Infotriever Production Environment

Transcription

1 Availability Infotriever Production Environment High-availability requires well-structured processes for application quality assurance and change control. Infotriever has taken great care to eliminate any single-points-of-failure from the production architecture employing best practice built server clusters that host the Infotriever application. The Infotriever environment has been designed using the following high-availability measures: Network Architecture The Infotriever network architecture it built within a fully redundant data center described in more detail within the section entitled Performance below. All routers, firewalls, switches and load balancers within the Infotriever production environment is backed up by a strong 24x7x4hour on-site support response infrastructure. To prevent any possibilities of issues arising due to physical equipment failure, Infotriever has engaged all involved equipment providers for high level support contracts This ensures that any incident in Infotriever environment is resolved promptly. 24x7 Event Monitoring Redundant Servers 24x7 event and environment monitoring services ensure that no incident goes unidentified. Infotriever has engaged a best-of-breed provider of network operations center (NOC) services, New Brunswick Telecom (NBTel). The NBTel NOC is connected to the Infotriever infrastructure using redundant leased lines, ensuring privacy and availability. Through the use of a variety of leading tools, NBTel actively monitors all devices, servers and applications within the Infotriever infrastructure on a 24x7 basis to ensure that no warning or critical errors go unnoticed. Regimental, SLA driven notification and escalation procedures ensure that the right support staff is promptly aware of any issues that may arise. Remedy trouble ticketing ensures that no event falls through the cracks and allows a historical view of issues within the environment. As the only components within the Infotriever infrastructure that have moving parts, the law of least mean time between failure (MTBF) dictates that servers are most likely to have a problem. Infotriever starts with best-of-breed tier-1 vendor supplied servers. Where application architecture allows (eg. web servers, application servers, mail relays), horizontal scaling is used to both scale the application and provide ever-increasing levels of application resilience. Horizontal scaling is enabled by content smart load balancing switches or application server specific clustering capabilities. Where horizontal scaling is difficult (eg. database servers, mail stores), vertical scaling and OS level clustering is utilized to enable application fail-over in the event of a system outage. These same mechanisms in concert with the Infotriever change management processes can also enable application or infrastructure updates without the need for application outages. 1

2 Firewalls An industry leading firewall stands guard in front of the Infotriever infrastructure. Strong policy management and constant log monitoring ensures that only permitted traffic enters the customer application environment. In addition, the firewalls implement network address translation (NAT), which ensures that the public has no information about server IP addresses. Environment Isolation Each tier (web, application and database) are completely isolated within the Infotriever infrastructure through the use of by layer-2 VLANs combined with layer 3 access control lists (ACLs). Access between tiers of the application environment is strictly controlled by L3 Access Control Lists, which ensure that only known servers are capable of communicating between layers. Hardened Server Operating Systems Performance Power Resiliency In order to prevent malicious intruders from getting a foothold in the environment, all Infotriever servers are built using hardened operating systems designed through various industry leading best practices. The infrastructure of the Infotriever service has been designed and built in one of the most advanced Data Centers in North America, the Q9 Networks ( facilities located in Toronto. The Q9 Networks facility provides several resilient countermeasures. Guaranteed through Service Level Agreements with Infotriever, Q9 provides 24x7 computer grade power 365 days per year, through two separate high voltage feeds from two separate base-building power systems. If a power failure occurs, the Data Center is outfitted with a pair of 875 KVA uninterruptible power supplies (UPS) capable of providing over 30 minutes of full power to their entire 20,000 square foot facility. Two redundant 2-Megawatt diesel power generators are ready to engage within 60 seconds. Each cabinet housing equipment is provided with two independent power circuits. All core equipment is outfitted with dual power supplies fed independently by these separate circuits. There are 32 dry chillers independent of the building cooling system, which provide cooling to the equipment. 2

3 Internet Datacenter HSRP Carrier neutral, redundant backbone: two Cisco GSR 12K routers feed into 13 tier-one service provider backbones. High performance firewall appliance filters invalid traffic and provides front line defenses to the entire environment infrastructure. Strong policy management and constant log monitoring ensures that only permitted traffic enters the customer application environment. Cisco PIX 515-UR Cisco CSS provides intelligent load distribution among web tier. Backbone Switch Firewall Content Services Switch (CSS) Burstable 100Mbps redundant feeds (Cisco 6509) into Infotriever cabinet ensure reliable connectivity 24x7. Cisco Catalyst 3524XL Distribution Switch Restricted Access Web Tier Application/ Database Tier 2 x Sun Netra T1's (1U) 1 x 440MHz UltraSPARC 512MB, 1 x 18GB disk, Solaris 7, Netscape iplanet Layer 7 Load Balancing Web Servers WebLogic Cluster 2 x Sun Enterprise E220R, 2 x 450MHz UltraSPARC, 1GB RAM, 2 x 18GB disk (RADI1), Solaris 7, WebLogic 6.1SP1 1 x Sun Enterprise E420R, 4 x 450MHz UltraSPARC, 1GB RAM, 2 x 18GB disk (RADI1), Solaris 7, Oracle Infotriever infrastructure is administered through secure environments logically isolated from any production tier. Remote Administration Personnel Router w/secure Access Lists Each environment isolated through layer-2 VLAN segmentation. Inter-VLAN traffic protected through tightly controlled layer 3 access lists (Cisco 2621). Admin Server Internet VPN BrightSpark Remote Administration Personnel ISDN NBTel NOC PVC Frame Cisco 2621 NBTel, intelligent monitoring: NOC maintains and monitors critical components within the infrastructure through a dedicated frame circuit. Infotriever Infrastructure Overview (Confidential) 3

4 Pipe Resiliency (Bandwidth) The Q9 Networks facility employs a dual gigabit fiber that runs spanning two separate physical roadside paths connecting to the local central office (CO). Each fiber connection terminates into separate Cisco GSR 12K interfaces connected to redundancy 6509 multi-layer switched backbone. The carrier-neutral Data Center directly connects into several tier-one service providers including AT&T, Bell Canada, PSINet, TeleGlobe, Sprint, UUNet, Above.net, Shaw Cable systems, and Look Communications. Each tier-1 service provider transit connection travels through lines provisioned by Q9 Networks with uptime Service Level Agreements provided through each service provider. Through this carrier-neutral infrastructure, traffic moving through the Q9 Data Center avoids congested Internet peering points located within the United States. Q9 Network Connectivity UUNet Canada (155Mbps) Bell Canada (shared 100Mbpsp) AXXENT Look Sprint Canada (45Mbps) Teleglobe AT&T Canada PSINet Canada (45 Mbps) Regional ISP's -IGS -WIZNET -Onramp -Interhop -Several others Seattle (OC48) San Jose (OC12 & OC3) AboveNet Chicago (over 300 peering points) New York (OC48) Vienna,VA (OC3) DALLAS (DS3) ATLANTA (OC3 & DS3) Equipment Figure 2: Q9 Networks connectivity The Q9 Networks Toronto Data Center has received the Cisco Powered Network designation. The Data Center s infrastructure has been completely designed from the ground up using 4

5 Cisco equipment to provide peak reliability for customer Web applications. Redundancy precautions include: Redundant Switch fabric Redundant Power supplies Redundant Cooling systems Redundant Interfaces Cards Hot swappable components Redundant cooling fans Q9 Networks monitors their network on a 24x7 basis and keeps spare parts onsite to minimize downtime in case of failures. 5