Wolfgang Kuhl, CIO at Pharmaserv - Data Centre Planning and Execution - A Survival guide

DATA CENTRE PLANNING AND EXECUTION
- A SURVIVAL GUIDE
Wolfgang Kuhl
wolfgang.kuhl@pharmaserv
+49 6421 39 5005
http://www.rechenzentrum-hessen.de/
© Pharmaserv GmbH & Co. KG, 2014
CIO Event Berlin 06.11.2014

Agenda
 Introduction
 Project Review
 Building Technology Basics for IT Managers
 Failure Probability and Availability
 (Next Generation) Security Issues
2

At a glance
06/11/2014
 Address:
Pharmaserv GmbH & Co. KG
Emil-von-Behring-Straße 76
35041 Marburg, Germany
Phone +49 (0)64 21 39 - 60 00
 CEO: Thomas Janssen
 Established in: 1997
 Employees: 370
 Turnover in 2012 in €: 73 million
Plant section Görzhausen Main plant

Services
06.11.2014
 Project planning, provision and complete management of plants and buildings
 Energy management and supply with a high security of supply guarantee
 Development and implementation of state-of-the-art information and communication
solutions
 Integrated technical services from the planning phase to the turn-key production plants
 Logistics services including GMP warehouses for pharmaceutical base materials
 Occupational health and consulting services regarding environmental protection,
occupational safety and waste disposal measures

Starting Situation
Though there had been large investments in
technology upgrades throughout the last ten years, the
sites still were lacking a state of the art datacentre for
the companies at the sites
Based on our site-master-plan and a weighted rating
matrix a former construction building was chosen as
location for the new data centre.
Since there is little or no supply for housing in the
region, pharmaserv decided to make the datacentre
available to companies outside the sites too.
5 © Pharmaserv GmbH & Co. KG, 2014
CIO Event Berlin
06/11/2014

Building Plan
Racks Building Services

Construction (fast motion vid)

Building Technology Basics for IT Managers
Electricity
Eigene Fußzeile 06.11.2014
 Challenges
 Capacity (Sizing)
 Availability
 In Case of Fire

Capacity: Estimates / Experienced Data
 How much Power per Rack?
Rough estimate: 5kW
Average in our datacentre: 3kW
 How much Power All in All?
+ 30% for cooling
+ 10% for UPS
+ 20kW general usage in a medium sized datacentre
E.g. for 50 Racks: 50 x 5kW x(1 + 0.3 + 0.1) + 20 kW = 370kW
 Limit for Single Rack
Fuse: 16A
3 power lines
3 x 16A x 230V = 11kW

Power Distribution
 Emergency Power
 UPS
 Redundancy
 Sufficient Capacities
 Different Fire Zones
Consider different
scenarios, e.g.:
What will happen to the
temperature when the
datacentre is running
on UPS?
sub
distr.
cooling
Sub
distr.
general
CIO Event Berlin 06/11/2014
UPS-A
UPS-B
UPS
distr. B
main
distribution A
main
distribution B
sub
distr. A
sub
distr. B
UPS
distr. A

Cooling
 Challenges
 Capacity (Sizing)
 Availability
 Efficiency
 Ease of maintenance
 Risk of leakage

Cold Production
 Direct / Indirect Free Cooling
 Open Windows when it is hot inside: direct free cooling
 Build a heat exchanger into your window: indirect free cooling
 Add recirculation coolers and pipe refrigerant into the heat exchanger: more sophisticated
free cooling
 Geothermal Cooling
Like above, but ground water instead of air is used
Source: wikipedia
 Compressor / Heat Pump (Refrigeration Cycle)
1. Condenser
2. Expansion valve
3. Evaporator
4. Compressor
 Substantially higher energy consumption

Cooling
inrow
cooler
Approach Main Features Benefits
CIO Event Berlin 06/11/2014
20 kW 20 kW
20 kW 20 kW
buffer-storage
cold corridor 20°? 30°?
valves
pumps
Centralised
Battery of cooling units blows
cold air into the raised floor
Easy to build and to maintain; fewer leakage issues
De-Centralised
Refrigerant is brought as close
as possible to the heat load
Energy efficient; raised floor not mandatory; fire
zones easier to implement

