Time to talk about the SMTP plumbing & those nasty vent traps!

DMARC stands for “Domain-based Message Authentication, Reporting & Conformance.” DMARC is protocol that uses SPF and DKIM to determine the authenticity of an email. SPF (Sender Policy Framework) is a DNS entry and protocol which provides a list of SMTP servers that are considered “permitted”  to send email for a domain. There are 2 “From” addresses in an email message: the envelope From (Return-Path) and header From. SPF verifies the former, however a regular user does not see “Return-Path” and “could” falsely assumes the domain from the header “From” as the sender domain.

SPF is really different from DNS “MX” records, which are also DNS entries, that in the reverse sense, tell sending email servers what IP address/s are to be “contacted” to submit emails for a particular domain. Think of it as “who is the” postman for a particular neighborhood, whereby you call that person/s up and say “hey, I have letter for somebody in your block, can you take that for me and give it to them?”

DKIM on the other hand is a way to “validate” that emails have not been tampered with once they left the domain sending the email. DKIM  is like a “stamp” or “watermark” if you want to think of it that way. Besides validating that an email was not tampered with, DKIM validates the domain in the “From:” header; and one can easily conclude its significance when considering spoofing. A message may have multiple DKIM signatures, every server it passes through may add its own signature, but only the one matching the domain in “From:” is worth considering.

Also, we need to point out that DMARC is perhaps the one “main” thing which makes DKIM signatures quite useful. DKIM signatures are not mandatory and a fake/invalid signature is equivalent to no signature.

DMARC is a policy reporting system that acts when both SPF and/or DKIM fail in order to help inform senders might be spoofing or phishing in ways that enable email SPAM.

Your DMARC record is published alongside your domain DNS records (SPF, A record, CNAME, DKIM, etc.). Unlike SPF and DKIM, a properly configured DMARC policy can tell a receiving server whether or not to accept an email from a particular sender. It is important to note that not all receiving servers will perform a DMARC check before accepting a message, but many of the major ISPs and enterprises do and its implementation is growing rapidly.

Some of the benefits of DMARC

  1. Publishing a DMARC record protects your company brand by preventing “spoofers  bad guys”  from sending mail from your domain. In some cases, simply publishing a DMARC record can result in a positive reputation bump.
  2. Using or ingestion of DMARC reports increases visibility into your email server by letting you know who is sending mail from your domain.
  3. DMARC helps the global email community to establish a consistent policy for dealing with messages that fail to authenticate. This helps the email ecosystem as a whole become more secure and more trustworthy.

What can you do to deploy DMARC on CommuniGate Pro?

CommuniGate Pro has built in features for DMARC and we also have provided some tools to help you get up and running quickly. We also have the best support for the platform by the people that code it! So, when in doubt or when you need some tips or tricks, you can also reach out to the team.

First you can start by setting up DKIM on your CommuniGate Pro platform by following the tips here:

DKIM with CommuniGate Pro

CommuniGate versions 6.2.x have DMARC built-in….see about “Check SPF records” in <Setup tips SPF & DMARC>

We also are providing a script for easy setup and performance of the DMARC features if required in older versions:

CommuniGate Pro script repository

Additional Resources

Vladimir Anatolievich Butenko – email legend

 

On the 29th of August, at the age of  56 years, Vladimir A. Butenko died. The founder of CommuniGate Systems and the Regatta.link project, is legend among the early pioneers of the Silicon Valley “.com” era that went from the early 1990’s into the turn of the 21st century. This period is when many of the core foundations of the Internet were established and created by a few great engineers.

Vladimir was known globally for his insanely efficient code that even the competition revered and spoke of in respectful terms.  Today, over 200 million people use his technology each day to communicate and collaborate on the Internet.

Vladimir Anatolievich was a bright man who left an imprint on the history of the development of software technologies…his works are the “bar standard” for reliable and efficient multi-threaded code. Back in the mid-1980s, as a graduate student at the faculty of Physics at Moscow State University, Vladimir developed the operating system MISS (Multipurpose Interactive time Sharing System). Subsequently, he moved from being the core developer and architect into organizing a group of like-minded colleagues who supplied the MISS OS with a powerful set of application software to the oil, gas and chemical industries.

