PeeringOne - Raffcomm Migration Proposal v1.4 (1).pptx

cloud service provider

1. RAFFCOMM MIGRATION TO CLOUD PROPOSAL

2. CLOUD HOSTING PROPOSAL

3. Raffcomm Existing Production Workload AIMSKL Cluster Description Value No of VM 110 Total vCPU 400 Total vRAM 785GB Total Provisioned Storage 12,943 GB JARING Cluster ** Exclude all existing VMware vcenter , NSX and SRM

4. Raffcomm Existing DRC Site Description Value No of VM 10 Total vCPU 32 Total vRAM 68 GB Total Provisioned Storage 314 GB DRC Cluster ** Exclude all existing VMware vcenter , NSX and SRM

5. Cloud Hosting Proposal Production workloads to run at Peering One VMware Stack Cloud located at HDC Shah Alam DRC workloads to run at Peering One VMware DR Cloud located at NTT Cyberjaya. Site-to-Site VPN PeeringOne Cloud PeeringOne DR

6. Migration Strategy PeeringOne will utilise VMware HCX as the tool to tackle the VM migration strategy. VMware HCX offers an extensive features such as virtual machine mobility and WAN optimization which makes it one of the suitable tools for migration workload across private/public clouds.

7. VMware HCX Technology VMware HCX provides infrastructure abstraction, high performance network extension with advanced services like proximity routing, virtual machine mobility and disaster recovery services with data reduction and WAN line conditioning built in. HCX VM Mobility:- (a) HCX Bulk Migration uses vSphere Replication protocol to transfer up to multiple VM in parallel. (b) HCX vMotion uses the vMotion protocol to transfer individual VM. Combined with HCX Network Extension for zero-downtime migrations of mission critical applications. (c) HCX Cold Migration is automatically selected when transferring powered off virtual machine. (d) HCX vMotion with vSphere Replication combines bulk and vMotion methods to deliver zero downtime failover for VM.

8. Risk Mitigation Utilize existing Veeam backup software to perform FULL backup prior to the migration activity. Raffcomm will have full copy of backup to fall back in case the need to restore whole VM. Smaller VM can perform VM cloning on local storage first prior to the migration activity. This method can be apply to vMotion migration strategy. This is also applicable to bigger VM however provided there’s sufficient storage space to keep. The clone images will be temporary stored for backup purposes only and will be deleted once the migration is successful. Less critical VM’s are recommended to shutdown then migrate. This way it will greatly reduce migration risks. HCX also provide the ability to concurrently migrate multiple VMs using replication strategy. When using replication, HCX will perform the replication of the virtual disks over to destination side while maintaining the original copy at the source side. VM can easily failback if any issues occur. Prior to any migration activity, a thorough healthcheck will be performed on the VM and capture all the necessary details pertaining to the VM. It is advisable to have software vendor to be on standby should there require post migration reconfiguration on the application level.

9. Protection of Production Workload with Veeam Technology Veeam Backup & Replication uses an image-based approach for VM replication. It does not install agent inside VM guest os to retrieve data but leverages VM snapshot capabilities. VM replication to DR site will leverage on snapshot technology and requests VMware vSphere to create VM snapshot and uses the point-in-time copy as a source of data for replication. In many respects, replications works similarly like incremental backup. Veeam Backup & Replication copies only those data blocks that have changed since the last replication job session.

10. Benefits Hosting with PeeringOne Cloud VPC Network Tenant Workload & Data Tenant Space Provider Network with High Availability Mgmt Own public IP address pools Link and ISP redundancy with 3x ISP MyIX connectivity - Reduced latency with localization of in-country traffic Security Ops Center with Ensign Security

11. Multi-Cloud IaaS Security Designed to prevent latest fifth gen, multi-vector cyberattacks Fortinet recognized 10 th times leader in the Magic Quadrant for network firewalls (2019) Act as first layer of defense with high availability design on PeeringOne Cloud One of the largest cybersecurity service provider in South East Asia. Award winning security managed service with 24/7 security operation center(SOC). Round the clock monitoring and provide regular alerting on PeeringOne Cloud security. Infrastructure Challenges Internal Risks External Threats Provide machine learning capability that can identify fast-evolving malicious attack on PeeringOne Cloud.

12. Advanced Threat Protection with FireEye PeeringOne Cloud Security threats or any cyber attacks has been the core focus in PeeringOne’s mind to detect and defend security breaches on PeeringOne Cloud perimeter. Thus, the adoption of FireEye APT continue to strengthen the infrastructure against the complex malicious attacks. Survival in cyberspace is always a battle. It constantly demands high alertness, active observation without fail and quick adaptability. FireEye APT has specialized skillsets, and an unwavering focus with intelligence to ensure no one gets through the door.

13. Sample Ensign InfoSecurity Reports - Firewall * Sensitive Client Details Are Hidden

14. Sample Ensign InfoSecurity Reports - Firewall * Sensitive Client Details Are Hidden

15. Sample Ensign InfoSecurity Reports – FireEye APT * Sensitive Client Details Are Hidden

16. Sample DDOS Protection Report from TIME * Sensitive Client Details Are Hidden

17. Our Service Assurance Helpdesk 24 x 7 x 365 days incident support with Ticketing system and SLA Case logging via Phone call, Email or Auto alert Case routing, tracking, escalation and notification Case statistics and summary reports Knowledge Base Incident Management Change Management Problem Management Service Catalog ITSM Processes Service Desk Plus

18. vCloud Workload Accessibility User may access the workload via Peering One vCloud Director console or via RDP/SSH with secure open port.

19. Project Management Methodology

20. Proposed Migration Timeline Virtual machine will be divided by batches for migration. The migration batches proposed is dependent on detailed assessment and planning. Timeline to stretch further if required.

21. Assumptions & Notes It is assume that all virtual machine is independent in nature and without VM to VM clustering configuration. It is assume that all virtual machine is without raw device mapping or any external SAN storage configured which may require additional re-configuration on the operating system or application. It is assume that all OS/software/Licenses can be migrated to cloud platform without requiring additional configuration or renewal such as attached dongle. It is assume that all Raffcomm workloads are supported by VMware. Raffcomm to provide all the necessary arrangement for downtime should there be any requirement to shutdown the workload for migration purposes. Engagement of respective software/application vendors for any software reconfiguration needs are excluded . Note: List is non-exhaustive, further to be added or elaborated upon project award.

22. THANK YOU For further enquiries Email: [email protected] Phone: [phone] Fax: [phone]