Appendix 4.1 · Data Centre Specification

Main appendixNext →
Download full Word specification

General provisions

1 Purpose and scope

2 Initial conditions and assumptions

3 Adopted architectural decisions

Section I Hardware

4 PROTO-01 main compute workstation

5 Workstation and client devices

6 Data storage

7 Network equipment and spare parts

8 Camera system prototype

9 GPS trackers for freight vehicles

10 Variable frequency drive small test rig

11 Power supply and infrastructure

12 Rack cabling and installation

13 Other spare parts tools and scanner

14 Hardware summary for stages 0 and 1

15 Cloud site equipment

Section II Software

16 Operating systems and infrastructure

17 AI data and agents

18 Data layer

19 Business systems

20 Engineering software

21 Monitoring

22 DevOps security and backup

23 Software summary

24 Cloud site software

Section III Allocation of functions between the local site and remote cloud

25 Allocation principle

26 Links and throughput

27 Overall allocation of functions

28 Two options for local AI and engineering software

29 Model allocation

30 Hybrid operating patterns

31 Backup and failover

32 Allocation of the site link

33 Data and security

Section IV Summary budget

34 CAPEX for stages 0 and 1

35 OPEX for year 1

36 Deferred costs for stage 2

37 Items excluded from the budget

Section V Decisions and risks

38 Decisions on open items

39 Risks and pre-purchase checks

40 Outstanding clarifications and next steps

Annex A Price sources

Annex B Transfer time calculation method

General provisions

1 Purpose and scope

This specification combines and replaces Hardware and Software v0.8 and Transfer of Functions to the Company Cloud v1.0. It covers the complete data centre structure: the local site, the remote cloud site, hardware, software and the division of functions between them. Section III compares two ways to use local AI: Option A runs Micromine and Metashape at the local site; Option B places those applications in the cloud, subject to licence and network checks.

Changes from versions 0.8 and 1.0:

Two documents are combined into one, the sections are renumbered.

The design now includes a cloud internet connection of at least 100 Mbit/s. Site-to-cloud transfer remains limited by the site's 10 Mbit/s link.

Cloud-site hardware and software are included as a separate design area. The working assumption is a configuration at least as capable as the local site, including a 96 GB GPU; it requires confirmation.

The earlier decision to omit cloud backup is reversed. A separate VPS relay for trackers is unnecessary.

Section III compares two ways to use local AI and states the conditions for selecting one.

The budget is recalculated for both options.

Commercial purpose. This specification estimates the technical cost of establishing one additional Oristella project centre for a contracting partner. Oristella already holds the core software licences for its central system; their acquisition is not charged again in the centre estimate. Additional site-specific licences, seats, subscriptions, transfers and renewals are treated as budget items or exclusions only where expressly identified below. The price payable under a project-centre agreement will reflect the selected configuration, the separately quoted site-specific costs and Oristella's contracted services.

2 Initial conditions and assumptions

ConditionsValueSource
Site channel10 Mbps both ways, traffic is unlimitedCustomer data
Cloud internet connectionAt least 100 MbpsCustomer data
Link site-cloudLimited by site channel, 10 MbpsAdopted upon agreement
Cloud siteCompany-controlled remote site. Assumed at least as capable as the local site, including a 96 GB GPUDesign assumption requiring confirmation
Channel delay and availabilityUnknown.No data.
Micromine 2016Available and excluded from the stage 1 budget. Geobank is deferredCustomer data
Phase 1 users3–5Customer data
StagesStages 0 and 1: prototype in a working room, without a server room or rack. Stage 2: server room, rack case and deferred licencesAdopted planning basis
PricesUSD, rate 1 EUR = 1.1181 USD; retail without delivery, duties and VAT; reserve 15% to CAPEX stages 0– 1stAnnex A
Prototype loadingUneven loading is acceptable; test each function at prototype scaleCustomer data

A published price comes from a public source listed in Annex A. An estimate is an engineering assumption without a supplier quotation. The totals combine ranges and are not supplier offers.

