The terms of reference for the RFP is enlightening below. I also note this from the RFP:<br><br>"Technical proposals must be delivered at the address given below before 1500 hrs (PST), on 2nd March, 2012 ...... Upon submission, Technical Proposals shall be opened at 1530 hrs, on 2nd March, 2012 <b>in presence of all applicants who choose to be present.</b>"<br>
<br>Seeing the advertising process is so 'transparent', I think its worth ensuring that the names of the companies that apply for the RFP is equally 'transparent'. <br><br>Brett<br><br>
<b><br>
TERMS OF REFERENCE</b> <br>
<br>
Internet access in Pakistan is mostly unrestricted and unfiltered. The
Internet traffic is coming from two IP backbone providers, i.e., PTCL
and TWA. The Internet Service Providers (ISPs) and backbone providers
have currently deployed manual URL filtering and blocking mechanism in
order to block the specific URLs containing undesirable content as
notified by PTA from time to time.<br>
<br>
Many countries have deployed web filtering and blocking systems at the Internet backbones within their countries.<b>
However, Pakistani ISPs and backbone providers have expressed their
inability to block millions of undesirable web sites using current
manual blocking systems. A national URL filtering and blocking system is
therefore required to be deployed at national IP backbone of the
country.<br>
</b><br>
ICT R&D Fund has decided to fund the<b> indigenous development,</b>
deployment, operations and maintenance of such a system by companies,
vendors, academia and/or research organizations with proven track
record.<br>
<br>
This system would be indigenously developed within Pakistan and<b> deployed at IP backbones in major cities, i.e., Karachi, Lahore and Islamabad.</b>
Any other city/POP could be added in future. The system is proposed to
be centrally managed by a small and efficient team stationed at POPs of
backbone providers.<br>
<br>
The system would have a central database of undesirable URLs that would
be loaded on the distributed hardware boxes at each POP and updated on
daily basis. The database would be regularly updated through
subscription to an international reputed company maintaining and
updating such databases.<br>
<br>
System requirements would be as follows:<br>
<br>
1. Should be capable of URL filtering and blocking, from domain level to sub folder, file levels and file types.<br>2. Should be able to block a single IP address or a range of IP address.<br>3. Hardware should be stand-alone that can be integrated into any Ethernet/IP network.<br>
4. Hardware should be carrier grade, 1+1 redundant configuration, 100% uptime, redundant power supplies (-48 V DC) with minimum power consumption and other carrier grade specifications.<br>5. The system should be capable of network monitoring via SNMP. The system should also report critical system statistics, like CPU/Memory utilization, network throughput, etc.<br>
6. The solution should support offline configuration with zero packet delay to the original traffic.<br>7. The system should operate on OSI layer 2 or 3.<br>8. The bandwidth handling capacity should be scalable. The current bandwidth of Pakistan is about 85Gbps in total as of December 2011, growing at 40-50% per year. The solution should be scalable and modular to cater for bandwidth expansion of future. Bandwidth expansion should be handled by adding/stacking hardware boxes in modular form. The solution should be deployed in distributed model with filtering boxes placed at the distribution points of backbone providers in major cities. Each hardware box should be capable of handling 10Gbps (or more) of traffic at line rate.<br>
The installation at PTCL IP Gateways at Karachi (Pak Capital and Marston Road Exchange requires to TAP 20 (twenty) 10G interfaces. The system should be able to handle 100Gbps traffic at each node.<br>PTCL has decided to install 100Gbps interfaces at above location in near future, therefore the system should be able to support 100Gbps interfaces. Minimum change should be required to migrate from 10Gbps interfaces to 100Gbps interfaces.<br>
