Physical Hosting (space) and logical (IP) basic
It includes space in the rack, redundant feeding, two IP addresses and conection of the equipment to all Center's VLAN (with the consequent doors' occupation in the electric switches). It also includes access to the 24/7 HelpDesk, and to the operation's room at the Center, in any given moment.
Additional IP addresses
InteHost can yield the right of use right for additional IP addresses, if the client requires it.
DNS
InterHost offers DNS primary, secundary and resolution services, with both local and remote redundant. To establish this service will be employed a managed dedicated server, property of InterHost
Domain Registration
InterHost can negotiate the registration of a generic domain o .es (high and maintenance), as well as its transfer.
Special routing configurations
For hosting clients who wish to host its router or inrouter InterHost can carry out specific configurations for the BGP. For this type of services we also count on the Networks Engineering Department at SATEC.
Bandwidth
The service is provided according to one of the following modalities: guaranteed bandwidth with at least two providers (multi-transit IP), aforesaid in Mb/s; maximum traffic, expressed in GB/month (on top of the hired traffic there is an additional charge); and contracting in the modality of payment by consumption.
Administration and operation
It includes the administration of the server or servers, and its operation, including management of changes and logs' storage. Naturally, here are included the common administration tasks such as the internal network (routers, electric switches, etc.), and Center's servers. Everu so often, it is possible to attend the administration of a specific application
Monitoring
InterHost centers count on monitoring mechanisms that systematic and periodically verify the correct operation of the Web server and of other services associated to different ports (DNS, HTTPS, SSH, FTP, Telnet, SMTP, POP). In case of no response, a mechanism of repercussion and notification is enabled. It is about a management procedure and services availability control. Aside from the standard monitoring, and always according to client's procedures, other processes can be implemented for specific monitoring of other services and/or applications.
Remote administration and management of consoles
InterHost will make available to the user (of
virtual Web hosting) a Web tool (developed internally) for the
remote administration of its place. On the other hand, and for
clients with dedicated machines, the centers posses a system
of commutation KVM that allowes any administrator to access
(from the center's operation's room and at any moment) to their
equipment consoles, for its maintenance tasks and/or diagnostic
and problem resolution. This access to the consoles can be carry
out remotely, in cases of an emergency, without damaging any
software solution that the client desires to employ.
Security and availability
All aspects of security involving physical, firefighting,
electric, and of control of presences, are part of the basic
service offered by InterHost. The logical security aspects include
multi-providers IP access with enruoters bouncers, two electric
switches high end for implementation of all center's networks,
and duplication of antifire equipments. Therefore the client
that lodges dedicated equipments, always has the possibility
to counting on a double connection to network, what impacts
in a greater availability. Note that the network services and
clients' equipments are protected by firewalls as well as by
automatic systems of intrusions detectors. In the placement
clients case, when desire to logde its own firewalls equipment,
InterHost offers its installation, operation and maintenance
(including configurations' backup). The offering of security
is complemented with aspects as audit, development and assistance,
and is based on the services offered by the Networks Engineering Department of SATEC.
Shared disk
InterHost supplies services of data and dynamic contents' storage, employing NAS technology (Network Atacched Storage), in RAID configuration RAID and high availability clusters. In conjunction with the bdata base service, gives an integral solution for information management. With these services, the managed dedicated hosting customer can avoid having to use an array of own disks. The service prices scalating (with steps of n MB of space in the filer). The use of shared disk brings along a copy (mirror), non-synchronic and remote in another Interhost center, what constitutes the basic infrastructure for business continuity solutions.
Data Base
For those clients that build its Web sites from consulting a SGBDR via SQL, InterHost offers a Data Base service (based on ORACLE). Note that this service, habitually, is valid for any agent of BD SQL (especially Microsoft SQL Server). The service includes the resolution of Oracle's storage problems, Data Base monitoring and its logs, data base backups' configuration, performance tunning, management of proactive capacity, and security.
Backup
It includes copy of the customer's information in automatized tapes bookstores (using technology DLT8000) with politics and backup's windows defined by InterHost. In most cases, there are backup agents for operating system UNIX (Solaris, HP UX, AIX, Linux), Windows (NT, W2000), as well as special clients for NAS devices (NDMP). In special cases (placement) InterHost will propose to the client the most adequate solution, depending on the Operating System and lodged applications.
Reports
Personalized and periodic reports will be emitted regarding the Web's activity, as well as on the happened incidencies. The customer always can have access to the log files to elaborate his own statistics.
Streaming
Throughout this service, it is intended that
a client can serve streaming wise (in a direct way or "canned")
multimedia contents (video-audio). It implies the use of: shared
disk or own one for storage of contents, of a specific streaming
server (provided by InterHost), and of a proxy server (also
provided by InterHost). This service is intensive in wide for
which InterHost recommends a detailed observation in each case.
Balancing load
When a client desires to distribute the load of his site among various Web servers, InterHost will supply the necessary technology to achive it (Alteon switchers of level 4-7). This commutation technology allows likewise to enlarge the availability in case of multiple servers.
