Modernizing legacy applications is essential for businesses to stay competitive, improve efficiency, and enhance security. However, many organizations delay the process due to concerns about potential downtime and operational disruptions. The key is to adopt a legacy application modernization services strategy that ensures a seamless transition while keeping daily business functions running smoothly.1. Adopt a Phased Modernization Approach
A complete overhaul of your legacy system can be risky and disruptive. Instead, consider a phased modernization strategy:
Prioritize critical applications that need immediate upgrades while keeping less essential ones running.
Use parallel systems to ensure business continuity by running the old and new applications side by side.
Gradually migrate workloads to minimize sudden disruptions.
2. Implement a Hybrid Cloud Strategy
Moving to the cloud offers flexibility, scalability, and cost-efficiency. However, an abrupt shift can disrupt operations. A hybrid cloud approach can help by:
Keeping sensitive workloads on-premises while transitioning non-critical ones to the cloud.
Ensuring seamless data synchronization between legacy and modern systems.
Allowing employees to adapt gradually to cloud-based applications.
3. Leverage Containerization and Microservices
Modernizing monolithic applications into microservices-based architectures helps minimize disruptions. Benefits include:
Breaking down applications into smaller, manageable services that can be updated independently.
Reducing downtime by deploying updates without affecting the entire system.
Enhancing scalability, making it easier to introduce new features.
4. Automate Testing and Deployment
Automated testing and DevOps practices ensure that new applications function correctly before deployment. This minimizes errors and disruptions.
Continuous Integration and Continuous Deployment (CI/CD) pipelines enable frequent, small updates instead of one major release.
Automated testing tools detect and fix issues before they impact users.
Rollback mechanisms ensure quick recovery if an issue arises.
5. Train Employees and Communicate Changes
Resistance to change and lack of training can create operational slowdowns. Ensure:
Employees receive training on new applications before full deployment.
Communication is transparent so that teams understand the benefits of modernization.
Feedback loops exist for employees to report issues early.
Final Thoughts
Application modernization doesn’t have to mean business disruption. By adopting phased migration, leveraging cloud solutions, using microservices, automating deployment, and ensuring proper training, companies can modernize seamlessly.Studies have shown that organizations that implement structured modernization strategies experience fewer disruptions, increased productivity, and improved business agility.

Objective: To achieve visualization of progress.Knowledge points:
Progress： Progress bar component, used to display the progress of content loading or operation processing.Set progress bar style
Progress has 5 optional types, and you can set the progress bar style through ProgressType. ProgressType types include: ProgressType.Linear (linear style) ProgressType.Ring (ring without scale style), ProgressType.ScaleRing (ring with scale style), ProgressType.Eclipse (circular style), and ProgressType Capsule (capsule style).interface
⛶Progress(options: ProgressOptions)Create a progress bar component.ProgressOptionsobject
value： Specify the current progress value. When setting a value less than 0, set it to 0; when setting a value greater than total, set it to total. Default value: 0
total： Specify the total length of the progress. When setting a value less than or equal to 0, set it to 100. Default value: 100
type： Specify the type of progress bar. Default value: ProgressType.LinearProgress attribute
⛶value(value: number) //Set the current progress value. When setting a value less than 0, set it to 0; when setting a value greater than total, set it to total. Illegal values are not valid. Default value: 0
color(value: ResourceColor | LinearGradient) //Set the foreground color of the progress bar.
style(value: ProgressStyleOptions | CapsuleStyleOptions | RingStyleOptions | LinearStyleOptions | ScaleRingStyleOptions | EclipseStyleOptions)//Set the style of the component.
contentModifier(modifier:ContentModifier)//On the progress component, customize the content area method. modifier: Content modifier, developers need to customize the class to implement the ContentModifier interface.
privacySensitive(isPrivacySensitiveMode: Optional)//Set privacy sensitive, reset progress to zero in privacy mode, and text will be masked. Explanation: Setting null is insensitive. Card framework support is required.ProgressConfiguration property
Value: Current progress value. When the set value is less than 0, set it to 0. When the set value is greater than total, set it to total. Default value: 0, value range: [0, total]
Total: The total length of the progress. Value range: [0, +∞]
CommonProgressStyleOptions property
enableSmoothEffect： The switch for smooth progress and dynamic effects. After enabling the smooth motion effect, the progress will gradually change from the current value to the set value. Otherwise, the progress will suddenly change from the current value to the set value. Default value: trueProgressStyleOptions property
StrokeWidth: Set the width of the progress bar (percentage setting is not supported). Default value: 4.0vp
ScaleCount: Set the total degree of the circular progress bar. Default value: 120, value range: [2, min (width, height)/scaleWidth/2/π]. If it is not within the value range, the style will display as a circular progress bar without a scale.
ScaleWidth: Set the thickness of the circular progress bar scale (percentage setting is not supported). When the scale thickness is greater than the width of the progress bar, it is the system default thickness. Default value: 2.0vp
Actual combat:ProgressBarDemoPage
⛶@Entry
@Component
struct ProgressBarDemoPage {
@State isStart: boolean = false
@State value: number = 0
timer: number = 0