3 Adopted architectural decisions

TopicDesign decisionNote and risk
GPU and Windows (option A)One GPU. Passthrough in Windows 11 VM on demand; vLLM and GPU containers stop for nowCheck GPU reset at VFIO on Blackwell before purchasing the rest
GPU and Windows (option B)The GPU is entirely level 1 AI without switching. Windows VM with Micromine and Metashape runs in the cloud: during the day on the GPU 96 GB, at night the GPU is given to packet LLM tasksLicense Transfer, Sufficient Channel and Cloud Switch Schedule
VirtualizationUbuntu Server 24.04, KVM/libvirt. GPU switches hook scripts between host and VM. Docker and LLM on hostNon-monitor host (BMC). We need a switch script.
GPURTX PRO 6000 Blackwell Max-Q 96GB (300W)Do not base procurement on grey-market listings
CPU and chassisThreadripper PRO 9965WX, 24 cores. Tower and ATX 1600W now; 4U rack and PSU redundant in stage 2The 24-core option is cheaper than 32 cores and reduces Windows Server licensing cost. Verify that the EEB board fits both chassis
LLMQwen3-30B-A3B-Instruct-2507 (MoE, 30.5 billion parameters, 3.3 billion active, Apache 2.0, context up to 262K), FP8, vLLMAbout 55–60% of VRAM, gpu-memory-utilization is set explicitly. For tests, you can alternately gpt-oss-120b
Embeddings, reranker, OCRQwen3-Embedding 4B and Qwen3-Reranker 4B; Docling (structure) and PaddleOCR (scans)About 16GB of VRAM under embedding and reranker (estimate); balance of about 25GB on OCR, DeepStream and CV
Object storageSeaweedFS, data on NAS, metadata on NVMe hostCheck the S3 API with applications
Event busRedpanda Community (BSL) with strict core and memory limitsCheck the terms of the license
BackupAcronis: agents inside guests (Linux-host as a server, Windows Server VM, in variant A also Windows 11 VM); DB dumps and pgBackRest on the NAS; copies of critical dial in your cloud; offline copy on an external SSDAcronis Advanced is required if the KVM host is licensed as a virtualisation host. Verify whether backup copies can be sent to company storage
WindowsWindows Server Evaluation 180 days and Windows 11 Enterprise Evaluation 90 days; licenses in stage 2 (Server for 24 cores)Emergency local accounts, reminder of the deadline. Access to MacBook: Check VDA
Identity and TLSAD (LDAP/LDAPS), Caddy or Traefik, internal CA, WireGuard for remote accessNo MFA via LDAP
Secrets, code, CIAnsible Vault and Vaultwarden; Forgejo (repositories, CI, image registry)Include secrets and code repositories in backup
TrackersTraccar in the cloud (public address, channel at least 100 Mbps), replication to the site via WireGuard. VPS not neededWhen the cloud is not available, data is stored in the tracker memory. OPEX: SIM
Video and auditFrigate (recording) and DeepStream (CV), archive 7 days on NAS. Agent audit: OpenTelemetry in Loki and Tempo, append-only table in PostgreSQLAbout 3.6 TB with 6 cameras of 8 Mbps (estimate). Tempo added to monitoring
ERPOdoo Community 19 at stage 1; Odoo Enterprise (Custom) at stage 2Odoo prices depend on the region
NetworkMikroTik CRS418-8P-8G-2S+RM for cameras and Wi-Fi points (PoE 140W)VLAN and ports diagram prior to installation
VFDSmall stand: engine, shield with protection and emergency stop, controller PROFINET, StartdriveInstallation only by an electrician with clearance. Access only via Tool Gateway
Cloud siteCompany cloud, assumed at least as capable as the local site: heavy LLM jobs, replicas, backup, central monitoring and TraccarVerify actual specifications (section 15)
Separation of functionsSite: equipment management, video, entrance, accounting, AI level 1. Cloud: Level 2 AI, replicas, backup, analyticsDetailed in section III

Section I Hardware

4 PROTO-01 main compute workstation

ItemDesign decisionQtyBudget (USD)Basis
ChassisTower, high-airflow, EEB-compatible1250–500Estimate
CPUAMD Threadripper PRO 9965WX, 24 cores12 900–3 500Price AMD 2 899, retail higher
MotherboardWRX90, ECC, EEB, BMC/IPMI, 2×10GbE on board (e.g. ASUS Pro WS WRX90E-SAGE SE)11 200–1 700Estimate. Check BMC and 10 GbE on the selected model
RAM256GB DDR5 ECC RDIMM, 8x32GB13 000–8 000The market is volatile, we need a quote
GPURTX PRO 6000 Blackwell Max-Q, 96GB111 360–13 250Public price: PNY and NVIDIA, 2026
System NVMeEnterprise NVMe 2x2TB, RAID12600–1 000Estimate
Work NVMe4 TB1400–700Estimate
Additional storageSSD SATA 4–8 TB1150–600Estimate
PSUATX 1600W, 80+ Platinum/Titanium1350–550Estimate. Allow margin for the 600 W GPU version
CPU coolingCooler or LFS for sTR51150–350Estimate
Network and BMCOn the motherboard.—0Included on the motherboard
Total PROTO-0120 359–30 150

Role: AI/LLM, CV/OCR, embedding and reranker, Docker, PostgreSQL/TimescaleDB/Qdrant, Redpanda, Odoo, Traccar, Forgejo, Frigate, agent orchestrator, KVM/QEMU, Windows Server Evaluation VM (AD/DNS), Windows 11 VM (engineering software, GPU on demand; option A only).

Price risk. The source records an RTX PRO 6000 Blackwell price of USD 13,250, 55% above its USD 8,565 launch price. Secondary-market listings are stated at USD 17,860–21,800. Purchase only through authorised channels; availability and the actual GPU quotation strongly affect the entire project budget.

5 Workstation and client devices

ItemSpecificationQtyBudget (USD)
Monitors2 × 32" 4K IPS, 1 × 27" 4K IPS31 680–2 800
MacBook Pro 16"Apple Silicon Pro/Max, 64GB, 2TB13 350–5 590
Docking stationUSB-C/Thunderbolt1340–670
Total5 370–9 060

This line remains the v0.6 engineering estimate.

