CSC GOVCLOUD MULTI-TENANT IAAS

Transcription

1 SERVICE DESCRIPTION CSC GOVCLOUD MULTI-TENANT IAAS Approved G-Cloud 5 Supplier

2 PAN GOVERNMENT CLOUD PLATFORM CSC is pleased to introduce our GovCloud Service; a pan Government as-a-service Cloud platform, offering fully supported and managed Cloud solutions to Government and Government accredited organisations secured up to IL3 (OFFICIAL) 1. We offer robust IT Cloud services that enable business agility and provide low, variable operating costs without compromising data security or service accreditation status. CSC can support you every step of the way; shaping your Cloud strategy, supplying your secure Enterprise Cloud up to IL3, helping you to migrate your applications and deliver a range of secure enterprise class end-toend Service Levels that will support your mission critical applications, as well as your quality assurance environments. The CSC GovCloud service offers a range of as-a-service solutions utilising the most efficient enterprise Cloud and application technology supported by a market leading transformation capability and business software. Our service options include a full end to end service management capability delivered on a Cloud infrastructure that is integrated with your own existing service management structure. CSC has a standard approach to the on-boarding of new clients and workloads to minimise the cost and time associated with this phase. In addition we have a defined off-boarding strategy to enable cost efficient and effective transfer of workloads to alternate services at the time of client exit. CSC takes a business first approach to Cloud and offers the agility and control needed by UK Government and Government accredited organisations, letting the workloads guide your choice of the right Cloud model, security and service level to meet your needs. We offer not only the infrastructure but the support services, capabilities and skills to transform and Cloud-enable existing legacy applications and rapidly deploy new applications on the cloud. CSC is recognised not only for our Cloud infrastructure as a service but our application management and cybersecurity leadership. CSC has developed true leveraged Pan UK Government services that deliver a high quality Cloud portfolio at market leading rates. Even with high security and service level requirements our CSC GovCloud will deliver significant value and cost savings. 1 Including additional measures judged necessary to protect data that is covered by the handling caveat SENSITIVE" 1

3 BENEFITS In choosing CSC as your IT Cloud infrastructure partner you are engaging one of the market leaders in managing and delivering transformation into the world of high quality, secure and lower cost Cloud. Benefits and features delivered by CSC include: Tailored solutions Flexible and agile choices and options to allow you to tailor your Cloud to your specific business needs. We provide more than simply Infrastructure in the Cloud. Security, Data Protection and Compliance - From edge to endpoint, CSC delivers defence-in-depth security up to and including IL3; including market leading leveraged pan UK Government Security Operations capability in our CSC GovSOC (GPG13 compliant), through to group and role-based access controls, integrated with enterprise AD/LDAP and multi-factor authentication, and enterprise. Full Management Support Services - Support 24x7x365, on line, by phone, and with a personal delivery manager giving the hightouch approach that provides confidence, continuity and reliability, leaving you free to concentrate on your core business. Operational Excellence - ITIL integration, performance management, and intelligent capacity planning with configuration and change management along with automated workflows. Providing the ability to deliver what your end users require while allowing your IT staff to maintain control. Transparency Easy access to performance, usage metrics, granular billing information and security reporting, enabling you to closely monitor and manage operational costs and usage right down to the infrastructure level. WHY CSC? CSC is a market leader in the delivery of Public and Private secure Infrastructure as a Service Cloud services. In the recent June 2014 report produced by industry analyst Gartner, CSC is described as a visionary organisation bringing new insight and service to the Cloud landscape CSC has a long history of delivering secure services to the public sector here in the UK and has proven to be a successful long term infrastructure partner to both public sector and other secure businesses such as the Aerospace and Defence sector. CSC has core values in delivering Cloud infrastructure that will match with the ethos of your organisation developing a partnership that will deliver what you need, when you need it. CSC s key values include: Tailored, Business-First Cloud Infrastructure; Security, Reliability and Transparency; Market leading Integration, Orchestration and Governance; Innovation and Technology Excellence. Always On CSC is a provider with extensive Enterprise Cloud experience with clear SLAs that back-up end to end performance providing you with full confidence that your business is fully supported at all times. Cost management Even at high security levels, full support and high service level requirements, CSC GovCloud provides the facility to help your business become more cost effective and align the costs with business need. 2