In 1991, Vladimir Anatolievich founded the company Stalker Software, in Germany. He moved the head quarters to San Francisco in the late 1990’s; later renaming the enterprise to CommuniGate Systems in 2003 combining “CommuniGate”  as the company and product brand. In the early days the products were developed on and sold for the Apple Macintosh platform. By 1997, Vladimir started to create the unified communications platform CommuniGate Pro, when new ISPs were popping up weekly around the globe. CommuniGate Pro soon became a leader in the email communications business with 1.000’s of clients, each often times hosting millions of users. The platform was available on Solaris, Linux, HPUX, True64 and FreeBSD by the year 2000 and was soon followed by Microsoft Windows server versions.

For more than 30 years of software development, Vladimir surrounded himself with many millions of people; the developers, business users and followers of the product. His work on protocol level technologies was extraordinary and became known by the technical communities for the “tight code” and extreme performance. The CommuniGate Pro platform not only had scale and reliability from day one, but Vladimir began adding telecom capabilities with SIP and XMPP technologies by 2004; creating the only known “fully unified” communications platform to this day.

After massive growth in the marketplace on uptake of email and VoIP technologies, competition inevitably grew. Large systems went from millions of users to 10’s of millions and banks often times 50+ million users was “normal”. In order to set the record straight, on performance and scale, we decided to slap down any published specifications to give us tailwinds for a year at least.

We set up several public displays of the CommuniGate Pro Dynamic Cluster with HP demonstrating 20 million users; then later 50 million in a single image on an IBM zSeries mainframe! CommuniGate Pro went on to take the world record for performance on the SPECmail submission in 2005.  No other platform ever challenged those results and CommuniGate Pro remains to this day the world champion in terms of the SPEC.org rating system.

In addition to working on software development, Vladimir Anatolievich was a professional athlete and a prominent figure in the world of yachting. Vladimir began sailing as a child in the “Aurora” yacht club, and he received the title of master of sports of the USSR.

Vladimir Butenko also acted as a patron – supporting the sailing section in Strogino, which provides comprehensive support to the national team of Russia (sailing) during the World Championship in the class of 470 in San Francisco. (sponsored regatta Who is Who).

Since 2014 Vladimir worked on his new business project with excitement and passion – this was the creation of an automated system (Regatta.link) for the yacht racing competition marketplace with innovative technologies. The heart of the system is GPS – and it uses trackers with high accuracy and a system for transmitting data from the racing judge yachts gathered usual tactics format. This system has been deployed during the Open Russian Regatta in both 2017 + 2018. Regatta.link has already been fully deployed at several international competitions; including world championships.

We remember Vladimir created legend….we never forget….as millions of people use his artwork daily. Vladimir helped create far more than just great code. As the company grew over time, so did his team…..and inevitably families were born as a welcomed consequence.

CommuniGate Systems core values of reliability and efficiency are our founders vision of product excellence. Legend; CommuniGate Pro the unwavering penchant for reliability will continue to run non-stop as so it should.

Farewell to Vladimir Butenko will be held September 1, 2018

European operators are poised to take control of the clouds over the EU

When discussing the systems used for email it can often times be quite different depending upon the generation of the person you are talking to. For many of us that have grown up in the last 30 years, email is a web based system. There are no apps or software to install like was the case for those of us that lived with Apple Mail or MS Outlook as the client.

Many of us grew up kind of expecting certain things like email accounts to be free….albeit provided normally by a search company trying to use us as advertising targets for their customers (outbound marketing clients). Most of us are probably are familiar with the term “nothing comes free” but the nuances of advertising were somehow “manageable” to avoid buying into a paid or professional system.

Whether you “see” email as a desktop program or browser what is common among all of us today is the issue of security and privacy. It seems a week cannot go by without some new revelation being disclosed about somebodies email or private information being released.

Compounding the issue of security and privacy for European companies is the control of “where” their email resides and under what or “who’s” laws are controlling the access to that data. Email often times for a business is data that contains valuable information about their company’s products or trade secrets. That means for anyone using a free system, those overlooked “click wrap legal agreements” typically blur the ownership and access rights because they need to use that data for advertising purposes. This can be a show-stopper for an organization that needs to protect not just its products and services information rights; but those rights of its employees too. For Europe, staff working in the company or public agency have rights under European regulation and the organization is more than compelled to oblige.

The cloud services topology and emergent WebRTC based unified communications has come quickly across the spectrum and brings with it rays of fresh sunshine on an otherwise impenetrable playing field. There is a massive opportunity for European hosting providers to offer Unified Communications in a private or National Cloud and compete head on with advertising based services that cannot offer localized support very well and have legal barriers to adoption for anyone concerned with European legal protection. Hosting companies that once saw large cloud service providers as a tidal wave dumping free services across their subscriber base now find themselves in a unique opportunity to add high value services within the legal frameworks of their respective markets.