6 Data storage

ItemDesign decisionQtyBudget (USD)
NASSynology DS1823xs+ (8 compartments, 10GbE on board), RAM expand to 32GB11 800–2 800
HDD16 TB enterprise/NAS, from the Synology Compatibility List82 800–4 200
RAIDRAID6, about 96 TB of usable volume1—
Total NAS and HDD4 600–7 000

The NAS stores SeaweedFS data, a seven-day Frigate archive of approximately 3.6 TB, database dumps, pgBackRest and Acronis copies. The range is an estimate. Before purchase, confirm Synology's policy on third-party drives and the compatibility list for this model.

7 Network equipment and spare parts

ItemModelQtyTotal (USD)
Router and firewallMikroTik RB5009UG+S+IN1208–220
Core switchMikroTik CRS309-1G8S+IN1227–285
Wi-Fi hotspotMikroTik cAP ax1–2110–290
PoE switchMikroTik CRS418-8P-8G-2S+RM: 8 PoE+ ports, 8 GE, 2 SFP+, PoE 140W budget1439
DAC 10GbE cableSFP+ DAC 1–3 m345–75
Module SFP+ RJ4510GBase-T for NAS and PROTO-01280–120
Total network equipment1 109–1 429
Spare partPurposeQtyTotal (USD)
Power supplies RB5009, CRS309, CRS418Replacement in case of failure365–110
DAC backup cableReplacement if the cable fails230–50
Spare SFP+ modulesWhen using optics240–80
Cat6A Patch CordsSpare set515–40
Total network spare parts150–280

Prepare a VLAN and port diagram, including Industrial VLAN 50 for PROFINET, and calculate the PoE budget. Six cameras and two access points fit within 140 W only if each camera draws no more than 12–15 W.

8 Camera system prototype

ItemDemandQtyBudget (USD)
IP camera8 MP, PoE+, ONVIF4–61 120–2 240
Fixtures and cablesComplete set1Included in the camera line

Frigate records and archives video; go2rtc relays streams to DeepStream. Keep a seven-day archive on the NAS. Frigate recording continues without GPU access while a Windows VM occupies the GPU, but GPU detection stops. Check applicable video-surveillance rules.

9 GPS trackers for freight vehicles

ItemModelQtyTotal (USD)
GPS trackerTeltonika FMC8803–5200–380

Trackers send data to a publicly reachable Traccar instance in the cloud, which replicates to the local site over WireGuard. No separate VPS relay is required. Tracker flash memory buffers data when the cloud is unavailable. SIM tariffs are included in OPEX.

10 Variable frequency drive small test rig

ItemDesign decisionBudget (USD)Basis
Frequency converterSiemens SINAMICS G120X, 7.5 kW, PROFINET2 020Price from v0.6
Test engine or loadLow power (1.5–2.2 kW)300–600Estimate
Electrical enclosureCircuit breakers, protection and emergency stop500–1 000Estimate
Controller PROFINETPLC or controller600–1 200Estimate
Installation and connectionElectrician with clearance300–800Estimate
Startdrive/TIA PortalType of license and price checkTBDNot included
Total excluding software3 720–5 620

Only a qualified electrician may connect the variable frequency drive to mains power. Route all VFD access through the Tool Gateway. Before the first motor run, verify that no command can bypass the gateway. Provide an emergency stop in the power circuit.

11 Power supply and infrastructure

ItemDemandBudget (USD)
UPSOnline double-conversion, 3-5 kVA1,680–3,350 (whole section)
SNMP network cardTo monitor the UPS (can be purchased later)
PDU and overvoltage protectionBasic PDU, protection
GroundingComplete set

Provide automatic graceful shutdown on a UPS signal, using NUT or an equivalent, and calculate battery runtime.

12 Rack cabling and installation

Rack installation is deferred to stage 2. The v0.6 estimate was USD 1,120–2,240. In stages 0 and 1, network equipment can be placed on a table or wall and PROTO-01 remains in a tower case. Stage 2 adds a 4U rack case for PROTO-01, a redundant PSU, an 18–24U rack, patch panel, KVM console, cable management, labelling and server-room cooling. Confirm prices before procurement.

13 Other spare parts tools and scanner

ItemQtyBudget (USD)
Spare NVMe, RAM kit, 10GbE NIC, external SSD 4-8 TB (offline backup copy), USB for recovery, toolkit, label printerkit1 120–2 240
Document scanner with an auto feeder (e.g. Fujitsu/Ricoh fi-8170, ADF, duplex)1815–985
Total1 935–3 225

Spare RAM may cost considerably more than budgeted; see the price risk in section 4. Do not purchase the drone or GNSS equipment for Metashape and TBC in stage 1. Decide after the use cases are defined.

