1. Designed for High Availability

2.  Fault-Tolerant Design  Shared Storage across 4 Nodes. Each Node: ▪ 6 X 900GB SAS 10k RPM hard drives configured RAID 5 + hot standby ▪ 10Gbps interconnects (storage), 1Gbps (network)  Node Pairs – Storage shadowed on Pair ▪ Failure of Node – VM can be lit up on pair member that is still live.

3. CPU RAM Storage (HD) CPU RAM vm1 vm2 Storage (HD) VHD ghosted VHD ghosted vhd1 vhd2 vhd3 vm3 1.If Node 1 Fails 2.HRE Administrator intervenes and activates VM on remaining Node Pair vm2vm1

4.  First Level - Live & Standby VMs – VHD duplicated to pair node  Storage available for guest VM to backup to Host Machine VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM Live and Standby VMs

5.  Guest VM backs up to Storage Facility  Initiated by Guest VM – NOT by Host/HRE  HRE – responsible for storage – not backup and recovery procedure inside VM Storage facility Host Machine VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM VMVM HRE Tenant VM initiates backup at Guest VM level – putting data into Storage Facility at HRE or other location (Tenant choice).

6. @10Mbps internet Node 1 Node 2 Node 3 Node 4 Node … … VPN Admi n Private LAN Storage LAN Bridge FW Node Pair 2Node Pair 1 Node Pair Utility Servers

7. Internet Public Network IRCan FW Private FW1 Private FW2 VPN endpoint Web Server Database Server Tenant A minicloud

8. SSC Infrastructure – Data Centre, Rack, Power, Network HRE Infrastructure – Virtualization Fabric, Storage, VLANs, VPN Tenant Application – Servers (OS, Applications), Network Devices, Administration Administration Monitoring

9.  From the “ground up” – Layered  Infrastructure + HRE + Tenant Application  ONLY Tenant Application is C&A eligible.  Large Dependency on HRE ▪ Therefore, leverage common information for C&A Process on HRE and SSC infrastructure.

10. Provide a flexible, upgradable, dependable, infrastructure that Government departments can use to host applications and projects, involving FLOSS applications and tools. Provide the capability to implement each project ’ s security policy, within the greater responsibilities of The Crown. Provide a solution that doesn ’ t “ get in the way ” of receiving a certificaton from SSC authority.

11. OTRS UbuntuKVMGaneti DRBDMediaWiki OpenswanOpenVPN Unbound & NSD BackupPCNagiosMunin ApachePostfixPylons

12.  Monthly – Guaranteed Outage  Network and other maintenance performed in a maintenance window.  Assured outage of 1-hr / month (UNDER DISCUSSION @HRE Governance Level)

13.  D: get version #s of KVM etc.