Government Network (GovNet)Crowne Plaza, Ortigas, Pasig City

7 December 2015

• Mission and Objectives • Major Activities • Advantage of aggregation • Design of the network • Hardware used • Applications over the network

Outline

• The State recognizes the vital role of communication and information in nation-building. (Sec. 24, Art. II, 1987 Constitution)

• Provision of efficient and effective ICT infrastructure, information systems and resources (Sec. 2b, EO 47, s2011)

• The need to establish a fast and efficient network to interconnect government offices

• “Aggregate” common government ICT resources and share common services

General Objective

• To help people in government • communicate faster • coordinate activities better • facilitate collaborative work • increase productivity

• Resulting in • faster and efficient delivery of services and goods to

citizens

General Objective

Specific Objective

To establish a redundant fiber backbone to directly connect major agencies to a single government network

To connect this agencies to a common data center where government agencies can share resources for common services

Specific Objective

Sectoral government registries will be setup and will be housed in this common data center.

The common data center will act as the medium of communications, traffic controller, server and application host, and keeper and manager of common government data.

Major Activities

• Signing of: – MOA: a five-page document that binds DOST-ICT

Office and the client/Point-of-Presence (PoP) agency – Conforme: a one-page document to facilitate Fiber-to-

the-Building installation • Fiber-to-the-Building (FTTB) installation

– Upon signing of the above mentioned documents, the agency is subject for scheduling of the physical installation done by the contractor (WifiCity Inc.)

Major Activities

• Optical Distribution Frame (ODF) installation – After FTTB installation, the contractor will proceed to

the ODF installation inside the data center (if existing) or room where the network will be terminated

• Testing and Acceptance – An FOC activity that aims to test the integrity and

continuity of the fiber installed; done by the contractor, witnessed by the iGovPhil FOC team and approved by the FOC core team.

Major Activities

• Network equipment deployment – Once the agency is tested and accepted, the network

team will deploy the following equipment: •Media converter for the client agencies •VLAN switch for POP agencies

• Started negotiations with agencies that are stewards of right-of-way resources of government

Advantages of aggregation• Unbundles the total cost of your whole internet port into its

segments so that you can negotiate separate pricing for the individual parts • Internet port • Backhaul or middle-mile • Last-mile

• You can differentiate transit (paid) internet traffic and peering (free) internet traffic

Advantages of aggregation• You can share excess common resources like:

• internet bandwidth • last mile connections • proc/mem/disk (cloud) • rack space • electricity • collocation • etc

• Strength in numbers!

Design of the network

Design of the network• Uplink

• 1Gbps ISP1 uplink • 1Gbps ISP2 uplink • 155Mbps ISP3 uplink (for servers) • 10Gbps ISP4 uplink for awarding • 10Gbps ISP5 uplink for procurement • 10Gbps uplink to a local internet exchange • 2 Gbps uplink to research networks

Design of the network• Downlink

• 10Gbps downlink to PoPs in MM • 1Gb downlink from PoPs to agencies in MM • 1Gbps downlink1 to Cebu • 200Mbps downlink2 to Cebu

Design of the network• Everybody wants their own dedicated bandwidth :-) • We already have “a lot” (relative) of bandwidth going to the

internet, and going to agencies • There will be NO pre-set dedicated bandwidth as the

essence of the whole iGov project is to share common resources

• Dedicated bandwidth will be set on a specific link, upon request, with justification

• This dedicated bandwidth will have a start date and an end date

Design of the network• Bandwidth utilization will be checked periodically,

especially for agencies that consume a lot • If an agency is utilizing a considerable amount of

bandwidth and its use is legitimate, then further consumption of bandwidth will be allowed

• If an agency is abusing the bandwidth (i.e. downloading of movies, piracy, etc), they will be sent a notice, for them to act on it

Hardware used• Core routers : Cisco 7604

• BGP speaking routers • OSPF and ISIS for internal domain routing

• Core switches : Extreme x440 with • 10Gb SFP optics • 1Gb SFP optics • MPLS encapsulation

• Edge switches : Allied Telesis GS2002 SP-60 • 1Gb fiber port • 1Gb copper port

Applications over the network• Internet port • BGP peering • Video streaming • Voice over IP • Webhosting • Email • Mirroring of content • Assistance on:

• LAN best practices and standardization (i.e. IPv6, fw, etc) • Wifi federation (govRoam)

BGP Peering

Applications over the network• In terms of assistance on your local area network, we can help

on the installation and configuration of the following: • Linux firewalls • Squid proxies • VLAN configuration • Streaming clients • OpenVPN tunnels • Network monitoring • Network usage reports

Applications over the network• govRoam

• Federation of wifi services of government offices • You can “roam” from your office wifi, to the wifi access

points of other government agencies • You can possibly even roam on the infrastructure of the

free-wifi-project of ICTO • We will be holding a wifi-federation workshop inside the

www.apan.net meeting in Manila on 2016

THANK YOU!

helpdesk@i,gov.ph http://i.gov.ph

bani@asti.dost.gov.ph