14 Hardware summary for stages 0 and 1

No.CategoryBudget (USD)
1PROTO-0120 359–30 150
2Monitors, MacBook Pro and Dock5 370–9 060
3NAS and HDD4 600–7 000
4Network equipment1 109–1 429
5Network parts150–280
6Cameras1 120–2 240
7GPS trackers (3-5 units)200–380
8Frequency converter and stand (without software)3 720–5 620
9UPS and power supply1 680–3 350
10Other spare parts1 120–2 240
11Document scanner815–985
—Stand and installationpostponed to stage 2
Total hardware on the v0.8 cost basis40 243–62 734

15 Cloud site equipment

The remote cloud is treated as company-owned, so its hardware cost is excluded from the stages 0 and 1 budget. Its assumed configuration is at least as capable as the local site; verify actual specifications.

ItemAssumptionPurpose
Server with GPU96 GB GPU in the RTX PRO 6000 Blackwell class; CPU, RAM and NVMe no less capable than PROTO-01Level 2 AI; Windows VM with Micromine and Metashape in variant B; batch tasks
StorageSize according to the inventory of the critical dataset, expected in TBDatabase replicas, backup, mirrors of model weights and images, and Micromine data under Option B
NetworkInternet channel at least 100 Mbps, public address, firewall, WireGuard hubReception of trackers, user access, communication with the site (10 Mbit/s)
Power and availabilitySLA cloud (no data)Replicas and emergency launch of services
AdministrationWho administers and how: TBDUpdates, monitoring, emergency switching exercises

Under Option B, the cloud GPU is scheduled between the Windows VM during the day and batch level 2 LLM jobs at night (section 28.5). Under Option A, the cloud GPU can serve level 2 throughout the day.

Section II Software

16 Operating systems and infrastructure

SoftwarePurposeHostLicenceCost (USD)
Ubuntu Server 24.04 LTSMain operating systemPROTO-01Open Source0
Docker Engine, Compose v2ContainersPROTO-01Open Source0
KVM/QEMU, libvirtVirtualizationPROTO-01Open Source0
Windows Server 2025 EvaluationAD/DNS, 180 daysVMEvaluation0
Windows 11 Enterprise EvaluationSoftware engineering, 90 days (option A: site; option B: cloud)VM with GPUEvaluation0
Windows Server Standard (24 cores) and CALStage 2VMCommercial1 800–2 300
Windows 11 Pro / VDAStage 2VMCommercial199 and above

The Windows Server license counts for all physical host cores: 24 cores is a 16-core license plus 8 cores (the published prices of the 16-core license are about 1,000–1,330 USD), plus about 265 USD for 5 custom CALs. RDS CAL is not needed as long as the engineering software runs on a single Windows 11 VM. Accessing Windows 11 VM from a MacBook usually requires a VDA license: check Microsoft's terms.

17 AI data and agents

SoftwarePurposeDesign decision
NVIDIA Driver, CUDA, Container ToolkitGPUCheck for Blackwell support (sm 120)
PyTorch, Transformers, vLLMML and inferenceCheck on the pilot.
Qwen3-30B-A3B-Instruct-2507Major LLMApache 2.0, FP8, about 55-60% VRAM
Qwen3-Embedding 4BEmbeddingsSelected
Qwen3-Reranker 4BRanking RAGSelected
Docling and PaddleOCRDocument analysis and OCRSelected
LangGraph, FastAPIAgent orchestration and APIOpen Source
OpenCV, NVIDIA DeepStreamComputer vision and video pipelineCheck the compatibility of DeepStream with Blackwell

18 Data layer

SoftwarePurposeDesign decision
PostgreSQLSource of TruthVerify version compatibility with Odoo, Traccar and TimescaleDB; Odoo on a separate cluster
TimescaleDB CommunityTelemetry0 for internal use; check the terms of the license
QdrantVector databaseSingle-node mode, Apache 2.0 licence
SeaweedFSObject storageNAS data, metadata on NVMe
Redpanda CommunityEvent busBSL, core and memory limits

19 Business systems

SoftwarePurposeCost (USD)
Odoo Community 19 (Phase 1)ERP, finance, warehouse0
Odoo Enterprise, Custom plan, 5 users (Phase 2)Advanced modules, APIs2,940–3,660 a year
TraccarFleet and GPS tracking0

Published Odoo prices vary by region and promotion. The Custom plan is approximately USD 49 per user per month with annual payment and approximately USD 61 on renewal. The Standard plan is hosted by Odoo; self-hosting requires Custom.

20 Engineering software

SoftwareDesign decisionCost (USD)
Micromine 2016Available. Option A: local site; Option B: transfer licence to cloud, subject to Windows 11 compatibility and vendor termsExcluded from budget
Micromine GeobankPostponed, not before stage 2TBD
Civil 3D (AutoCAD) version 2027One named-user licence; use a monthly subscription for the test360 per month, then 2,870–3,175 per year
QGISOpen Source0
Agisoft Metashape ProfessionalIn stage 1 trial period (conditions to check); purchase in stage 2. Option B: The license is hosted in the cloud3,499 one-time
Trimble Business CenterDeferred to stage 2; no geodetic source data yetAbout 1,813 per year (unchecked)

Under Option A, all engineering applications run in one Windows 11 VM with local GPU access, one session at a time. Under Option B, Micromine 2016 and Metashape Professional must run in a cloud Windows VM; Civil 3D, QGIS and TBC are also assigned there by default. Engineers connect by RDP over WireGuard, subject to the checks in section 28.

