Daniel Halbe von OX sprach auf dem Univention Summit 2020 über die Herausforderungen bei der Planung und dem Betrieb von landesweiten Email- und Collaboration-Lösungen.

1. Unter eigener Kontrolle
Herausforderungen bei Planung und Betrieb von landesweiten
Email- und Collaboration-Lösungen.
Daniel Halbe
Open-Xchange GmbH
daniel.halbe@open-xchange.com

2. Agenda
2
01 Open-Xchange Company Overview
02 Open-Xchange Product Overview
03 Challenges: Architecture Scaleout, Security, Onboarding
04 OX App Suite Overview
05 Next steps

3. Open-Xchange
3
2009 2010 2011 2012 2013 2014 2015 2016 2017 2018
OX App Suite OX Text
OX Spreadsheet,
OX Drive, OXaaS
Dovecot
and PowerDNS
OX App Suite 7.10, Native Apps,
OX Presentation
255 Employees
68% in R&D, Services
and Support
Open-Xchange –
founded 2005
2012 –
Open Office team
2015 –
Dovecot & PowerDNS
2016 –
Mobile developers
15M
Sold seats
24 M 42 M 60 M 82 M 120 M 145 M 165 M 270 M+220 M

4. Some Open-Xchange Customers
4

5. Email
Fully featured email with business functionality:
Flagging, Multiple Inboxes, Drive mail, security,
Filtering, Signatures, Vacations, integration
with Calendar etc.
Calendar
Fully featured business grade calendar: Time
Zones, Scheduling, Multi Reminders, Public,
Shared, External support, CalDAV, resource
mgmt. etc.
Storage
More than just file storage: Preview images,
video, audio; Folders public, shared, external;
Email integration, Security, Document
integration, Versioning, 3rd party integration
etc.
5
The OX App Suite Core
OX App Suite basics

6. OX Documents
Edit directly in the web UI Text documents,
Spreadsheets & Presentations.
Collaborative editing, MS support, present
presentation, integrated, fully featured etc.
Security
One click PGP email encryption, auto
guest account creation for external users,
OX Drive & documents integration,
optional OX Abuse Shield integration.
Mobile
Use either Open-Xchange built mobile
apps or use synchronization capabilities to
optimize mobile device connectivity.
6
Extending the OX App Suite feature set
OX App Suite for more demanding users

7. One platform that does it all
7
OX Core
Email
Calendar
Tasks
Contacts
Dovecot Pro
IMAP server
Support for object storage
Archiving
OX Guard
Single-click security
Email and files
PGP
Email
Productivity
Security
OX Text
Cloud Text Editor
Collaboration
Round Trip
MS Compatible
OX Spreadsheet
Cloud Spreadsheet
Collaboration
Round Trip
MS Compatible
3rd Party ISVs
CRM
ERP
Email Migration
OX Viewer
PDF
Word
Excel
PowerPoint/Presentation
OX Portal
Digital Hub
Customization
OX Drive
Cloud Storage
File management
Sharing
Native Device Apps
DNS
OX PowerDNS
Authoritative DNS
Recursive DNS
Upsell/Cross Sell
In App
Info Text
Advertising/Display
Integration
Storage
Email
Calendar
3rd party Feeds
OX Mobile
Native Device Integration
Sync of PIM
Functionality
Clients
Web
eM Client
Mobile
User Experience
Responsive Design
Tutorials/Guides
Integrated solution
All devices
OX Presentation
Cloud Presentation Editor
Editor & Presenter
Round Trip
MS Compatible
Delivery
In-house
OXaaS

8. Technological
Innovation
Technology moves at a
fast pace. Companies
need to invest heavily in
order to get the benefits
of the latest innovations.
Skills Needed
To maintain an in-house
IT infrastructure you
need experts. Hiring or
outsourcing is expensive
Scalability
Scaling is a black art:
sizing mistakes can
waste money;
rebuilding infrastructure
is costly.
Easy Access
24/7 access on all
devices and locations is
a must, but architecting
this securely is difficult.
8
Challenges (beim zentralen Betrieb)

9. Infrastructure
Technology
Building a business IT
infrastructure is hard.
Architecting it is complex
and choosing the right
components is confusing
Security
Security vulnerabilities
and threats are identified
every day. Security is
complex. Defending and
recovering IT
infrastructure is hard
Performance
Making sure your
infrastructure and
performance keeps up
with demand requires
constant attention.
Cost
Local IT is costly.
Especially if it is
implemented sub-
optimally.
9
Challenges (beim zentralen Betrieb)

10. The OX Architecture
Built for real life carrier-grade customers
Not an enterprise product forced to evolve
Build specifically for the SaaS market;
residential and business
Built to provide carrier-grade reliability
Built as a stateless, highly available,
multi-site solution
Dozens of customers with years of
experience operating at scale
Built to scale out in a large environment
Built from day one for tens of millions of users
Built to fit into an established business
Integrates into existing storage, IdM, security,
and provisioning systems
Customizable to fit existing branding, themes
and conventions
Built on open source and standards
More flexibility, better integration, better support
Trusted partner for you and your customers
10
01
02
03
04
05

