Hosting

Capacity

Typical traffic capacity of an installation of Tibet Server is about 100 000 page requests per hour, or about 50 000 to 100 000 unique visitors per day and the server, depending on configuration and visitor patterns. Tibet Server can be deployed in a load balanced server environment for applications with high demands on availability and service capacity and has an advanced caching system to shorten the response time. Content can be adapted to different visitors, without any impact on the response time due to many database queries. Even for complex pages is the response time nearly constant.

Backup

Backup is done every night and stored on each server. These local backups are stored one month. A backup system archives backup files to an external backup server every night where they are stored a minimum of 6 months. Validation of backup integrity is performed every 3 months to ensure that backups can be restored from the latest backup. Routines for documenting backup activities are enforced through regular quality auditing.

Redundancy

The operational hosting environment has dual fiber from the server room to two different exchange-points of different operators, ie four lines total.

Software Protection

The servers hosting the site are protected by firewalls and has only three TCP ports open (HTTP, HTTPS and SSH). This is to minimize the risk of intrusion. Tibet Server is a safe Java servlet with Apache Velocity as template engine and Apache Tomcat as servlet container. Tibet Server is deployed with Apache2 as load-balancing web server. All components have been developed over several years of active developer communities and new versions will be regularly made available. MySQL is the default database used, and is the most established open-source database server.
All modules and services in Tibet Server have been reviewed and tested thoroughly to achieve a high level of security. Updates are constantly deployed as new solutions are developed.

Technical Protection

The server is hosted by Bahnhof AB in Stockholm. Bahnhof AB is responsible for the physical systems. Operations monitoring and incident handling are provided by Qbranch AB in Stockholm.

Safety and fire protection

The entrance to the physical hosting environment is lined with an airlock. An advanced alarm system warns and protects against intrusion and fire, vital parts of the data center are also constantly monitored by CCTV. All entry and exit logs are kept with verification of identity and time of access. In case of danger, fire brigade and security companies are automatically alerted.

Power redundancy

The diesel-powered backup power plant supplies more than enough to supply servers with all the required functionality. At the peak load the power station supplies more than half a megawatt of power. By comparison, this is more than sufficient for supplying 175 households (500 people) with electricity.
With full fuel tanks, the plant operates over 48 hours. Refueling is done via an electric pump system which allows continuous operation.

System auditing

All systems are audited with full-scale testing under controlled conditions on a monthly basis. Bahnhof ensures that UPS power backup, cooling equipment, alarm systems and peripheral systems are kept up to date and fully functional.

Confidentiality

Tibet Server AB guarantees a high level of confidentiality and has passed security audits by a number of customers. There are particular demands on emergency management, information management and security on the premises. All employees and on-site consultants have signed confidentiality agreements specific to be involved in safety-critical projects and to manage information and data of a sensitive nature. Allocation of access to safety-critical services and databases, as well as scheduled procedures for changing passwords are all documented.

Hosting options provided:

• Standard co-location hosting
• Dedicated server hosting
• High-availability hosting (load balanced, redundant)

SLA options provided:

• Application hosting
• Application maintenance and upgrades
• Server and hosting capacity
• Availability
• Redundancy
• Monitoring
• Statistics
• Backups
• On-call operations 24/7/365