21 Monitoring

SoftwarePurpose
Prometheus, Grafana, Loki, OpenTelemetryMetrics, dashboards, logs, telemetry
TempoTraces (added)
Alertmanager and exporters (node, DCGM for GPU, SNMP for UPS and MikroTik, SMART)Alerts and collection of metrics (added)

All Open Source, 0 USD.

22 DevOps security and backup

SoftwarePurposeCost
Forgejo, GitRepositories, CI, image registry0
Ansible, Ansible VaultInfrastructure configuration and secrets0
VaultwardenUser passwords0
WireGuardVPN and tracker channel0
Caddy or TraefikReverse proxy with TLS0
Internal CA (e.g. step-ca)Certificates for LDAPS and Services0
Active Directory (LDAP)Central identity and sign-inEvaluation, stage 2: license
Acronis Cyber ProtectBackup host and Windows VM: 3 loads in variant A, 2 in variant BUSD 1,330–1,670 per year in Option A; USD 1,245–1,561 in Option B, based on published prices
pgBackRest and database dumpsDatabase backup0
OTel, Loki, Tempo and audit table in PostgreSQLAudit of agents' actions0

Acronis licensing assumptions: the Linux host and Windows Server VM are each treated as servers at approximately USD 620–780 per year; a Windows 11 VM is treated as a workstation at approximately USD 85–109. Licensing the KVM host as a virtualisation host would require the Advanced edition. Confirm the terms with the supplier.

23 Software summary

CategoryCost (USD)
One-time software payments in stages 0 and 10
Acronis, year 11 330–1 670
Civil 3D, monthly for 3 months of testing1 080
Year 1 subscriptions in stages 0 and 12 410–2 750
Delayed to Stage 2: Windows Server and CAL1 800–2 300
Delayed: Windows 11 Pro (one-time, VDA separately)199
Delayed: Metashape Professional (one-time)3 499
Deferred: Odoo Custom (per year)2 940–3 660
Delayed: Civil 3D (per year)2 870–3 175
Deferred: Trimble Business Center (per year)about 1,813

24 Cloud site software

SoftwarePurposeOption
Ubuntu Server 24.04, KVM/libvirt, DockerCloud site, with the same design as the local siteA and B
vLLM, a large level 2 LLM (e.g. gpt-oss-120b, ~60 GB)Reports, analysis, planning, codeA and B
Scripts and GPU switching scheduleWindows VM by day; batch AI jobs at nightB.
Windows VM for Micromine 2016, Metashape Professional and, by default, Civil 3D and QGISEngineering software, RDP access via WireGuardB.
TraccarReception of telemetry trackers, replication to the siteA and B
PostgreSQL, Qdrant, SeaweedFS replicasEmergency launch of services in the cloudA and B
AD and DNS replicasEntry does not depend on one hostA and B
Forgejo mirror, image registry and model-weight mirrorCentralized storage; local copy remains on the siteA and B
Prometheus, Grafana, Alertmanager, external availability checkCentral monitoring outside the controlled machineA and B
Backup storage (SFTP or network folder), pgBackRest repositoryExternal copy of the critical setA and B
WireGuard hubCommunication with the site and usersA and B

Budget cloud software licences separately, including Windows Server for the AD replica, Windows for the engineering VM and Acronis for cloud workloads. Company ownership of the cloud does not remove software licence costs.

Section III Allocation of functions between the local site and remote cloud

25 Allocation principle

Keep functions at the local site when they must work offline, control equipment or generate more data than the link can carry. Assign latency-tolerant batch work and tasks that benefit from higher compute capacity or off-site placement to the cloud.

Assess five characteristics for each function:

FactorQuestionLocal siteRemote cloud
LatencyHow long can the function wait for a response?Milliseconds, controlSeconds or minutes; batch jobs
Traffic volumeCan this data stream pass over a 10 Mbit/s link?Videos, hundreds of GBText, events, packages
AutonomyMust it continue during a link outage?Safety, accounting and site accessAnalytics, reports.
SensitivityCan the data leave the site?Keep data local if transfer is prohibitedSend encrypted data only to an authorised company cloud
SecurityDoes the function affect people or equipment?Yes, for example the VFD and Tool GatewayNo.

26 Links and throughput

The cloud has an Internet channel of at least 100 Mbit/s, and the site-cloud communication is limited to the site channel, 10 Mbit/s. About 75% of the speed is actually available: ~0.94MB/s (~81GB/day) on-site and ~9.4MB/s (~810GB/day) in the cloud. This means that heavy downloads from the Internet (weight models, images, updates) are performed in the cloud, and copied to the site at night or by physical media.

