etharius worldwide e-solutionsVBH Network Proposal Document 30th May 2017
ethariusAbout ethariusEtharius Ltd is a global IT networking and infrastructure company with a decade of experience working withglobal brands such as Sony Computer Entertianment, Masterfoods (the Pedigree, Whiskas and Mars brands)as well as many other SME’s located in the United Kingdom and beyond.The company utilises the latest Cisco, Microsoft and Barracuda technologies to create and maintain Enterpriselevel solutions for organisations that require expert analysis and maximum uptime.This documentThe report compiled within is based on meetings held at the head office of VBH and is intended to establishour opinions of the company requirements based on the information recieved.Content 1.0 Overview 3 2.0 Network Architecture 3 2.1 Current Server Layout 3 2.2 Advantages of a centralised server using Private Cloud architecture 4 2.3 Network Security 5 3.0 Proposal 6 4.0 Document Particulars 7 2
etharius1.0 OverviewThe current company infrastructure is fractured, with servers spread across numerous companies/offices, allof which require maintenance and upkeep.As well as technical issues with such an IT layout, there are also security implications to consider. The serversdeployed at each location are, from what we have discussed, not held in a secure state.The development of software would, we believe, benefit greatly from one powerful, centralised server clus-ter housed in a reliable Vietnamese data centre.2.0 Network ArchitectureIn this section, we advise on the state of the current network as has been described to us in the meeting on23rd May, and our requirements for improvements to the existing model.2.1 Current Server LayoutAt present the VBH and affiliated companies use independent (but linked) servers held onsite. Clearly at thisstage we cannot assess every individual property, but the suggestion at the board meeting held on 23rd May2017 was that these servers were not held securely. Our key concerns are:• Some or all of these servers are not located in secure facilities• These servers are in some instances 7-8 years old• All of these servers require maintenance which is an ongoing cost to the business• The current nature of the software requires asynchronous uploads to the VBH servers. This increases load on the main server.• The current cluster of servers is being kept in a small room located at head office• The internet connection at head office is likely insufficient for running a network of this nature.In short, the current network is inefficient, dated and has few, if any, safeguards against failure. 3
etharius2.2 Advantages of a centralised server using Private Cloud architectureBy moving the main company database to an online cloud-based server, all members of the network wouldhave equal access to one central location. This would allow numerous advantages for your software team:• Fast, direct access to the company server and SQL database at all times• Multiple servers (virtual machines) can be set up to provide privacy for companies/groups if needed• Centralised backup (with the ability to create company specific backups for each site as required)• Professional maintenance on a single location by trained data centre staff• Cloud technology ensures that uptime is kept to a maximum as redundancy protects against component or even entire server failure• Easy access to any virtual machine on the network for the software team – no need to travel to site for maintenance or upgradesDiagram 1.0 Private Cloud LayoutDiagram 1.0 is a simple example of how the network would be laid out. Client machines at all companieswould connect to the internet through a secure layer before accessing the cloud.Access passes through a load balancing routine before gaining access to the virtual machines on the cloud.This grants secure, remote access to a powerful centralised system. 4
etharius2.3 Network SecurityCurrently, the on-site nature of multiple servers presents many security flaws, both through physical accessand through internet security attack vectors.Even with the usage of firewalls and operating system updates, the disparate nature of the connections anddiffering security at each site where data is accessed and stored means that one compromised computercould lead all system data being available to anyone who wished to gain access.With the cloud solution as detailed in Section 2.2, the data security of servers is mitigated completely. Italso allows for more advanced network architecture, with a powerful dedicated firewall system running onits own VM (Virtual Machine), filtering all traffic to and from the hosted servers. This lessens the need forany router firewalls or operating system firewalls to be kept updated to keep security high on the principlesystem.We would also highly encourage the implementation of a SSL or IPSec VPN (Virtual Private Network) systemwithin this network. This would effectively make the system invisible to the internet and completely isolatecompany data from any unauthorised access.All other security benefits of moving to a dedicated datacentre such as greater protection from unauthor-ised physical server access, increased resistance to DDOS attacks and reduced points of failure are simpleimprovements which come as part of this kind of infrastructure upgrade. 5
etharius3.0 ProposalWe believe the current network architecture has significant built-in issues. So far as we can tell from our in-itial meeting, VLA are developing around an inconsistent framework that is bloated, out of date and ripe forfailure.A company with as widespread and diverse assets such as VBH should be looking to centralise its data-flow asa matter of urgency. Not only would such a revision drastically increase security for the corporation, it wouldcreate a bedrock for VLA to develop a superior software solution to meet the corporations evolving needs.Our recommendations are to investigate the requirements of the network architecture outlined in brief insection 2.2. Etharius Ltd would be able to provide a quote for such a system located in Vietnam, and wouldpropose:A full company requirement audit, which would assess the requirements of not only the main corporationbut also the subsidiary companies associated with the network.A full assessment of changes required to the software currently being developed by VLA to take advantage ofthis improved architecture, along with any timeline changes to the release of the new softwareAfter the assessments have been conducted, Etharius Ltd could design a cloud-based central hosting solutionwith virtual machine capability to suit VBH’s requirements.Once agreed, Etharius Ltd would create the network environment as required and oversee the changes im-plemented across the VBH and its subsidiary companies.Once roll-out is complete, we would discuss any requirement VBH may have for maintaining the new net-work in a cost-efficient manner via our Vietnamese office. 6
etharius4.0 Document ParticularsThis document has been prepared and approved by Ross Paul Liversidge and James Taylor, CEO of EthariusLtd and Director or Technology respectively.Signed:__________________________________ __________________________________Ross Paul Liversidge James Taylor 7
etharius worldwide e-solutionsAddress Contactetharius Ltd Tel: 0845 6808 13214 Wiliamson HouseLow Skellgare Close email: office@etharius.comRipon, North YorkshireUnited Kingdom Web: www.etharius.comHG4 1WF
Search
Read the Text Version
- 1 - 8
Pages: