Frequently Asked Questions
ÖªÒõÊÓƵ is a not-for-profit organization responsible for overseeing the development of Alberta’s cyber-infrastructureÌý— the advanced system of networks and computers that was created by and for university research and now supports government, educational institutions, not-for-profits, business incubators and entrepreneurs.
ÖªÒõÊÓƵ’s team of experts works behind the scenes to manage Alberta’s ultra-high-speed advanced research network — ÖªÒõÊÓƵNet — which connects local researchers to some 100 research networks around the world.
Working with partners in the public and private sectors, ÖªÒõÊÓƵ is also leading ‘above the network’ projects in Alberta to pilot emerging technologies that help to build e-infrastructure to support the province’s economic growth.
ÖªÒõÊÓƵ provides member organizations with unbiased, highly skilled expertise on high-tech products, processes or services, and access to shared IT services.
ÖªÒõÊÓƵ is funded by a grant from the Government of Alberta, as well as through membership and network administration fees. ÖªÒõÊÓƵ’s members receive an annual membership invoice in March or April of each year.ÌýÌý
We also receive additional funding to pilot and operate add-on services for specific members or sectors. These services include Peering and the Internet Buying Group, the Virtual Firewall Service, as well as more work-intensive projects. For these services, ÖªÒõÊÓƵ may charge additional fees to the users, or look to third-party grants for cost recovery, as needed. For the list of ÖªÒõÊÓƵ’s Add-On Services, see our page.
ÖªÒõÊÓƵ’s roots are in the Western Universities Research Consortium Network (WURCNet), formed in 1994. From this, the western provinces evolved their own Research and Education Network organizations in 1999, with Netera Alliance set up to manage and operate Alberta’s network. Netera became ÖªÒõÊÓƵ in 2007, with an expanded mandate to accelerate technology adoption in the province through the use of digital infrastructure.
Membership
Membership is available to any Alberta post-secondary institution, K-12 school district, public organization (such as municipalities and libraries), or organization in Alberta’s start-up incubator community.
Different ÖªÒõÊÓƵ services and pilot projects are available to different members, depending on their location and sector. ÖªÒõÊÓƵ’s membership team can discuss with you what services are available to your organization.
Class A members are typically post-secondary institutions with a significant research mandate. These members help set the direction for ÖªÒõÊÓƵ as voting members at its Annual General Meeting.
Class B members typically include post-secondary institutions (without a significant research mandate), as well as K-12 school boards, and public and not-for-profit organizations. These members do not vote in ÖªÒõÊÓƵ’s Annual General Meeting, but have access to the same services as Class A members.
To view the list of current members, visit our page.
If your organization is not listed, and you wish to become a member, contact: membership@cybera.ca.
ÖªÒõÊÓƵ’s members pay an annual fee that helps support the costs of coordinating network and ‘above the network’ services across the many jurisdictions represented by ÖªÒõÊÓƵ members.
Membership is divided into two categories. Each has a distinct annual fee structure.
Type of Membership | Type of Organization | Annual Membership Fees |
---|---|---|
Class A | Post-secondary institutions with a significant research focus | $30,000 |
Class B | Organizations that are connected to ÖªÒõÊÓƵNet with 500 or more FTE students or employees | $3,500 plus $0.50 per student/employee (whichever is greater) to a maximum of $20,000* |
Organizations that are connected to ÖªÒõÊÓƵNet with fewer than 500 FTE students or employees | $1,000 plus $0.50 per student/employee (whichever is greater)* | |
Non-connected organizations | $500 |
* For municipality members the fees may vary.
FTE = full-time equivalent
Networking Services
Yes. When members join and are connected to the network, an Acceptable Use Policy is shared and signed as well. The network cannot be used for commercial gain.
Through the Internet Buying Group, ÖªÒõÊÓƵ aggregates internet traffic from participating member organizations and leverages this increased buying power to negotiate a reduced price for internet services for its members.
