PaperCut White Paper

A guide for PaperCut Resellers Print Management in thePrivate CloudThis guide is intended for PaperCut Resellers looking to expand theirsolution skills. It provides an overview of the PaperCut approach to Private
Cloud solutions and some discussion of best practices.

Overview
Cloud deployment has become one of the biggest growth areas in IT, primarily
because when implemented in the right way, it can reduce overheads andincrease flexibility. The term “cloud” itself just means software deployment
to servers that are connected via the internet, and could be located almost
anywhere. “Private Cloud” generally refers to a cloud-based solution thatisolates each cloud tenant’s applications and data from other tenants, whereas“Public Cloud” servers and services may share infrastructure between multipletenants.
The increasing numbers of PaperCut customers opting for cloud deployment
highlight both PaperCut’s cloud readiness and a growing market trend. In thispaper we will explore some of the key technical issues and explain some bestpractices for solution design in a cloud environment.

© 2014 PaperCut Software International Pty Ltd. All rights reserved.

1 of 8

Benefits of Cloud Hosting
1. Reduced Hosting Costs
Customers don’t need their own server infrastructure, or a maintenanceworkforce with domain knowledge. This means that Customers new to Print
Management can avoid purchasing and maintaining new hardware. Existing
Customers can reduce their rackspace footprint and/or infrastructure
overhead by moving Print Management into the Cloud.
2. Flexibility
Infrastructure capacity can be more easily scaled to meet changing customerneeds.
3. Disaster Recovery
Site duplication, data syncing and recovery planning can be delegated to thehost provider. Due to economies of scale this can be achieved at a significant
saving to the customer when compared to the cost of managing thesefunctions themselves.
4. Payment gateway isolation (PCI compliance)
For customers where payment card data security is essential to their day-today business, a cloud based managed service has the advantage of isolating
payment gateway integration at the cloud data centre, which may help toreduce PCI DSS compliance costs.

Challenges and Constraints of Cloud Hosting
There are also some challenges and constraints that should be taken into
account when considering a cloud hosted solution:
1. Bandwidth
It is essential that the customer site(s) have sufficient bandwidth to support
the Print Management solution traffic. If the print server itself remains local,
traffic will be modest. If the print server is also deployed to the cloud, it isimportant to allow for the transmission of large documents to the cloudserver<need some ballpark figures>
2. Latency
Latency is not a major issue unless the Customer requires Secure Release
and/or deploys their Print Server to the cloud. With Secure Release it isimportant for a good user experience that MFD response times are short,which in turn requires the WAN connection to have low latency - say, nomore than 100ms, which will equate to a roughly 1 second response time forauthentication and job display.

© 2014 PaperCut Software International Pty Ltd. All rights reserved.

2 of 8

3. WAN Reliability
The link to a cloud-based PaperCut server may be a single point of failure or
fallback in some circumstances, so the WAN link needs to be reliable.
4. Security
A basic cloud deployment with minimal security is fairly straightforward,
but implementing a secure system that integrates properly with enterprisenetwork infrastructure can be more complicated. It is important tounderstand the levels of security and privacy required for a given solution,and design the deployment accordingly. A key component is the Virtual
Private Network (VPN). Customers with existing Cloud infrastructure (e.g. fordocument management) may already have suitable VPN infrastructure, but
customers contemplating their first Cloud deployment may need assistance inunderstanding why they need a VPN, and how to specify it.

