Platform architecture

Battle tested, secure and scalable

ORENCloud is a regional platform built on leading public cloud infrastructure and headquartered in two top-tier Malaysian data centres, AIMS Kuala Lumpur and CX2 Cyberjaya. We design, build and run it ourselves, for reliability, performance and security.

The ORENCloud platform runs in two Malaysian data centres, AIMS Kuala Lumpur and CX2 Cyberjaya, built on public cloud infrastructure from DigitalOcean, AWS and Cloudflare. It uses paired servers with real-time replication, DNS-SRV failover between sites, geolocation-aware firewalls and 24x7x365 monitoring. The 99.90% figure below is measured computed uptime; the contractual guarantee is 98% monthly uptime with service credits. See also the FAQ.

How a call travels through the platform

Every call and message passes the same layers: your device, our redundant network edge, three layers of security, and paired servers in two data centres, all watched around the clock.

ORENCloud platform architectureSecurity layersYour users and callersPhones, apps, Teams, browsers, WhatsAppNetworking redundancyYour own DNS name, failover between sitesSmart geoblockingAccess only from the places you allowNetwork firewallDrops noise, known attacks and intrudersApplication firewallService-aware inspection of what gets inPublic cloud backboneBuilt with DigitalOcean, AWS and CloudflareAIMS Kuala LumpurAccredited data centreCX2 CyberjayaAccredited data centreRack ARack BRack ARack BPaired servers per site, failover between sites24x7x365 monitoringORENCloud platform architectureSecurity layersYour users and callersPhones, apps, Teams, browsers, WhatsAppNetworking redundancyYour own DNS name, failover between sitesSmart geoblockingAccess only from the places you allowNetwork firewallDrops noise, known attacks and intrudersApplication firewallService-aware inspection of what gets inPublic cloud backboneBuilt with DigitalOcean, AWS and CloudflareAIMS Kuala LumpurAccredited data centreCX2 CyberjayaAccredited data centrePaired servers, failover between sitesRack ARack BRack ARack B24x7x365 monitoring of every layer

Select any layer to see what it does.

Your users and callers

  • Desk phones, the ORENCloud UC app on mobile and desktop, Microsoft Teams, web browsers and WhatsApp all connect to the same platform.
  • Supported connections use TLS and SRTP encryption, so calls and data are protected in transit wherever your team works. Coverage depends on the endpoints and configuration.
  • Calls to and from ordinary phone numbers reach the platform through our licensed carrier connections.

Networking redundancy

  • Private setups get their own DNS name, such as company.oren.cloud, for reliable and seamless access.
  • DNS-SRV based service failover points devices to a redundant location for near-instant cross-site recovery.
  • Redundant locations keep potential downtime to a minimum. Uptime commitments and service credits are on the service level guarantee page.

Smart geoblocking

  • Geolocation-aware firewalls restrict access to resources based on where the user or device is.
  • Sensitive data and communications stay limited to authorised users in specific regions or countries.
  • This extra layer mitigates threats and lowers the risk of unauthorised access, wherever your users are.

Network firewall

  • Every service sits behind at least two firewalls.
  • The first filters out unwanted noise and traffic, and blocks known attacks and unauthorised access attempts before they reach anything else.

Application firewall

  • The second firewall works at the application layer and is service aware: it understands the voice and messaging traffic it protects.
  • Together the two firewalls form a multi-layered defence against potential threats.

Accredited data centres

  • Headquartered in two top-tier Malaysian data centres: AIMS Kuala Lumpur and CX2 Cyberjaya.
  • Facility certifications belong to the data-centre operators and differ by site. The operators name ISO/IEC 20000-1, ISO 9001, TIA-942 and the Green Building Index as certifications, and TVRA as a security assessment. Ask us for the current certificate, edition and scope for each facility.
  • Accredited sites support the quality, security and sustainability of the infrastructure your calls run on.

Server redundancy

  • Every instance on our shared servers is replicated in real time to a paired server.
  • Paired servers sit side by side in different racks within the same data centre, so a rack failure does not take your service down.
  • Combined with DNS-SRV failover between sites, this keeps your business running when hardware fails.

Public cloud backbone

  • ORENCloud is a regional platform engineered on the infrastructure of leading public cloud providers, including DigitalOcean, AWS and Cloudflare.
  • Unlike conventional resellers, we design, integrate and deploy customised solutions on that infrastructure.

24x7x365 monitoring

  • We monitor servers, network devices and telecom and internet service providers around the clock.
  • Several independent monitoring, error tracking and log analysis systems run both inside and outside the data centres, including from DigitalOcean in Singapore.
  • Real-time monitoring and instant alerts let us find and fix issues before they disrupt your service.

Measured uptime: 99.90% computed, and striving for better

Dependability and security come first. Even with a force majeure event in the period, our audit of monitored servers up to 2022 showed these figures. Real-time data replication and DNS-SRV failovers make near-instant cross-site recovery possible.

These figures are measurements from our monitoring and audit, not a promise. Our contractual commitment is the 98% monthly uptime guarantee, with service credits if it is missed.

99.90%
Computed uptime (measured, not the contractual guarantee)
99.99%
System uptime of monitored servers, audit up to 2022
99.72%
Service uptime for all essential infrastructure over the same period

Need a private or PCI-DSS ready instance?

We set up dedicated instances on your premises, in our cloud or in a private cloud of your choice, built on the same architecture.