Smart421 Ltd SmartPaaS Managed Infrastructure A Smart421 Digital Enablement Service Catalogue offering GCLOUD LOT 2 SERVICE DESCRIPTION 16 December 2014 Version 1.0
Table of Contents: 1 Introduction... 3 1.1 Why Smart421... 3 2 Service Overview... 4 2.1 Operating System Setup (Onboarding) Services... 4 2.1.1 Windows Server... 4 2.1.2 RedHat or OEM Linux... 5 2.2 Detailed Support activities... 5 2.2.1 Windows Server... 5 2.2.2 Linux... 6 2.2.3 Developer Advisory Services... 6 2.3 Customer Responsibilities... 7 2.4 Offboarding... 7 3 Smart421 Compute as a Service (Skyscape) - Overview... 7 3.1 Product features... 7 3.2 Technical features... 7 4 Smart421 Cloud Storage (Skyscape) - Overview... 8 4.1 Product features... 8 4.2 Technical features... 9 5 About Smart421... 10 Appendix A Smart421 DESC Components... 11 GCloud 6 Service Description Smart421 SmartPaaS Managed Infrastructure (Lot 2 PaaS) Page 2 of 11
1 Introduction The SmartPaaS offering is one of the components of Smart421 s Digital Enablement Service Catalogue (DESC) built on the Skyscape Cloud infrastructure. SmartPaaS comprises a fully managed operating system Windows or Linux and the Skyscape Compute as a Service platform. As an early adopter of Cloud and with an unparalleled track record in Managed Services, Smart421 is unique in the market in its ability to offer this fully managed service. DESC is a set of SaaS, PaaS, IaaS, service management and consultancy modules that can be built into a fully managed platform for the deployment of business applications into any compute environment. All business applications require an underlying PaaS platform consisting of compute and storage resources and at a minimum an operating system. Many applications also require a database and middleware components such as application servers and web servers. DESC components address all these requirements offering a fully managed service and can be procured individually. Figure 1: Digital Enablement Service Catalogue A full list of Smart421 DESC components is contained in Appendix A, all are available as services in the Digital Marketplace 1.1 Why Smart421 Smart421 offers its customers access to a talented pool of experienced IT professionals offering a broad range of administration and consultancy services from design through build to support, with the ability to flex resources efficiently allowing Smart421 to meet changing requirements in a cost-effective manner. Smart421 has extensive experience of migrating, implementing, supporting and operating systems running on a wide range of cloud based platforms Amazon Web Services, Skyscape, Microsoft Azure, NTT, CSC Cloud, Rackspace, clients own virtual private clouds and many more. Smart421 s Cloud services strengths and credentials are second to none, with Smart421 early adopters of public cloud solutions, working with and supporting Cloud platforms since early 2010. Partnered with a deep heritage in Service Management, Smart421 has been able to successfully bring industry strength processes and standards to the support of cloud hosted services, ensuring full alignment with ITIL and ISO27000 processes. All of our services are underpinned by: ISO certifications for quality, IT Service Management, Information Security and Business Continuity Enterprise Architecture best practices to align our solutions with each customer s business and IT vision and strategy ITIL v3 certified Service Management team and ITIL v3 compliant processes Our experience and that of our people in delivering compelling solutions and services for our customers for over 20 years Real-world experience has been gained in building and supporting cloud solutions for customers in various business sectors, ranging from SMEs to global blue-chip enterprises. Smart421 s talent is underpinned by an ITIL compliant service management wrap encompassing a choice of service level agreements (SLA) including 24x7 support where required. GCloud 6 Service Description Smart421 SmartPaaS Managed Infrastructure (Lot 2 PaaS) Page 3 of 11
2 Service Overview This section contains an overview of the SmartPaaS offering which comprises a fully managed operating system Windows or Linux and the Skyscape Compute as a Service platform. A full list of the Smart421 PaaS components available in the Digital Marketplace is contained in Appendix A Smart421 will deploy, monitor and manage the Operating System and underlying Virtual Machine, maintaining the patch state of the OS, provide protection from viruses and malware, and monitor health, uptime and performance. 2.1 Operating System Setup (Onboarding) Services 2.1.1 Windows Server Installing of Server software Installation of Windows critical updates and patches Configuration of Domain Tree/Forest Creating user and group accounts File and folder management setting up necessary shares Managing network printers Setting up TCP/IP and DNS Creating logon scripts Enabling remote administration of the server Stop and Disable unnecessary services Install the windows server recovery console Install administration and resource kit tools Configure active directory objects Organisational Units etc. Configure any additional devices such as HW storage Setting up scheduled tasks Optional Additional activities Enhanced Security e.g securing network services/security Firewall Setup and configuration Setting Domain user and group security Configuring additional windows services such as FTP/WWW Management tasks for disks and volumes Modification of login scripts Group policy management Event and Security Log Settings AntiVirus installation and configuration Performance tuning Setting up additional servers to help with Domain replication/security/redundancy GCloud 6 Service Description Smart421 SmartPaaS Managed Infrastructure (Lot 2 PaaS) Page 4 of 11