Traffic to major sites such as Google, YouTube and Facebook accounts for, on average, 50% of an organization's commercial internet use. ÖªÒõÊÓƵ’s Peering service offers access to these and other popular sites through a connection with the Calgary Internet Exchange and CANARIE’s Content Delivery Service, improving efficiencies in internet traffic.
The full list of the providers available through our connection to CANARIE's Content Delivery Service is available .
The list of peered networks available through our connection to the Calgary Internet Exchange is available .
You can sign up to receive only the Peering Service. It is available to not-for-profit and public sector ÖªÒõÊÓƵ members in Alberta based on the number of full-time equivalent (FTE) students or employees of the organizations:
- Less than 1,000 FTE — $50/month
- 1,001 – 10,000 FTE — $100/month
- More than 10,001 FTE — $500/month
ÖªÒõÊÓƵ members who join the Internet Buying Group are automatically signed up for the Peering Service. As a member of the Internet Buying Group, all of your Internet traffic is sent to ÖªÒõÊÓƵ where it is split into peered traffic and commercial internet. If you are part of the Internet Buying Group, you will also receive the Peering Service provided to ÖªÒõÊÓƵ members.
Members in the Internet Buying Group receive a monthly invoice that reflects their portion of the group buy.
The first step is to contact: membership@cybera.ca. We will organize an introduction meeting to discuss how you can benefit from ÖªÒõÊÓƵ’s network and above-the-network services. This will be followed by a discussion between your network technicians and ÖªÒõÊÓƵ’s technical team, who will guide the process from that point onward.
Getting set up for the Internet Buying Group, Peering, or the Virtual Firewall Service takes approximately 4 - 10 weeks, depending on your connection type.
To join the Internet Buying Group, you will most likely not need any additional equipment. Instead of connecting to your Internet Service Provider (ISP), you will connect to ÖªÒõÊÓƵ, who will in turn split your traffic and direct the commercial portion of your traffic to the ISP.
To connect to the Peering Service, you must have a router in place that is capable of splitting your internet traffic between commercial internet and the Peering Service. There are a number of routers on the market that are compatible with this service and ÖªÒõÊÓƵ’s technical team can help you with equipment selection.
The duration of the contract agreement is one month. You can change the amount of bandwidth each month.Ìý
The answer to this question depends on a number of factors and merits a discussion with ÖªÒõÊÓƵ. We are a neutral organization and can offer advice on how to optimize the efficiency of your internet access.Ìý
Even if you do not connect to our network, there may be other reasons to join ÖªÒõÊÓƵ, such as access to advanced technology pilots and shared services. For more information, see our page.
Virtual Firewall Service
°Õ³ó±ðÌýVirtual Firewall ServiceÌýis a scalable software (virtual) solution that ÖªÒõÊÓƵ developed for Alberta's public sector organizations (who have bandwidth traffic of less than 1.3 Gbps). It allows multiple institutions to run their own firewall from a virtual environment, doing away with the need for individual hardware setup or maintenance.
From a functionality perspective, both accomplish the same task in the same way. The user interface for the virtual firewall is exactly the same as the hardware version. The biggest differences are in the flexibility that a virtual firewall brings, as it can be moved between different regions, and in cost, as it is much less expensive to maintain.
The Virtual Firewall Service currently supports PaloAlto and FortiNet firewall solutions, both hosted on our Rapid Access Cloud. For each firewall vendor, users can choose between three different virtual machines, depending on their needs. The firewall vendors will provide you with a detailed overview of the capabilities of each offering.
** Please note that, while PaloAlto and FortiNet software were chosen for this service, ÖªÒõÊÓƵ remains agnostic with respect to software firewall technology.
Yes, both vendors (Palo Alto and Fortinet) provide 60 days’ evaluation licenses.
ÖªÒõÊÓƵ staff are currently investigating open-source options, which should further reduce costs for member organizations.
