The subject of this tender is the establishment and provision of three node- and edge-disjoint Internet connections including DDoS mitigation for DVZ M-V GmbH in the data center at the 19059 Schwerin site. The Internet connections are tendered in two lots and awarded separately, i.e. Lot 1: Two Internet connections, one connection being a demand item (option); Lot 2: An internet connection.

For redundancy reasons, the services are advertised in two lots:

- Lot 1: Two Internet connections incl. DDoS mitigation for DVZ M-V GmbH at location 1 (house A/B/C) - whereby the second additionally node- and edge-disjoint connection is designed as an option - and

- Lot 2: An internet connection including DDoS mitigation for DVZ M-V GmbH at location 2 (house A/B/C).

The following constellation is excluded for redundancy reasons when awarding the contract in accordance with Section 30 (1) VgV:

- One bidder is awarded the contract for both lots.

- A candidate/tenderer submits a request to participate/tender for only one lot. Thus, candidates/tenderers are obliged to submit requests to participate/bid for both lots.

DVZ M-V GmbH is the IT service provider of the state administration in Mecklenburg-Vorpommern, based in Schwerin. With the successful certification according to ISO 27001 on the basis of IT-Grundschutz, DVZ M-V GmbH owns one of the few data centers at country level that has certified its entire IT operations. For more than 25 years, DVZ M-V GmbH has been developing and operating the state-wide corporate network "CN LAVINE" for the state and local government of Mecklenburg-Vorpommern. It is one of the most modern administrative networks in Europe and supplies about 500 locations in Mecklenburg-Vorpommern. The entire network infrastructure is protected by a multi-level security gateway, because IT security is also a top priority for DVZ M-V GmbH. The complex gateway is composed of various components that are coordinated with each other. These include next-generation firewall systems, anti-virus and anti-spam filters and other security features.

In the data center, DVZ M-V GmbH offers various services that can be used flexibly. This includes the operation of virtual and physical servers, including the administration of the systems as well as the hosting of server environments with the operating systems Windows, Linux and Unix. In addition, DVZ M-V GmbH operates its own (customer) applications on various platforms.

Since 2000, DVZ M-V GmbH has also been the central IT procurement office of the state of M-V. In the premises of DVZ M-V GmbH, the state administration is therefore provided with central Internet access. This is currently made available to its Internet backbone by a provider via two different, spatially separated house entrances. Both IP transit connections are actively used.

Currently, separate and independent presentations of carriers are available in buildings A and C respectively. Applicants are free to set up their own new presentations on the premises of DVZ M-V GmbH or to use their own existing ones.

The place of performance is the data center of DVZ M-V GmbH at Lübecker Straße 283, 19059 Schwerin. If necessary, it may arise during the term of the contract that the provision of the service in a new building at the same address becomes necessary.

In the data center of DVZ M-V GmbH, a BGP termination router operated by DVZ M-V GmbH is available for the respective connection. On this BGP completion router, the respective Internet uplink of the applicant terminates. A physical 10GBASE-SR - IEEE 802.3 interface must be provided by the applicant. At the request of DVZ M-V GmbH, the interface must be physically and logically expandable. DVZ M-V GmbH expects a logical port channel consisting of two 10GBASE-SR - IEEE 802.3 interfaces. The maximum bandwidth to be provided per Internet connection is 20 Gbit/s (2x 10 Gbit/s port channel).

In doing so, the applicant ensures the transmission of Internet Protocol versions 4 and 6 (DUAL stack). The services of the Internet connections are to be provided daily from Monday to Sunday from 00.00 - 24.00 o'clock (24/7).

Against this background, the tender counterpart includes the establishment and provision of a total of three Internet connections (Lot 1 = 2 connections and Lot 2 = 1 connection) for DVZ M-V GmbH in the data center at the site 19059 Schwerin together with the provision of troubleshooting measures.

In addition, the subject of the tender includes services provided by the provider for intrusion detection and defense mechanisms, in particular to defend against distributed denial-of-service (DDoS) attacks. DDoS protection must be available for Internet Protocol versions 4 and 6 packets and must have automated defense mechanisms as well as reporting of averted attacks.

The contract for lot no. 1 is expected to be awarded by 04.12.2023. The services of lot no. 1 are to be handed over to DVZ M-V GmbH ready for operation within 6 weeks (implementation period) after the award of the contract at the latest. If the contract cannot be awarded by 04.12.2023, the above-mentioned implementation period nevertheless remains. Lot 2 has a realisation period of 12 weeks after the award of the contract.

See above under II.2.4. (to Lot No. 1)