CommuniGate Systems provides unparalleled stability and reliability in its hosting platform for over 25 years enabling more than 250 network operators to deliver quality inside their market place. Join our community today and talk to one of our regional representatives about how we can help you build a branded Unified Communications solution that is complaint.

Locking down access to webmail on your national or private cloud service

For many, if not most of our partners in the network operator & application hosting space the challenges of identifying the subscriber has become nothing short of a nightmare in recent times. Password based security by itself no longer is manageable, secure, and aggravates the user experience of the service by adding layers of frustration to the authentication sequence. Lets look at some techniques that will mitigate some of these challenges and provide some added assurances to the customer experience that the service security policies are effective, but also thoughtful of the impacts on the user.

We have in CommuniGate Pro a certificate authority built into the platform and for the purposes of our chat today we will focus on using TLS certificates in combination with multi-factor authentication to lock down access while providing a reasonably smooth user experience. We should point out that this type of model is typically in demand for business subscribers, especially governmentally regulated industries, i.e. banks, air transportation, government agencies and healthcare are especially pushed to conform to certificate based security topologies. One of the challenges of the topology is the management and setup of the devices which is normally mitigated when the system is operated by IT departments and “bring your own” devices are not permitted, unless they are put under such management.

So what the heck am I talking about in simple terms? Certificate based TLS sessions are where the client system, laptop, desktop or mobile have installed a signed digital certificate that is presented to the service during the SSL connection session. That means that the computer trying to “login” must also have this certificate to present to the service as a means of determining that the computer itself is authorized, not just the user credentials.

 

The illustration above shows  a typical deployment at a network operator with a Pronto! based web access method for the subscribers. In the private cloud all the users must conform to 3 added policies to “get into” the service:

  1. Password and user challenge / response is met with a biometric scan using our multi-factor API and mobile client
  2. TLS certificates must be present on the client machines and presented to the server
  3. The network that the machine is coming from must be on the list in the server policy

Furthermore the network operator has also placed several “good practice” policies on the public access network for reception and transmissions of messaging content. In many cases we are seeing that inner agency traffic, for example from the police to the justice department are required to also present TLS certificates. Adding TLS certificates on the SMTP sessions is highly recommended to “tamp down” the flames of SPAM and create policies that control what you want coming in versus the model of “cleaning up” the junk after it arrives with a open SMTP policy.

It should be stated as sometimes there is confusion about “email encryption” and if that means encrypting the mail itself or the transportation of the mail. For our purposes of this discussion we are talking about  TLS / SSL and that is all about the “transport” not the encryption of the email itself. Email encryption is performed in the CommuniGate Pro platform with a cousin technology called S/MIME that we will discuss in another blog posting.

In the hosting model we have two “doors” that we are talking about locking or having keys for the user to open. First is the “web access” or Pronto! webmail that combines all its communications over a HTTP/S session. That means we can send/receive mail, VoIP calls, and perform actions on the calendar or directory with a single socket connection; in this case HTTP/S using the TLS certificate to control whom and from what system can open the door. The other doorway we are talking about controlling is public or external to the “domain” in question. That means if in my example of the police and the justice department are on separate services, each can install the TLS certificates on their respective SMTP/S configuration profiles and lock the doors for any abuse or fraudulent attempted access.

While most of our talk is centered around the installation of TLS certificates on the access computers, we should not lightly skip over the way the user should authenticate. In the end of the day, if a computer is stolen, or accessed by an imposter, all they need is the fingers on the keyboard. Often times security breeches are performed by persons with mal-intention within the organization or on the periphery, like a partner or even staff with access for cleaning and maintenance of the facilities.

Password based authentication is only designed to determine that a password is “correct” not that the person is actually who they say they are. Biometric authentication in a multi-factor policy is the best method today for adding a layer that is far more precise, but also simple to use compared to lengthy passwords that are difficult to enter and remember for the user. CommuniGate Pro has build a simple to user and re-brand mobile client for TouchID on iOS devices and Android systems with biometrics sensor features. We can also “fall back” to secure session data code transmissions or least secure SMS code validation but strongly suggest that biometric scan policies are enforced for the most reliable and traceable security policy on your cloud service.

