security into the DevOps framework doesn't have to be an arduous process. The real challenge often lies in the necessary shift in mindset and culture. Successfully implementing DevSecOps involves embedding security best practices into the development process. This can be effectively achieved through a four-step approach: (1) instigating a cultural transformation, (2) embracing automation, (3) establishing protocols, and (4) fostering continuous improvement. Let's delve into each of these steps for a comprehensive understanding of securing DevOps.
<h3 style="text-align: justify;">Step 1: Initiating Cultural Change from the Highest Levels</h3>
Encouraging teams to adopt a "security-first" mindset becomes notably easier when this approach is visibly demonstrated across the entire organization. Although such a security-centric mindset might not have been customary for most organizations historically, the significance of secure software has become increasingly apparent in recent times.
For any DevSecOps strategy to thrive, the impetus for organizational change must originate from the upper echelons of management. While encountering resistance from certain development teams during this shift in perspective is not uncommon, leaders within both the development and security domains can drive this new approach by adopting a mindset that inherently includes security.
Several avenues exist for leadership to enact top-down change, including:
<ul style="text-align: justify;">
<li>Showcasing instances where a DevSecOps approach could have precluded a security breach.</li>
<li>Demonstrating a readiness to allocate time and resources to DevSecOps initiatives.</li>
<li>Permitting teams to invest additional time in addressing security concerns, even if this results in initial delays.</li>
</ul>
The process commences with proactive initiation. As organizations embark on their journey, process and tool automation can swiftly follow suit, effectively minimizing obstacles in the DevOps security model.
<h3 style="text-align: justify;">Step 2: Embracing Automation</h3>
The successful implementation of DevSecOps hinges on the strategic utilization of automation and the incorporation of automated security measures whenever feasible. Security breaches often arise due to human error or oversights, making it unrealistic to rely solely on human decision-making for flawless code, system configuration, and pipeline processes. This is precisely where the role of automation becomes pivotal.
Automation stands as one of the most potent attributes of DevSecOps security tools, providing a plethora of advantages. These tools operate as essential extensions of both the security and DevOps teams. They facilitate swift implementation of changes and the identification of high-severity or previously unidentified vulnerabilities, all without necessitating additional hours from developers or security personnel. Among the functions automated tools offer, pipeline vulnerability scanning, Static Application Security Testing (SAST), open source library scanning, and more prominently feature.
The integration of security automation spans every stage of the DevOps lifecycle and development pipeline. Noteworthy points in the development process where security automation can be seamlessly integrated encompass:
Coding:
<ul style="text-align: justify;">
<li>Enforcing common security prerequisites like encryption and authentication through automated checks.</li>
<li>Incorporating automated code reviews as part of regular agile sprints to maintain security standards.</li>
</ul>
Reviewing:
<ul style="text-align: justify;">
<li>Employing automated assessments to scrutinize code, contributing to software adhering to appropriate standards.</li>
<li>Ensuring software meets security criteria through the aid of automation.</li>
</ul>
Testing:
<ul style="text-align: justify;">
<li>Conducting automated code scans using SAST and Software Composition Analysis (SCA) tools, as manual code analysis isn't as rapid.</li>
<li>Concurrently executing automated security tests alongside functional and performance tests.</li>
<li>Introducing automated penetration tests to identify security vulnerabilities in systems within each sprint and release cycle.</li>
</ul>
Deployment:
<ul style="text-align: justify;">
<li>Leveraging Infrastructure as Code (IaC) automated scripts to deploy software, reducing human errors.</li>
<li>Employing automated cloud scripts to deploy containers to cloud environments or automate virtual machine deployment.</li>
<li>Reliably deploying code to production-hosting environments through automated processes accessible via APIs.</li>
</ul>
Operations:
<ul style="text-align: justify;">
<li>Real-time automated scanning of log files to identify anomalies and trigger alerts.</li>
<li>Implementing automated processes like real-time monitoring, intrusion detection, and compliance validation to detect vulnerabilities continuously.</li>
<li>Regularly evaluating product reliability and security to detect vulnerabilities and prioritize resolutions.</li>
</ul>
The integration of security into the DevSecOps toolchain entails a blend of continuous security testing, cloud security practices, and process automation. Although this may appear intricate to those embarking on their DevSecOps journey, the substantial enhancement of organizational efficiencies swiftly comes to fruition.
<h3 style="text-align: justify;">Step 3: Establishing Protocols: Prioritize Simplicity and Stringency in Security Practices</h3>
Defining and implementing comprehensive security protocols is a cornerstone of successful DevSecOps integration.&nbsp;
The potency of security practices lies in their simplicity, although their effectiveness could be compromised if organizations fail to rigorously enforce them while adhering to DevOps security best practices. Security protocols that are clear, straightforward, and uncomplicated are not only easy to comprehend but also uncomplicated to put into action. Conversely, intricate and excessively demanding security protocols may deter the cultivation of a security-centric mindset among developers by creating unnecessary hindrances. Additionally, it's improbable that teams will retain intricate, multi-page security protocols in their entirety.
Security policies within an organization may encompass protocols such as:
<ul style="text-align: justify;">
<li>Authentication, permissions, regulations, and monitoring.</li>
<li>Establishing minimum security standards for all projects.</li>
<li>Management of encryption keys.</li>
<li>Ciphers for encryption.</li>
<li>Guidelines for password complexity.</li>
<li>Written Information Security Program (WISP).</li>
</ul>
Given that most developers lack comprehensive training in securing code and may not consistently incorporate security in their design processes, the significance of security training becomes even more pronounced. In-house training, underscored by an ownership philosophy of "if you code it, you own it," serves to cultivate a security-first mindset within DevOps, paving the way for the evolution into DevSecOps.
The implementation of security measures can be streamlined to ensure simplicity and efficiency. In order to maintain high levels of efficiency, teams require regular training, while processes must be perpetually refined and enhanced.
<h3 style="text-align: justify;">Step 4: Fostering Continuous Improvement</h3>
The journey towards DevSecOps is a dynamic process that requires ongoing refinement. Continuous improvement entails a commitment to consistently assess and enhance security practices. This iterative approach allows organizations to adapt to emerging threats and challenges, ensuring that security measures remain up-to-date and effective.
Regularly analyzing security processes and their outcomes enables organizations to identify areas for enhancement. By incorporating feedback and insights gained from these assessments, development teams can fine-tune their security practices and maintain a proactive stance against evolving cyber threats.
<h2 style="text-align: justify;">Conclusion</h2>
The process of integrating security into the DevOps framework can be facilitated through a structured and strategic approach. By initiating a cultural transformation, embracing automation, establishing protocols, and fostering continuous improvement, organizations can seamlessly incorporate security best practices into their development process.
This proactive stance not only mitigates potential vulnerabilities but also ensures that security remains a fundamental aspect of software development. As the landscape of cyber threats evolves, the DevSecOps methodology stands as a robust solution to safeguarding digital assets and enhancing the overall resilience of software systems.
<div id="article_content" class="inner_article__entries__XvNcf">
<div>
&gt;&gt;&gt; Follow and Contact&nbsp;<a href="https://reliasoftware.com/">Relia Software</a> for more information!
</div>
</div>