4 SERVICE DESCRIPTION CSC s CSC GovCloud Multi Tenant IaaS has been developed as a dedicated service specifically for UK Government or Government accredited commercial organisations and is powered by the CSC GovCloud platform. The Secure Multi-Tenant IaaS service is only available to secure UK clients (Government or Government accredited commercial organisations) and is available at two security levels. IL2 and IL3 Accredited Secure Service CSC GovCloud is made up of two secure Cloud infrastructure platforms; one accredited to IL2 (OFFICIAL) and the other to IL3, both hosted in CSC s UK List-X datacentres connected to the Public Services Network (PSN). CSC GovCloud is powered by VMware and is a Web-based Infrastructure as a Service, IaaS, solution that is built on technologies from CSC strategic alliance vendors including VMware, EMC and Cisco. CSC GovCloud combines multi-tenancy of the same physical infrastructure with logical separation between clients to provide a dedicated compute and storage operating environment that leverages CSC s datacentre security services. CSC GovCloud is available in three different tiers of service: CSC GovCloud Silver, CSC GovCloud Gold and CSC GovCloud Platinum. Each service is designed to provide clients with a selfmanaged virtual data centre environment. The CSC GovCloud virtual data centre environment includes vcpu, vram, storage, network and security services. CSC GovCloud Silver provides the client with the ability to create, manage and monitor its own virtual environment. CSC GovCloud Gold provides the client a fully managed service environment monitored and operated by CSC. CSC GovCloud Platinum offers a fully managed service environment with enhanced availability through additional failover and redundancy.

5 CSC GovCloud is a fully virtualised compute service available with three service levels (Silver, Gold and Platinum). SILVER 99.50% availability GOLD 99.90% availability PLATINUM 99.95% availability COMPUTE CSC GovCloud is a fully virtualised compute service available with three service levels (Silver, Gold and Platinum). Virtual Machines are provisioned on a shared platform providing logical secure separation which is fully accredited to either IL2 or IL3 depending on the service selected. The service is a vcloud Data Centre Certified service and provides each client one or more logically-isolated virtual data centres called VDCs. The client s compute, storage and network resources are allocated to the client s VDCs. VDC s operate across a fully redundant and resilient hardware platform providing fault tolerance and failover within a single datacentre as standard across all service levels. VDCs provide an environment where virtual machines, public and private catalogues, and virtual applications (vapps) are deployed, contained and managed as virtual machines (VMs). Clients can have multiple VDCs that are configured separately or if preferred tied together through the client s virtual network configurations. These VDCs can provide separation for different geographies, departments or projects within a client s Cloud environment.

