IT Infrastructure Requirements (Network & Hardware

Standards)

Content Last 10 Dec Feedback for this Subject Matter Expert

Page VERIFIED
properties status: reviewed: 2020 page?

Janelle Lynch
tl;dr janelle@stripe.com
Network
Hardware
Ongoing IT Support

AUDIENCE

Network Generalists

Specialists
For network connectivity for Service Associates’ equipment, Supplier will use a redundant fully-airgapped
network stack of Stripe-Supplied Equipment, to be placed in a secured IT distribution room or datacenter Premium
location at a Supplier Facility or Remote Location. There will be no physical or logical crossover between
Supplier and Stripe networks in either the operational or training areas. Sales

The Supplier will provide:

Special Considerations
Rack space and cable management:
Related RPs and Macros in Lumos
Must have minimum of 14 rack units of available rack space in 4-post racks that are
bolted to the floor, Further Reading
5RU reserved rack space for servers and appliances, Common/Other Phrasings
9RU+ reserved rack space for firewall, remote management, OOB, core and
access switches, External Resources
1RU of ADDITIONAL rack space for every block of 48 agents above
80 agents.
Must have minimum of 36 inches clearance around entire rack,
Must have horizontal and vertical cable management within the rack,
Should have enclosed, horizontal ladder management for cabling,
Should have fully enclosed racks that have lockable doors both front and back,
keys kept in a secured location that is fully auditable as who checked out the
key, why, who requested/authorized it from Stripe, when it was checked out
and when it was checked back in.
Power and cooling:

Must have 2000W (+120W Per 48 agents over 80) total accessible power,
Must have 2 independent/separate power circuits,
Three-phase power is preferred, but single-phase is fine; most office buildings
are single-phase,
Must have 2 separate PDUs providing AC (alternating current) power,
Voltage will not matter as network equipment is auto-sensing between 120
and 240 VAC,
Must have minimum of 18 C13 power outlets,
Must have (2) C13 Power plugs for each network device,
(2) Additional power outlets per 48 users over 80.
APC PDUs Recommended (AP8959)
Must have 1 ton, or 12,000 BTU/per hour, cooling capacity per 600 sq feet/55 sq
meters,
Must have capacity to keep room at 72 Fahrenheit/22 Celsius or cooler,
Must have capacity to keep room at 55% humidity or lower,
Should have portable air coolers onsite,
Should have ability to monitor and alert local onsite staff in case of HVAC
failures or deviations from the standards.
Must have horizontal wiring to the workstations,
Must have network Patch cables from horizontal wiring to the network gear, as well as to the
end device,

That Stripe-Supplied equipment (which will be purchased, configured, and managed by Stripe) will
include:

(2) 1U firewall appliances

Typical model: Juniper SRX1500
(2) 1U core switches (if the site has more than one additional IDF outside of the MDF)
(2+) 1U access switches
 Typical model: Juniper EX3400-48T
1 physical port per agent workstation + 24 ports reserved for infrastructure
(Ex: 100 agents: 100 ports + 24 reserved ports = 124 ports / 48 ports per
switch = 3 1U switches)
Headcount used for port count is expected 1 year maximum
(1) 1U Remote management server(s)
(1) 1U rack mount out-of-band management server
Miscellaneous rack mount servers and appliances (up to 5U)
Miscellaneous fiber patch cables and optics

Internet connectivity:

Two internet circuits each from a different Carriers/ISP

1Gbps throughput each
Direct Internet Access
Terminated in MPOE
LX/1310 nm/Singlemode handoff
Out of Band Management:
A separate DSL/Cable/etc. connection with a static IP
1mbps minimum throughput
Terminated in MDF where network equipment resides
There are two redundant ISPs and a dedicated out of band connection for all sites. If an ISP
fails, all sessions will come from a new IP address so there may be a momentary interruption of
service that will resolve once all connections reset.

Hardware
Stripe requires the following equipment to be provided by Supplier. Stripe will configure, maintain and
manage these devices on the backend in accordance with Stripe’s image and access control policies;
and Stripe will provide all required software and operating system and other software updates; and
Supplier local IT will provide remote hands support for Stripe:

**Chromebox (1 per Service Associate) with minimum specifications:

Intel i7 CPU
8GB RAM
16GB storage
Wired keyboard and mouse included
Example models:
https://www.cdw.com/product/asus-chromebox-3-n020u-core-i7-8550u-8gb-
ram-32gb/5105984#PO
https://www.cdw.com/product/acer-chromebox-cxi3-i716gkm-mini-pc-core-i7-
8550u-1.8-ghz-16-gb-64/5011599?enkwrd=CXI3-I716GKM
**Chromebook (1 per manager or trainer) with minimum specifications:
Intel i5 CPU
8GB RAM
16GB storage
Example model:
https://www.cdw.com/product/google-pixelbook-12.3-core-i5-7y57-8-gb-ram-
128-gb-ssd/4825459?pfm=srh
HDMI or DisplayPort compatible 24” displays, 1 per Service Associate
Wired noise-cancelling over-ear headsets with microphones optimized for phone calls (for
agents involved with phone based support only)
All appropriate CAT6 patch cabling
UPS power for all racked equipment
Proper cooling (Additional 1-ton of cooling for Stripe equipment)

Stripe-supplied workstation Service Associate equipment will include:

Yubico FIDO U2F Security Key USB Device, 1 per Service Associate / Supervisor

Not to be shared between active Service Associates / Supervisors

Not to be removed from the Supplier’s secure premise (must be checked in and out at
the beginning and end of Service Associate shifts with auditable check-in/out logs for
90 days)

**Please note, we've recently discovered that a number of existing enrolled vendor Chromeboxes and
Chromebooks are too old to support TLS 1.3. The following models are currently in use but should n
ot be purchased going forward:

Acer Chromebook 14 (CB3-431)

Acer Chromebook 14 for Work (CP5-471)
Acer Chromebook 15 (CB3-532)
Acer Chromebook 15 (CB5-571, C910)
HP Chromebook 11 G3/G4/G4 EE
HP Chromebook 14 G4
Acer Chromebox CXI2 / CXV2
ASUS Chromebox 2 (CN62)
**The Google Pixelbook, Google Pixelbook Go, Acer Chromebook 13 (CB713-1W), Dell Chromebook
3400, and Lenovo Yoga C630 Chromebook are all good.

**The HP Chromebox G2, Acer Chromebox CXI3, and ASUS Chromebox 3 are also all fine.

Vendor IT: please check with Stripe IT before making a large purchase of devices if it's not listed above
as models that are known to work in the Stripe environment. In particular, we want to make sure that the
TPM version is 2.0. This can also show up as family=322e3000.

During the COVID-19 work from home policy, certain sites might encourage or require webcams
(particularly for new hires). Here are recommended models:

[Preferred Option] https://www.logitech.com/en-us/product/hd-webcam-c270

[Backup Option] https://www.logitech.com/en-us/product/hd-webcam-c615?crid=34
[BackUp Option] https://www.logitech.com/en-us/product/hd-pro-webcam-c920s

Further detail on IT specs to satisfy these requirements will be agreed by the parties in a scope
document.

Ongoing IT Support
Supplier will provide a designated IT point of contact for Stripe. This person will work remotely
with Stripe IT’s team for onboarding, troubleshooting, network-related issue escalations, and
ongoing support requests.
IT Support requests should be made by the above designed IT point of contact to Stripe via
email. Stripe will provide a dedicated support email address to be assigned to the Supplier at
time of implementation.