REFERENCES:

CommuniGate Pro PKI infrastructure

Tips for protecting the SMTP session on CommuniGate Pro 

 

The ever increasing opportunity for National Cloud value added services

Seems to me…… where & “with whom” you “float your ballon” is just as important as what “type” of ballon you have to fly. Translating that into the terminology of Cloud Computing; what legal rights you have based on who’s stuff (service) you are using might be more important than the type of technology you have for security. That means if I use great passwords or encryption, it might be less important than if all my “stuff” is at the end of the day controlled by legal agreements I submitted to knowingly or un-witingly.

For the purpose of this post we want to put aside technology to another discussion or topic, meaning lets chat about the benefits or ramifications of security, i.e. encryption or access controls another time.

The underlying subject of security that often times gets overlooked completely when discussions are made about cloud computing is the legal umbrella you might be walking under when using a cloud based system or service. Most of us click, and few of us read those EULA’s that come with all the popular email, chat or voice/video systems in use today. Often times these “agreements” include in one way or another the accord that “by using this service you explicitly agree that the jurisdiction controlling this usage License is xxxx”. Furthermore, many of these click-wrap agreements (for free and paid cloud services) indicate that your rights are forfeited and you should stop using that service if you do not agree to the jurisdiction.

Many telecoms and network operators have a massive opportunity in that they more than many can provide a National Cloud that has a lot of benefits for not just the public, but we also find many governmental organizations demand a local provider. I recently was speaking with a “post office” that uses one of our partner network operators for email. Kind of ironic huh? I mean mail man using email, but OK jokes aside they too must have a way to communicate electronically by inner-agency messaging systems, and want those to be “housed” inside the country domain, both physically and legally.

I have found that at root or the core of a value for many of our partners is the legal ability (licensed operator) to issue phone numbers. Over the top services have in many cases overwhelmed many operators globally. But “nationally” the potential is just as it is today with phone numbers if you think about @Internet address space that can be nationalized. Many of the weaknesses of technical limits can also be overcome when a domain is controlled, regulated and managed on a national level.

Take the example of a provider issuing internet address space on a National Cloud for email. Not only can the legal use License be placed under local laws and regulations (benefit for business owners), but security and abuse can be managed far more than un-managed public messaging services. Simple case, a user or domain is fake or sending abuse mail, it can be de-commisioned. Adding to this, the National Cloud operator can add value by certifying the origin of the mail, the contents of the mail (not having been tampered with) and much more, making email professional and far more trustworthy.

With over 200 Network Operators as partners, we have a unique visibility on the values of Unified Communications as a Service and understand what not to do, what works and what does not work. If you are a service provider and are interested to provide high value business communications in your region we have a unique way to work; as a partner relationship not a vendor/client. We listen and we adapt to your local requirements better than most.

Time to “geek out” a little on storage!

Lets take a few minutes to chat a bit about storage systems and how that is super important for a good CommuniGate Pro hosting platform deployment. One big mistake with storage we find in just about every deployment is the misunderstanding of how the usage pattern and loads of CommuniGate Pro differ from that of say a database or file server in an Enterprise deployment. With that in mind, how about we set the record straight on how we like our discs and arrays to taste and digest?

CommuniGate Pro is highly adaptable in scale; up or down. The same binary can be deployed in situations where there is nothing more than a single server and internal drives, up to a Dynamic Cluster that has multiple storage systems; some being internal to the physical machines, and some attached as shared storage, or with many arrays “attached” as logical systems that are presented to individual domain or realms. To set a target benchmark or “good example” we will use a multiple system architecture and a typical topology that is “common place” in our partner networks.

Let us begin with a case study of a regional Network Operator that has 1 million subscribers and sells broadband services to both consumers in residential deployments and also provides business subscribers broadband dedicated links. For the residential subscribers the operator provides email as a bundled service. For the Business subscribers the operator provides a richer experience business grade unified communications suite with value added services like VoIP, premium groupware style email and storage. As you can imagine the “load profiles” of the subscribers will be radically different even in the cases whereby all subscribers are using Webmail access (no IMAP/POP or SIP); the two example “group types” of services will place different requirements on your SaaS platform and as a result the storage subsystem.

Lets round it all down to some simple numbers for the purposes of this chat:

Our example network operator: “super duper broadband”

Total subscribers: 1 million

  • 900k consumer subs in a single dedicated domain “superduper.com”
  • 100k business subs spread across 1,000 domains ( like “bluedonuts.com” & “dieselcroissant.fr”)

Profile type: medium load (90% of the subscribers are consumers that do not login all day)

Quota type: 100meg on consumers and 1gb on the business subscribers ( <30% utilization)

*Concurrent Web sessions (https + XIMSS): 70,000

SMTP inbound per hour: 800k

SMTP outbound per hour: 200k

Estimated IOPS on Backends: 7,000

Estimated Storage capacity total: 40TB

Capacity planning begins with understanding your customer and their usage patterns. For example, the consumer subscribers can radically vary in usage patterns because some people buy a ADSL line and get 5 email accounts bundled and never use them. But the accounts over time become filled with junk mail or notices eating up storage for no good reason. On the other hand, older people tend to use the email accounts provided by the operator and stick every photo and document they have into their folder tree. So when the account is “active” we might find they want and “expect” the speed and usability of an enterprise messaging solution.