11. High Level Architecture
Designed to scale-out to
hundreds of servers and
tens of millions of users
Virtualization agnostic
Multi-site support
Each major component
can be deployed on its own
dedicated node
11
Browsers, mobile apps
& sync Mail clients Remote MTAs Mail clientsCloud
HTTP/IMAP/
SMTP(S)
HTTPS IMAPS/POPS SMTP SMTP
Load Balancers
1 2 3 424
5
Apple, Google, Dropbox,
Box, OneDrive, ISPs
Public DMZ
Backend network
Storagenetwork
OX Drive Storage Mail storage
Object Storage, NAS
HTTP(S) IMAP/POP(S) SMTP SMTP DNS
Inbound SMTP/AVASOX Proxies
6 7 8 9 10
Dovecot Proxies Outbound SMTP/AVAS PDNS Recursor/Authoritative
20
21
Customer network
Provisioning
LDAP
Document Converter MySQL-Galera Cluster OX APP Suite Middleware Dovecot Director Dovecot Backend Cassandra LDAP Directories Log servers
25 11 12 13 14 26 15 16SQL
IMAP/POP/LMTP(S)IMAP/POP/LMTP(S)HTTP(S)
17 18
22
19
23

12. 12
Open-Xchange Security Organization
• Company wide security risk assessment
and mitigation
• Full coverage
• Security Officer
• Strong policies and contracts
• Data protection policies
• Yearly re-certification
• Development process with policies and
approvals
• Full transparency
• Quarterly reviews and documentation by cross
department OX security team
• Technical measures
• ITILv3 based processes
• Quarterly reviews and documentation by
process owner
• Secured tool-chains for support and operations
• Certified locations and suppliers
• Security audits
Organization Software Operational
Information Security Management System (ISMS), ISO 27001
sponsored by C-Level, owned by COO

13. OX Cloud Email Protection
Mature, feature-rich, fully integrated solution
13
World class system,
used by large multi-
million user ISP/Telco
customers worldwide
Spam, malware and
abuse protection
Phishing protection Commercial email
classification (Social,
Marketing, Spam,
Transactional, Finance etc.)
Safe unsubscribe
feature
Reporting Feedback Loop
Subscription
Anti-abuse policies

14. OX Cloud Abuse Shield
Handling webmail abuse effectively
• Most ISPs/Mail Providers have protections in place for SMTP Abuse
• Brute-force password detection
• Ratelimiting
• Limiting abusive behavior
• Detecting compromised accounts
• GeoIP Restrictions
• But very few have the same protections for WebMail/POP/IMAP
• Despite many of the same problems
14

15. User Onboarding
15
Introduction
Assessment
Research
Partner
Onboarding
User Engagement User
Onboarding
Growth
Hacking PreSales
GTM
Lifecycle
Customer Success @ OX
 Introduction of services
 Overview of collateral portfolio
CS Project @ Customer
 Assessment of current status at customer
 Definition of CS engagement at customer
 Project plan outlines
Training & Demo
 Onboarding of internal teams, mainly for
product, marketing, sales and care teams
 Creation of training curriculum
Product Launch
 Preparing full product launch user facing,
incl. com’s plan
 Production of collateral
 Launch activities with sales / care agents
Extended User Onboarding
 Post-launch communication to guide
users deeper into the product use
 Addressing user questions and facilitating
extended user onboarding
 Tips & Tricks
Customer Satisfaction
 Measuring satisfaction
 Collecting user feedback
through surveys, research portal
and other marketing research
measures
 Analysis of metrics
Growth & Improvement
 Ongoing iterations on all user
interactions and product improvements
 All activities focused on GH core
activities to increase revenue and
retention

16. OX App Suite - Deployment options
One product, three premium offerings
16
OX App Suite Cloud
OX App Suite - highly optimized
and standardized
Hosted and managed by OX in
OX datacenters
Best priced hosted solution
Lowest level of Open-Xchange
services engagement
OX App Suite On-Premise
The full power of OX App Suite
in customers data centers
Best per user pricing compared
to Managed or Cloud
High level of Open-Xchange
services engagement

17. OX App Suite - Deployment options
One product, three premium offerings
OX App Suite Managed
OX App Suite with flexible
branding and customization
options
Open-Xchange/Customer
co-owned and hosted in
Open-Xchange datacenters
Premium price point
Med level of Open-Xchange
services engagement
17
OX App Suite On-Premise
The full power of OX App Suite
in customers data centers
Best per user pricing compared
to Managed or Cloud
High level of Open-Xchange
services engagement
OX App Suite Cloud
OX App Suite - highly optimized
and standardized
Hosted and managed by OX in
OX datacenters
Best priced hosted solution
Lowest level of Open-Xchange
services engagement

18. Taking Care of Your Email
OX App Suite Cloud benefits at a glance
OX App Suite Cloud is a turnkey mail platform solution
hosted by Open-Xchange
• We manage your email stack for you
• reducing complexity, controlling cost
• freeing up resources for greater business flexibility
• No worries about security: malware, phishing & spam
• Uptime and reliability becomes our problem
• We manage growth in hardware and storage costs
• We deal with end user expectations and rapidly evolving markets
by delivering a competitive email experience
18