COP
 Coefficient of Performance
 Input / Output
 Input: (electric) energy needed to produce cold
 Output: cooling energy
 COP <= 3: 

Building Security
Fire
Prevention
Distinct Fire zones; Walls and doors are fire resistant >= 90 min
(F90)
Fire
Detection
Early fire detection with ASD
Fire
Extinction
Automatic fire extinction
15 CIO Event Berlin 06.11.2014

Building Security
CCTV
Gates, corridors and critical systems. 24x7 monitoring, recording
for forensic purposes. Compliance with local laws (in Germany:
Betriebsverfassungsgesetz / Datenschutzgesetze)
Access
Control
AAA: Authentication, authorization, accounting; security zones;
separation gate; outbound access control; anti-pass-back,
Health /
Safety
Things to consider:
dead-man’s button; oxygen reduction; extinguishing agent;
workplace; emergency exits; first aid kit
16 CIO Event Berlin 06.11.2014

Failure Probability and Availability
 Definitions
 FAQ
 Standards

Definitions
 Redundancy
the duplication of critical components or functions of a system with the intention of increasing
reliability of the system [wikipedia.org].
N+2  N units suffice, 2 units are redundant
 Availability vs. Reliability
Availability is the ratio of the total time a functional unit is capable of being used during a given
interval to the length of the interval.
Reliability describes the ability of a system or component to function under stated conditions for a
specified period of time. [wikipedia.org]

FAQ
 Is failure probability the counterpart of availability? In worst case: Yes.
Availability of 90% means downtime of 10% in worst case.
You will expect the system to run 100% of the time, but you will be prepared to deal with 10%
downtime.
 How about an availability of 99.0%? No go.
1 year = 8,760h
99.0% availability  87.6h downtime
 If I add a redundant system, is failure probability cut by half? Nearly never.
2 units, failure probability 1% each
Resulting failure probability: 1% x 1% = 0,01%

Standards
Uptime Institute Tier Levels (Subset of Requirements)
Tier Redundancy Availability Outage
1 N 99.67% 28.8h
2 N+1 99.75% 22.0h
3 N+1 99.98% 1.6h
4 2 x (N+1) 99.99% 0.8h
In Marketing it is sometimes sufficient to only meet one criteria
Comparable Standards from BITKOM, ECO or TUV Rheinland
Other (nontechnical) standards: ISO 27001, PS 951, ISAE 3402

(Next Generation) Security Issues
 Communication Infrastructure of Building Technology and IT are very similar (IP,
Ethernet, Internet Access)
 Standard passwords are often not changed
 Common exploits applicable
 Servers are vulnerable during start up
 Attack Building Technology  shut power off an on  attack Server during start up

Agenda (detailed, backup)
 Introduction
 Pharmaserv
 How you can benefit from this workshop
 How I can benefit from this workshop
 Project Review
 Fast motion vid
 The key project parameters
 Building Technology Basics for IT Managers
 Electricity
 Cooling
 Building security
 Standards
 Uptime Institute, BITKOM, TÜV Rheinland
 Certification
 (Next Generation) Security Issues
 Building Technology vulnerabilities
 Hybrid Attacks
22

Wolfgang Kuhl, CIO at Pharmaserv - Data Centre Planning and Execution - A Survival guide

Recommended

Recommended

More Related Content

Viewers also liked

Viewers also liked (18)

Similar to Wolfgang Kuhl, CIO at Pharmaserv - Data Centre Planning and Execution - A Survival guide

Similar to Wolfgang Kuhl, CIO at Pharmaserv - Data Centre Planning and Execution - A Survival guide (20)

More from Global Business Events

More from Global Business Events (20)

Recently uploaded

Recently uploaded (20)

Wolfgang Kuhl, CIO at Pharmaserv - Data Centre Planning and Execution - A Survival guide

Editor's Notes