Business subscriber profiles obviously will have completely different usage pattern; linked to the “work hour” & attachment penchant that users typically require as the messaging system becomes used almost like a fileserver. The email “storage and archival system” for business communications is fundamentally important to business in general and operators can find this as a “value add” offering. Finding a “weighted” profile is key; only your Network monitoring will provide useful parameters that are provided by your subscribers. There are many “optimization” techniques and policies that we provide our partners to deploy and manage more effectively the storage and load characteristics of the CommuniGate Pro SaaS delivery platform.

Perhaps one of the most commonly deployed CommuniGate Pro Dynamic Cluster “layouts” is the 4 x 3 architecture where you have 4 physical or “bare metal” servers on the front side that are using internal storage with SSD drives . These servers typically use storage for logs and do not need a large amount of capacity if you have set up log rotation in a CRON job or have systems management to deal with housekeeping. Keeping in mind that the load patterns of the Frontend servers are far more CPU intensive today in light of the fact that WebRTC sessions and https to the edge are now using SSL or other encryption techniques. On top of this are loads that anti-abuse filters, policy management rules and traffic shaping engines place on the frontend server array.

The example layout has 3 Backend servers which are the only systems in the Dynamic Cluster that have connections to the “shared storage” where the account account reside. This is usually mounted as /var/CommuniGate/ on each machine in the Backend server configuration/s. That means that the “Frontend servers” do not have access to the shared storage, and when they want to access an account they make the “request” to the Backend array and when authenticated, the Backend/s decide which server will open the account directory and give that info back to the session the frontend system is controlling (thru webmail for example).

As you can imagine the load on the backend servers will be far more on the IOPS side of the equation compared to the Frontend servers (CPU heavy) that are dealing with sessions doing authentication and/or encryption; which equates to CPU cycles. Therefore, we can also propose that when deciding on your network switches and interfaces the Backend severs should always be placed on dedicated switches and use 10G ports or fiber channel.

The above diagram shows a properly configured Dynamic Cluster network with 4 dedicated IP ranges and layers ideally on dedicated switches. The following is a sample Networking topology, but this should not replace talking with our engineers as part of any production Dynamic Cluster.

  • Public Network – This is the externally facing Network, on a routable IP block, normally with one or more IPs assigned to the Loadbalancer on the “external interface” All Frontend Servers in the Dynamic Cluster will have one Network Interface with an IP on this network and a DNS entry.
  • Inner Cluster Communications Network – This private network, using non-routable IP address blocks (such as 192.168.x.x.) is used for the cluster members to communicate with each other. No other traffic should be put on this private network. Frontend servers should have a second interface configured with an IP.
  • Management Network – This private network might be the shared LAN of the Operator or ISP NOC (Network Operations Center). This could be another non-routable Network (such as 172.16.x.x.) Each server should have another network interface configured so administrators can have access to the Administration UI or APIs for provisioning, billing, and other management duties.
    • Note: There may be times when a fifth network is used for management of the server at the OS/BIOS level. Many Sun and HP servers have a “lights out” port that can be connected to secure VPNs or terminal servers used to gain access to the machine in the cases where there are connectivity issues or the server hardware or power has failed.
  • Storage Network – This private network, with a non-routable IP block (such as 10.10.x.x) is used only by the backend servers to communicate with the shared storage system. This network should be high speed, Fibre or 10GE.

We will not dig too much deeper into the networking other than to say we want the storage LAN to be dedicated or without other traffic. We also strongly recommend that the storage network be 10g and use SSD’s whenever possible. NAS has advantages both economically and for a reduction in complexity as we do not use file locks in the Dynamic Cluster and our performance is orders of magnitude better than most NFS applications that need the logic on the filesystem.

Back to our case study reference point and we have arrived finally at the point to talk about what new toys for the geeks to rack up. When thinking about the 900k subscribers it might be totally reasonable to use a “spindle based” NAS solution, while for our business subscribers we put all those domains and their storage on a SSD based rack. CommuniGate Pro has the ability to move  domains or accounts to Logical arrays that are mounted as specified in a preferences file in the directory of the domain.