build() {
Column({ space: 20 }) {
Text('进度条Demo')

Text(`当前进度：${this.value}%`)

Progress({ value: this.value, total: 100, type: ProgressType.Linear })
.style({ strokeWidth: 10, enableSmoothEffect: true })

Row({ space: 20 }) {
Column({ space: 10 }) {
SymbolGlyph(this.isStart ? $r('sys.symbol.pause') : $r('sys.symbol.play_fill'))
.fontSize(30)
.renderingStrategy(SymbolRenderingStrategy.SINGLE)
.fontColor([Color.Black])
Text(this.isStart ? '暂停' : '开始')
}
.onClick(() = {
this.isStart = !this.isStart
this.updateProgress()
})

Column({ space: 10 }) {
SymbolGlyph($r('sys.symbol.arrow_counterclockwise'))
.fontSize(30)
.renderingStrategy(SymbolRenderingStrategy.SINGLE)
.fontColor([Color.Black])
Text('重置')
}
.onClick(() = {
clearInterval(this.timer); // 关闭定时器
this.value = 0
})
}
}
.height('100%')
.width('100%')
.padding({ top: 10, right: 20, left: 20 })
}

updateProgress() {
if (this.isStart) {
this.timer = setInterval(() = {
this.value = this.value + 1;
if (this.value === 100) {
clearInterval(this.timer); // 关闭定时器
}
}, 100)
} else {
clearInterval(this.timer); // 关闭定时器
}
}
}

Talented folks built Netlify to reduce development friction. They offer a generous free tier, which is super helpful for the open-source ecosystem. But Netlify needs resources to grow and stay healthy. They offer paid plans and have also hired a special force called sales.Sales operate strategically. They target areas rich in special kind of prey called enterprise. Like experienced hunters, they conserve energy and wait at the watering hole called security.The internet is a wild place. And I’ve said it before — please bear with me. I like to explore the mechanics of Newtonian action and reaction in daily life.Openness and freedom create incredible opportunities for growth. And with great value comes opportunistic behavior. I personally see it as a balancing act and enjoy observing the laws of physics in many forms.


Startup perspective
Last year, I moved all my web apps from an AWS self-managed Kubernetes cluster to Netlify. Since then, I’ve saved 800€ on infrastructure bills and eliminated some complexity. In the process, I did something unusual: I tried an upsell product — GDPR-friendly site analytics for $9/month.Privacy-friendly observability is a fair deal for me. It offers insights without compromising on core values. I was surprised and genuinely puzzled by the results.It turned out that Valisa attracted thousands of daily visitors. Most came from Singapore and the US. That was strange because my service focused on European flights. It sparked my curiosity to dig deeper.I inspected the logs and noticed distinct visitor groups: aggressive crawlers, credential harvesters, vulnerability scanners, reasonable crawlers, and legitimate users. Bad bots, good bots, and humans. My initial reaction was to wait and see.