2.1.1.1 Windows Server Versions Supported Windows Server 2003/R2,2008/R2,Windows Server 2012 2.1.2 RedHat or OEM Linux Basic Setup Installation & Removal of packages Configuring additional software repositories Configuration of system services Configuration of Scheduled Jobs Printer Administration Configuration of New Filesystems (local only) LVM Basic Setup Basic Filesystem setup User & Group Creation Optional Clustering Setup - in addition to above Clustering Setup Cluster Software Installation Cluster Creation Fencing Configuration Configuring an LVM Volume using ext4 Exclusive Activation of a Volume Group in a Cluster Creating Resources and Resource Groups Testing 2.2 Detailed Support activities 2.2.1 Windows Server Incident & problem management & resolution Basic availability monitoring Service management & reporting Virtual Machine management Premium Service Incident & problem management & resolution Advanced monitoring (server performance, network traffic, security events) Service management & reporting Virtual Machine management Automating common system tasks such as patching/auditing Backing up and restoring data Setting up WINSUS for automatic updates Safeguarding your system Firewall setup Advance File system management using ACL's Configuration of Additional Logging & Log Rotation for applications Additional workstation configuration GCloud 6 Service Description Smart421 SmartPaaS Managed Infrastructure (Lot 2 PaaS) Page 5 of 11
2.2.2 Linux Standard Service (the basics required to provide effective support) Incident & problem management & resolution Basic availability monitoring Service management & reporting Virtual Machine management Premium Service (including more proactive type activities) Incident & problem management & resolution Advanced monitoring (server performance, network traffic, security events) Service management & reporting Virtual Machine management Once a month Firewall Setup and configuration Configuation of Network Services e.g FTP, NFS, NIS, SAMBA, DNS LVM Configuration Adding, Resizing, Mirroring,Striping Software Raid Configuration Installation and configuration of Mail Service using Postfix/Sendmail Advance Filesystem management using ACL's Once every 6 months Advance Filesystem management using ACL's Modification of Bootloader Components Configuration of Kernel Modules Configuration of Persistent Kernel Parameters Configuration of Additional Logging & Log Rotation Enhanced Security e.g securing network services SELinux Setup, Management and Troubleshooting Password Aging LDAP Installation & Configuration Openssh Configuration Centralise Logging Configuration 2.2.3 Developer Advisory Services To enhance the overall service, Smart421 also provides developer advisory services in addition to operating system support. This includes: Design consultancy Architecture and strategy Application connectivity design and optimisation Security planning Development, system integration and deployment GCloud 6 Service Description Smart421 SmartPaaS Managed Infrastructure (Lot 2 PaaS) Page 6 of 11
2.3 Customer Responsibilities The customer will provide all licenced software and subscriptions 2.4 Offboarding Smart421 will provide a full offboarding service tailored to individual customer requirements 3 Smart421 Compute as a Service (Skyscape) - Overview Compute as a Service from Smart421 is an Infrastructure as a Service (IaaS) offering based on the Skyscape platform which enables organisations to rapidly provision and scale secure Virtual Machines in minutes, in a flexible and autonomous manner. A full service description is contained in the Smart421 Compute as a Service IaaS entry in the Digital Marketplace Skyscape provides this service across two security domains Assured OFFICIAL (PGA IL2) and Elevated OFFICIAL (PGA IL3) and 4 Service Levels up to 99.99% availability allowing consumers to precisely match their application / user needs to an appropriate security domain, service level and cost instead of designing to the highest level when not needed. The service benefits from extensive independent assurance: CESG Pan Government Accredited at both IL2 and IL3 PSN Accredited for both the PSN Assured service and PSN Protected service Alignment with international standards including ISO27001 and CSA STAR Hence, the service provides the most robust levels of assurance for data classified as OFFICIAL or OFFICIAL-SENSITIVE. Skyscape s service has been designed specifically for the UK public sector and is available only to the UK public sector. The service supports and complies with all relevant areas of the Government ICT Strategy and Information Principles for the UK Public Sector. Skyscape s datacentres are some of the most energy efficient in the world and as such support the Green Government ICT Strategy in full. 3.1 Product features Compute as a Service provides an accredited, secure and highly scalable compute platform which offers the following benefits: Agile Build and configure VMs within minutes via a secure self-service Portal. Users can add more (or less) resources when needed Flexible A range of services levels and VM sizes chose the right service at the right price for what you and your application / data require Value Billed by the hour / resources used enabling