6 SILVER 99.50% availability GOLD 99.90% availability CSC GOVCLOUD SILVER CSC GovCloud Silver provides clients a customer managed cloud environment with a VDC Availability SLA of 99.5%. Customers have the ability to provision, configure and manage their virtual cloud servers within their own VDC. RBAC (role-based access control) security provides customers with the ability to secure and control their Cloud environment and allow end users to access only those Cloud environments and systems for which they are authorised. With CSC GovCloud Silver, clients have the ability to configure their virtual machines as follows: Resilience within the virtualised hardware platform providing resilience and redundancy (within a single datacentre). Each virtual machine, including disk storage, networking, CPU and RAM, can be configured to run a full operating system and multiple applications. Clients can change their virtual machine settings at any time through the Cloud Management Portal service request system, provided the VMs stay within the following parameters: - vcpu: between 1 8 vcpu - vram: between 1 GB and 255 GB - Storage: allocations of up to 1.8 TB of storage per virtual disk - Drives: Up to 60 drives per virtual machine Clients can build their virtual machines with up to 1 external network interface and 5 internal network interfaces to enable advanced multi-tiered networks, including firewalls, load balancers and server tiers with different security rules. Clients can request to have their existing servers uploaded into the client s VDC at an additional fee or they can build new VMs from the Cloud templates. Clients can expose or publish individual virtual machine ports / web application URLs or an entire virtual machine to the external network (either customer WAN, IL2/3 PSN or Internet [IL2 only]). CSC GOVCLOUD GOLD CSC GovCloud Gold provides clients with a CSC Managed Cloud environment with a minimum VDC availability SLA of 99.90%. Customers have the ability to provision, configure and manage their virtual Cloud servers within their own virtual data centre through the CSC Cloud Management Portal in the same way as silver, however the Virtual Machines are fully managed by CSC. The Gold service includes all of the capability of the Silver service with the following additional features: CSC supports the following operating systems for CSC GovCloud Gold virtual machines, the operating systems are fully installed and supported by CSC as part of the Gold service: - Microsoft Windows Server; - RedHat Enterprise Linux. In addition to the standard security services offered as part of the CSC GovCloud, CSC takes the following additional steps to safeguard the security of the client s CSC GovCloud Gold environment: - VLAN segmentation as requested by the client ; - Use of standard remote access protocols. The following services are included in the Gold service Bundle. - Core Support (Fully managed VM & Operating system); - VM Monitoring; - Cloud VM Backup Configuration - Per GB charges also apply (see storage); - Cloud AntiVirus / Malware.

7 PLATINUM 99.95% availability CSC GOVCLOUD PLATINUM Cloud Platinum is a CSC-managed redundant Cloud environment. Platinum service offers clients a minimum VDC Availability of 99.95%SLA based on the failover of the Cloud environment to a secondary datacentre using one of the Cloud Disaster Recovery options described below. Platinum Cloud environments can be requested directly through the CSC Cloud Management Portal. Once a platinum environment is implemented, vram, vcpu and storage can be provisioned into virtual machines directly through the CSC Cloud Management Portal. The Platinum service includes all of the capability of the Gold and Silver services with the following additional features: Enhanced availability via failover of client s environment to a secondary List-X secure data centre in the event of a disaster or upon request by client. Reserved capacity in a secondary data centre and the necessary tools and utilities to properly failover a Cloud environment to a secondary List-X secure datacentre. Replication of client s CSC GovCloud environment (including data, applications and network configurations) to a secondary List-X secure datacentre. point objective of 1 hour and a recovery time objective of 4 hours. CSC GovCloud Platinum is designed to support the most aggressive availability and recovery objectives. It is ideal for compliance requirements as well as 100% operational failover. Clients can use CSC GovCloud Platinum to operate on a limited time basis from an alternative CSC GovCloud datacentre facility in an active-active or active-passive configuration without degradation of processing performance. CSC GovCloud Platinum requires a 100% capacity reservation at a secondary CSC datacentre site (failover facility). CSC GovCloud Platinum supports asynchronous replication of workloads however can also support active-active workload configurations enabling application level data replication. CSC GovCloud Platinum includes the following DR services: Workload Modification - system adds, moves and changes to managed platforms; Failover and System Resumption Services; CSC offers Disaster Recovery and Business Continuity Planning services on a time and materials basis to support DR planning. Annual DR test. CSC GovCloud Platinum is designed to support a mission critical workload. Platinum service supports a recovery