Updating
This service permits the clients the direct connection with the Centers, so that the updatings of his servers as well as the connections to internal servers, will be done in an adequate and constant speed, regardless the connection quality among the client and the center through Internet. The access can be by dial up (RTB or RDSI), or by a dedicated line (ready point or frame Relay), or by virtual private network (VPN), with tunnel termination in InterHost euqipment.
Search engine
Both for shared and dedicated machine users, this service allowes to index all pages of a Web site to be available in just one search button. For the same, there is a server (property of InterHost) with a commercial application for indexation and search.
Backup in the web
At InterHost's Web site there is a restricted
access zone dedicated solely for customers. In it, they'll find
contents and specific information related to the service (news,
manuals, recommended configurations, notices, etc.)
Time server
By protocol NTP and GPS syncronization, the precise time is provided to all servers, to guarantee its sincronization.
Recovery before disasters
This service takes advantage of InterHost's own network (that interconnects the centers in Madrid, Barcelona and Lisbon). It permits to arrange of a non-syncronic remote copy of contents of the Web site as well as of lodged data. Disaster recovery, contingency and commonly called business continuity aplications, can also be mounted on this service.
Geographical distribution
It is a matter of the possibility to distribute (and to balance) the accesses to a Web server among several geographical locations. For this, technology GSLB (Global Server Load Balancing) is used.
Encriptation
In all cases (virtual and dedicated hosting), exists the possibility to carry out transactions against secure http servers (SSL). This type of transactions can notably charge the processor or processors of a server, for which InterHost offers the alternative use of hardware cards that are specifically designed for encriptation.
Performance metrics
This service supplies information about the performance of a Web site (how much costs the user to connect to the Web, how to compare this amount with the competence, how the changes of contents and/or configurations affect the performance) and to diagnose problems proactivly. It is a matter of a service of very high added value for which is requires the contest of a Company with agents distributed all over the Internet. (This service is found in its implementation phase).
Integration with networks of contents
This service has not been implemented yet. It implies to use a massive network of servers, located in the Internet's main backbones to the goal of obtaining that the Web's lodged contents will be distributed from many points, but always from the user's proximity (from the edge of the network).
HelpDesk
HelpDesk
InterHost helpdesk operates 24 hours a day, 7 days a week, and permits not only the resolution of incidences, but also the execution of unchained regulated operations by the monitoring system (for placement clients). The help desk counts on problem scaled mechanisms to contact with Interhost technical service.
Managed and dedicated firewall service
In the frontal part of the hosting network there are two firewalls at high availability. In the conditions demanded by the CLIENT will be stipulated the configuration rules of firewalling. As usual, the types of rules that can be applied are a combination of protocol (TCP UDP), port (number) and IP addresses with permission for said ports.
To carry out modifications in the configuración of the firewalling rules, the 24/7 helpdesk (SOC) service must be used, which at the same time will scale the petition to the Technical Department.
Clients of placement habitually have their own systems' infrastructure as well as firewall/s' ones. In this case the service offered by InterHost understands the equipment lodging, its configuración and administration. As complement to the previous service, InterHost offers a Firewall service of level 7 or firewall application.
The Web server MS IIS and MS SQL server are two of the most usual aim of attacks (virus, worms). Besides, IIS server constitutes the entrance to other services and internal applications. A firewall application permits to inspect all entrance petitions (either encripted or not) directed to this port (note that normally this port is open in the firewall perimetral). This inspection is in real time and prevents when faced to suspicious traffic.
Antivirus Protection service
For mail service (lent by default in all hosting modalities) exists an antivirus service (email virus scanner) that permits:
· To Eliminate HTML code's potentially dangerous, as javascript in the incoming mail.
· To Protect before attacks that take advantage of vulnerabilities and mail program bugs.
· To Block or to rule out attached files basing on its extension (e.g. can be ruleed out visual basic scripts, what allowes not to be worried of complete classes of attacks without having to resort to costly and complex "comparisons" with data bases brought up to date).
The service is implemented on specific hardware and software platform (different to the Web hosting service platform). By redirecting mechanisms, transparents to the user, the antivirus service performs contents' analysis redirecting the traffic to the adequate servers, depending on predifined politics.
The service administration and monitoring will be performed by Interhost's technicians.
Secure server service
Service of processing and emission of certificates before certification authorities, subject to customer's request.
The service includes the certificate's installation in the server, and operation and administration tasks in regards to the configuration of the server in secure mode. Interhost's technicians will specify the best way for resources' use (especially CPU) to avoid the service's global degradation, and when applicable, will provide criptographic acceleration's dedicated hardware (appliance). This restriction is especially applicable for shared environments.
The Client will be able to contribute with his own certificate.
Remote Interconnection Authorization service
Service of interconnection between Interhost's CPD and other Centers. It will be provided from the necessary ports in a CPD access router so that "out of band" administration tasks, monitoring and publication can take place.
The CSI technicians will configure and manage the interconnection as well as the router; executing, under demand, tasks associated to the provision, authorization and autentication mechanisms.
The technology of the circuits bearers (RTC, RDSI or other) and its capacity will determine the nature of the ports to provide in the access router.
Although the service only includes the interconection authorization (and therefore CPD's own infrastructure provision), the complete service of interconnection can be lent (including lines) in collaboration with the traffic suppliers, that are global users of communications.