significant cost savings if VMs are turned off when not needed and simply restarted when they are Innovative Cross Domain Security Zone designed to facilitate citizen access to secure systems (e.g. between the Assured and Elevated platforms (IL2 to IL3)), code migrations, browse down management, etc. Assured Security the platform is Pan Government Accredited and PSN Accredited at both IL2 & IL3, hosted in highly resilient Tier 3, UK sovereign data centres and benefits from Protective Monitoring Green the Skyscape service is based in UK data centres which offer market leading efficiency around power and cooling Geodiversity the platform spans two UK data centres separated by over 100km 3.2 Technical features Underpinning the service is a range of features that make it easy to use and control. Via the secure portal or API, organisations can: Stop, start, clone and delete VMs whilst managing firewall security rules and load balancer policies Reconfigure virtual hardware on the fly changing memory, processors, network and storage as and when needed GCloud 6 Service Description Smart421 SmartPaaS Managed Infrastructure (Lot 2 PaaS) Page 7 of 11
Set and control access, user profiles and capabilities Upload own VM images, applications and data, or alternatively select from Skyscape s catalogue of template based standard OS configurations Control the environment via an easy-to-use self-service portal or programmatically through a documented API Connect via a variety of networks; PSN, Internet, N3, legacy GCF networks such as GSI, GSE, PNN, etc and HybridConnect options Skyscape use VMware vsphere as the hypervisor for this IaaS service. This gives consumers the widest choice of supported operating systems within their VM s including a large selection of open source platforms Skyscape provide a Virtual Firewall as part of its service. The performance characteristics are outlined in the Technical Requirements section. If consumers require more advanced or specific features, they are recommended to deploy (and license) their own appliance 4 Smart421 Cloud Storage (Skyscape) - Overview Cloud Storage from Smart421 is an Infrastructure as a Service (IaaS) offering based on the Skyscape Storage platform. It is is a secure, massively scalable and very resilient next generation storage platform designed to address a wide variety of use-cases. A full service description is contained in the Smart421 Cloud Storage IaaS entry in the Digital Marketplace Traditional storage solutions are typically characterised by large CAPEX expenditure, intensive management and support burden and forever swinging between under-capacity and over-capacity. Cloud Storage benefits consumers as there are no up-front costs and no minimum term commitments. Consumers merely pay for what they actually use, when they actually use it. Like many cloud storage solutions such as Amazon S3 and Microsoft Azure, Skyscape s Cloud Storage is a compelling alternative to traditional storage systems and has become the default storage solution for new digital applications. Additionally, Cloud Storage is the ideal solution for many common storage requirements such as: Archiving to the cloud for organisations looking to migrate their valuable but seldom used data to a cost effective, reliable and secure cloud storage repository (via PSN, Internet and other networks). This releases capacity on your existing storage solutions so you can avoid the cost of upgrading. Backup to the cloud a location agnostic (UK based), secure and cost effective alternative to storing backups on unreliable tape media or expensive local disk solutions. Recover your data even if your primary site suffers a catastrophic failure. Personal storage in the cloud replace your inflexible network drives (e.g. F: drive) with secure, always available cloud storage that can be accessed by any device and from any location. Enhance the durability and availability of your personal data. Master data in the cloud use cloud storage as the primary repository for your existing applications and users. Benefit for a familiar interface and accelerated performance by using the new generation of Cloud Storage Gateways. The service benefits from extensive assurance that it is optimised for data classified as OFFICIAL or OFFICIAL-SENSITIVE. This is independently validated via both Pan Government Accreditation and PSN Compliance at IL2 and IL3 (and IL4 by aggregation). This enables Public Sector organisations to gain the benefits of secure, purpose built, on-demand resources that meet their stringent information assurance requirements, all on a true utility (pay for what you use) consumption model. Skyscape s service has been designed specifically of for the UK public sector and is available only to the UK public sector. The service supports and complies with all relevant areas of the Government ICT Strategy and Information Principles for the UK Public Sector. Skyscape s datacentres are some of the most energy efficient in the world and as such support the Green Government ICT Strategy in full. 4.1 Product features The Skyscape Cloud Storage service makes application access to storage stateless and locationindependent, greatly simplifying application architectures and improving flexibility and resiliency. The service provides the following features: GCloud 6 Service Description Smart421 SmartPaaS Managed Infrastructure (Lot 2 PaaS) Page 8 of 11