Similar design approach should be adopted after reviewing the core network of TWA.<br>9. The system should be modular and scalable to any number of interfaces at the backbone router/switches.<br>10. The system should have the ability to intercept the flow in both directions (in-bound or out-bound traffic).<br>
11. The system should be rapidly programmable to support new protocols and applications.<br>12. The system should be preferably plug and play and require minimum configuration for setup.<br>13. The total delay introduced by each hardware box should not be more than 1 milliseconds at line rate of 10Gbps. In case of offline configuration there should be Fail Safe operation.<br>
Page 5 of 5<br>14. Each box should be able to handle a block list of up to 50 million URLs (concurrent unidirectional filtering capacity) with processing delay of not more than 1 milliseconds.<br>15. The system should support multiple languages to capture URL in any language.<br>
16. The system must support IWF or any other equivalent 3rd party external URL Database.<br>17. Master Database update time should be user configurable.<br>18. The Master Database should be locally installed with support to update the Database from network.<br>
19. The system should allow Proprietary DB definition or integration.<br>20. The Database should be flexible and could be locally modified to meet customer needs.<br>21. The Database should be flexible to add/remove filters or categories.<br>
22. The backend control of the system to view access to block list URL database should be only with the solution holder (backbone operator). The solution supplier should not have access to view the categories defined by the customer.<br>
23. The solution supplier should be able to provide remote and onsite support on 24 x7 basis in major cities of Pakistan.<br>24. The solution supplier should propose and quote for providing operations and maintenance (O&M) support of the system with service level agreement (SLA) for five years after system installation and commissioning.<br>
25. System supplier should quote cost of yearly maintenance and up-gradation of the system.<br>26. No one should be able to view or access the customer defined categories in Database.<br>27. Separate hardware fast-path for delay-sensitive traffic, ensuring very low latency (~10micS) should be provided. The system should have load balancing and failover capabilities. In case of failure or degraded performance of the system, it should be capable of automatic bypass through a fail-safe port.<br>
28. Updating of URL Database should be done through CLI commands. Support for bulk load through file/network should also be provided.<br>29. The solution should also support Web based administration via HTTP or HTTPS.<br>
30. The solution should provide easy to use, user friendly web based application to easily block/unblock URL categories.<br>31. The solution should provide a hierarchical authentication system with configurable hierarchal access to the system management.<br>
32. Blacklist database must be protected with some encryption technology method/key to protect tampering.<br>33. The system should allow to view statistics related to packet TX and RX.<br>34. The system should allow reset to factory default mode. User should be prompted if Database is to be reset too.<br>
35. The system should allow to enable/disable all the features listed under filtering/blocking.<br>END OF RFP<br>
<br>
<br>
<br><br><div class="gmail_quote">On Thu, Feb 23, 2012 at 9:32 AM, Shahzad Ahmad <span dir="ltr"><<a href="mailto:shahzad@bytesforall.pk">shahzad@bytesforall.pk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Thanks Anriette for the kind message.<br>
<br>
We think that this advertisement is just to complete the bidding and<br>
documentary process as it is required now otherwise, competing parties end<br>
up in the court. The system would have already been in place by now... who<br>
knows?<br>
<br>
Right now, we are working on our public statement against the proposed<br>
system. Will post it here and send to you separately.<br>
<br>
Best wishes<br>
Shahzad<br>
<div><div></div><div class="h5"><br>
<br>
-----Original Message-----<br>
From: <a href="mailto:governance-request@lists.igcaucus.org">governance-request@lists.igcaucus.org</a><br>
[mailto:<a href="mailto:governance-request@lists.igcaucus.org">governance-request@lists.igcaucus.org</a>] On Behalf Of Anriette<br>
