Alliance Connect – Enhanced
Network Connectivity
Sibos 2010 Amsterdam
Steven Maerschalck, SWIFT
25 October 2010
Agenda
• Introduction
• Alliance Connect Overview
• Upgrade Scenarios
• Incentives Plan
• Evolutions
• Wrap up
New Connectivity Products – Drivers
• Internet as new access
technology
• Dial phase out
• New VPN box model
• Lower connectivity prices
• Upgrade rebate
• Optional DIY installation
Lower
TCO
Simplification
• VPN boxes distribution
by SWIFT
• Specific order forms for easier
upgrade
• Pricing simplification
Technology
Renewal
Increased
Features Set
• Internet as permanent
connection
• VPN box cluster with built
in resiliency and security
• Load sharing feature to
optimise bandwidth usage
Agenda
• Introduction
• Alliance Connect Overview
• Upgrade Scenarios
• Incentives Plan
• Evolutions
• Wrap up
Alliance Connect Overview
Replaces
Dial-up
Replaces
Dual-I,
Single-P
Replaces
Dual-P
Alliance Connect Positioning
Low Volume
Medium Volume
High Volume
Bronze
Silver
Gold
• Entry solution
• Low cost permanent
connection
• Global availability
• Choice of own ISP
• Resilient
• Best effort
Minimum
30% cost
savings
vs. Dial
• NP managed
• NP managed
connection
connection
• Internet back-up
• Managed service
• Resilient
• Higher service level
Minimum
35% cost
savings
vs. Dual-I
• NP diversification
possible
• Resilient
• Higher bandwidths
• Load sharing
• Highest service level
Roles & Responsibilities
Example: Alliance Connect Silver
Area
SWIFT Backbone and
IPSec termination
Prime Connectivity to
SWIFT Backbone
Responsibility
SWIFT
NP
LL + Router supply
NP
Router Mgmt
NP
VPN Box supply
VPN Box installation
SWIFT
Customer
VPN Box Mgmt
SWIFT
1st line Support
SWIFT
Backup Internet
Access + Router
Customer
Agenda
• Introduction
• Alliance Connect Overview
• Upgrade Scenarios
• Incentives Plan
• Evolutions
• Wrap up
Why upgrade to Alliance Connect?
Cost
savings
lower port
fees
SNL R7.0
does not
support
dial-up
VPN box
end of life
by end
2011
Upgrade is mandatory & to be completed before end 2011
Alliance Connect – Installation Methods
Do-It-Yourself Installation
• Quick installation guides
• For all 3 Alliance Connect
products
• Easy and fast set-up
or
Installation by Third-Party
• Network Partner
• Certified Service Partner
Upgrade Scenarios
Standard
STANDARD Scenarios
SCENARIOS
Non-Standard
Scenarios
NON-STANDARD S
CENARIOS
ANY OTHER UPGRADE TYPE. E.g.:
ALLIANCE
CONNECT
B RONZE
ALLIANCE
CONNECT
S ILVER
ALLIANCE
CONNECT
B RONZE
ALLIANCE
CONNECT
S ILVER
ALLIANCE
CONNECT
ALLIANCE
CONNECT
GOLD
G OLD
Upgrade Scenarios Description
Standard Scenarios
• Order through an “Upgrade”
form with your configuration
data automatically pre-filled in
• No need to fill in a
“termination” form for old
connectivity set-up
Non-Standard Scenarios
• Order through a “new
connection” form
• Terminate your old connectivity
set-up though a “termination”
form
Upgrade Rebate
Upgrade Scenarios & Switch-over Types
SStandard
TANDARD Scenarios
SCENARIOS
NNon-Standard
ON-STANDARD Scenarios
SCENARIOS
SWITCH-OVER T YPES
SWITCH-OVER T YPES
COLD SWAP ONLY
Cold Swap
Cold Swap
Hot Swap
Host-by-Host
ALLIANCE
CONNECT
B RONZE
ALLIANCE
CONNECT
S ILVER
ALLIANCE
CONNECT
B RONZE
ALLIANCE
CONNECT
S ILVER
ALLIANCE
CONNECT
Cold Swap
Hot Swap
Host-by-Host
Upgrade to Alliance Connect
ALLIANCE
CONNECT
G OLD
G OLD
Network Partner Involvement
Cold Swap
• No network partner
intervention
• Admin order to be placed
• Stop maintenance of 5XT
VPN boxes (except for AT&T)
Hot-Swap / Host-by-Host
• Network partner
intervention
• Order to be placed
• Pricing in function of:
– Installation of VPN boxes
– HW or SW intervention on
router
Cold Swap is the recommended upgrade method
How to Upgrade
1. All info on the upgrade
Visit the “Upgrade to Alliance
Connect” page on swift.com
How to Upgrade
2. Select Your Upgrade Scenario
See the Interactive Upgrade Guide on swift.com
Agenda
• Introduction
• Alliance Connect Overview