DevSecOps, a portmanteau of Development, Security, and Operations, is an evolution of the DevOps philosophy that emphasizes the importance of incorporating security practices

What is DevSecOps? 4 Steps To Integrate Security into DevOps | Relia Software

DevSecOps: Integrating Security into DevOps

large_devsecops.png

medium_devsecops.png

small_devsecops.png

thumbnail_devsecops.png

devsecops.png

What is DevSecOps? 4 Steps To Integrate Security into DevOps

DevOps, a portmanteau of "development" and "operations," represents a cultural shift that aims to enhance collaboration, communication

What is DevOps? Principles and Practices Explained | Relia Software

large_DevOps.png

medium_DevOps.png

small_DevOps.png

thumbnail_DevOps.png

DevOps.png

What is DevOps? Principles and Practices Explained

featured

software-development.webp

Software Development

outsourcing.webp

Outsourcing

software-as-service-business.webp

Business

automation.webp

Automation

artificial-intelligence.webp

AI/ML

Relia Software is a leading software development company based in Vietnam and Canada. We offer reliable custom software development and outsourcing services to clients in USA and worldwide. Transform your ideas into reality with our innovative solutions.

Relia Software: Trusted Partner for Custom Software Development Services

ogp.jpg

At Relia Software, we believe in the power of design thinking &ndash; a human-centered approach to problem-solving. It's about understanding your users' needs, brainstorming innovative solutions, and iterating on ideas to create exceptional software experiences.&nbsp;
Our Design Thinking Services empower you to uncover deep user needs, turn ideas into action, and create intuitive UX/UI. Are you ready to develop software that delights your users?

