Online Social Worksheet (MODULE 2: Social Collaboration)

Use this worksheet to help you design a solution for Online Social Inc. Highlight your solution in the OPTIONS column.
Explain why you chose the option in the last column.

COMPONENT OPTIONS REQUIREMENTS JUSTIFICATION

Enter requirements for component, or type N/A if not part of your design.

Perimeter firewall

Enter requirements for component, or type N/A if not part of your design.

Site-to-site VPN

Enter requirements for component, or type N/A if not part of your design.

Reverse proxy

Enter requirements for component, or type N/A if not part of your design.

Load balancer and ADC

Enter requirements for component, or type N/A if not part of your design.

Web servers
Presentation

Enter requirements for component, or type N/A if not part of your design.

Load balancer

Other component:

Other component:

Other component:

Other component:

Other component:

Enter requirements for component, or type N/A if not part of your design.

Internal firewall

Enter requirements for component, or type N/A if not part of your design.

Application servers

Enter requirements for component, or type N/A if not part of your design.

Mail service

Other component:
Business

Other component:
Business
Other component:

Other component:

Other component:

Enter requirements for component, or type N/A if not part of your design.

Directory server

Enter requirements for component, or type N/A if not part of your design.

Database server

Enter requirements for component, or type N/A if not part of your design.

File server

Other component:
Data

Other component:

Other component:

Other component:

Other component:
Online Social Worksheet (MODULE 2: Social Colla
This worksheet has been partially completed for you. Complete the remainde
Explain why you chose the option in the last column.

COMPONENT

Perimeter firewall

Site-to-site VPN
Presentation

Reverse proxy

Load balancer and ADC

Web servers

Load balancer
 Load balancer

Internal firewall
Business

Application servers

Mail service

Directory server

Database server

File server
 File server

Other component:
Data

Other component:

Other component:

Other component:

Other component:
Worksheet (MODULE 2: Social Collaboration)
partially completed for you. Complete the remainder. Highlight your solution in the
he option in the last column.

OPTIONS
Firewall as a Service (FWaaS) offering
FSA
vRouter

VyOS
vRouter
FSA
Out-of-band VPN

Citrix NetScaler VPX

Citrix NetScaler VPX

Bluemix Local Load Balancer

Virtual servers - Public

Physical server - Dedicated
Virtual servers - Private
Bare metal - Dedicated

Citrix NetScaler VPX

Bluemix Local Load Balancer
NGINX
FSA

Firewall as a Service (FWaaS) offering

vRouter High Availability Pair

Virtual servers - Public

Physical server: Dedicated (Intel)
Virtual servers - Private
Bare metal - Dedicated

Mail Gateway: Email Service (SendGrid), Build your own ü

Virtual Servers: Public

Dedicated: Physical server
Virtual Servers: Private
Dedicated: Bare metal

Virtual Servers: Public

Dedicated: Physical server
Virtual Servers: Private
Dedicated: Bare metal
NAS
Endurance Storage - Block
Endurance Storage - File
Performance Storage - Block
Performanc Storage - File
NAS
Cluster
Endurance Storage - Block
Endurance Storage - File
Performance Storage - Block
Performance Storage - File
NFS Storage (for Windows hosts)
OSNEXUS QuantaStor
Windows Server 2012 File Server Cluster
al Collaboration)
remainder. Highlight your solution in the OPTIONS column.

REQUIREMENTS
“Demilitarized zone” (DMZ) and SSL to protect public Internet access
Distributed denial-of-service (DDoS) and anti-virus protection
Created a trusted social approach that enables open and authentic engagement while protecting the enterprise

Provide a secure connection to the workload for administrative tasks

Access to servers via corporate VPN or private SSL VPN

SSL offload for presentation layer (web server)

SSL based single sign-on (access gateway)
Enhanced threat mitigation
Outbound mail (gateway for SendGrid SMTP traffic)

Load balance on public traffic across a fixed number of web servers

Balance at HTTP (layer 7)
Acceleration (caching)
Session persistency
No single point of failure (preference for Stateful HA to recover seamlessly)

2 CPU
4 GB Ram
50 G Local disk
1,000 Mbps network connections

Load balance on public traffic across a fixed number of web servers

Balance at HTTP (Layer 7)
Acceleration (caching)
Session persistency
No single point of failure (preference for stateful HA to recover seamlessly)

Define security perimeter between DMZ (presentation) and the and trusted systems (business and data layers) and internal Soft
transit)

Route traffic from web servers/load balancers/VPN endpoints to application and directory servers
Restricted port access between systems in DMZ and trusted systems (on a per customer basis), allowing for secure application

Allows role-based administrative access through IP address identification and zone-based authentication

Ability to run IBM Connections

WebSphere Application server

IBM Connection supports a range of mail integration options from simple notifications to full email driven collaboration.

On the Online Social, Inc. service, the requirement is for outbound notification only

Cost-effective infrastructure compute option (lightweight, flexible configuration)

Highly available LDAP (through application and system resiliency)
Operating System should allow virtualization of directory services (Time sync, backup and DR considerations)

Support high performance Database

Highly available
10 Gbps networking
Vertical Performance scaling
Redundant power and networking connections

Provide CIFS-based shared content directory to store application contents

No single point of failure requirement
Peak 2 Gb network bandwidth
Capacity and IOPS sizing for shared directory:
JUSTIFICATION