Site to cloud link at 10 Mbit/s

Data to transferVolumeTimeConclusion
Video from 6 cameras, main streams~48 Mbps continuouslyCannot fit; 4.8 times the site linkOnly locally.
Video for remote viewing (sub-stream)0.5–1 Mbps on cameraupon requestPermitted for 1-2 cameras
Clips of events (10 s to 8 Mbps, ~10 MB)~1 GB per day for 100 eventsFits within the daily transfer windowSend to the cloud
Telemetry, metrics, logs.hundred KbpsFits within the available linkSend to the cloud
LLM request with context up to 100,000 tokens~0.4MBA fraction of a second of transfer timeDelay is important, not volume.
RDP Session to Windows VM in the Cloud2–5 Mbps constantlyduring workTakes up to half of the channel (option B)
Metashape survey package~20 GB~6 hoursTransfer overnight
30 GB of LLM weights30GB~9 hoursCopy from the cloud at night, store on NAS
60 GB of LLM weights, such as gpt-oss-120b60GB~18 hoursCopy from the cloud overnight and store on NAS
Backup increment per day~20 GB~6 hoursAt night, with speed limit.
Initial backup copy of 500 GB or 2 TB500GB/2TB~6 days / ~25 daysPhysical disk
NAS in its entirety (~96 TB)96 TBover 3 yearsImpossible.

Cloud internet link at a minimum of 100 Mbit/s

ItemVolumeTimeConclusion
30 GB of LLM weights30GB~53 minutesDownload in the cloud
60 GB of LLM weights60GB~1.8 hoursDownload in the cloud
Large 500GB data package500GB~15 hoursCan be downloaded overnight
2 TB data packet2 TB~ 2.5 daysFeasible over approximately 2.5 days
Tracker intake and headquarters-user accesstens of MbpsconstantlyThe cloud link has capacity for these loads

For interactive work, latency can matter more than transferred volume. Twenty sequential tool calls with 0.5 seconds of cloud latency add 10 seconds. Keep those chains local and invoke the cloud LLM in one larger step.

27 Overall allocation of functions

The following tables show functions common to both options. The only difference is the location of the engineering Windows VM and how the GPU is used (section 28).

Functions retained at the local site

FunctionWhy locally
Tool Gateway, PROFINET, VFD, agents and equipment controlSafety and deterministic operation; the cloud must not issue equipment-control commands
Video recording (Frigate) and real-time detection (DeepStream)A 48 Mbit/s stream cannot pass over the site link. Send selected events and clips instead
Agent workflows with chains of tool callsRepeated round trips accumulate latency
AD, DNS, SSO, NAS, site monitoring (main copy)The site should live autonomously.
Odoo: warehouse, shifts, on-site accountingOperations should not stop because of the channel.
Local LLM level 1, embedding, OCRAlways available, independent of the channel
Micromine 2016, Metashape, Windows VM with GPUOption A: local site. Option B: cloud site

Functions assigned to the cloud

FunctionWhat the cloud gives
Reception of tracker telemetry (Traccar)Always available address; trackers do not depend on the incoming site channel. VPS not needed
Heavy LLM for reporting, analysis, planning, codeModels that are not always needed on the site, on a separate GPU
Fine-tuning with LoRA, quality evaluation, embedding updates and batch OCR of scansSchedule batch jobs at night without consuming the local GPU
Central monitoring and external site accessibility checkMonitoring outside the controlled machine
Odoo: Finance and HR, Analytics, BIDoes not require real-time operation at the local site
CI builds, master image registry and model-weight mirrorCentral storage with a local copy at the site
External backup of a critical setCompany control addresses third-party trust; the site link remains the transfer bottleneck

Functions replicated between sites

Replicated dataMethodPurpose
AD and DNSReplica in the cloudEntry does not depend on one host
PostgreSQL, QdrantLogical replication with store-and-forward deliveryEmergency launch of services in the cloud
SeaweedFSIntersite replication of selected dataData available in the cloud
Forgejo, VaultwardenMirror or backup copyKeep code and approved secrets available after a site incident
RedpandaTwo-way event exchange with defined ownershipTelemetry and events on both sides

28 Two options for local AI and engineering software

The options differ in where Micromine and Metashape run and how the site's GPU is used. The other functions in section 27 remain allocated in the same way.

28.1 Option A engineering software at the local site

Micromine 2016, Metashape after purchase, Civil 3D and QGIS run in a Windows 11 VM on PROTO-01. GPU passthrough to the VM is enabled when required.

While engineers use the GPU, vLLM, DeepStream and other GPU containers stop. Frigate continues recording video without the GPU, but GPU-based detection is unavailable.

Level 2 AI runs in the cloud around the clock; a cloud GPU is not occupied by Windows VM.

The engineering work does not depend on the channel; the geology and survey data remain on the site, a copy of the critical set goes to the cloud.

Risks: GPU reset during VFIO (reset) on Blackwell, AI level 1 interruption when engineers work, Micromine 2016 compatibility with Windows 11.

28.2 Option B Micromine and Metashape in the cloud

Under Option B, Micromine 2016 and Metashape Professional licences are placed at the remote site if vendor terms allow it. The Windows VM with those applications, and by default Civil 3D and QGIS, runs in the cloud.

Engineers connect via RDP via WireGuard; one session takes 2-5 Mbps, that is, up to half the site channel.

The local GPU remains assigned to level 1 AI without switching. The available capacity and uninterrupted operation support longer context, more agents and continuous computer vision.