Stop guessing, start understanding. We use design thinking to crack user needs, craft intuitive interfaces, and build apps that win hearts.

design-thinking.webp

Design Thinking

UX/UI Design Services

Relia Software is a top UX/UI Design Company that stands by to a design-driven approach. Checkout for our Web and Mobile Application UX/UI Design Services here!

UX/UI Design Agency | Web & Mobile App Design | Relia Software

MVP Development Services

Relia Software offers Minimum Viable Product (MVP) development services for businesses of all sizes. Our leading criteria are: agile, cost-effective, and value-loaded.

MVP Development Company | Relia Software

Full-Stack Web Development Services

Relia Software offers a full-stack website development service to ensure a solid online presence of your business in the evolving digital landscape.

Web Development Company | Relia Software

Mobile apps are increasingly crucial in today's fast-paced society. They allow us to stay in touch, get the news, and get things done on the go.&nbsp;
At Relia Software, we understand the immense potential mobile apps hold for businesses like yours. Therefore, we offer comprehensive Mobile App Development Services to realize your vision. Our expert developers, designers, and strategists work with you to build a stunning mobile app with exceptional features and user experience.
Don't miss out on the mobile potential for your business growth. Let's chat about your app vision and see how we can help!

We build scalable, responsive applications that grow with you. Our experts handle everything, from user-friendly interfaces to robust back-end systems.

app-development.webp

Mobile App Development

mobile-app-development.png

Custom Mobile App Development Services

At Relia Software, we specialize in custom mobile app development, creating holistic solutions that perfectly align with your unique business goals and target audience.

Custom Mobile App Development Company | Relia Software

Enterprise App Development

We design our project-based end-to-end development services for the enterprise. Relia holds the experience to deliver mobile products that are successful and consistent in results.

Enterprise App Development | Relia Software

Flutter App Development Services

Relia Software is a Flutter app development company with a decade of experience in the mobile app development industry. We build robust Flutter solutions to clients.

Flutter App Development Company | Relia Software

iOS App Development Services

Over the last decade, Relia Software has built a reputation as a go-to iOS app development company, serving clients in various industries. Explore our services here!

iOS App Development Company | Relia Software

Android App Development Services

Relia Software offers a full spectrum of Android app development services to cater to your unique needs. We will help you launch your project on Apple platforms.

Android App Development Company | Relia Software

Cross-Platform App Development Services

Relia Software specializes in cross-platform app development, creating high-quality apps for Android and iOS devices. We use frameworks like React Native and Flutter.

Cross-Platform App Development Company | Relia Software

React Native App Development Services

At the forefront of React Native development, Relia Software delivers cutting-edge mobile apps for both Android and iOS platforms. Check out our React Native services!

React Native App Development Company | Relia Software

The future is intelligent, and artificial intelligence (AI) is at the forefront of innovation. At Relia Software, we help businesses leverage the power of AI to solve complex problems, automate tasks, and gain valuable insights. Our team of experienced developers, data scientists, and strategists collaborate closely with you to create intelligent solutions tailored to your unique needs.
Embrace the future with AI. Let's collaborate to bring your groundbreaking ideas to life and set your business on the path to success!

AI isn't sci-fi anymore. We build intelligent solutions that automate tasks, gain insights, and unlock new chances. Let's make your business smarter!

ai-development-icon.webp

AI Development

ai-development-image.webp

Digital Transformation Consulting Services

At Relia Software, we offer comprehensive digital transformation consulting services, giving clients a technology-powered plan to improve business processes.

Digital Transformation Consulting Company | Relia Software

AI/ML Consulting & Development Services

AI/ML Consulting & Development Company | Relia Software

With over a decade of experience, Relia empowers you with DevOps as a Service (DaaS) to streamline your software development lifecycle. We automate the entire delivery pipeline across top cloud platforms, enabling continuous integration and development (CI/CD) for faster deployments and smoother workflows.&nbsp;
Integrate your development and operations teams with cloud-based DevOps automation to achieve peak performance and effortless application onboarding. Partner with Relia and unlock the power of DevOps for your business!

Let&rsquo;s unleash the power of DevOps. We automate your software pipeline, smash deployment times, and keep your teams in sync &ndash; all on the cloud.

devops-service.webp

DevOps Services

devops.webp

DevOps Automation Services

As a DevOps services company with over 11 years of experience, Relia may bring value to your product from start to finish.