Why Private Cloud?
Cloud Deployment Scenarios
Since a Cloud deployment connects important internal infrastructure (MFDs,user desktops) to a cloud hosted PaperCut server, it is ideal practice to isolate
those connections from the public internet. This is done by implementing asecure encrypted link between the customer site and the host. This encrypted
link, or VPN tunnel, ensures secure and restricted access to the hosted
applications and data, and allows end users to treat the hosted data andapplications as if they were hosted locally.
Such a deployment is referred to as a Private Cloud deployment, with none of
the cloud hosted components visible or accessible via the public internet
This requires the host site to be set up either as a Private Cloud, or more
likely as a Virtual Private Cloud (with servers hosted on VMs) and for a VPN
tunnel to be configured between the customer site and the host site. In manycases the cloud hosting provider will take care of this, but for those whoare interested, PaperCut have documented a complete example VPC/VPN
deployment using Microsoft Azure <insert link here>.
As can be seen from the table shown above, using a Virtual Private Cloudrequires either single tenancy, or “virtualised” single tenancy, where eachcustomer is allocated their own VMs on shared hardware. Multi-tenancy,
where many customers may be sharing not just the hardware but theoperating server instance, is suited only to low/no security applications,where privacy and data integrity are not important and where it is feasible forhosted servers to be visible to the internet, or at least to all customers of thehost.

© 2014 PaperCut Software International Pty Ltd. All rights reserved.

3 of 8

Cloud DeploymentTenancy

DescriptionNetwork

Public Cloud

Multi tenancy

Cloud customers share
Public network
server infrastructure. link(s) within cloud.
Public internetlink(s) to cloud.

Private Cloud

Single tenancy

Each cloud customer
is allocated one ormore dedicatedservers for theirapplications and data.

Private Cloud

Multi-tenancy(VM separation)

Each cloud customer
Public networkis allocated dedicated link(s) within cloud.
virtual servers for their
Public network
applications or data.
link(s) to cloud.

Public networklink(s) within cloud.
Public networklink(s) to cloud.

Why PaperCut?
Web-based Admin
PaperCut is administered via a web-based UI, which is easy to secure and istolerant of network latency.
VPN-friendly communications protocols
PaperCut uses secure and compact http-based communications protocols
on defined ports. This makes security configuration of firewalls and VPNs
relatively straight forward. The protocols also make communications between
the PaperCut server, MFDs and user desktops latency tolerant, which canbe important when communications extend outside the organization to an
external hosting provider.
Deployment architecture (distributed server model)© 2014 PaperCut Software International Pty Ltd. All rights reserved.

4 of 8Where the print server is located in the cloud, the PaperCut Print Provider canbe co-deployed on the same cloud Print Server infrastructure.

Platform neutral
Cloud deployment may also open up opportunities for different platformchoices. In an in-house deployment, PaperCut will usually be hosted onwhatever server OS the customer IT team is equipped to support - often
Windows. In the Cloud, there may be other options available, since OS level
maintenance and support will be provided by the host provider. PaperCutruns very well on Linux, and virtual Linux servers are often more costeffective than an equivalent virtual Windows server.
Whichever level of hosting and platform is chosen, it is important tounderstand bandwidth and latency requirements and match its cloud provider
capabilities to those requirements.
Where the Print Server is deployed in the cloud, we also recommend
implementing Quality of Service (QoS) rules to control the bandwidthavailable for transmission of print documents and ensure that any spikes inprinting traffic do not affect other bandwidth sensitive network activity.
An important consideration, particularly for existing PaperCut customers, will
be managing the transition into the cloud. Customers who wish to manage
their own cloud deployment may still require assistance to:• get their cloud environment set up;• to migrate any existing data;• to move into production.
Your ability to provide this service will be an important point of difference for
Cloud aware resellers.

© 2014 PaperCut Software International Pty Ltd. All rights reserved.

5 of 8

Some customers will be happy to take over management themselves once thesystem is up and running, but as indicated above, others will be interested
in a complete managed solution. For the ASC or reseller, this means either
hosting the infrastructure themselves or managing the relationship with
the infrastructure provider and in either case managing the PaperCut (andpossibly a Print Server) application itself.
PaperCut resellers should already have the requisite PaperCut management
skills, and it would make sense to look at strategic partnerships to provide theCloud infrastructure.

