⬆️ ⬇️

How much does a cloud office cost



A series of articles on the transfer of infrastructure to the cloud once again confirms the general trend that has emerged over the past few years. Unfortunately, if you solve the problem in the forehead, the cost of hosting is very high, here is one example . Recently, a client came to us who, in our opinion, is most suitable for the role of an average company interested in this service. We decided to show the description of this project with all prices to the respected Habrasoobshchestvo. Some privacy data has been changed, but this does not affect the final picture.





Initial data:



The company has 35 people, one main office and two additional, several people working from home.



What do you need:

')



Security requirements are fairly standard: location in Western Europe, encryption of all traffic, data encryption. As if the client had read the article , stopped fearing for his data abroad.



As a solution, it is proposed to use a 1c bundle on Terminal Server + RDG, MS Exchange, MS SfB + FreePBX and MS SharePoint with Office Online Server.



MS SharePoint controversial decision
Share Point is a controversial decision; many companies, even when building the rest of the infrastructure on Microsoft products, prefer to use other solutions (File Cloud, OwnCloud).



But given the geographical diversity of the company's offices, the urgent need to improve communication between employees, and when integrated with Skype for Business and Exchange, SharePoint is in our opinion the most logical choice. This solution covers all modern “must have” document storage requirements - versioning, accessibility from everywhere, connection security, the ability to work with documents offline, the ability to search, sort, and structure document storage, flexible access settings, and pleasant additions - the ability to call or write to the author of the document without leaving the browser window.



Office Online Server (OOS) will allow you to edit documents through the browser without having to download the document and without installing the MS Office software on the device. This is one of the main components of security, since the presence of offline copies of important documents on the user's local computer is a potential threat, and working with Word, Excell through the terminal is much less convenient than through OOS.



And, of course, the possibilities of collaboration - when you can observe the process of creating or editing a document in real time, the work becomes: clearer, faster, more interesting (review of the possibilities of collaboration - habrahabr.ru/post/310396/ ).



Based on the requirements, the following VM configuration was obtained:



Host HV1

ServerRAM, GbHDD, GbServer roles
Exch114-20450Exchange server, Data availability group with Exch2
RP2-460Reverse proxy
DC12-460Domain Controller
Mkt1one20MikroTik Cloud Hosted Router
RDSHost140-60300Terminal server balancing with RDSHost2
RDSBroker4-660RD Connection Broker, RD Gateway, RD Web Access
FS12-4300File server integrated into DFS with FS2
SQL16-24300MS SQL for 1C
1C8-12801C server
Sb-fe8-1260Skype for Business Front-End
Sb-edge2-460Skype for Business edge
SP12-24300Sharepoint
Oos1280Office Online Server
Frpbxone40FreePBX as SIP Gateway
Total124-1882170


HV2 Host



ServerRAM, GbHDD, GbServer roles
Exch214-20450Exchange server, Data availability group with Exch1
RP60VM replica
DC22-460Domain Controller
Mkt2one20MikroTik Cloud Hosted Router, Failover IP with Mkt1
RDSHost240-60100RD Session Host balancing with RDSHost1
Fs22-4300File server integrated into DFS with FS1
RDSBroker60VM replica
SQL300VM replica
1C80VM replica
Sb-fe60VM replica
Sb-edge60VM replica
SP300VM replica
Oos80VM replica
Frpbx40VM replica
Bckp2-42000Backup server
Total59-893970


So where to post



We made a small comparison of the prices of different hosters with approximately the same configuration suitable for this task (sorting by price)

HotsterType ofConfiguration nameConfiguration ParametersPrice per monthURL
Azure + Office 365 Enterprise E5CloudVirtual machines$ 1,649.41 + $ 35 (per user)https://azure.microsoft.com/en-us/pricing/calculator/
AWSCloudr4.4xlarge16 Core, 122Gb RAM 2000Gb HDD$ 1296 + EBS $ 90https://aws.amazon.com/ec2/pricing/on-demand/
RackspaceDedicated serverDual processorIntel Xeon E5-2640 2.5GHz, 128GB, 5x300GB 15K SAS2x $ 649 + Storagehttps://www.rackspace.com/dedicated-servers
DigitaloceanCloud16 Core, 128Gb RAM 2000 GB SSD$ 960 + Storage $ 200https://www.digitalocean.com/pricing/
ProfitBricksCloud12 Core, 108GB RAM, 2000Gb HDD$ 866https://www.profitbricks.com/pricing#section=details-price-performance-guarantee
OvhDedicated serverSP-128Intel Xeon E5 1650v3, 128, 2 x 2 TB2x $ 179https://www.ovh.com/us/dedicated-servers/
HetznerDedicated serverPX121E5-1650 v3 256Gb RAM 2x4Tb HDD2x € 116.81https://ru.hetzner.com/hosting/produktmatrix/rootserver-produktmatrix-px


Choice of hosting or discourse on availability and SLA
The simplest calculation with a calculator shows that SLA, in which the reduction of subscriber payments is indicated is proportional to the unavailability time, is a profanity. For example, in a year of 8,764 hours, for two years the service was not available for 12 consecutive hours, it turns out that apart from the indirect loss of business only for a mere 30 employees, at 80,000 rubles a month of expenses per person, you suffered 109,090 rubles loss, and compensation from data center will be 0.07% of the payment for two years, or even taking a hypothetical $ 5000 a month, we get $ 82, which is not serious for your business or for the service provider.