8 STORAGE AND BACKUP CSC provides SAN (block-based) storage as the primary storage offering for all CSC Cloud IaaS services. Clients may choose from the three storage types in section All virtual machines within the same VDC must use the same storage option. Clients may have multiple VDCs if they have a need for multiple storage options. For CSC GovCloud Storage, CSC provides the facilities, hardware, software, connectivity, storage administration, problem management, and maintenance associated with the storage system. The client owns and is solely responsible for any client data maintained within the storage system. Data is logically separated on a shared storage array which is accredited to either IL2 or IL3 depending on the service selected, client data is secure and accessible only to the clients VDC to which it is presented. CSC also offers a low cost high volume (File Based) storage service which can be used for archiving or other high capacity and low read / write (I/O) performance requirements. STORAGE SERVICES At installation, the following services will be provided by CSC, this is for all Storage options: Installation and configuring I/O multipathing software, as appropriate; Installation of additional Volume Manager and advanced file system software, as appropriate; Create and allocating disk groups to be used by VDCs; Documentation in operational runbook ; Configuration of storage monitoring. As part of the ongoing operational service, the following CSC services are included: Problem management and fault isolation (troubleshoot and repair); STORAGE OPTIONS The following table shows the storage options available: STORAGE TYPE DESCRIPTION TYPE OF DISK Capacity management and planning; CSC monitors 24x7x365 for the following events: - Storage availability; - Available capacity; - Excessive write errors. Premium Select+ Standard File Based* Used for high performance and high I/O applications and databases and other mission critical / performance sensitive applications. Used for Database workloads and other applications that requires high-performance storage. Suitable for Development and Test workloads or workloads which do not require intense or heavy disk I/O. Used for high capacity and low performance storage of file based data. Flash & SAS Flash & NL-SAS FastCache & NL SAS NL-SAS / SATA BACKUP AND RESTORE SERVICES CSC s Cloud Backup service provides file system backups through the use of a secure backup facility (firewall-protected backup network). CSC s backup service for CSC GovCloud is a disk-based backup service with the option of replication to a remote data centre. A full file system backup will be completed upon the initial installation of the virtual machine and monthly thereafter. A copy of the incremental changes will be taken daily. All backups will be retained for 30 days within the data centre disk array. Cloud Backup is bundled with CSC GovCloud Gold and Platinum services. *Requirements driven and designed specifically for client by client circumstance. Cloud Backup can also be requested within the Silver environment for an additional fee.

9 NETWORK (WAN CONNECTIVITY) CSC offers a range of networking services available to present and access the CSC GovCloud Virtual Machines. The network connectivity options available differ according to the security accreditation option selected; Shared PSN Connectivity (IL2 or IL3) Shared Internet Connectivity (IL2 only) Dedicated Customer WAN (IL2 or IL3)* * Would require installation of local client WAN connectivity into CSC Secure Multi-Tenant Datacentres. CSC offers a full range of networking services to provide security and load balancing functionality which can be used with any of the above WAN connectivity methods. These are described below: Dedicated or Utility firewall services; Dedicated or Utility Load Balancing services; Managed VPN services (client site to CSC DC tunnels). INFORMATION ASSURANCE AND MANAGEMENT CSC GovCloud at both IL2 and IL3 has been through the full Pan-Government Accreditation process and in addition CSC holds the ISO27001 certification for its cloud service offerings. All CSC GovCloud datacentres are based in the UK, specifically in England, and hold List-X accreditations. In addition, CSC has met all of the required security criteria mandated by the PSNA (Public Services Network Authority) to become a PSN service provider at both IL2 and IL3. For CSC GovCloud at IL2 all CSC support staff with access to client data are located within the EU in line with the ISO27001 guidelines and IL2 accreditation principles. Network connectivity can be offered to the Internet, PSN (at IL2) or direct to client WAN (via local access device). For CSC GovCloud at IL3 all CSC support staff with any access to the platform or surrounding management services are based in the UK and are SC cleared in line with the requirements for PGA IL3 accreditation. Network connectivity can be offered to the PSN (at IL3) or direct to client WAN, (via local access device) providing the client WAN is also accredited as capable of adhering to IL3 security and management principles. CSC GovCloud is based on leading industry vendors and configured in line with cloud security best practice all configurations have been security tested rigorously by CESG accredited security testers to provide technical assurance to the highest level.

