Exchange Platform Architecture

The trading platform, along with all mission-critical applications and supporting infrastructure, is hosted in a state-of-the-art Data Center in New Delhi. This setup is fully replicated at a Disaster Recovery (DR) site in Mumbai to ensure business continuity. Our network architecture is meticulously designed for security and reliability, with services segmented into secure zones. The Network Operations Centre (NOC) continuously monitors production systems and network activity, providing round-the-clock oversight to maintain system integrity and performance.

Our infrastructure employs fault-tolerant servers, RAID for data mirroring, database clustering, and real-time data replication between the primary and DR sites. These measures ensure that the platform remains operational even in the face of hardware failures, offering a resilient and dependable trading environment.

The Exchange’s online trading system is designed with robust, multi-modal secured connectivity options, providing members with the flexibility to choose the most suitable mode for their business operations. Members can access the trading platform over Internet through SSL VPN, HTTPS or through Multi-Protocol Label Switching (MPLS), each offering different levels of network latency depending on the connectivity method and the geographical distance between the member’s trading location and the Exchange. This flexibility allows members to select the connectivity mode that best aligns with their specific requirements for speed, security, and reliability.

Our Information Security Management System (ISMS) adheres to industry best practices and is certified as compliant with ISO/IEC 27001:2013 standards. Additionally, our Environment Management System is certified under ISO/IEC 14001:2015, and our internal processes meet ISO/IEC 9001:2015 standards. To maintain these certifications, our policies and procedures are regularly reviewed, tested, and audited by an independent audit firm. This rigorous approach to information security and quality management underscores our commitment to maintaining the highest standards of operational excellence.

The schematic diagram below illustrates the core architecture of the Exchange’s trading network across both primary and disaster recovery sites, highlighting the secure, reliable, and high-performance environment we’ve built to support our participants.

To prepare for any potential disruptions, we have implemented robust Incident Response, Business Continuity Planning, and Disaster Recovery (BCP/DR) procedures. These procedures are routinely tested through drills, ensuring that our team is ready to respond swiftly and effectively to any incidents.

The Exchange’s online trading system is designed with robust, multi-modal secured connectivity options, providing members with the flexibility to choose the most suitable mode for their business operations. Members can access the trading platform through Multi-Protocol Label Switching (MPLS) or the Internet, each offering different levels of network latency depending on the connectivity method and the geographical distance between the member’s trading location and the Exchange. This flexibility allows members to select the connectivity mode that best aligns with their specific requirements for speed, security, and reliability.

The HTTPS protocol with TLS provides essential security benefits when accessing trading platform. First, it ensures data confidentiality by encrypting the communication between the browser and the server, preventing unauthorized access to sensitive information like login credentials or bid details. Second, data integrity is maintained, ensuring that the information exchanged is not tampered with during transmission. The use of HTTPS with TLS provides secure connectivity for members, instilling confidence that any bidding transactions are conducted over a trusted and a secured connection. Members only need a stable internet connection and a compatible web browser to access our trading web portal. Furthermore, it helps to protect against man-in-the-middle attacks, giving users peace of mind while placing their bids through web portal or through API.

The Secure Sockets Layer Virtual Private Network (SSL VPN) is another key connectivity option, providing a secure channel over the internet with an encrypted connection between the user's device and Exchange Trading System. Within the Exchange Trading System, SSL devices are implemented with meticulous attention to ensuring data confidentiality, integrity, and reliability. Trading members are provided with unique user credentials, allowing them to securely access the trading platform through SSL.

MPLS (Multi-Protocol Label Switching) is an industry-standard technology known for its high-speed switching capabilities and widespread use in securing Virtual Private Networks (VPNs). It is a cost-effective solution that delivers a range of advanced, value-added services over a unified infrastructure, making it an ideal choice for members requiring secure and efficient communication channels.

In any robust exchange trading system, safeguarding the Confidentiality, Integrity, and Reliability (CIR) of data is paramount. MPLS is strongly recommended for members who prioritize these aspects for their bidding and other critical tasks, ensuring a secure and dependable trading environment. The Exchange facilitates access to its servers (across India) through MPLS circuits, with services sourced from reputable providers. These circuits are terminated at the Exchange’s Data Centre, ensuring secure connectivity between the member’s dedicated terminal and the Exchange’s infrastructure.