Security Policy

This page provides an overview of the security measures taken by anynines to protect content and user data hosted on our platform from unauthorized access.

Data center

SkyWay Data center has a RFID+PIN locking admission control system for all servers and server rooms. Furthermore it’s a TIER III level data center compliant to guidelines set out by the German Federal Association for Information Technology, Telecommunications and New Media (Bundesverband Informationswirtschaft, Telekommunikation und neue Medien e.V., BITKOM).

Find further information and security certificates on the SkyWay web page.

Data Storage

anynines stores your persistent data in two ways. We differentiate between object storage and block storage. All hard drives with errors will be exchanged immediately and destroyed on the premises. No data will leave our data center without our explicit approval.

Block storage

We build a replicated and distributed glusterFS cluster and 10GBit network to your service instances like PostgreSQL or MariaDB.

Each glusterFS data node has a Raid5 hardware raid and it’s replicated again to other nodes. So we have a double live protection of all data and can exchange failed hard drives in the glimpse of a second.

In addition we create a disaster recovery backup on a separate backup host. These backups are all encrypted with LUKS and 256 Bit AES.

Swift Object Storage

Our Object Storage (OpenStack Swift) is comparable with Amazon S3 and will be used for all types of static files like images, CSS stylesheets, videos and so on. Each application has its own user and secure containers with access control.

Swift has two separate components with storage nodes and proxy nodes. All data will be distributed over the whole cluster and delivered by the proxy servers.

Swift data has a redundancy of three times.

Data transfer & delivery

All connections to our API, auth service and Swift (CDN) use the standard Internet Protocol HTTPS to communicate with all clients. All certificates were changed after the openSSL heartbleed bug to ensure a maximum level of security to our users.

Internal data transfers use separate hardware switches to clearly seperate anynines users from other connections in our data center.

Bug reporting

We encourage responsible reporting of security vulnerabilities and software bugs. In case that you found a vulnerability, please report it to support@anynines.com and abstain from publicly announcing it before it is fixed.