10 SELF SERVICE - CLOUD MANAGEMENT PORTAL The CSC GovCloud service is consumed by clients using the CSC Cloud Management Portal. The CSC Cloud Management Portal is a web-based service catalogue and tool for managing and making changes to the client s Cloud environment and is designed to be the single point of access for all users to request CSC Cloud services. The CSC Cloud Management Portal supports the automated fulfilment of all Cloud service requests, including provisioning, modification and decommissioning of cloud resources. In addition to this CSC offers API s directly to the orchestration engine to enable scripted access to the workload provisioning and management functionality. CLOUD TEMPLATES CSC offers a catalogue of licensed templates for operating systems, virtual appliances (e.g. firewalls and load balancers), and open source software applications. These templates are pre-configured and pre- licensed instances of a particular configuration and be used to accelerate the deployment of a Cloud virtual machines. The following is a list of the Cloud server templates that are available through the Cloud Management Portal: Windows Server 2008 R2; Windows Server 2012; Linux Redhat Enterprise Linux 6. SERVICE DELIVERY (ONBOARDING AND OFFBOARDING) CSC s Service Delivery Group provides project management services to CSC GovCloud clients during implementation of the client s CSC GovCloud environment. CSC has a standard approach to on-boarding of new clients and workloads to minimise the cost and time associated with this phase. In addition we have a defined off-boarding strategy to enable cost efficient and effective transfer of workloads to alternate services at the time of client exit. The Service Delivery Manager acts as the client s primary point of contact throughout the implementation of the client s CSC GovCloud environment. The Service Delivery Manager interacts with the client and with the appropriate CSC personnel to support the client through the delivery of the training sessions and the migration of workloads to the Cloud. The Service Delivery Manager will provide the following services: Verification of order details; Identification of client s key personnel to act as liaisons between client and CSC; Identification of client dependencies (client responsibilities upon which the completion of the project is dependent); Creation of training schedules. Depending upon the complexity of the implementation and client s requirements additional project management services may be provided for an additional fee.

11 MIGRATION SERVICES CSC has a proven Cloud Migration service to enable rapid and smooth movement of even the most complex workloads to the Cloud: To manage and plan migrations CSC offers you the WAVE so you can discover CSC GovClouds untold potential: It is the CSC Cloud of Opportunity. Using the WAVE, you will be able to identify which workloads and applications are game changers for your organization. CSC knows that what you move to the cloud will guide your choice of cloud providers. After all, your enterprise cloud is more than Infrastructure or Capacity it s a safe and secure place for data and a well-managed and resilient place for demanding workloads. It has the economics and on-demand capacity for workloads that will transform your service delivery; Migration plan document CSC and client approval of scheduling Client notification of Migration readiness Migration acceptance 1 PLANNING 2 SCHEDULING 3 PRE- MIGRATION 4 MIGRATION EXECUTION 5 PRODUCTION HAND-OVER PLANNING Validation of workload inventory Validation of source and destination infrastructure readiness Determination of migration strategy SCHEDULING Determination of migration move groups Resource readiness Migration event hour by hour plans PRE-MIGRATION Migration infrastructure and tool readiness Benchmark migration Validation network and storage connectivity MIGRATION EXECUTION Plot migration Production migration Server Validation User acceptance testing PRODUCTION HAND-OVER A typical WAVE phased migration approach is outlined below; WAVE 1 WAVE 2 WAVE 3 Move X86 Ready Workloads Migrate Mail Implement Cloud Dev and Test Environment and Process Implement IaaS Model Migrate ERP QA Replatform Refactor Application Consolidate Servers / Data Centres Modernise aging Infrastructure Add SaaS Applications Continue Application Transformation Migrate ERP Production

12 PRICING APPROACH CSC s GovCloud is designed to be transparent at a technology and security layer to provide clear visibility to clients that data and services are held safely and securely. The transparency also extends to the pricing strategy which has been designed to be clear and concise. The pricing of CSC GovCloud s service is designed to be flexible with pay-per-use billing and no minimum commitments, this provides for easy monthly pricing to offer Government and Government accredited commercial organisations maximum flexibility when planning the launch of new services or the migration of existing. All services hosted on the CSC GovCloud are priced in a simple and understandable way using four components: Choose your Compute Size (VCPU / VRAM) Choose your storage tier and quantity Choose your bundle / support options Choose your optional monthly items (firewalls / licenses etc) With these four components you can quickly arrive at a monthly price for the components chosen; Compute Resources Storage Resources Monthly support Monthly optional items = Monthly Price* * Additional fee s may be payable for service start-up depending on the level of service selected.