Cloud Infrastructure Best Practices
There are various options for cloud infrastructure, ranging from genericinfrastructure component suppliers such as Amazon or Microsoft Azure
through to dedicated print industry suppliers who will configure and maintainall of the Print Server and PaperCut infrastructure for their customers.
A key decision for customers will be whether or not they wish their PaperCutcloud deployment to be a fully managed service, managed transitional orcustomer managed.
Our experience indicates that there are customers taking each of those paths,
and the PaperCut model accordingly supports all of them. It is important for
PaperCut Authorized Solution Centers (ASCs) and resellers to be open to eachapproach and to work with the customer to select the appropriate choice.
For customers without dedicated IT support staff and/or little experience ofPrint Management it will make sense to use a dedicated provider who will
look after the Print Server and PaperCut infrastructure. A dedicated provider
will also be able to assist in setting up the VPN tunnel to the customer site. We
are aware of several cloud providers with PaperCut experience.
If however the customer has the requisite expertise in-house, and wishesto set up and manage a cloud deployment themselves, Microsoft Azure is
probably the most common choice for hosting. PaperCut have tested various
cloud deployments on Azure infrastructure, and have produced a guide for
Azure setup. <link again here>.
Between those extremes lie at least two other approaches. An ASC or reseller
may wish to act as intermediary, developing their own relationship with ahosting provider and managing the details of deployment and maintenancefor their PaperCut customers. Or a reseller may either help a customer findthe right host, or work with the customer’s existing host to set up PaperCut.

© 2014 PaperCut Software International Pty Ltd. All rights reserved.

6 of 8

In all these cases the ASC or reseller will need to be comfortable with all
aspects of cloud deployment. PaperCut have developed a Private Cloud
Certification Program for ASCs and resellers which will help customers toidentify the right partner for their Private Cloud deployment.
Certification also assists to mitigate risk in the eyes of your customers. Being aPaperCut Private Cloud Certified Partner signifies that you have the requiredskills and expertise to design, install and manage Private Cloud architecture.
3 Best Practices in moving applications to cloud hosting
1. Identify which management structure you will offer your customers.
2. Work with cloud infrastructure providers to design the best platform
3. Attain PaperCut Private Cloud certification
4. Create standard templates that cover the various aspects of your offering
e.g. testing SLAs, project planning and scoping

Pre-deployment Checklist
þ Work with customer to define best services modelþ Architecture design for cloud and on premises services
þ Understand network reliability, latency and bandwidth requirements
þ Select an infrastructure hosting provider
þ Understand networking and VPN integration points, identify relevant 		Customer SMEs
þ Agile deployment plan with customer

Deployment Checklist
þ Consult VM Sizing Guideþ Consider QoS Rules
þ Go through VPN security checks/tests
þ Work with Customer to develop Backup Plan and check backups
þ For a Managed-Transitional deployment, develop plan for hand over ofinfrastructure to the customer
þ Test and manage go-live© 2014 PaperCut Software International Pty Ltd. All rights reserved.

7 of 8

ConclusionCloud infrastructure has become cheaper and more easily available, offeringsignificant savings over in-house deployment.
Many customer organisations have already begun to move their printing
infrastructure into the Cloud, and have found PaperCut to be the ideal Print
Management solution for a cloud deployment.
Many others are switching their other infrastructure to Cloud hosted
solutions, but are unaware that they can do this with Print Management.
This is the ideal time for PaperCut ASCs and resellers to add Clouddeployment options to their portfolios, and to do so they will need to beconversant with all of the issues and options discussed above.

Resource Links

PaperCut Private
Cloud Web Site

Private Cloud
Impementation Guidewith MS Azure

Private Cloud
Knowledge Base& Customer FAQs

Private CloudReseller FAQs

Private Cloud
VM Sizing Guide

Private Cloud
Certification

Private Cloud
White Paper

Private Cloud
Tender Response© 2014 PaperCut Software International Pty Ltd. All rights reserved.

8 of 8