G-Cloud Service Definition Canopy Unmanaged Enterprise Private Cloud (IL3 Capable) IaaS
Canopy Unmanaged Enterprise Private Cloud IaaS Canopy Unmanaged Enterprise Private Cloud delivers the efficiencies, agility and reliability you expect from a cloud computing approach, using your own, dedicated cloud platform. This on-premise service allows you to host your Private Cloud in your own data centre or co-located with your existing infrastructure, providing full control over security and service levels. Improve Business Agility Scale up and down quickly to meet seasonal or event-related demand spikes, within the constraints of available hardware. Respond quickly to new business requirements Reduce launch time for new initiatives Improve Business Reliability Improve quality of service with dynamic infrastructure and higher availability Reduce Cost and improve ROI on IT investments Reduce management overhead by using our efficient, streamlined cloud software management suite Consolidate and simplify infrastructure and operations Maximize resource utilization and efficiency Enable projects to easily use existing spare capacity instead of buying new hardware by default. Improve productivity of IT staff Reduce complexity of IT infrastructure. What is it? The Canopy Unmanaged Enterprise Private Cloud (UEPC) provides a dedicated hardware, software and virtualisation infrastructure which can be used to run multiple applications in your own private cloud. It does this by pooling together many of the typical resources in your current IT infrastructure (computer processing, storage and networking), which are currently managed separately, and converges them into a single infrastructure. This easily-managed infrastructure, can deliver virtualised, cloud services to multiple, individual IT applications or services in your estate. As organisational needs change, infrastructure resources can be (re)allocated to new and changing applications to cope with additional demand. Users can scale up by moving their applications from a smaller virtual server to a larger one, or scale out by running more instances of the same application across multiple servers. Then, when the extra capacity is no longer required, the resources can be released back into the pool for use elsewhere. ii
Canopy Unmanaged Enterprise Private Cloud utilises the industry-proven VCE Vblock converged infrastructure platform, on which rich, powerful cloud-enabling software (VMware vcloud Suite) delivers your own flexible, agile and controllable private cloud which can be easily managed through your own self-service portal. This private cloud is hosted in your own data centre, providing you full control over security and service levels. Administration costs can also be heavily reduced because the platform is built on a zerotouch infrastructure. New services can be provisioned, deployed and managed remotely, without an administrator having to make any physical changes in the data centre. Other service options are available through the platform. Canopy Unmanaged Private Cloud comes with a software menu of pre-defined choices that cover the most common types of tasks which can be carried out from the management portal. If a user wants to deploy a new IT service, the task can be carried out easily through the graphical user interface. Policy-driven automation ensures that all changes can be approved by administrators before they are made. Lastly, Canopy Unmanaged Enterprise Private Cloud gives you full control over your security and service levels by hosting in your own data centre. Figure 1 - High Level Canopy Unmanaged Enterprise Private Cloud Design What makes us unique? Canopy s Unmanaged Private Cloud is capable of supporting information at IL3. Note that, due to the many variations in support, management and technology which may be required to meet the varying requirements of different government accreditors, costs for enabling such accreditation are not included. iii
The key benefits for organisations are: Low Risk, Initial Step for Journey to Cloud Transitioning your IT to a Canopy Unmanaged Enterprise Private Cloud is a secure initial step for your journey to cloud. This allows you to benefit from the advantages of cloud computing whilst retaining the controls within your own data centres Temporary or Elastic Capacity In this case, your organisation may need to plan for spikes in web traffic and ecommerce transactions due to the holiday season or a new social media campaign. The service provides the ability to distribute extra capacity without sacrificing computing, network, or storage service levels Transient Projects Your organisation may need to run some applications on a temporary basis without having to go out and buy new infrastructure. This can be accommodated by the service while you have spare capacity Rapid Deployment As applications are transitioned or new applications are developed, your developers may be able to use agile methodologies with quick, monthly sprint testing cycles to develop new applications. The service can provide a new testing environment that meets corporate security guidelines and requires no rewrites when applications are ready to be moved into production, as both can be supported on the same hardware. iv
v
Contents 1. Introduction... 1 1.1 Service summary... 1 1.2 How this product can be used... 1 2. Service overview... 2 2.1 Service Scope... 2 2.2 Service Architecture... 2 2.3 What s Included... 3 2.4 What s not included... 4 3. Information assurance... 5 4. On-boarding and off-boarding... 6 4.1 On-boarding... 6 4.2 Training... 6 4.3 Off-boarding... 6 5. Pricing... 7 6. Ordering and invoicing process... 8 7. Financial recompense... 9 8. Termination terms... 10 8.1 By consumers (i.e. consumption)... 10 8.2 By the Supplier (removal of the G-Cloud Service)... 10 9. Glossary... 11 vi
