business meets it| 30/09/2014| joinexperiencedownload.minoc.com/2014/14/case1cloudjoin.pdf ·...

BUSINESS MEETS IT| 30/09/2014| joinexperience.com


BUSINESS MEETS IT

Michael Mossal, CIO at JOIN Experience


The New Role of the CIO

“In sum, the successful CIO needs an intimate idea of how current technology can increase the company’s sales and not just reduce costs or improve clerical productivity.”

Bloomberg Businessweek


AGENDA: THE REVOLUTION HAS STARTED

• About JOIN

• The TelCo & IT world is changing

• Which business services do we offer?

• How do we offer them and what did this mean for our own IT

strategy?

• Software defined DC and Networking

• M2M: this is where everything comes together

• Future


ABOUT JOIN: THE REVOLUTION HAS STARTED

• First European 3.0 operator to position TelCo and IT services

• 50/50 joint venture between JOIN Wireless s.a. and POST

Luxembourg Group

• Not just the "fourth" mobile operator in Luxembourg

• Europe as a home country – European tariff plan

• Best 4G network

• Own 4G license

• Best customer experience

• B2C, SMB, Enterprise

• Unique products due to technology advantage

• JOiNCloud


ABOUT JOIN: THE REVOLUTION HAS STARTED


TELCO LANDSCAPE : THE WORLD IS CHANGING

• Traditional Operators are under pressure

• Legacy systems

• Skype, Facetime, …

• Roaming regulation of the EU

• Number of operators will shrink – Number of MVNOs will grow

• IP and especially M2M and MDM to mix-up TelCo and IT

• JOIN is the first of a new generation

• Multitenant MVNE platform to host other MVNOs

• TelCo/IT Cloud, Multi-operator, multi-country real time billing system


TELCO LANDSCAPE : THE WORLD IS CHANGING


IT LANDSCAPE : THE WORLD IS CHANGING

• Cloud business is challenging on-

premise IT

• SMBs adapt first

• IT integrators and distribution is

under pressure

• 3rd Generation TelCo’s are perfectly

positioned

• Customers need products and

services including data coverage

• Example: Blackberry to MDM

projects


ABOUT JOIN: VERTICAL MARKET SEGMENTS

B2C

• Mobile

• Banana SIM

• Fix broadband

• TV

• C4C

• …

SMB

• JOINOfficeMS

• JOINOficeOX

• Office365

• vPBX / Mobile Centrix

• …

Enterprise

• MDM

• M2M

• Hosting

• …

JOIN is a Broker and not a Hoster of Commodity Services


JOINPORTAL: UNIQUE CUSTOMER EXPERIENCE

• Transparency is key

• Real-time information

everywhere

• You adjust your contract at any

moment in time

• Upselling via JOINPortal

• Fleet Management


JOIN CLOUD: JOINOFFICE-MS 1.0

• Data traffic

• Generic top-level domain (gTLD) Domain

Name

• Microsoft Exchange 2013 - Enterprise

class email services. Share address books,

calendars, tasks, and notes

• Sharepoint 2013 - store, share and sync

any kind of content

• BackupAgent – Backup your device

• Microsoft Web Hosting - You need a

website? Designer & Hosting

• CakeMail - generate powerful email

marketing campaigns


JOIN CLOUD: JOINOFFICE-OX 1.0

• Data traffic

• Generic top-level domain (gTLD) Domain

Name

• Open-Xchange - Portal, Mail, Calendar,

Contacts and Tasks

• Open-Xchange PRO version Full OX App

suite and sync

• BackupAgent – Backup your device

• LinuxWebHosting - You need a website?

