ATTACHMENT 1 CURRENT NJ SVRS ENVIRONMENT

Transcription

1 ATTACHMENT 1 CURRENT NJ SVRS ENVIRONMENT OVERVIEW The New Jersey Statewide Voter Registration System (SVRS) was purchased from Covansys, Inc in 2005 based on their ElectioNet application. While the core components of ElectioNet remain, the application has and continues to be modified to meet changes in New Jersey election law. Covansys deployed the system for initial use in 2006 and was responsible for the original Hosting, Maintenance, & Support services. Since 2006, the contract has been assigned first to Saber Software, Inc, EDS, and most recently HP Enterprise Services through a number of corporate acquisitions outside State control. HP currently holds the contract for Hosting, Maintenance & Support of the SVRS. The SVRS was based on this modified-off-the-shelf enterprise application, built on a JAVA J2EE (Java 2 Enterprise Edition) technology platform that operates on a 32-bit architecture. The user interface is a browser based thin-client solution allowing users to operate the application from anywhere in the state with access to the network. All components of the SVRS application including Voter Registration, Election Management, Ballot Processing, Ballot Management, Absentee Voting Management, Petition Management, and Addresses use a shared model that includes: Single Database Single Business Logic Tier Single Security Access Architecture Single User Interface The general structure of the SVRS environment is as follows: The State Production servers are hosted in a Tier 1 HP Data Center in Dublin (Columbus), Ohio. Each of the 21 New Jersey Counties have an Application, Database, and Imaging Server (3 total) located in either a county data center or one of potentially multiple election offices. County servers perform local/distributed poll book and report generation. Disaster Recovery/Failover environments are located at HP Data Center facilities in Columbia, South Carolina. On a day to day basis, users log in via their county server. The county server is used as a primary connection point utilizing both an application server and a database server. A third server handles the county s imaging requirements. Depending on the functions they perform, users either remain within the county server environment or are re-directed to the State server via intelligent routing. Data is synced on a regular basis between State and County servers approximately hourly. The high level function of the county servers, in addition to serving as a local failover environment, is to perform local report generation and poll book generation. The high level function of the State (centralized) server is to add and register voters. 1

2 SVRS Users have redundant connectivity paths in the event an issue arises with the primary connection point: Primary Connection: County Server (Intelligent routing to State Server) Secondary: State Server (Same Data circuit as Primary connection) Third: State Server via public internet. State servers in the Columbus, Ohio data center are connected to County servers via a T1 or Fractional T1 line. County election offices are connected to the County server through a L.A.N ranging from 100mbs to 1GB. The current vendors responsibility for support ends at the point of demarcation where the State server connects to the County server. Various levels of system performance are experienced by County users based on both the load on the State and County servers as well as the connection between the County server and the various election offices. (See Appendix 2 for additional data) Since original implementation, the Production Database Server has been upgraded to a 64 bit architecture while the county servers remain on a 32 bit architecture with details as follows: Production DB Server: Oracle Database 10g Enterprise Edition Release for 64-bit Windows County Server: Oracle Database 10g Standard Edition Release for 32- bit Windows Current Production and County Application servers remain a 32-bit architecture. Application Architecture Overview The SVRS application architecture is made of the following major components, not including application enhancements that have been since original implementation: Security & System Administration Maintain Municipality Data Voter Registration, Address and Street Library Duplicate Voter Correspondence and Letters Voter History Petition Management Absentee Ballot Management Election, Candidate and Ballot Management Redistricting Imaging & Barcode Provisional Ballot NCOA: National Change of Address Reports and Poll Books Inquiries External Agency Interface & Data Extracts Poll Worker and Poll Place Potential bidders may also access the New Jersey SVRS user manual at the following link in order to better understand the scope of the application: 2

3 Application Interfaces The SVRS application includes interfaces to the following: Administrative Office of Courts State Parole Board Department of Corrections Vital Statistics (Death File) Motor Vehicle Commission (MVC) Social Security (through MVC) 3