For spindle based NAS systems we find a few things that will often “trip up” the purchasing or specifications. RAID level 5 should always be avoided, and when possible we like RAID 1+0 (a.k.a RAID10) and yes this will double the “spindle count”.  Nevertheless the stripping over a rack of drives gives us the IOPS we want; more economically. Often times a storage vendor will view CommuniGate Pro like an enterprise load and not have a good picture of how the Dynamic Cluster operates. In fact they might be “honestly” looking to save some coin by using RAID levels that boost capacity.

Another area that is important in the specifications of a large NAS system with many spindles is to choose disc that are the fastest and not the largest. If the target is x on size or “Terabyte capacity” having 4 LUNS of drives, where each is say a cabinet of 24 drives is far better than discs of double capacity and only having 2 cabinets or 48 drives versus 96.

Lets say then we have a NAS head on 4 cabinets of drives or 96 usable spindles. Using an LVM we span the LUNS into a single volume and present that to CommuniGate Pro for /var/CommuniGate and stripe over all the drives in RAID10 to achieve the best performance in IOPS whereby we exceed what would be possible in other configurations.

Our business subscribers will get a link to the optimal storage array when their domain is created. Meaning the domain is created that will send their profile over to a SSD based storage system that can have other value added services like backups, archival rotation and encryption policies.

A properly configured Dynamic Cluster has the potential for 100% uptime; we have dozens of examples whereby the operator partner tells us that CommuniGate Pro is the longest running and most stable app in the data center. In some cases the only “major upgrades” to the system are a result of the hardware vendors EOL or phasing out support for the servers. Several of our partners have Dynamic Clusters up for 8+ years non-stop. That being said, another good tip for your architecture is to plan your change management and how to deal with load sharing during spikes and peaks.

The CommuniGate Pro Dynamic Cluster has a “rolling updates” mechanism that allows software or hardware to be serviced or swapped with no downtime. In our Dynamic Cluster the “server systems” or “cluster members” can be updated one by one when the administrator takes the cluster member into the “non-ready mode”. The cluster member when put into this “non-ready state” stops taking new connections and can be upgraded or the hardware can be changed entirely. In addition, you can easily add in new cluster members to deal with loads, or switch operating systems and hardware vendors. It is possible to run mixed systems; such as FreeBSD Frontends and Linux or Solaris or AIX Backends.

One thing to remember is when we take a cluster member offline for service, you are removing the load capacity that member provides to the entire Dynamic Cluster subscriber base. In our 4 x 3 example the backends are each providing 33% load and when you place one Backend member into “non-ready” mode, the remaining systems are now in a 50/50 load situation. These Backend server members should be designed to deal with that load in maintenance or hardware failure situations. It is far better to have “more cluster members” versus having big servers that deal with a large % of load. My rule of thumb is to never have more than 33% load on any cluster member, and that is “peak” load, not nominal operating parameters.

REFERENCES:

IOZONE tools for checking IOPS 

Linux FIO tool description

Performance on Linux in virtualized environments

CommuniGate Pro benchmark with IBM

CommuniGate Pro SpecMail results

SpecMail benchmark topology 

Learning how to make the future do what you want

The best way to predict the future is to be a participant in the creation of what comes next. Nevertheless, we can learn a lot from the past, and how the “old guard” sometimes manages the new. If you were around in the Dotcom days, we simply did not have a reference model to look at for technical tools. In fact, everything was totally new and un-expected in the business world and change came fast, hard and “all of a sudden” it was just “like that”.

Today Unified Communications is quickly coming to the Contact Center. Yes, for the statisticians in all of us, we still cling to the phone as the “reference model”. But, we should not forget how quickly change comes. Have you talked to anyone recently from say 13 to 19 years old? Ask them what they think about using a phone to talk to somebody, or what an email address is used for other than setting up some account or giving to the cashier at the store when they press you for it. Putting the Contact Center into the hands of the consumer on the most prolific entity currently known makes not only good business sense, but is perhaps yesterdays news.

While it is true that the Contact Center does have telephonic media channels that are still considered “king of the hill” we can learn a lot about the behaviors of the market by looking at communications trends. When we were in Silicon Valley in the late 90’s, for us email and portable phones were our standard. Yet, anyone will tell you that in those days we did not have “40+ year old” executives that had this in their blood because they simply never grew up around technology as we did.