Designer & Hosting

• CakeMail - generate powerful email

marketing campaigns


JOIN CLOUD: CLOUD FOR THE CROWD

• Data traffic

• Domain Name: <name>@joincloud.me

• Open-Xchange - Portal, Mail, Calendar,

Contacts and Tasks

• Open-Xchange PRO version Full OX App

suite and sync

• Mega – 50GB 100% encrypted cloud

storage


JOIN CLOUD 3.0: OFFICE 365 SYNDICATION

• Roadmap 15th of November

• The real thing in all available flavors

• Contract valid for all over Europe

• Microsoft SLAs

• Client licenses (*)

• JOIN experience: SSO, actual usage, cost transparency,

…

(*) depending on the plan


JOIN IT LANDSCAPE : HLD

provisioning

Backup


JOIN DATACENTER: LAYERMODEL

• OPEX model

• SAAS model preferred choice

• PAAS 2nd choice

• JOIN datacenter reserved for value

added servcies


JOIN ECOSYSTEM: OUTSOURCING & PARTNER MODEL

• ZTE (1st and 2nd level)

• Call center in Belgium (in2com)

• NOC in Hungary

• R&D in China

• POST, BASE

• EBRC

• Nubera for SDDC consulting

• DiData as partner for the DC

• eKenz for SAP

• Frog design - JOINPortal

• Hardware: ZTE, EMC, Cisco, Juniper,

VMware, Microsoft, Citrix, Oracle, …


OFFICE AUTOMATION: DESKTOP STRATEGY

• 200 Users users managed in the AD

• Windows 8.1 (no Windows 7)

• Mac

• IOS, Android, Windows mobile devices

• Desktop management entirely in the

cloud (intune)

• Everything untrusted model

• Secure the container and not the device

• Entire desktop infrastructure in Azure

• Office 365, intune, Dynamics CRM


JOIN DATACENTER: LAYERMODEL

• CORE – VAS – BSS

• True Software defined DC

• Application layer

• VM layer

• Hypervisor layer

• Server layer

• Storage layer

• Network layer

• DC layer

• Operations, Chargeback, Automation


JOIN DATACENTER: HARDWARE BUILDING BLOCKS

DC highly standardized

• ZTE Core & Aggregation

Switches

• Juniper Friewalls

• EMC (T1), T2 & T3 Disks

• VPLEX Storage Heads

• Oracle T5 Server

• Cisco Intel Blades

• Cache disks


JOIN DATACENTER: SOFTWARE DEFINED DC

• Hypervisor: vSphere 5.5

• NSX: virtualized network stack

• vCOPS (+ Hyperic): Configuration Management,

Monitoring, Operations

• vCAC: Datacenter Automation, Change & Release

Management

• Chargeback Manager: Cost Analysis & Reporting


JOIN DATACENTER: HYBRID CLOUD

• An important part of the JOIN IT

runs today already in Azure and

EC2

• Example: Tariff plan simulator based

on Hadoop and Big Data

• Entire Citrix infrastructure

• Federated Active Directory between

JOIN Datacenter, Azure and Office

365

• Virtual and physical datacenter

connected via VPNs

• Active Directory replication based on

DirSync


BASICS OF JOIN NETWORKING: DIFFERENT NETWORKING SERVICES

1. GI access for Mobile Customers (static)

2. Basic Telco operation related services (Fixed line, Ericson WIFI, …) (static)

3. Basic IT operation related services (DNS, mail rely, SAP …) (static)

4. Advanced Services (SDN)

1. Internal development instances (1)

2. Shared environments: Web site, External partners, … (2)

3. Customer hosted services / Cloud (3)


NETWORKING IN THE PAST: COMPLEX AND DIFFICULT TO PROVISION

• Protect current services from each other is complicated and requires always

advanced firewall configuration

• Dedicated static security zones: public, access, OAM, core

1. VLANs 1. needs to be manually provisioned on the switch level

2. needs to be manually provisioned on VSphere

2. Subnets 1. needs to be created on VRF level

2. needs to be created on Firewall level

3. Security policies 1. have to be maintained based on the aggregation switches

2. have to be maintained based on the core switches

3. have to be maintained based on the UCS switches

Internet

Firewallmany networks

• Service VRFs• Website• Wifi• …

Internet

Old fashioned

unsecure

Firewall

Firewall

DMZ

Internal


INTRODUCING SDN: CUSTOMER USE CASES

Now life becomes interesting:

