About the GSN

What is the Government Shared Network?

The Government Shared Network (GSN) provides a networking platform designed to meet the needs of the State Services.  It enables inter-agency collaboration and facilitates easier and more efficient access to information across a dedicated infrastructure secured to government standards.

High-speed data exchange among participating agencies can reduce the need for insecure, physical transfer of media to exchange information. Over time, agencies can exploit the interconnections to develop and deploy systems which allow direct business-to-business (B2B) transactions among agencies and with trusted business partners.

Governance arrangements will give effect to ownership of the GSN by participating agencies. Agencies retain control of their network infrastructure within a trusted corporate framework.  Participation does not exclude or limit an agency's ability to participate in connections or exchanges with entities outside the GSN.

Products available to participating agencies include:

• High-speed interconnection of agencies with adherence to a 'RESTRICTED' level security standard.
• Secure remote access for agency staff.
• A secure Internet Gateway with security features including, virus and SPAM filtering.
• Internet telephony.
• Access to storage options including storage on demand.

A number of key features of the GSN are available only through the GSN. Participation in a controlled access, secure government network is not available as a product from any commercial supplier.

GSN Metropolitan Fibre Networks

The metropolitan (metro) networks are based on dark fibre provided by a number of suppliers. Dark fibre ensures that the security and performance requirements are met, and an abundance of fibre in urban centres ensures a low entry price point.

Initially, there will be metro networks in Wellington and Auckland. Other centres will be added as available. The reach of the Wellington network will initially include the Wellington central business district (CBD). It will be extended to include the Hutt Valley and Porirua as suitable facilities become available in those areas. The reach of the Auckland network will initially include the Auckland CBD.

A connection to the metro networks enables interconnection (secure peering) with other agencies and with the connecting agency's other sites that are also connected to the GSN.

Agencies may take more than one connection for resiliency, or to connect additional sites.

The equipment at either end of the fibre determines the circuit speed to agencies. At this time, 1Gbps line drivers are very economical and will provide a marked improvement in the speed that agencies currently enjoy. When the equipment is refreshed, it is expected that 10Gbps line drivers will be of similar price. Therefore, participating agencies will be offered an automatic upgrade of performance at little or no additional cost.

The network uses a hub/spoke topology with dual hubs, which offers the following benefits:

• Performance can be guaranteed to the end point.
• Security cannot be compromised by the end point.
• No end point can affect other end points.
• A centralised security Policy Enforcement Point (PEP) can filter traffic between agencies.
• End point equipment can be located within an agency premise rather than in shared equipment closets.
• Demarcation points are simple.
• Applications and common connection points can be delivered centrally.

The design offers a model without bandwidth restrictions at a fixed price. It ensures that future bandwidth requirements can be met with little additional investment or increase in cost to agencies.

GSN National Network

The GSN national network is based on terminating high-speed connections from the major telecommunications service providers, and in future regional Urban Fibre Networks (possibly via an alternative nationwide optical network). The physical circuits are delivered to all GSN nodes and offer a very high level of resilience. The physical circuits can be logically split into virtual private networks (VPNs), providing a private network overlay for each agency. By default, sites connected to the GSN infrastructure have connectivity and transport to all other sites willing to receive traffic. A VPN infrastructure provides a closed group. It is possible for sites to both accept traffic from other GSN sites/users and to participate in an agency-specific VPN. It is also possible to construct VPN groups which encompass multiple agencies.

The GSN national network not only offers the typical commercial advantages of a syndicated procurement approach but also offers a choice of services along with rationalisation of infrastructure at sites where multiple circuits are terminated due to multi-agency tenanting.

A logical overview of the GSN is shown below.

Technology and Service Flexibility

The GSN is built on the concept of providing "best of breed" technologies and services through a multi-vendor sourcing strategy. A vendor-neutral service management function assures performance and effective integration across the GSN supplier community.

From the point of access, the GSN is technology-neutral and supports a wide range of access technologies. The GSN imposes as few restrictions on use as are consistent with maintaining overall security and service levels. This will ensure that users have access to optimum product sets and enables GSN to more readily adapt to agency requirements for new products and services.

Consistent with a commitment to flexibility and service, the GSN manages the configuration of the core and access networks relieving agencies of this burden. At the same time, the GSN supports agency control over internal and agency-specific policies and configurations including security and access control policies and address space configuration (IP addressing).

Over time, the GSN will introduce tools and facilities which allow agencies to self-manage most aspects of their subscribed services including activation and deactivation, configuration of services and standard and optional features and management of users and user access.

How do agencies participate?

View the agency implementation process or contact gsn@ssc.govt.nz for more information.