Bad bots
A few weeks in, I received an alert from Netlify. It warned me that more than half of my server functions quota (125k per month) had been used. Frankly, I like the reality in which resources are limited.In my experience, the most annoying are credential harvesters and vulnerability scanners. They fire 20-30 concurrent requests per second for around five minutes. I guess we can call it a baby DDoS.Reckless bots are the mosquitoes of the net. They get particularly active around holidays. 5k requests per day is a common occurrence, and their favorite food is WordPress.
⛶[{
message: "Blocked request ?",
url: "https://valisa.io/.git/config",
ua: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.0) Gecko/20100101 Firefox/121.0",
location: "Amsterdam, The Netherlands",
ip: "45.148.10.80"
},
{
message: "Blocked request ?",
url: "https://valisa.io/wp-content/uploads/gravity_forms/g/f/f/b/",
ua: "",
location: "Dublin, Ireland",
ip: "52.169.211.111"
},
{
message: "Blocked request ?",
url: "https://valisa.io//wp-includes/wlwmanifest.xml",
ua: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36",
location: "Boardman, United States",
ip: "52.34.1.203"
},
{
message: "Blocked request ?",
url: "https://valisa.io/configs.php",
ua: "",
location: "Washington, United States",
ip: "52.146.39.115"
}]These requests invoke server functions. Naturally, I went to check Netlify's offer for security and was disappointed to see a "Contact Sales" button.It was like me coming to the watering hole. I see hunters; they see me. We both shrug because they are after the wild beast. And nothing happens; we continue with our daily business.


Build WAF
Savanna rewards creativity. I hope this post will help founders like me build their products with fewer distractions. However, this solution is not for every scale.Netlify edge functions offer great power and flexibility. I am fascinated by how tools multiply human potential. Let's build a layered defense for the Astro website.I started by filtering out traffic targeting WordPress and PHP. Then, I focused on requests without user-agent header and those containing specific keywords like .git or .env. These rules deny access to many unwanted visitors.It took me some time to refine them by observing usage patterns. Eventually, I decided to be unwelcoming to bots that don't respect robots.txt, for example, Bytedance. Later, I blocked common automation tools for data scraping by their default user-agent.The hard part is adjusting rules for the specific use case. I remind myself that simplicity prevents bugs. But with granular control, shooting yourself in the leg is easier than ever. Security is in constant conflict with usability. Therefore, it's essential to test changes.


netlify/edge-functions/firewall.ts
⛶import type { Config, Context } from "@netlify/edge-functions"

export default async (request: Request, context: Context) = {
const bannedBotsRegex =
/Bytespider|ByteDance|PetalBot|Scrapy|Go-http-client|python-requests|python-httpx|axios\//i

const userAgent = request.headers.get("user-agent") || ""
const referer = request.headers.get("referer") || ""
const country = context.geo?.country?.name
const countryCode = context.geo?.country?.code
const city = context.geo?.city
const location = [city, country].filter(Boolean).join(", ")
const ip = context.ip
const url = new URL(request.url)
const pathname = url.pathname?.toLowerCase()

// Catch good part of total junk
const badBot = bannedBotsRegex.test(userAgent)
const blankUserAgent = userAgent.length === 0

// Be careful not to block file extensions you actually use
const bannedExtensions = [
".php", // most popular among scanners
".config",
".cgi",
".bak",
".asp",
".aspx",
".jsp",
".py",
".rb",
]

// Any match in url, review before deploy
const bannedKeywords = [
".env",
".git",
".vscode",
".aws",
".ssh",
"/wordpress",
"/wp-admin",
"/wp-content",
"/wp-includes",
]

// Exact url pathnames
const bannedPathnames = ["/admin", "/backup", "/wp"]

// Cool Hazker detection algorithm
const coolHazker = bannedExtensions.some((ext) = pathname?.endsWith(ext)) ||
bannedKeywords.some((keyword) = pathname?.includes(keyword)) ||
bannedPathnames.some((path) = pathname === path)

// Countries
const denyStates = []
const bannedState = denyStates.some((state) = state === countryCode)

// Alright, let's do something about it!
if (bannedState || badBot || blankUserAgent || coolHazker) {
console.log({
message: "Blocked request ?",
url: request.url,
referer: referer,
ua: userAgent,
location: location,
ip: ip,
})
return new Response("Access denied", {
status: 403,
headers: {
"Content-Type": "text/plain; charset=utf-8",
},
})
}
}

export const config: Config = {
// Review before deploy
path: ["/*"],
excludedPath: ["/*.css", "/*.js"],
}Source code - https://github.com/softbeehive/waf


Results
Around eighty percent of my visitors were rogue bots. Smoking them out at the edge is an effective approach that helped me reduce server load and keep my usage within pro plan limits.


Pros

✅ Efficient, does the job
✅ Transparent, full control of the logic
✅ Easy to customize
✅ Affordable



Cons

? Redeploy on changes
? Maintenance
? Prone to human errors



Support
If you like this article, give WAF a star on GitHub and consider supporting my knowledge sharing efforts. Thank you!Donate via PayPal