1. Introduction Designing and building a private cloud that will truly deliver against customers organisational objectives can be a complex undertaking, which will require mastery of many disciplines to bring all the moving parts together into a cohesive system that customers can depend on to run their business. Canopy Unmanaged Enterprise Private Cloud radically simplifies this for you by offering a base solution that includes common functionality for operating your own dedicated private cloud, supplemented with options that customers can choose to meet the specific needs of their business. Figure 2 - Base Solution for the Canopy Unmanaged Enterprise Private Cloud This offering details our Base Solution, which can be deployed in its own right as an unmanaged service, and on which other services can be built. 1.1 Service summary The service is an optimized and flexible private cloud, enabling organisations to be an internal cloud service provider to their users. It can deliver all essential IaaS, Private Cloud and Hybrid Cloud characteristics required by NIST. Our comprehensive feature set is powered by industry leading VMware, EMC and VCE technologies, and is customisable to meet individual customer needs. 1.2 How this product can be used Canopy Unmanaged Enterprise Private Cloud is hosted in your datacentre and charged through a monthly consumption charge. Canopy Unmanaged Enterprise Private Cloud provides a Base Solution that, dependent upon final configuration and accreditation approval, can be enabled to deliver a business impact level (IL) 3 service. The service delivers on-demand, flexible computer processing, network and storage services. 1
2. Service overview 2.1 Service Scope The base offering for this service includes all the compute, storage and networking hardware and software to allow you to manage your own private cloud. Canopy will install and commission this environment, in your own datacentre to a level where you can create new virtual machines, storage, vlan networks etc. from the software portal provided. 2.2 Service Architecture The Unmanaged Canopy Enterprise Private Cloud is built on proven technologies from industry leaders: The underlying platform is based on VCE Vblock systems, which are advanced converged infrastructure which seamlessly integrate leading server, network and storage technologies from Cisco and EMC, along with the enterprise standard for virtualisation, VMware vsphere By incorporating VMware vcloud Suite, a rich, powerful software management suite, the server, storage, networking, and security services are abstracted, pooled, and combined with automated provisioning, creating virtual datacentre containers (VDCs) that dramatically simplify and reduce the time for delivery of IT resources VMware vapp templates capture the server, storage, networking, and other resource requirements of an application, enabling rapid, dynamic provisioning of infrastructure, using these pre-built templates, from aggregate, softwaredefined resource pools VMware supports the Open Virtualisation Format, which allows the easy migration of virtual appliances across different platforms. To facilitate comprehensive visibility and proactive management of service levels of business critical applications, vcloud Suite provides monitoring of Windows and Linux operating systems, so you can see when performance bottlenecks are starting to build so you can take corrective actions before end users even notice A secure portal enables customised, self-service provisioning of cloud services that comply with established business policies. Authorised administrators, developers or business users can request new IT services, as well as manage existing data centre resources from pre-defined role-specific menus. The Canopy Unmanaged Enterprise Private Cloud delivers unmanaged, converged hardware and software, to give you the control and flexibility to accredit and manage the platform according to your specific requirements. 2
2.3 What s Included Hardware Compute, storage and LAN (in-vblock) networking hardware (racked in vblock), from the enterprise-proven vendors that are VCE, EMC and Cisco Engineer to visit site twice a year to apply matrix updates (firmware). Licenses VMware vsphere/vcenter hypervisor which is the enterprise standard for virtualisation VMware vcloud Suite which provides a cloud environment to enable the flexibility and agility of cloud on dedicated hardware Vblock Management Software Tooling Licenses. Services On-boarding includes setup, installation and commissioning, to the level of being able to fully manage virtual resources e.g. create virtual machines, allocate storage and connect via network Software support for all management elements, up to and including the hypervisor layer, including patches and updates up to this level. Hardware support via VCE Service Desk Unmanaged means that the customer is responsible for the following activities: Provision of service/help-desk to deal with user-facing calls. A service desk number will be provided for managing break fix incidents. All software support activities, including the installation of upgrades, and patching of: Applications Operating system Hypervisor All backup provision, which is not included in the current offer VCE will be responsible for on-site replacement of failed hardware components and receiving fault calls. 3
2.4 What s not included Data Centre facilities Management of Vblock environment: blades & enclosures, storage & storage classes, VMware virtual servers Management of networks Provision of backup technology design, management or technology Disaster Recovery Provision of Firewalls and VLANs, managing security zones, internet connectivity Service management e.g. availability, performance, capacity, security, change, incident, problem, query, complaint or configuration management Account administration Management/ administration of software (hypervisor, OS or application) Installation of software updates and patches Provision of OS licences or images Technical and functional application management for applications or OS running on top of the provided platform Network connectivity Services on secondment or project basis, like technical consultancy Customer network address ranges 4
