Domino Cloud Architecture

Transcription

Domino Cloud Architecture - Hybrid and Hosted
Choosing the correct model for your business
AdminCamp 2014
Notes & Domino –> Mobil, Web und als
Session agenda
• Defining the variances in hosted and hybrid deployments
• We will discuss sample architecture diagrams
•
•
•
•
•
Security considerations
Architecture decisions
The right questions to ask the hosting providers
Reporting and status
A deep dive into bandwidth considerations
• Sample data charts from live customers will be analyzed
AdminCamp 2014
Introduction
Cloud solutions are a hot topic at IBM Connect. (The
session database shows over 30 last year alone)
!
There are numerous different variations of hosted, hybrid
and on-premises management.
!
Be sure to think about how any of this could fit into your
architecture and where the possible pitfalls may be.
!
This is in no way represents all the possible
configurations and options for architecture design.
AdminCamp 2014
Definitions
Business continuity
!
Alternate sites that come online to continue
business processes
! single site
! geographically distributed sites
Disaster recovery
Fault tolerant
!
The ability to continue business operations with
interruptions in certain components
Redundant / Redundancy
!
Duplication of components
AdminCamp 2014
Agenda
The IBM Smart Connections Cloud Architecture
!
Hosted Domino
!
Utilizing the Cloud
!
Q&A
AdminCamp 2014
AdminCamp 2014
AdminCamp 2014
AdminCamp 2014
AdminCamp 2014
AdminCamp 2014
AdminCamp 2014
LotusLive Notes
A form of hosted Domino servers
!
Domino Web Access (true iNotes) can be found here
!
Two levels of SLA
!
Spam/virus, backup features
!
AdminCamp 2014
Agenda
!
Hosted Domino
!
Utilizing the Cloud
!
Q&A
AdminCamp 2014
Hosted Domino
The purest form fully in your control
Dedicated servers (or dedicated VM for some)
Full administrative access in Domino
Full backups and retention policy per customer
Part of your domain (or not)
Single SLA
Full monitoring 24x7
Caps are based on your requirements
Costs are per server
▬
You carry and own your licenses
AdminCamp 2014
Hosted Domino
The purest form of your control
Dedicated servers (or dedicated VM)
Full administrative access in Domino
Part of your domain (or not)
Full backups and retention policy
Single SLA
Full monitoring 24x7
!
Costs are per server
▬
You carry and own your licenses
AdminCamp 2014
Hosted Domino
AdminCamp 2014
Agenda
!
Hosted Domino
!
Utilizing the Cloud
!
Q&A
AdminCamp 2014
Outgoing Bandwidth
Current utilization
!
!
!
!
Pull current metering reports
Enable Domino platform statistics
Enable Domino Domain Monitoring
Utilize third party products to watch network
activity
Proposed utilization
!
Create a model representation of growth
Growth demands
!
Current utilization/growth data
AdminCamp 2014
Bandwidth Samples
Small customer bandwidth utilized
AdminCamp 2014
Bandwidth Samples
Polling from a single client bandwidth utilized
AdminCamp 2014
Bandwidth Samples
Seasonal customer bandwidth utilization
AdminCamp 2014
Bandwidth Samples
Bandwidth utilized for normal web applications
AdminCamp 2014
Bandwidth Samples
Bandwidth utilized during migration to cloud services
AdminCamp 2014
Provider Bandwidth
What is the dedicated bandwidth to you?
Does the provider have a bandwidth cap at
one time or monthly?
!
•
This could lead to large charges if you exceed these
limits
What is their current
network saturation
!
Do not be afraid to request
bandwidth reports from the
proposed provider
AdminCamp 2014
Security
Physical security
• Data center access
• Server rack access
• Your own access
!
!
Network security
• Segregated virtual
LAN’s
AdminCamp 2014
Security
In your proposal, request or information gathering you
should have a security section defined
! Verifying their internal security policies requires:
! On-site visits
! Requests for internal documentation
! Diagrams of network deign for your proposed
environment
" If they give you an entire network document
beware!!! They are disclosing another