The cloud GPU follows a schedule: Windows VM by day; batch level 2 LLM jobs by night (section 28.5).

The primary copy of geological and survey data resides in the cloud. Local exports remain at the site for work during a link outage.

Prerequisites: vendor terms permit cloud placement of the licences and keys; Micromine 2016 works on cloud-hosted Windows; and measured link availability and latency support RDP.

Risk: When the channel breaks, work in Micromine and Metashape stops.

28.3 Comparison of options

CriterionOption AOption B
Where Micromine and Metashape LicensesLocal siteCloud site, subject to licence terms
GPUShared between the Windows VM and AI, with switchingDedicated to level 1 AI without switching
GPU cloudLevel 2 AI around the clockWindows VM by day; level 2 AI by night
Engineering work at the break of the channelContinuesStops
Channel load of 10 MbpsData stays on siteRDP 2–5 Mbit/s during operation; packet loading
Level 1 AI on the siteInterrupted for the duration of Windows VMRuns continuously, leaving capacity for context and agents
Main risksVFIO reset, AI interrupts, Micromine 2016 on Windows 11Transfer of licenses, Micromine 2016 in the cloud, latency and channel availability
Local-site CAPEXNo change.Unchanged (GPU remains unchanged)
Site OPEXAcronis on three workloadsAcronis on two workloads, approximately USD 85–109 less per year
Cloud loadLowerHigher: scheduled GPU and Micromine data storage, excluded from this budget
Complexity of operationSwitching the GPU on the hostSwitching the GPU in the cloud on schedule, licenses

28.4 Recommendation and selection conditions

Option A is the baseline recommendation for stages 0 and 1 because it does not depend on the link or licence transfer. Select Option B only after all three checks below have been completed successfully:

Micromine and Agisoft have provided written confirmation of cloud licence terms, including key type and any USB-dongle requirements.

Two weeks of link measurements demonstrate acceptable working-hour availability and RDP latency.

Micromine 2016 has passed a cloud Windows test, and an RDP session has passed a test over the 10 Mbit/s site link.

If any condition is not met, retain Option A. Option B removes local VFIO reset risk and frees the site's GPU for continuous AI work.

28.5 Cloud GPU schedule under Option B

WindowPurpose of the GPUNote
Working hours (configured)Windows VM with Micromine and MetashapeLevel 2 LLM tasks are suspended or go to CPUs
Night, scheduledBatch LLM jobs: fine-tuning, recalculation of embeddings and OCREngineering tasks should not be delayed overnight
On requestUnscheduled switchingUse a script with operator confirmation

29 Model allocation

The models are divided into two levels. Level 1 is on-site and should always be available. Level 2 works in the cloud for heavy and non-urgent tasks. The cloud configuration is no worse than the site, that is, one card accounts for 96 GB of VRAM.

LevelLocationModels and assignmentVRAM
1Local siteQwen3-30B-A3B-Instruct-2507 in FP8 for tool calls, document responses, alerts and operator assistance~55-60% of 96 GB
1Local siteQwen3-Embedding 4B and Qwen3-Reranker 4B with Qdrant~16GB (estimate)
1Local siteDocling, PaddleOCR; CV models for camerasleftover ~25GB
2CloudLarge models for reporting, analysis, planning and code (e.g. gpt-oss-120b, ~60 GB in compressed form)GPU card
2CloudFine-tuning with LoRA, quality evaluation, refreshed embeddings and batch OCRFull GPU card overnight

GPU use under each option

Option AOption B
Local GPULevel 1 uses nearly all 96 GB. It stops while the Windows VM has the GPULevel 1 runs continuously. Capacity supports longer context and more concurrent agents, to be quantified in a pilot
Cloud GPULevel 2 around the clockWindows VM by day; level 2 by night

Level 1 VRAM estimate: approximately 55 GB for the LLM, including FP8 weights and KV cache; 16 GB for embeddings and reranking; and 25 GB for OCR, DeepStream and computer vision. Together they use nearly all of a 96 GB card. A smaller local GPU would require a reduced level 1 workload.

A single 96 GB card can host compressed models up to approximately 120B parameters. A 235B-class model needs a second cloud GPU. If the actual cloud configuration is smaller than assumed, reduce the level 2 workload rather than changing the overall allocation of functions.

30 Hybrid operating patterns

Route simple or urgent LLM requests to the local model and complex, non-urgent requests to the cloud. On a link outage, fall back to the local model and label the result as a simplified response.

Queue long-running jobs and return their results later; do not keep a connection open throughout processing.

Send derived information, such as descriptions, embeddings and metadata, instead of raw video and large files when sufficient for the task.

Use Redpanda and PostgreSQL logical replication with store-and-forward delivery. Assign one authoritative writer for each dataset to avoid divergence.

The local site is authoritative for operational data; the cloud is authoritative for analytics and backup copies.

Download model weights and images to the cloud, then copy them to the local NAS overnight. Keep local mirrors so a new model test does not consume the site link for half a day.