Ease of Adoption Developers who have already written an application to leverage Amazon S3 services can easily migrate to the secure, UK hosted Skyscape Cloud Storage service via the S3 compatible gateway Supports many 3 rd party software applications for backup/archving (e.g. Tessella, Commvault, Riverbed, EMC ViPR, etc) Flexibility Choose the service level and security level you require to match your specific requirements Scalable Innovative object storage technology natively enables data to be stored anywhere within our UK data centres, and for multiple servers & applications to use the same data (avoiding duplication & redundancy) Elasticity the solution scales indefinitely and on-demand allowing unpredictable capacity growth by never requiring storage provisioning ever again Metered Billing the organisation is charged by how much (or how little) storage is consumed. The service is billed on the basis of the resources used during a period of time (1 month minimum) based on metrics including consumed capacity and bandwidth 4.2 Technical features Skyscape Cloud Storage provides the following features: Natively supports REST interfaces for reliable connectivity over the Internet, PSN and other widearea networks S3 Compatible Leverage hundreds of existing Amazon S3 compatible applications via the Skyscape S3 compatible API Wide support of developer languages & frameworks Simple and secure access using almost any language or framework including.net, Java, C, Flex, PHP, Python, Ruby and JavaScript with language bindings, as well as offering new modules for Drupal and content-addressable storage (CAS) developers Flexible Connectivity options Connect via our DDoS protected Internet, a government community network (e.g. PSN Assured service, PSN Protected service, N3 or legacy GCF networks including PNN, GSI, GSE etc.) or by HybridConnect using your own dedicated circuits such as CPA encrypted tunnels, Leased Lines or MPLS Manual or Automated Data Transfer Organisations can choose to either manually upload data or can opt to use a range of automated solutions, such as EMC Networker, CommVault, Riverbed, etc No capacity management issues related to LUNS, RAID groups or file systems Integrates with existing, native and virtualized, enterprise applications with no change to the application or stack Compatible with a range of third party Cloud Storage Gateway appliances such as; EMC TwinStrata, Panzura Alto Cloud Controller, Seven10 StorFirst EAS, StorSimple Appliance, etc. Cloud Storage Gateways can be installed on-premises or in the cloud and provides NAS or SAN presentation of the storage layer Assurance the cloud storage platform is Pan Government Accredited and PSN Accredited at both IL2 & IL3, hosted in highly resilient Tier3, UK sovereign data centres and benefits from a Protective Monitoring solution Green the Skyscape service is based in UK data centres which offer market leading efficiency around power and cooling. A Skyscape solution will generate less Carbon than many other solutions Geodiversity the platform spans two UK data centres separated by over 100KM GCloud 6 Service Description Smart421 SmartPaaS Managed Infrastructure (Lot 2 PaaS) Page 9 of 11
5 About Smart421 Smart421 delivers high-end consultancy, integration and management of business critical systems for large enterprises such as leading financial institutions, mobile telcos, energy utilities, passenger airlines, media broadcasters and multi-branch retailers. It provides onshore services for complex and bespoke projects. Customers say they engage Smart421 to help them solve business and technical problems more reliably than using global sourcing and more cost effectively than using the big names in IT consulting. Founded in 1989, today Smart421 is part of the KCOM Group, a FTSE250 listed company with an annual turnover of 400M, 1,800 staff and offices in major locations across the UK. The KCOM Group provides a range of communications solutions to consumers, business and public sector organisations across the UK. The Group comprises four customer facing brands, Kcom, KC, Eclipse and Smart421, each of which is focused on tailoring services to meet the needs of its customers. Smart421 applies independent thinking, business agility and a passion for delivery across two key specialities: Architecture and Design Consultancy, and Managed Services. To discuss your requirements further please contact Phil Fifield at Smart421: Mobile: +44 (0)7734 461144 Head Office: +44 (0)1473 421421 Smart421 smart solutions for the 21 st Century Delivering high-end consultancy, integration, and management of business-critical solutions London: 26 Finsbury Square, London, EC2A 1DS Ipswich: North Felaw Maltings, 48 Felaw Street, Ipswich, Suffolk, IP2 8PN GCloud 6 Service Description Smart421 SmartPaaS Managed Infrastructure (Lot 2 PaaS) Page 10 of 11
Appendix A Smart421 DESC Components Smart421 has 18 GCloud 6 entries in the following categories: Lot 1 IaaS Compute as a Service Cloud Storage Cross Domain Secure Zone Lot 2 PaaS SmartPaaS Managed Infrastructure SmartPaaS Hadoop in the Cloud Lot 3 SaaS API Management Stack Open Identity Stack Lot 4 SCS Managed Database as a Service Managed Operating System as a Service Managed WebServer as a Service Public Sector Cloud Services Mobile Enterprise and Native Application Development Services Application and Integration Services Big Data Services Cloud Service Management Managed Application Server as a Service Public Sector Identity and Access Management (IAM) Services API Management Services GCloud 6 Service Description Smart421 SmartPaaS Managed Infrastructure (Lot 2 PaaS) Page 11 of 11