company’s security infrastructure and will
do the same to you
AdminCamp 2014
Security
Single sign-on
!
!
Does your current environment support web or
Windows single sign-on integration?
Will the new servers requires alternate DNS?
Anti-virus
!
Will the provider handle the solution or will you
provide this on each desktop
SSL
!
!
Secure Socket Layer support should be portable
This implies a common DNS zone for you and your
DR provider
AdminCamp 2014
Security
Notes encryption
!
!
!
A simple and easy to deploy solution
Built into the product natively
No tokens, fobs, software or additional passwords
VPN support
!
!
!
Token support versus software deployment
arguments
Additional security provided for accessing software
outside of Lotus Notes
Users must maintain another software or device
AdminCamp 2014
Network
Port encryption
!
Shared network
switches
!
Shared network cards
!
Failover
!
Load balancing
AdminCamp 2014
AdminCamp 2014
Network Options
AdminCamp 2014
Network
AdminCamp 2014
Network
Backup networks
!
A backup network is utilized by most large scale
data centers to offload backup traffic from the
primary
NNN or DNN models
!
How mail will flow through a continuity site is
highly dependent on internal Domino mail
routing
Native Domino compression
!
This is one of the cheapest and simplest
implementations with the greatest impact
! The servers could have Domino compression
AdminCamp 2014
Hardware
Dedicated
!
You are the only customer using that RAM, disk and
memory
Shared
!
This could be a split Domino instance or shared disk
and physical hardware
Virtualized
!
This is one of the cheapest and simplest
implementations with the greatest impact
! This is common on some hosting partners to
reduce costs while sharing disk
AdminCamp 2014
Client Connectivity Models
Notes encryption
!
This can be forced on the server or client policy
! Remember that coupling this with Notes
compression has huge benefits over VPN type
architecture
VPN encryption
!
Reduces load on the Notes infrastructure but adds a
level of support to the environment
S/MIME
!
This is a transport security model for mail, not to
be confused with data protection and storage
AdminCamp 2014
Backups
Models
!
!
!
!
!
!
full
incremental
weekly/monthly
SAN storage
archiving
journaling
AdminCamp 2014
Backups
Retention time
!
How often are
full and
incremental
performed
!
Who has access
to the backup
files
AdminCamp 2014
Topology
Load balancing
!
!
!
!
This solution can sit in house or through a provider
Current servers are duplicated and data
synchronized
Traffic is then balanced between the servers
This solution may also offer a primary and then
secondary server as part of load balancing
Hybrid design
!
A combination of the outsourcing and internal
management
AdminCamp 2014
Topology
Internal disaster recovery
!
Providing all the necessary components in your
network under your management with the pipe
AdminCamp 2014
Topology
Internal disaster recovery
!
Providing all the necessary components in your
network under your management except the
communication pipe
AdminCamp 2014
Topology
Extranet support
!
A form of hybrid design where your Internet facing
devices are placed at an external provider
! Some redundancy may be built for your internal
systems
AdminCamp 2014
Topology
Extranet support
!
A form of hybrid design where your Internet facing
devices are placed at an external provider
! Some redundancy may be built for your internal
systems
AdminCamp 2014
Topology
Outsourced design
!
!
A full implementation of hosted services with
redundancy and failover built in
A partial
implementation of
hosted services for
redundancy and
business continuity
only
AdminCamp 2014
Agenda
!
Hosted Domino
!
Utilizing the Cloud
!
Q&A
AdminCamp 2014
AdminCamp 2014
Contact Me
Email
IdoNotes@IdoNotes.com
AdminCamp 2014

Domino Cloud Architecture

Transcription

Similar documents

server level security - Northern Collaborative Technologies

T1S8-Domino Performance in the Real World

Single-Sign-On und weiter