Interested organizations should contact the firewall vendor to confirm capabilities and limitations. While ÖªÒõÊÓƵ does not act as an agent or reseller of any firewall brands, we are always happy to share our product experiences.
The firewall vendor will give a detailed overview of the capabilities of each firewall size and will provide a recommendation for the firewall that best suits your needs. ÖªÒõÊÓƵ can also provide advice and general guidelines based on our experience implementing virtual firewalls with other organizations, as well as on your traffic requirements and projected growth.
The exact details will need to be determined for each individual organization. Essentially, participants divert their schools’ network traffic through the dedicated firewall, which is hosted on a virtual machine in ÖªÒõÊÓƵ’s Rapid Access Cloud. For more details on the steps required to join, please contactÌýfirewall@cybera.ca.
Depending on the virtual machine of choice, the cost to join the Virtual Firewall Service ranges from $3,800 to $4,800 per year. This does not include applicable taxes and the cost to purchase the virtual machine from the vendors. ³§±ð±ðÌý³ó±ð°ù±ðÌýfor more details.
The Virtual Firewall Service is hosted on dedicated nodes on ÖªÒõÊÓƵ’s Rapid Access Cloud.
To activate your virtual firewall, you will need to open a (free) account on the Rapid Access Cloud. To do so, simply follow the instructions .
The Virtual Firewall Service is intended as a self-managed service. ÖªÒõÊÓƵ's role is to build and maintain the cloud environment for hosting the virtual firewall. Member organizations are still responsible for the configuration and management of their firewalls, just not the maintenance of the physical infrastructure. As such, members are free to obtain third-party services to manage their firewall just as they could if they owned a hardware firewall at their location.
Nothing. Each firewall virtual machine is hosted in its own private environment on dedicated nodes within theÌýRapid Access Cloud. If you need to upgrade the software or make configuration changes to your virtual machine, this work can be done during a maintenance window that is convenient to you, and without the need to coordinate with, or impact, other member organizations.
Please checkÌýÖªÒõÊÓƵ’s Ìýto verify the operational status of the network. If the management interface is not reachable or available, members should contact ÖªÒõÊÓƵ at 403-536-0880 or by email atÌýnoc@cybera.ca.
For general firewall configuration questions and related issues, Virtual Firewall Service members should contact their vendor.
ÖªÒõÊÓƵ will communicate with members regarding outages, alerts, and reminders via Revere, our network alert service. You will be added to Revere at the time of onboarding. We strongly encourageÌý members to keep their contact information up to date on Revere. If you would like any additional persons to be alerted about potential network events, please follow the instructions contained within Revere.
The firewall vendor’s performance facilities are available to view within the firewall user interface.
Unfortunately, no. As the Virtual Firewall Service is hosted centrally, near ÖªÒõÊÓƵ’s core router on theÌýRapid Access Cloud, members need to purchase their internet from ÖªÒõÊÓƵ (see the Internet Buying GroupÌýfor more information).
A side benefit of the Virtual Firewall Service is that each individual school/campus can be connected directly to the network, removing the need for a traditional head end and hair-pinning traffic. This results in a more resilient architecture and may lower SuperNet costs.
ÖªÒõÊÓƵ’sÌýRapid Access CloudÌýconsists of two geographically distinct regions, hosted in Calgary and Edmonton. Currently, the switchover from one region to another is not automatic. Should it become necessary to move your instance, ÖªÒõÊÓƵ will contact you to initiate the procedure. Ìýfor more details.
The Virtual Firewall Service currently supports Palo Alto and Fortinet firewall solutions. While we are looking into open-source options, we are also open to suggestions by members, and would be willing to investigate alternatives for future incorporation into the service. Please share your suggestions for firewall solutions with us atÌýfirewall@cybera.ca.
Contact your firewall vendor to inquire about an upgrade path.
It is also important to consider the hosting environment at ÖªÒõÊÓƵ, as our Rapid Access Cloud can currently host three sizes of firewall, for both Fortinet and Palo Alto.