RBI Cloud setup .pptx Shared by iftas sifynoc team

RBI Cloud team

1. IFTAS - Cloud Setup Training Created by R.R.Ram Manoj

2. RBI-IFTAS Cloud DC Banks VRF:- 9434-ICLOUD-HUB VRF:- 9435-ICLOUD-SPOKE SIFY GDC

3. RBI-IFTAS Cloud DC Banks VRF:- 9434-ICLOUD-HUB VRF:- 9435-ICLOUD-SPOKE Hardware used CISCO 1921 CISCO 1941

4. RBI-IFTAS Cloud DC Banks VRF:- 9434-ICLOUD-HUB VRF:- 9435-ICLOUD-SPOKE Service Provider

5. RBI-IFTAS Cloud DC Banks VRF:- 9434-ICLOUD-HUB VRF:- 9435-ICLOUD-SPOKE Protocols

6. TCL BSNL Sify Servers DC-DC connectivity Servers PRY Traffic PATH SCY Traffic PATH TRY Traffic PATH All the providers are delivered only single link, no backup link Each link connected with dedicated router(1:1)

7. TCL BSNL Sify Servers Member bank-DC connectivity Servers Bank can take any of the service providers based on the feasibility Each link connected with dedicated router at bank side (1:1) VTI(GRE over IPSEC ) running between MB to DC and BGP is running through the VTI interface VTI(GRE over IPSEC) VTI(GRE over IPSEC) VTI(GRE over IPSEC)

8. Traffic Patten DC-DC Traffic Pattern Site PRY ISP SCY ISP TRI ISP 1 TRI ISP 2 HYD IFTAS-GPX TCL SIFY BSNL RCOM MB DC's MB ISP Combination Link Priority ISP1 ISP2 IPS3 PRY-ISP SCY-ISP TRD-ISP GPX DC(MUM) SIFY RCOM - SIFY RCOM - SIFY TATA - SIFY TATA - RCOM TATA - TATA RCOM - SIFY TATA RCOM SIFY TATA RCOM SIFY BSNL - SIFY BSNL - RCOM BSNL - RCOM BSNL - TATA BSNL - TATA BSNL - IFTAS DC(HYD) SIFY RCOM - SIFY RCOM - SIFY TATA - SIFY TATA - RCOM TATA - TATA RCOM - SIFY TATA RCOM SIFY TATA RCOM SIFY BSNL - SIFY BSNL - RCOM BSNL - RCOM BSNL - TATA BSNL - TATA BSNL - DC-DC MB-DC

9. SLA ( New Ni design)

10. INTERNET and OFFNET DDOS

11. INTERNET: IFTAS CLOUD team having the two Internet sites at HYD IFTAS DC and GPX Mumbai HYD DC – SIFY (Managed) + TCL (Un-Managed ) GPX DC – Airtel (Un-Managed ) + TCL (Un-Managed ) Only Sify router is under managed services. Lastmile with BGP and weight attributes. Site is protected with Cloud DDOS services PE : 1.7.0.229 Interface - Bundle-Ether8.125 RP/0/RSP0/CPU0:AP-HYD-GGD-T1-ST-SIP-CA91-R01-GDC#sh run int Bundle-Ether8.125 Tue Mar 30 19:31:27.997 IST interface Bundle-Ether8.125 description INDIAN FINANCIAL TECHNOLOGY & ALLIED SERVICES-SIFY-GDC-3932792-60-MBPS-ECINT-ETH-PRIMARY-4602420617 service-policy input RATE-LIMIT-IN-60MB service-policy output RATE-LIMIT-OUT-60MB ipv4 address 223.31.193.57 255.255.255.252 encapsulation dot1q 125

12. OFFNET DDOS ( without Attack ) Airtel TCL DDOS NMS INTERNET SIFY NTA Data Polling GPX DC ( Un-Managed ) GPX DC is connected with Airtel and TCL. DDOS GENIE monitor the traffic in WAN interface using NTA

13. OFFNET DDOS ( with Attack ) Airtel TCL DDOS NMS INTERNET SIFY NTA Data Polling GPX DC ( Un-Managed ) Running GRE tunnel from Chennai PE to GPX(R1/R2) and IFTAS(R1) routers Static routes for GPX LAN pool pointing towards Tunnel interface (Manual additions when attacks) Chennai PE 100.70.3.10 GRE Tunnel

14. PE Tunnel Interface Chennai PE - 100.70.3.10

15. Steps to follow when attacks Steps Tasks Owner Step 1 DDOS team intimate the attack to IFTAS cloud team(Mail/Call) Sify DDOS Step 2 IFTAS team will raise the request to Airtel and TCL to supress the LAN advertisement on eBGP then should confirm back to Sify IFTAS Step 3 Sify DDOS team send request to Netops add the static routes in Chennai IPE(100.70.3.10) towards GRE tunnel and starts advertise the LAN pool in the Gateways Sify DDOS Step 4 SIFY DDOS team shold confirm forward traffic from Iterne to IFTAS CE routed through DDOS device and ensure scrubbing is on progress. Sify DDOS Step 5 SIFY DDOS team provide the confirmations back to IFTAS traffic routed through Sify Cloud DDOS protected services Sify DDOS Step 6 After Attack is stopped inform IFTAS team to rollback the changes Sify DDOS

16. Tools Used Beamon

17. Tools Used Ioni (back end tool) Fusion

18. Daily Incident

19. Support Work flow Helpdesk & IFTAS Sify NOC LM Provider RF Team Fiber Team Netops Team Customers Other ISP

20. Customer Team Cloud Team [email protected] [email protected] 040-47524072

21. Thank You