And there are spots in the sun, everyone remembers the failures of Gmail, Facebook, Azure, power-off in the main European Communicator Telecity2, when half of England was left without the Internet and even Moscow cell subscribers had problems. http://arstechnica.co.uk/business/2016/07/bt-isps-telehouse-north-major-outage/



For a company with 20-50 people, using HP 3PAR with replication of storage between two data centers is most likely redundant, and does not provide a 100% guarantee against configuration errors - an example of the recent failure due to human factors in AWS https : //aws.amazon.com/ru/message/41926/ . The most acceptable two options are to build a software cluster (all Microsoft servers have an opportunity), and if a simple 2-3 hours for a business is not critical, then online backup to the second data center and manual switching on of virtual machines is an acceptable and budget solution.



In order to insure 100% not only from equipment failures, but also from data center problems, it’s better to take one server from one operator and the other from another (for example, hetzner and OVH), but to simplify the administration of payment control, you can take both physical server from one operator, and in the future to make the second to another. Moving backup virtual machines on fast, intra-European channels is a simple task and does not require stopping maintenance.



So, the hosting provider is selected, what happened. How it all works:



Iron: for our case, we choose to rent two servers in Hrtzner with a very convenient failover IP service. Two servers https://ru.hetzner.com/hosting/produktmatrix/rootserver-produktmatrix-px E5-1650 v3 256Gb RAM 2x4Tb HDD, € 116 each. As hypervisors MS Hyper-V, on which virtual machines will be placed in accordance with the above table. On the first server will be located the main VM and on the second backup.



Internal network between servers: The network is built between two MikroTik Cloud Hosted Router (Mkt1 and Mkt2) installed on each host through which a tunnel is configured. Heztner has ordered a fail-safe IP ( Failover IP ), which is assigned to the Mkt1 and Mkt2 routers to organize the publication of external services.



Terminal servers are pooled and will be simultaneously active on both hypervisors to conserve resources. In case of failure of one of the nodes, the users of the terminal server will switch to the second with some performance degradation, but they will be able to continue working, because user profiles are on a network resource replicated by DFS technology.



Replication: Continuous replication of virtual machines will be configured between the two hosts. In the event of a host failure or maintenance, a replica will be included.



Mail: organized on two Exchange servers united in DAG, instead of replicating virtual machines, user access using Active Sync, OWA and Outlook



Telephony, video conferencing, IM on Skype for Business. Like Exchange for mail, this is today the best collaboration tool. Since telephony providers connecting sip trunks according to the SfB standard are not many, as the gateway, they installed FreePBX, to which trunks with SIP registration are connected.



File Storage: MS SharePoint with OOS discussed previously.



Application server: here everything is prosaic 1C with MS SQL database.



Remote access: to all applications via HTTPS. Published - terminal server via RDG, Active Sync, OWA, Outlook, SharePoint with OOS, Skype for Business.



Security: encrypting data on a VM based on Shielded VM . Access to all resources over SSL. Encryption of voice traffic over TLS + SRTP. To access the terminal server, Azure MFA two-factor authentication is used. It is still possible to connect two-factor authentication for access to OWA and SharePoint, but for the time being limited to monitoring the IP from which users connect to these resources, the newer version of Skypetime allows it.



How much does this solution cost:



Iron - € 238 including additional IP and failover per month. If there is a significant load on the terminal server or SQL, you need another 28 € on an SSD drive.



Licenses for the time of implementation and test operation are recommended to take such a license https://www.visualstudio.com/msdn-platforms/ (3VU-00016 MSDNPltfrms ALNG LicSAPk OLV NL 1Y AP) 67 123rub on msbuy. This license contains all Microsoft products with the right of testing and development. After the test operation is completed and it will be clear how much and which licenses are needed, then buy. We recommend to pay attention to the prices of the program OVS.



Certificate - SSL, you can take a free 10 SAN from StarCom or more reliable, for example, from Godaddy $ 249.99 per year.



Azure MFA - 1.04 € per month per user



Work - we will not call specific numbers, so as not to make advertising out of the article, we will only estimate the amount of work in hours.



Installation of this configuration, including all administrative work with providers, from 90 to 120 hours without migrating user data, where everything is individual.



Monthly server support: 8-15 hours depending on the volume of changes and the reliability of the sip providers. User support varies greatly from the average user qualification, but on average it is taken at the rate of 0.8-1.2 hours per month per user.

Source: https://habr.com/ru/post/323994/



All Articles