DevOps Services And Solutions

Relia Software understands that building a top-notch development team can be challenging. Our Software Development Outsourcing Services offer a cost-effective and flexible solution to fulfill your project needs. We connect you with a pool of talented developers worldwide, optimize your development process, and achieve your business goals.
Need a full development crew? We've got you covered. Looking for specific expertise? We can source it. Our range of engagement models, from outsourcing to dedicated teams, gives you the perfect fit. Contact us today!

You want to build a top tech team? We will help you access global talent, optimize workflows, and achieve your goals &ndash; all under your budget.

offshore-team.webp

Software Development Outsourcing

software-development-outsourcing.webp

Offshore Development Center Services

For over a decade, Relia Software has been empowering businesses of all sizes and fields with robust and scalable Offshore Development Center (ODC) solutions.

Offshore Development Center Services | Viet Nam | Relia Software

Software Support & Maintenance Services

Relia Software offers superior software maintenance and support services for optimal efficiency, security, performance, and better user experience. Contact us!

Software Support & Maintenance Services | Relia Software

Dedicated Software Development Team Services

Relia Software specializes in building dedicated development teams that seamlessly integrate into your project, becoming a true extension of your in-house force.

Dedicated Software Development Team Services | Relia Software

IT Staff Augmentation Services

Relia has been a trusted partner in Staff Augmentation for 10+ years. We've a streamlined process to seamlessly integrate skilled experts into your existing team.

IT Staff Augmentation Services | Relia Software

Build-Operate-Transfer (BOT) Services

The Build-Operate-Transfer model (BOT model) lets you stay competitive and successful in the market. Your ODC team should be reliable to work with.

Build-Operate-Transfer (BOT) Services | Relia Software

Software Development Outsourcing Services

At Relia, we've spent over a decade cultivating a reputation for excellence in outsourced software development. Our weapon is a dream team of skilled developers.

Software Development Outsourcing Company | Relia Software

Software Quality Assurance & Testing Services

Relia Software is a dedicated Software QA & Testing Services provider with a proven track record of ensuring exceptional quality in our clients' applications.

Software Quality Assurance & Testing Services | Relia Software

Website is not only a digital brochure, but also the heart of modern businesses. Relia Software understands the critical role of web applications in connecting you to your customers and achieving your goals.&nbsp;
That's why we're your one-stop shop for web app development. Whether you need a custom application or a streamlined web presence, we have the expertise to deliver.&nbsp;
Don't settle for a website gathering dust &ndash; Let Relia turn your vision into a vibrant digital space, converting browsers into brand loyalists.

We build powerful web apps that connect you with customers, drive results, and launch your digital strategy into overdrive.

data-transformation.webp

Web App Development

web-app-development.webp

Custom Web App Development Services

Relia Software is the top web app development company. We offer great services for building robust web applications. Check out for our detailed services here!

Custom Web App Development Company | Relia Software

Ruby On Rails (RoR) Development Services

Relia Software develops Ruby On Rails custom web applications using cutting-edge custom setups and pre-designed technologies. Contact us!

Ruby On Rails (RoR) Development Company | Relia Software

.NET Development Services

Relia Software - Leading Dot Net Development Company in the USA & Vietnam. Offers the best .net development services. Hire our top Dot Net Developers!

.NET Development Company | .Net Services | Relia Software

NEXT.JS Development Services

Relia Software is your one-stop shop for powerful Next.js development services. Our elite Next.js developers craft web apps that propel your business forward.

Next.js Development Company | Relia Software

Angular Development Services

Relia Software is a top software development company in Vietnam with recognized Angular expertise. We use Angular to deliver innovative products for businesses.

Angular Development Company | Relia Software

Golang Development Services

Relia is a reputed Golang Development Company that promises to ensure a scalable, sound and user-friendly development of your application with quality and performance guaranteed.

Golang Development Company | Relia Software

Node.js Development Services

Relia is the best Node.js development company in Vietnam. Learn about our expertise, custom solutions, full-cycle development services, and more. Transform your web development with our top-notch nodejs services

Why Choose Relia Software as Your Node.js Development Company

React Development Services

Relia Software is a leading ReactJS Development Company based in the USA & Vietnam offers the best react development services. Hire Top ReactJS Developers!

React.js Development Company | Hire Top React.js Developers

Python App Development Services

Relia Software boasts over 10 years of combined experience and a proven track record of delivering a wide range of successful Python projects for clients worldwide.

Solutions We Provide

Articles by Thang Ho