– Edge includes Firewall, Load balancer and VPN

– It will be enhanced in the future by Juniper Firewall (Firefly Host)

– Firefly Host: Hypervisor-based stateful firewall integrates intrusion detection

(IDS),virtualization-specific antivirus (AV) protection, and compliance tools, with

management scale

– All happens in the VMware kernel: Ability to detect Viruses -> NSX isolates the VM

BRD VMEdgeInternet

Supports up to 1 GB traffic

BRD VMEdgeInternetInternetOld

fashioned

Firewall

Firewall

New world

Bridge domain on NSX


INTRODUCING SDN: WEBSITE INFRASTRUCTURE

Internet

Firewall

G4C

BSS BSSDNS DNS SMTPWeb Web LBS LBS

1

1

2

3

4

5

Caching of content 5 min in memory

CMS


INTRODUCING SDN: WEBSITE WITH NSX

Internet

Firewall

Other Usecases

• Infoblox completely isolated

• ZTE Apaches

• MissionID

• NPC/CDR exchange

• Exposed part of docushare

G4C

BSS BSSSMTPNSX NSX NSX NSX

Web Web LBS LBS

CMS

NSX NSX

DNS DNS


JOIN DATACENTER: AUTOMATION CENTER

• Unified IT Service Catalog

• Automated Service Delivery

• Accelerated Application Deployment

• Policy-based Governance

• Deliver Anything as a Service

• Support process integration

• Support cost optimization


CMSCMS

INTRODUCING SDN: WEBSITE FULL PICTURE

Internet

Firewall

G4CCMS

BSS BSSLBS LBS WS1 WS2

DEVStagingProd

SCM TestingDEV

1DEV

2

WSn WS1 WS2 Testbed

VCAC

…

DEVn…

Source CodeManagement

VCAC

• Development

• Staging

• Production


M2M: ONE OF THE KEY MARKETS

• APN

• M2M portal

• SIM card management

• BI

• …


A UNIQUE NSX BUSINESS CASE: M2M

Internet

Firewall PGW

FACTORY

DB APP MGT …

VCAC

VPN

JOIN M2M

• Security context

• VPN to factory

• APP server environment in JOIN DC

• Everything fully automated

• ZTE R&D: Security on SIM card level

• M2M Portal integration

• Billing integration

• One security context per wind park

• Force security policies on the edge

…

VTEP

PGW

Edge

M2MVLAN


PRODUCTS: CURRENT PORTFOLIO

Description Public IPS

Defined Bandwidth

spoke2spoke spoke2hub Multicast Central Breakout

Public fixed IPv4

NAT IPv4 + public IPv6

Firewalled fixed public IPv4

Firewalled NAT IPv4 + public IPv6

VPN incl. private IPv4

VPN incl. private IPv4 + public IPv6 (incl. Firewalling)

VPN (...) + IAAS services

VPN (...) + VPN connection to Azure or EC2

VPN (...) + dedicated Lines (to IAAS services or on premise)

M2M at JOIN is much more than an APN and a M2M portal to manage you SIMcards


FUTURE: ONGOING IT RELATED PROJECTS

• Rollout Belgium

• Rollout Broadband

• LTE@Home

• TV

• WIFI – VoLTE

• Microsoft Store / Office 365

• Cloud MVNE

• M2M SaaS layer

• Rollout of additional countries (Germany, France, …)


THANK YOU

www.joinexperience.com

[email protected]

+352 671 88 06 00


Join Experience S.A.

11, rue de Bitbourg

L-1273 Luxembourg

Luxembourg

joinexperience.com

business meets it| 30/09/2014| joinexperiencedownload.minoc.com/2014/14/case1cloudjoin.pdf ·...

Documents