If you took funding off Sansome street in Palo Alto, the first thing they would do is send you a pack of suits (advisors) to join the management team. Well, these guys (and some girls) would show up with pencils and big thick note pads (looking like a bounded book) and scribble all day and look at us in scorn….. and even in some cases ban email usage in the meeting rooms! For the “suits” the method of working entailed meetings, discussions of SAP, and “processes” that were mind boggling. But, our work, over email and sometimes from home or in the car was scandalous.

FACT: today the amount of phone traffic has plummeted in contrast to the traffic over chat or images shared as a “message”. When the phone rings in my house and I look at my kids to pick it up; they say “it cannot be for me as my friends would never use the phone”. As bizarre as it was for the “suits”, because my parents could not keep us off the phone. So, if they will be taking over the old guard (us) in short order, does it not mean as they communicate to the support, billing or purchasing department their methods and demands will require change?

 

 

Working with our partners in the network operator segment we have developed Unified Communications for Contact Centers. Our unique focus on mobile loyalty application and WebRTC  that works for todays media choices of voice and email, yet also has chat, video and Biometrics that makes authentication “a touch” not “a snap” of the finger easy! Partner with us today to build a Cloud based Contact Center for your region and be a part of the future not the history.

2017 – the year the Cloud becomes a National asset

This last year (2016) we saw a global surge and race to move business applications to the Cloud with new development models like dockers, containers and all sorts of new languages and frameworks. Plus, we also began to see businesses starting to realize, and take advantage of the movement to WebRTC capable systems; such as Contact Center products! However, in the last year we had no peace when it came to hacks, attacks, and large scale “outages” that wrecked havoc and made us soberly realize growing pains will trip us up here and there.

Security risks and governance of the Cloud model has been a controversial area for the FinTech and healthcare market segments by the very nature of their preceding regulatory nature. However “the move” to the Cloud has extended the “call for control”, regulation and of course protection of IPR and trade secrets for all of us; even the local pizza delivery shop does not want their website hacked and pizzas delivered to wrong places by the hands of pranksters.

One of the fastest growing demands for technology platforms  like CommuniGate Pro which supports the Cloud or SaaS provider market segment models is a drive towards a “National Cloud” model.  For many of the countries in the EU, Africa and the Middle East regions there is a “slam on the brakes” sense of urgency to control the move to the Cloud. This “reaction” is somewhat based on “justifiable” response to the control of content and/or property rights dealing with the “physical” location and extension of laws governing everything from metadata to “just being in the wrong place at the wrong time”.  I had a client whom had their systems taken offline simply because their “portion” of the “shared” architecture happened to reside on servers and systems that were under investigation for illicit behaviors by a totally un-related customer “sharing” such systems on the providers data center in the USA whilst this particular company was based in Belgium. Once the systems were “seized” there was no “recourse” for this “collateral victim” that fell into a hole of darkness (website offline) simply because they were “situated” next to a “bad neighbor”.

Our view is that we rationally expect most countries in 2017 will begin to see that it must own, control, and often times regulate the private versions of a Cloud within their country to mitigate risks. This will start with industries that are regulated, such as previously mentioned banks or healthcare systems, but that move will quickly encompass any business that wants to be under the umbrella of National laws and not the hosting providers country of origin laws. Of course, on the positive side we see and believe that the exploitation of these regulations are morphing to the values of having a National Cloud as an asset.

 

Building stuff is fun, but modifying to suit the need is smarter

There is clearly value in building applications that are “built to suit”. The purpose and manner of your operations is what makes you who you are as a company and normally that drives your values and competitiveness. Also, customer needs are intrinsically understanding these matched with the relationship they have with you over-ride trying to bend your organization around the way some application or system works.

We recently visited the BMW Werk in Munich and one of the things we were “pressing” our guide about was the technology in use with all those cool robotic systems. We learned that the logic and the software was custom made and tuned initially by the Swiss vendor many years ago, but then BMW formed internal competence to write their own algorithms based on their specific requirements. Contact Centers in large deployments, say like a mobile network operator, can have 100’s of centers doing all sorts of tasks: from provisioning, billing, and support to sales activities, logistics for maintenance crews, and even internal HR and travel divisions. These systems were grown into the company requirements. But that has always been costly, yet necessary in that the needs of the operation are not generic enough to have out of the box delight.

I remember my days in corporate IT and indeed one of the downsides to turn-key applications like a CRM or ERP was you had to mold the staff to that vendors methods of “workflow”. Obviously there was a need to get closer to building vs. “assimilating” and the entire spectrum of software evolution ran for years now around all sorts of buzz word compliancy themes like “mash ups” & “plug-ins” or “widgets” & “integrations”.  Today we are still left deciding how much to get our hands “sticky” with when it comes to the next great API and preference panel du jour.