• Upgrade Scenarios
• Incentives Plan
• Evolutions
• Wrap up
Incentives Plan - Bronze
Pricing Action for
Upgrade to
Alliance Connect
Bronze
3-month free port fee for all upgrades
to Alliance Connect Bronze before end
2010
Conditions:
• Upgrade (enrolment) completed
before 31 Dec 2010
• For new and upgraded connections
Monthly fees (EUR)
Port fee
200
Incentives Plan - Silver
Pricing Action for
Upgrade to
Alliance Connect
Silver
3-month free port fee for all upgrades
to Alliance Connect Silver before end
2010
Conditions:
• Upgrade (enrolment) completed
before 31 Dec 2010
• For new and upgraded connections
Access Port Monthly Fee
64 Kbps (8Kbps)
64 Kbps Standard
128 Kbps
256 Kbps
512 Kbps
2,048 Kbps
Group 1 (EUR)
200
300
500
700
1,300
2,500
Group 2 (EUR)
200
350
600
850
1,600
3,000
Group 3 (EUR)
200
350
1,000
2,000
3,000
4,000
Cumulated with the Upgrade Premium
Standard Scenarios
Non-Standard Scenarios
Upgrade Rebate of 1,650 USD per Connection
E.g. Bronze [USD]
Set of 2 VPN boxes
Upgrade Rebate
Net Amount
One-Time
Monthly
1,650
10
-1,650
-
0
10
E.g. Silver or Gold [USD]
Set of 3 VPN boxes
Upgrade Rebate
Net Amount
One-Time
Monthly
2,425
15
-1,650
-
775
15
New Pricing for Old Connectivity Packs
End of the upgrade program
+25%
+50%
+100%
Agenda
• Introduction
• Alliance Connect Overview
• Upgrade Scenarios
• Incentives Plan
• Evolutions
• Wrap up
Network Continuous Improvements
• Extension of the load sharing feature to
Bronze and Silver
• New connectivity product where internet is
prime line / line is back-up
Simplification
• New tool to test speed and performance of
your internet connection for Bronze or Silver
• Increasing reach through wireless
(VSAT, 3G) connections
Increased
Functionalities
Best-inclass
• Continuous improvements for “best-in-class”
network availability by:
– Providing better protection against DDoS
attacks against Internet-based SWIFT services
– Introducing a pro-active detection of degraded
services in the network that would allow SWIFT
to re-route the traffic
“Best-in-Class” Network Availability
Detection of Degraded Services
• SWIFT observed - in exceptional
instances - that a network which
appeared to be functioning normally
could not send SWIFT traffic
Alarms are generated
when retransmission
thresholds are reached
TCP Flow
TCP Flow
B
A
P
B
A
P
• These network are degraded and very
difficult to detect with standard
monitoring tool
• SWIFT introduces a tool to proactively detect these degraded
services allowing SWIFT to undertake
necessary corrective actions
• Free of charge value-added service
on top of the network connectivity
• Target live date: Q1 2011
“Best-in-Class” Network Availability
Augment DDoS Defences
• Distributed Denial of Service attacks
(DDoS) represent a risk to doing
business on the internet
• On the other hand the internet is cheap,
ubiquitous and open which is a must for
business agility
• Currently available DDoS defences
protect the infrastructure not the service
– Cannot ensure that traffic is coming from
valid correspondents
– The service can be severely impacted
– More fundamentally the current defences
are a centralised solution to a distributed
problem
•
Very difficult to match the scale of attacks
which are now exceeding 50Gbps
25
“Best-in-Class” Network Availability
Augment DDoS Defences
•Providing an unique and innovative approach against DDoS attacks over the internet against SWIFT:
– By using scalable resources in the cloud adapting in function of the scale of attacks
– By identifying end points allowed to send traffic to SWIFT
– By being provider independent
Valid traffic
DDOS attacks
Cloud
resources
Scrubbed traffic is
forwarded to customer
Internet
Flows sent to the
collector system
System detects the attack
Mitigation process is started
Agenda
• Introduction
• Alliance Connect Overview
• Upgrade Scenarios
• Incentives Plan
• Evolutions
• Wrap up
Key Messages
Questions & answers
?
Thank you