3. Information assurance This solution is capable of being accredited in IL3 environments, however the potential variation in requirements amongst different government accreditors means that such accreditation is not currently included in the Canopy Unmanaged Enterprise Private Cloud. Such accreditation, and any hardware and software changes to enable such accreditation can be provided by Canopy as separate services, or could be implemented by the client themselves. However, the unmanaged nature of this service provides the customer the flexibility to control and implement this process themselves. 5
4. On-boarding and off-boarding 4.1 On-boarding Canopy provides a standardised on-boarding approach, tailored to the specific requirements of each customer/application, including: New Customer on-boarding and account set up Service / Application on-boarding Ordering and invoice process Change process (please see change management SLA in Service Level chapter) Termination process Consumer responsibilities (including the responsibility to own accreditation for their own requirements over and above the initial requirements) Network connectivity, including secure internet connectivity, secure government network connectivity, secure remote access, and options for dedicated lines where appropriate. From signature of contract to service live the typical duration is between 6 to 8 weeks (for standard delivery). Canopy has provided a single page on-boarding form at the following address: http://www.uk.canopy.net/g-cloud This form enables contact details and area of interest to be registered. 4.2 Training Basic training on operation of the Canopy Unmanaged Enterprise Private Cloud will be included as part of the commissioning of the infrastructure. In addition, further training is available from our partner, VCE, if required. 4.3 Off-boarding Off-boarding an unmanaged environment will typically require removal and secure wiping of data from persistent storage, and then return of the hardware/software platform. 6
5. Pricing The Canopy Unmanaged Enterprise Private Cloud is priced according to the number of typical virtual machines that can be supported. Note that the actual number of virtual machines which can be supported on each environment will vary according to the virtual resources that each virtual machine requires. Exact specifications of each environment size are available on request. The pricing is shown below: Small 100 VMs Medium 250 VMs Large 750 VMs On-boarding Charge 239,217 239,217 249,255 Monthly Charge 21,625 25,818 51,991 These charges assume the hardware will be hosted in the Customer s data centre. Title to all hardware and software licences will remain with Canopy and/or its suppliers during the life of the contract, and possession of both will revert to Canopy and/or its suppliers on completion of the contract. Please note that there is a minimum two year term for this service. Canopy can also provide resources based on the Canopy SFIA rate card for Time & Materials work. All pricing excludes VAT. 7
6. Ordering and invoicing process Ordering this product is a straightforward process. Please forward your requirements to the email address GCloud@canopycloud.com Canopy will prepare a quotation and agree that quotation with you, including any volume discounts that may be applicable. Once the quotation is agreed, Canopy will issue the customer with the necessary documentation (as required by the G-Cloud Framework) and ask for the customer to provide Canopy with a purchase order. Once received, the customer services will be configured to the requirements as per the original quotation. For new customers, additional new supplier forms may need to be completed. Invoices will be issued to the customer and Shared Services (quoting the purchase order number) for the services procured. On a monthly basis, Canopy will also complete the mandated management information reports to Government Procurement Services detailing the spend that the customer has placed with us. Cabinet Office publish a summary of this monthly management information at: http://gcloud.civilservice.gov.uk/about/sales-information/. 8
7. Financial recompense To minimise the cost to users, Canopy does not provide service credits for use of the service. All Canopy services are provided on a reasonable endeavours basis. Please refer to G Cloud terms and conditions. In accordance with the guidance within the GPS G-Cloud Framework Terms and Conditions, the Customer may terminate the contract at any time, without cause, by giving at least thirty (30) Working Days prior notice in writing. The Call Off Contract terms and conditions and the Canopy terms will define the circumstances where a refund of any pre-paid service charges may be available. 9
8. Termination terms 8.1 By consumers (i.e. consumption) Termination shall be in accordance with: The G-Cloud Framework terms and conditions Any terms agreed within the Call Off Contract under section 10.2 of the Order Form (termination without cause) where the Government Procurement Service (GPS) guidance states At least thirty (30) Working Days in accordance with Clause CO-9.2 of the Call-Off Contract Canopy Supplier Terms for this Service as listed on the G-Cloud CloudStore. For this specific service, by default Canopy ask for at least thirty (30) Working Days prior written notice of termination as per the guidance within the GPS G- Cloud Framework Terms and Conditions. 8.2 By the Supplier (removal of the G-Cloud Service) Canopy commits to continue to provide the service for the duration of the Call Off Contract subject to the terms and conditions of the G-Cloud Framework and Canopy Supplier Terms. 10
9. Glossary Abbreviation DB DC DR EMC IL SLA UPEC Vblock VCE VDC VM VMware WAN Database Datacenter Disaster Recovery Description EMC is Canopy s cloud alliance partner [Business] Impact Level Service Level Agreement Canopy Unmanaged Enterprise Private Cloud Converged infrastructure (hardware and software) provided by VCE VCE is Canopy Converged Infrastructure Alliance Partner Virtual Datacenter Virtual Machine VMware are Canopy s software alliance partner Wide Area Network 11
12