4 1. State & County Hardware Inventory The production environments are located in a HP hosting center in Dublin (Columbus), Ohio and the county equipment is set up in the 21 counties. The UAT environments are located at HP Data Center facilities in Columbia, SC. The Columbia Data Center also provides failover and backup protection for the production environment. HP provides troubleshooting and maintenance of the hardware inventory. In the sections that follow, the hardware descriptions, specifications, quantity, and associated serial numbers are listed to serve as a reference: Production Site The production equipment for SVRS is nearing end-of-life having been in production for more than five years in The following information details current hardware in place today: Production Site Hardware Summary Dublin, OH Data Center (Production Environment) contains the following hardware for NJ SVRS: i. Two (2) Cisco PIX 515e VPN Firewall ii. One Pair F5 BIG IP 1500 Hardware Load Balancers iii. Two (2) PowerConnect 5324 Managed Switches iv. One (1) Dell 8-Port 2Gb SAN Switch v. Two (2) PowerEdge 2850 Web Servers vi. Two (2) PowerEdge 6850 Application Servers vii. Two (2) PowerEdge 6850 Database Servers with SAN viii. One (1) PowerVault132T Tape Back-Up Unit ix. Two (2) PowerEdge 2850 Report Queue Servers x. Two (2) PowerEdge 2850 Domain Servers xi. Two (2) PowerEdge 6850 Replication Servers xii. One(1) PowerEdge 2850 External Web / Application Servers xiii. One(1) PowerEdge 2850 External Database Servers xiv. Two(2) PowerEdge 2850 Message Queue Servers xv. Two(2) Monitor Keyboard Consoles xvi. Two (2) 42U Rack (See image below for a graphical depiction of the Production Environment.) 4

5 New Jersey SVRS Production Rack 5

6 Production Site Hardware Details The following table outlines the site hardware for the Production Environment. 6

7 7

8 UAT Site The UAT environments are located at HP Data Center facilities in Columbia, SC. The Columbia Data Center also provides failover and backup protection for the production environment. UAT Site Hardware Summary The Columbia, SC Data Center (UAT/Training Environment) contains the following hardware for NJ SVRS: i. One (1) Cisco PIX 515e VPN Firewall ii. iii. iv. One (1) PowerConnect 5324 Managed Switch One (1) Dell 8-Port 2Gb SAN Switch One(1) PowerEdge 2650 Domain Controller v. One (1) PowerEdge 2850 Web / Application Server vi. vii. viii. One (1) PowerEdge 2850 Database Server with SAN One (1) PowerVault132T Tape Back-Up Unit One (1) 42U Rack See image below for a graphical depiction of the UAT & Training Environment. 8

9 New Jersey SVRS UAT & Training Rack 9

10 UAT Site Hardware Details The following tables outline the site hardware for the UAT/Training Environment. 10

11 County Sites County Sites Hardware Summary The following lists the county sites hardware for NJ SVRS. i. Twenty-One (21) Sonic Firewall ii. iii. Twenty-One (21) Web / Application Servers Twenty-One (21) Database Servers with Tape Backup Unit Note that the (21) references the 21 counties in the State of New Jersey. Therefore each county has 1 Firewall, 1 Application Server, and 1 Database Server: County Sites Hardware Details For county sites hardware including all server hardware details, refer to the following attachments: Attachment 3 - County Infrastructure Hardware Attachment 3 - County Infrastructure Hardware- Addendum1 As of July 2011, the county workstations, scanners, printers, bar code readers, and other peripherals are no longer supported under the current vendor contract. 11

12 2. Third Party Software The following table references the 17 commercial, third-party software applications needed to support the NJ SVRS application and the purpose of each. This is not intended to be an exhaustive list. Contractors shall document or otherwise include the required Third-Party software necessary for the services proposed in their bid response. Contractors should note that the following tables are based on 2010 inventories. It is possible that upgrades to the software listed here have been performed since these inventories were documented. NJ SVRS Third Party Software # Application Purpose 1 Windows 2003 Enterprise Edition Server 2 WebSphere Application Server Network Deployment Edition 6.1 Windows 2003 Enterprise Edition is installed on the database servers, whereas Windows 2003 Standard edition is installed on the rest of the servers. All of these installations are standard installations and do not require any customization. WebSphere Network Deployment Edition 6.1 with Fixpack 1 is installed on the NJSVRS-APP1 Application server node and WebSphere Application Server Network Deployment Edition 6.1 with Fixpack 1 is installed on the following servers: a. NJSVRS-APP1 b. NJSVRS-APP2 c. NJSVRS-RS1 d. NJSVRS-RS2 e. UAT Application Server f. Public Web Access Application Server WebSphere Application Server Express Edition 5.1 with Fixpack 1 is installed on all 21 application servers located in 21 counties. 3 IBM MQ Express 6.1 WebSphere MQ Express software is installed on the following servers: a. NJSVRS-APP1 b. NJSVRS-APP2 4 Microsoft IIS 6.0 Not Available 5 Java Developer Kit (JDK) Sun JDK 1.4 and higher is installed on all replication servers (database servers) in all 21 county servers. 6 Oracle 10g Enterprise Oracle 10g Standard Edition software is installed on all county Database Server databases, UAT databases, and Public Web Access database servers. 7 Oracle 10g RAC Component Oracle 10g Enterprise Edition software is installed on the following servers using Oracle Real Application Cluster (RAC) environment: NJSVRS-DB1 NJSVRS-DB2 8 Symantec Backup Exec SAN Not Available and Online Suite 9 Jasper Reports Jasper Reports is an open source Java reporting tool (API), which is installed on the Reports Queue servers and Application servers to facilitate running of reports and poll books separately from transaction processing. Installation of Jasper Reports does not require customization. 10 Daffodil Replicator Daffodil Replicator is an open source database replication tool, which is scalable and lightweight and offers the data synchronization capability among all enterprise databases. The tool enables data synchronization between data sources located anywhere in the network. It supports a variety of synchronization topologies, modes, and data sources by using either TCP/IP or HTTP transfer protocols. Replicator is designed for Java database applications. It resides as a layer between the JDBC API and client Java applications. Daffodil 12