Esterhuysen<br>
Sent: Thursday, February 23, 2012 6:47 PM<br>
To: <a href="mailto:governance@lists.igcaucus.org">governance@lists.igcaucus.org</a><br>
Subject: Re: [governance] Pakistan: National URL Filtering & Blocking<br>
System.<br>
<br>
Thanks for this Shahzad. Very relevant for next week's panel. The<br>
transparency of putting out a public call for bids for filtering and<br>
blocking systems is quite remarkable :)<br>
<br>
It shows confidence, it sends a strong public message, and it will also<br>
encourage competition and innovation in the internet industry to come up<br>
with 'smarter' ways of filtering. All very disturbing.<br>
<br>
Anriette<br>
<br>
<br>
On 23/02/12 06:14, Shahzad Ahmad wrote:<br>
> Folks,<br>
><br>
><br>
><br>
> Forwarding for your kind information, the little news and the grand<br>
> plans of Government of Pakistan to build Great Firewall.<br>
><br>
><br>
><br>
> We believe that it coincides well with the UN's Experts Panel on 29th<br>
> Februaryand the panelists may like to raise this?<br>
><br>
><br>
><br>
> RFP is attached and here is the link:<br>
><br>
><br>
><br>
> <a href="http://ictrdf.org.pk/RFP-%20URL%20Filtering%20&%20Blocking.pdf" target="_blank">http://ictrdf.org.pk/RFP-%20URL%20Filtering%20&%20Blocking.pdf</a><br>
> <<a href="http://ictrdf.org.pk/RFP-%20URL%20Filtering%20&%20Blocking.pdf" target="_blank">http://ictrdf.org.pk/RFP-%20URL%20Filtering%20&%20Blocking.pdf</a>><br>
><br>
><br>
><br>
> *An excerpt from the RFP: *<br>
><br>
> "/Each box should be able to handle a block list of up to *50 million<br>
> URLs* (concurrent unidirectional filtering capacity) with processing<br>
> delay of *not more than 1 milliseconds*."/<br>
><br>
><br>
><br>
> Bytes for All, Pakistan have been expecting that there will be major<br>
</div></div>> crackdown on the Internet towards elections. and this probably is the<br>
<div><div></div><div class="h5">> start of things to come in the near future. We are going to issue a<br>
> public statement on this and will share the updates.<br>
><br>
><br>
><br>
> Best wishes and regards<br>
><br>
><br>
><br>
> Shahzad Ahmad<br>
><br>
> <a href="http://www.bytesforall.pk" target="_blank">www.bytesforall.pk</a> <<a href="http://www.bytesforall.pk" target="_blank">http://www.bytesforall.pk</a>><br>
><br>
><br>
><br>
<br>
--<br>
------------------------------------------------------<br>
anriette esterhuysen <a href="mailto:anriette@apc.org">anriette@apc.org</a><br>
executive director, association for progressive communications <a href="http://www.apc.org" target="_blank">www.apc.org</a><br>
po box 29755, melville 2109 south africa tel/fax <a href="tel:%2B27%2011%20726%201692" value="+27117261692">+27 11 726 1692</a><br>
<br>
<br>
<br>
</div></div><br>____________________________________________________________<br>
You received this message as a subscriber on the list:<br>
<a href="mailto:governance@lists.igcaucus.org">governance@lists.igcaucus.org</a><br>
To be removed from the list, visit:<br>
<a href="http://www.igcaucus.org/unsubscribing" target="_blank">http://www.igcaucus.org/unsubscribing</a><br>
<br>
For all other list information and functions, see:<br>
<a href="http://lists.igcaucus.org/info/governance" target="_blank">http://lists.igcaucus.org/info/governance</a><br>
To edit your profile and to find the IGC's charter, see:<br>
<a href="http://www.igcaucus.org/" target="_blank">http://www.igcaucus.org/</a><br>
<br>
Translate this email: <a href="http://translate.google.com/translate_t" target="_blank">http://translate.google.com/translate_t</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><span style="border-collapse:separate;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><span style="border-collapse:separate;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"></span></span> Brett Solomon<br>
Executive Director | Access<br><a href="http://accessnow.org/" target="_blank">accessnow.org</a> | <a href="http://rightscon.org/" target="_blank">rightscon.org</a><br>+1 917 969 6077 | skype: brettsolomon | @accessnow<br>
<br>
<a href="http://www.europarl.europa.eu/parliament/public/staticDisplay.do?language=en&id=42" target="_blank"></a><br>