Servercore Network Infrastructure

Q: Network Features

&mdash; High security &mdash; Isolation of client networks from each other &mdash; N+1 redundancy of all network devices &mdash; Connecting to local project networks via virtual routers The global router network connects to project-specific local networks via virtual routers configured across multiple physical routers. This enables the creation of a unified distributed client global router. This router merges various segments of client local networks into a single isolated network. Within this network, IP subnets are assigned to each segment and traffic is routed.

Automated networks with a capacity of 100 Mb/s combining your projects into a single infrastructure. Organization of connectivity with on-premise solutions and other network resources. Independent management of networks through a single panel. DDoS protection at L3—L4 level.

Minimum latency (ping)

We ensure high download speed so that your customers in Uzbekistan, Kazakhstan, and Kenya get access to your services quickly and with minimal latency. The latency time can be checked in our Looking Glass service.

6 routers in each region

Provide reliable communication between various parts of the infrastructure and efficiently distribute traffic to maintain stable operation of the network under high loads.

Maximum 50% link load

We use a monitoring system to avoid link overloading and degrading the performance of client applications when one of the network elements fails. To do this, we redistribute the increased load between the existing links or add new ones.

Redundancy of entire N+1 infrastructure

Spare elements of the network prevent complete failure of the equipment. In the event of a failure, the system seamlessly switches over to the use of redundant components, ensuring uninterrupted operation of the infrastructure.

Limited access to network management

Equipment monitoring and control are accessible only from a separate management network. As for the Servercore corporate network, only the network engineers and technicians who maintain the network services have access to the management network.

Test of new equipment under realistic conditions

Using simulation, we create scenarios that load equipment and software, simulating operating conditions. The goal is minimal downtime (less than a second).

Several suppliers for each component

We use network equipment of several brands: Juniper, Arista, Huawei, and H3C. This eliminates the risks associated with dependence on a single manufacturer which may have problems with the supply or manufacturing the equipment.

Businesses of All Sizes Trust Our Service Quality

Read case studies

Secured technologies

IaaS и PaaS

A wide range suitable for any task

Availability zones in Kenya, Uzbekistan, and Kazakhstan

IAM service for managing authorization and access levels

Stability

SLA up to 100%

Maximum server availability

Compliance with GDPR and DPA 2019

Processing of personal data

PCI DSS

Payment data under protection

Benefit and convenience

Free migration

Billing in Kenyan shillings

Payment by MPesa or bank transfer

24/7

Free technical support

Choose the Region Where You Want to Deploy Your Service

Nairobi

Almaty

Tashkent

1 availability zone

TIER III Design

TIER III

ISO27001

PCI DSS

Nairobi

Kenya

Dedicated Servers
Cloud Servers
Cloud Databases
Managed Kubernetes

1 availability zone

TIER III Design

TIER III Facility

ISO14001

ISO20000

ISO9001

ISO27001

ISO45000

Almaty

Kazakhstan

Dedicated Servers
Cloud Servers
Cloud Databases
Managed Kubernetes

1 availability zone

2 availability zone

3 availability zone

Reliability level — N+1

TIER II

Tashkent

Uzbekistan

Dedicated Servers
Cloud Servers
Cloud Databases
Managed Kubernetes

TIER III

Tashkent

Uzbekistan

Dedicated Servers
Cloud Servers
S3
Managed Kubernetes

Reliability level — N+1

TIER II

Tashkent

Uzbekistan

Dedicated Servers
Cloud Servers
Cloud Databases
Managed Kubernetes

Tier III data center in Nairobi

Fault tolerance level of at least 99.982% (no more than 95 minutes of downtime per year). Hosted services remain operational even during scheduled maintenance or power outages.

Compliance with global and local security standards

The data centers hosting Servercore products comply with DPA 2019 and GDPR standards and are PCI DSS 4.0.1 certified.

Five levels of client data protection

We ensure security of projects at all levels, from data centers to apps, through a range of measures, including 24/7 video surveillance, 2FA, encryption, and more.

Go to control panel

Types of our networks and their design

Servercore customers can work with three types of networks: the Internet, the local area network (LAN), and the private network of the global router. These networks are isolated from each other: the operation of one network does not affect the operation of the other. LAN allows to combine servers within a single pool directly through a high-speed L2 connection.

In the Internet access network, switches, links between them, access routers in projects, links between them and edge switch routers are reserved based on the N+1 scheme.

The components of the network differ depending on which server is used: cloud or physical.

In dedicated servers

Network infrastructure levels:

1. Access Switches

Provide physical access to the network for client servers.

2. Aggregation Switches

Provide communication between access switches, allowing servers to communicate with each other. Links between the first and second level are reserved.

3. Edge Switch Routers

Connect to several independent telecom operators in each region through external channels.

Open in full screen

In cloud servers

In the cloud network, we use the classic CLOS topology.

Network infrastructure levels:

1. Leaf switches

Installed in server racks where the physical nodes of the cloud are located and connect them to the network. Each physical node of the cloud is connected by at least two network interfaces to different leaf switches to ensure fault tolerance.

2. Spine switches

Connect various leaf switches to each other and enable physical nodes of the cloud connected to different leaf switches to exchange traffic. All connections between leaf and spine switches are reserved. Having these two network layers means that each leaf switch is connected to at least two different spine switches, with at least one connection to each spine one. Каждый leaf-коммутатор подключен минимум к двум разным spine-коммутаторам.

3. Edge Switch Routers

Connect to several independent telecom operators in each region through external channels.

Open in full screen

Connecting projects to the Internet

All connections with major operators are organized through ports. If it is necessary to change the port or network of the operator for some of the Internet traffic, this can be done manually for each edge switch router and connected providers. Typically, such changes occur unnoticed by the client servers and services.

Providers may have their own additional routing policies that affect further traffic to the Internet. The user can check the external route through the networks of operators to the desired resource, but cannot independently select a specific provider.

It is possible to change the operator. This option is available after connecting a separate service and if a user router is available.

Organizes network connectivity between physical and cloud infrastructure and creates an isolated private network within one or between several data centers.

Network Features

— High security
— Isolation of client networks from each other
— N+1 redundancy of all network devices
— Connecting to local project networks via virtual routers

The global router network connects to project-specific local networks via virtual routers configured across multiple physical routers. This enables the creation of a unified distributed client global router.

This router merges various segments of client local networks into a single isolated network. Within this network, IP subnets are assigned to each segment and traffic is routed.