13 NJ SVRS Third Party Software # Application Purpose Replicator Server and Client software is installed on the state replication servers and all county database servers respectively. 11 ScriptX ActiveX Control NJ SVRS uses ScriptX technology for printing letters, notices, and any other documentation that goes out to the voter. ScriptX is used in NJ SVRS in order to dynamically change printing parameters of the HTML documents, such as page size, orientation, and destination. Without ScriptX software, the user would have to change these properties manually every time before printing these documents. 12 Active+ ServiceMill Service Creator 13 Address Information System Product from USPS 14 Symantec Antivirus Corporate Edition 15 Symantec Backup Exec 10.0 and 12 ServiceMill allows any Java-based or any batch files into a native Windows service. ServiceMill hides sensitive applications in the background and launches mission-critical or client-server applications as services without the need of a user session. NJ SVRS uses USPS Address Information System product and has an annual subscription for ZIP+4, City State and TIGER/ZIP File products. Not Available Not Available 16 VeriSign SSL certificate Not Available 3. Networking & Connectivity The Network Connectivity components that include storage area network (SAN) switches, SAN HBA cards, PIX firewalls, Sonicwall firewalls, Big IPs, and all other switches/kvm are maintained under the current maintenance and support contract. The current vendor partners with AT&T as one of its network services. AT&T provides the networking connections to both hosting sites and to all counties. AT&T's network maintains high levels of reliability with redundant, diverse paths to avoid single points of failure and to provide optimal routing and traffic flow, as well as uninterruptible power supplies at every switching node. AT&T has a MPLS network for the state of New Jersey which offers a private network between each county and the host environments. This MPLS network contains only the interconnectivity between counties and the host environments without Internet connectivity. AT&T manages the network. The AT&T MPLS routes the county s IP addresses between the counties and host environment. The current vendor has set up the Sonicwall firewall in all the counties and PIX firewall in the host environment. 13

14 PIX Firewall Setup at Production Site The Cisco PIX 515E firewall is the purpose-built security appliance that delivers enterprise-class security for small to medium sized networks. The PIX 515E is the one rack unit design that supports up to six 10/100 Fast Ethernet interfaces. The PIX provides full, automatic failover by using a failover cable and stateful failover using a crossover cable. The PIX firewall contains six 10/100 Ethernet interfaces (Inside, Outside, four port FE Card): - Inside Port AT&T MPLS Network - Outside Port Internet Segment Network - Interface 2 Environment Server Segment - Interface 3 DMZ Segment - Interface 5 Stateful Failover (connection to failover box with crossover cable) State and County SVRS users with connectivity to the MPLS network access the system through the Inside Interface (AT&T MPLS Cloud), whereas all other traffic is routed through the Outside Interface. The current vendor support service opens only the required ports across the firewall so that servers will be more secure. Sonic Wall Firewall Setup at County Site Sonicwall is the county firewall solution. Cisco provides networking consistency. The Sonicwall is a security platform for small and remote office deployments. The Sonicwall allows rapid deployment in basic networks with a user-friendly web interface and wizards. The firewall has SonicOS, allowing multiple node configurations. The Sonicwall consists of seven 10/100 Ethernet Interfaces (one WAN, one Optional, one 5- Port LAN Switch): - WAN Port AT&T MPLS Network - LAN Switch Port County SVRS Server Segment - Optional Port Connect to the Existing County LAN (if applicable) State and County SVRS users access the system through browsers on their desktop workstations. Once the users connect to the URL, the traffic flows through the Sonicwall firewall (Optional Port to LAN Switch Port). The current vendor opens only the required ports across the firewall so that the servers will be more secure. Troubleshooting/Support: Any issues with the network are investigated by the current vendors Networking Team and the On-site Technical Services Team, and if not resolved immediately, then a ticket is created with AT&T. 14

15 NJ SVRS Network Connectivity Diagram NJ SVRS Network Connectivity depicts the network components for the Columbia, SC and Dublin, OH Data Centers. 15