13 Pay-per-use billing and no minimum commitments, provides for easy monthly pricing PRICING COMPONENTS ITEM DESCRIPTION MEASURE UNITS MEASURED Compute Resources vcpu / vram allocated to the Virtual Machine. vcpu & vram per minute Charges per minute when the virtual machine is powered on. Storage & Backup Resources Storage billing is based on the aggregate total gigabytes (GB) allocated to each customers cloud environment. Per GB Allocated Disk in Gigabyte Allocated (GB) by Storage Type. A demand based option is available for file based storage only. Backup is billed based on the aggregate total data held within the disk based backup appliance. Per stored (used) GB Disk space used after de-duplication. Monthly Support Gold or Platinum per VM per month. Per VM per service level (Gold / Platinum) All support is measured by calculating peak number of VMs under management per month at each service level. Monthly Optional Items Charges for optional monthly items such as Firewall / Load Balancers or software items. Per item per month, (some software components charged per GB VRAM). Per item per month. *Datacentre Network bandwidth for shared connections (Internet or PSN) is included in the standard Compute Resource rates.

14 CSC GovCloud PRICING STEP 1 CHOOSE YOUR COMPUTE Compute - Shown by Hour* VM Size (vcpu / vram) IL2 IL3 1 x x x x x x STEP 3 CHOOSE YOUR SUPPORT Support per VM per Month Support Item IL2 IL3 Startup Monthly Startup Monthly Windows Gold Service uplift Linux Gold Service uplift Platinum Bundle uplift* N/A N/A * When selecting Platinum workload you must price vcpu / vram on the failover site to guarantee capacity. 4 x x x x x x x x * Compute is billed by the minute however is shown above by the hour for ease. STEP 1 CHOOSE YOUR OPTIONS Options - per item per month* Sample Optional Items IL2 IL3 Startup Monthly Startup Monthly RHEL Maintenance* N/A 5.64 N/A 5.64 Standalone Utility Firewall HA Utility Firewall Service Firewall Standalone Small STEP 2 CHOOSE YOUR STORAGE Storage - per GB per month Storage Tier IL2 IL3 Standard Select Premium Backup Firewall Standalone HA Small 1, , , , Utility Load Balancer Load Balancer Standalone Load Balancer Standalone HA 1, , , , Utility VPN Tunnel HA Utility VPN Tunnel PKI Certificates (per 5) Support *Software items marked * are per VRAM per month, i.e. a 4GB Vram Vm would incur this x4.

15 CSC a visionary organisation bringing new insight and service to the Cloud landscape EXAMPLE CONFIGURATION The following configuration is an example of how to price the CSC GovCloud service; IL3 secure service 2 X Windows 2x4 VM s Built and configured then supported to GOLD standard. 100GB Select+ Storage with backup Item Quantity Unit Price Total Install Total Monthly 2 x 4 VM per hr Select+ Storage per GB Backup per GB Windows Gold Bundle per month Windows SPLA License 2 Included 0 IL3 PSN Bandwidth - Included 0 Totals install fee per month *For the purpose of this calculation we will assume this VM is active all month (720 hours).

16 Worldwide CSC Headquarters The Americas 3170 Fairview Park Drive Falls Church, Virginia United States Asia 20 Anson Road #11-01 Twenty Anson Singapore Republic of Singapore Australia Level 6/Tower B 26 Talavera Road Macquarie Park, NSW 2113 Sydney, Australia +61(0) Europe, Middle East, Africa Royal Pavilion Wellesley Road Aldershot, Hampshire GU11 1PZ United Kingdom +44(0) About CSC The mission of CSC is to be a global leader in providing technology-enabled business solutions and services. With the broadest range of capabilities, CSC offers clients the solutions they need to manage complexity, focus on core businesses, collaborate with partners and clients and improve operations. CSC makes a special point of understanding its clients and provides experts with realworld experience to work with them. CSC leads with an informed point of view while still offering client choice. For more than 50 years, clients in industries and governments worldwide have trusted CSC with their business process and information systems outsourcing, systems integration and consulting needs. The company trades on the New York Stock Exchange under the symbol CSC Computer Sciences Corporation. All rights reserved.