Architecture

Server and Data Center Architecture

IBM Maximo EAM SaaS Flex and TRIRIGA SaaS servers are currently provisioned at thirteen (13) IBM Cloud data center locations. These data centers host application servers running Maximo and TRIRIGA as well as corresponding DB2 and Oracle database servers. 

In the above table, the first data center location listed typically serves as the primary (active) location. The other typically serves as the secondary location (DR). Customers can, however, prior to provisioning, choose preferred primary and secondary data center locations.

IBM Cloud Federal Data Centers (Dallas, Ashburn) are for FedRAMP customers only. These environments are managed by IBM United States citizens only. For more information on FedRAMP offerings, contact your IBM Salesperson.

On site customer visits to IBM Cloud data centers are not allowed for security reasons. Street address locations of data centers are not disclosed. This is in accordance to IBM's NIST guidelines and AICPA Trust Services criteria.

Below are two video tours of IBM SoftLayer Data Centers that describe general layout and architecture. Please note IBM acquired SoftLayer in 2013 and it is now referred to as "IBM Cloud"

https://www.youtube.com/watch?v=U1ROjNxTcqQ

https://www.youtube.com/watch?v=-sk-zjRfXSk

For IBM Maximo and TRIRIGA SaaS customers, all servers are customer and environment dedicated. For example, a customer's TEST environment has a dedicated TEST application server and a dedicated TEST database server. The same is true for each environment (DEV, TEST, PROD). See example diagram at the bottom of this page. IBM will provision virtual machines (VM's) and/or bare metal servers depending on customer requirements.

IBM Cloud Data Centers are SOC compliant and have full hardware redundancy implemented for all servers. All data centers have an N1 redundant power and cooling infrastructure, including backup power generators. All servers have redundant power supplies, NICs and use SAN based RAID storage. 

Maximo SaaS Flex customers have the option to be provisioned an enhanced access environment (DEV) for an additional cost. This is a Windows based application server that allows RDC (Remote Desktop Connection) access to the server console as a standard Windows user. This allows customers to perform tasks such as WebSphere console access, file & folder access, and direct read/write access to the DEV database using SQL tools. Note: Administrator access is not permitted. Further details on the Maximo Enhanced Access DEV environment can be found here

Maximo and TRIRGA SaaS Architecture

 ¹ Oracle database is supported but customer must provide the license and order bare metal servers. Please see 'Oracle Licensing' section below for details

² Additional standard access (Linux) environments can be provisioned for an added cost

³ Maximo EAM SaaS Flex only: one or more enhanced access (DEV) environments can be provisioned for an added cost. Up to 5 standard windows users can be configured for console access.

⁴ Enhanced Access (DEV) environments are not available for TRIRIGA

⁵ Requires additional paid subscription parts for TRIRIGA SaaS
 

Oracle Licensing

IBM can support Oracle database in the IBM Cloud, but customers must own the license and sign an IBM letter of authorization permitting use within IBM Cloud. The Oracle version must be v12c and customers must provide entitlement of the following:

• Oracle Database Enterprise Edition (must be a processor based license)

• Oracle Advanced Security (for encryption at rest)

• Oracle Diagnostics Pack (for maintenance)

• Oracle Tuning Pack (for performance tuning)

• Oracle Active Data Guard (for HA and DR)

In addition, if Oracle is required, a minimum of two bare metal (2) servers must be ordered - one for the production database and a second for all other non-production databases.  Please contact the IBM SRE team to confirm the requirements and the number of bare metal servers required.

Network Architecture

IBM Maximo SaaS Flex and TRIRIGA SaaS are internet based offerings that runs over HTTPS. There is no private cloud or direct connect option. IBM Cloud has a unique Triple Network architecture.  Every server provisioned in the IBM Cloud has 3 distinct networks:

• Public Network
  Two network interfaces are dedicated to the public network.  This network serves as the internet facing network for the server.  IBM SaaS uses this network as the way for external clients to access the application. This network is also secured by a firewall pair managed by IBM Cloud Delivery Services. 

• Private Network
  Two network interfaces are dedicated to the private network.  This network serves as a secure private network dedicated to IBM Cloud.  IBM Cloud can use this network for secure server to server communication as well as data center to data center communications.  This network has no access to the internet.

• Management Network
  One network interface is dedicated to the Management network.  This secure out-of-band network is accessible via an IBM managed VPN.  It is used by IBM Cloud staff for maintenance and administration purposes such as firmware updates, OS reloads, power-cycle or other IPMI functions like keyboard, video, mouse control (KVM over IP).

 Diagram showing dedicated infrastructure for Maximo and TRIRIGA SaaS Customers (example)

Open