IsarNetz GmbH
Regional energy and metering utility · Rosenheim, Bavaria · 310 employees
Metering and billing web endpoints on Pro-tier telemetry, log sync, and automated backup scheduling across distributed instances.
- RPO
- 24 hours operational; yearly archive per statutory retention
- RTO
- 8 hours for billing; 24 hours for head-end (hardware dependency on client colo)
- SLA
- Pro tier: centralized logs, bandwidth telemetry, and backup schedule alerts; priority email within 8 business hours
Situation
Billing runs and smart-meter head-end software sit on a small estate that cannot fail during winter load. Internal IT is shared with the municipal shareholder and is not staffed after 17:00. A failed tape rotation in 2025 left a six-day backup gap that the supervisory board required to be closed with off-site, tested copies and a named vendor SLA.
Environment
- Region and placement
- Customer data centre in Rosenheim; replica in a Munich colocation facility
- Hosts
- 9 guests (head-end, billing, Oracle-compatible DB, file, jump, monitoring, three utility services)
- Operating systems and runtime
- RHEL 8 and 9; PostgreSQL 14 (migrated from a legacy engine in 2024 by a third party)
- Data stores
- 3.6 TB metering and billing; regulatory retention 10 years on archive volumes
- Connectivity and access
- Air-gapped OT network is out of scope; Veltis manages IT-side guests only, via a dual-control jump host
Agreed scope
- Named engineer, custom winter-season SLA, 24/7 P1 telephone
- Daily backups to Munich colo with monthly restore evidence to the board pack
- CIS RHEL hardening except where vendor software requires documented exceptions
- Patch orchestration with a change advisory note to the client's IT security officer
Work performed
- Replaced tape-only backups with Borg to the Munich colo, encrypted, with a 30-day operational window and yearly archive to WORM storage operated by the client.
- Closed the six-day coverage gap; the longest backup interval is now 24 hours.
- Applied RHEL STIG-informed controls; eight vendor exceptions logged with expiry dates.
- Established dual-control for production: Veltis engineer plus client operator on the jump host for schema changes.
- Completed a billing-database restore to isolated hardware in 1 hour 12 minutes (May 2026 board evidence).
Measured results
Backup gap
Closed (was 6 days)
Off-site copy
Munich colo, encrypted
Billing restore evidence
1 h 12 min
Vendor hardening exceptions
8, time-boxed
Service tier: Distributed Node Telemetry & Log Sync. Commercial inquiries: contact operations.