Today we have an amazing set of technologies available that no longer require a massive truckload of IT junk to get started. The advent of the Cloud model for delivery of applications by vendors removes a lot of the back end hassles that made adoption or migrations nightmarish. However, we believe that applications must “suit” the need and that means there should be available at all times some skin in the game from the consumption side to mold either the applications themselves or participate in the roadmap decision tree for us as the software app creator of the platform to get involved.

CommuniGate Pro was designed to be a hosting platform at the core and from day 1 with the right “mentality” for Cloud services no matter if you are the platform hosting company to the end consumption client. The technology is multi-tenant and has a full development SDK and set of APIs that allow the best of the best geeks to have fun, but also provide revenue stream possibilities for customization services that make Cloud providers more than resellers, but rather have intrinsic value thru professional service delivery.

Everyone has their “secret sauce” and style as a product company. Since our inception we have always been focused on the architecture of the product that would deliver the best performance reliably. After 25 years of developing software we have not budged one inch on that philosophy for better or worse. Many times we have had major internal debates to acquiesce a bit on that stance in order to develop some new capability or feature. Time and time again that has fell not on silent ears but firm adherence to our value.

CommuniGate Pro is developed in C++ and is a signal multi-threded package standing as not only the single model in such a design in the market place perl group, but we also have the un-contested performance spec awards to support our decisions on design. Unified Communications really is all about having a single backend that can extend protocols to support multi-medial communications that are understood on the core platform without submission to separate systems or servers. Our design also is all about “Dynamic Clustering” that has “all active” members breaking the mentality of failover or “passive” designs.

This unique capability and design has brought me to hear from 100’s of data center teams over the years the same message: “it is the only system on the core network that has never been down”. In the markets we serve, having a system with up times running over 8+ years is not only cool, but sensibly just for operations that are supposed to be 24×7 non-stop. Leveraging processor affinity we have been able to eclipse all known products in similar spectrums on todays multi-core server hardware up or down to the level of RaspberryPI.

With the move to less infrastructure and more ease of use the CommuniGate Pro platform is uniquely ideal for the Cloud hosting provider to developers that want to bring IPR to the market for Contact Center deployments or proved web and mobile Unified Communications to business processes without boatloads of bloatware. Join our ecosystem today as a certified solutions provider by coming to one of our training and certification courses in 2017.

Alumni Autumn 2016 CommuniGate Academy – Munich

fullsizerender-14

Our team helped get our partners accredited this week in Munich at our Autumn 2016 academy training sessions. The class was a great mix of people from Universities, integrators, ISPs and Cloud service providers. We had a good time learning about how the platform is used in each particular setting; and what types of external systems are integrated with CommuniGate Pro. For example, on the hosting companies premises we discussed how provisioning and billing systems are working for their needs and with the partners from the Universities we shared security and policy concepts for a diverse campus topology.

img_0107

Many of our partners have been using CommuniGate Pro for more than a decade, and some thought starting from the first level of the curriculum would be too easy.  Nevertheless, we found that everyone went away believing that the administrator level I was a challenge with rewards and not a cake walk in the park.  We will hold our next Academy in the Spring 2017. The following structure will be offered throughout the year:

  • Administrator Level I – for all those that use the platform in production as an administrator
  • Engineer Level II – for those wanting a little more on the API’s,  CG/PL development language and customizations
  • Business Applications – Advanced CG/PL applications – Contact Center 2.0 + IVR applications

img_1677

All of our events begin with some fun and “geekness” activities. For Munich what better than to have a look at some German engineering and manufacturing? We spent the first day over at the BMW Werk; which means the “production factory” where many of the cars are actually produced with cool robots; simply awesome! You can take the tour yourself, check out the details here “BMW Werk”

Later in the day we had a “BMW Genius” give us a  briefing about Electric Vehicles and the roadmap of their iSeries cars. We got to mess around with the i3 and yeah that really slick i8 supercar was there too.

img_0313

We were not allowed to take any photos or video of the Werk tour. ☹️☹️☹️ But this video below over at youtube is actually really good and will give you the idea. Highly recommended if you get to visit Munich!

The view of the city of Munich was beautiful even when wrapped in the clouds. Those buildings are really colorful just like back in Nice. Join us for our next event and until then follow us on Twitter @communigate

fullsizerender-12