31 Backup and failover

Back up only the critical dataset to the company cloud. Restoring an entire 96 TB site over this link would take more than three years. Emergency operation therefore starts critical services in the cloud from replicas.

ItemCopy to the cloudMethod
Dumps, pgBackRest, configuration, AnsibleYes.Rate-limited overnight increment
Forgejo, Vaultwarden, ADYes.Mirror or backup copy
Documents, SeaweedFS data, Micromine dataSelectivelyAccording to the approved policy, encrypted
Video archive and raw footageNo.Does not pass through the channel, stays on the NAS
NASNo.~96 TB, more than 3 years of transmission

Transfer an initial dataset of 500 GB or more on a physical drive, followed by rate-limited overnight increments. Confirm whether Acronis can send copies to company storage by network share or SFTP. Keep an offline external-SSD copy as the third copy in the 3-2-1 scheme.

32 Allocation of the site link

Reserve a guaranteed, highest-priority share of the link for control and telemetry. Schedule bulk transfer overnight with a rate limit, using QoS queues on the MikroTik RB5009.

Traffic classOption AOption B
Control and telemetry1-2 Mbps, highest priority1-2 Mbps, highest priority
Interactive3-4 Mbps: Cloud LLM, Odoo calls3-5 Mbps for RDP during working hours plus 1-2 Mbps for LLM and Odoo calls
Video for remote viewingup to 1-2 Mbps, upon requestUp to 1 Mbps or off during RDP hours
Bulk transferOvernightOvernight

Parsec with a standard bitrate on such a channel is not suitable, RDP remains for remote work.

33 Data and security

Encrypt sensitive geological data, diagrams and database dumps over WireGuard when sending them to the company cloud. Before transfer, confirm that the cloud's jurisdiction permits storage of those data.

The restriction on external transfer applies to third-party services: do not send identifiable data to third-party APIs without anonymisation and permission.

Equipment control stays at the local site. Cloud agents may prepare recommendations and requests, but the local Tool Gateway issues VFD commands only after human confirmation.

The firewall denies cloud access to Industrial VLAN 50 and the Tool Gateway. Use separate WireGuard keys for the cloud and local site.

A compromised cloud account must not provide a route to equipment control. This is a network-design requirement.

Option B: The main copy of the geologic data is in the cloud, so the requirements for cloud protection (access via MFA, logging, separate Windows VM accounts) are higher than in option A.

Section IV Summary budget

34 CAPEX for stages 0 and 1

ComponentOption A (USD)Option B (USD)
Hardware site (without rack and installation)40 243–62 73440 243–62 734
Software, one-time payments00
Subtotal40 243–62 73440 243–62 734
Reserve 15%6 036–9 4106 036–9 410
Total CAPEX including reserve46 279–72 14446 279–72 144

Local-site CAPEX is the same under both options because the 96 GB GPU remains in Option B. PROTO-01, particularly GPU and RAM pricing, drives most of the estimate range. Cloud hardware is excluded because the design assumes an existing company cloud.

Cost basis for one project centre. The stages 0 and 1 site hardware is estimated at USD 40,243–62,734, or USD 46,279–72,144 including the 15% reserve, under either option. The one-time software licence purchase in these stages is zero because the existing core licences are reused. Year-one operating costs, stage-2 additions and the exclusions in section 37 are shown separately. This range supports the centre quotation; the final purchase price depends on the contracted scope and site-specific costs.

35 OPEX for year 1

Cost itemOption A (USD per year)Option B (USD per year)Basis
Acronis1,330-1,670 (3 loads)1 245–1 561 (2 loads)Published-price estimate
Civil 3D monthly, 3 months1 0801 080Autodesk published price
VPS repeater0 (canceled)0 (canceled)Trackers go to the cloud
Tracker SIM Rates (3–5)180–900180–900Estimate
Electricity of the site1 050–3 9401 050–3 940Average load of 1.0–1.5 kW, tariff 0.12–0.30 USD/kWh
InternetTBDTBDDepends on the local site
Total (without internet)3 640–7 5903 555–7 481

Cloud electricity, administration and workload licences are excluded from this OPEX estimate.

36 Deferred costs for stage 2

Cost itemOne-off (USD)Annual (USD)
Windows Server with 24 cores and 5 CAL1 800–2 300
Windows 11 Pro and VDA (Option A: Site; Option B: Cloud)199 and above
Metashape Professional (option B: the license is hosted in the cloud)3 499
Rack, cabling and installation1 120–2 240
4U rack case, redundant PSU and server coolingTBD
Odoo Custom, 5 users2 940–3 660
Civil 3D, an annual subscription2 870–3 175
Trimble Business Centerabout 1,813
Total estimated deferred items6 618–8 2387 623–8 648

37 Items excluded from the budget

Not included: Geobank, drone and GNSS equipment (according to scenarios); VAT, delivery and duties; Startdrive / TIA Portal software for VFD; Internet channel and its redundancy; work of the administrator and integrator, implementation of Odoo; Micromine 2016 (available) and extension of its support; the cost of transferring Micromine and Metashape licenses to the cloud (option B); equipment, electricity, administration and cloud licenses.

Section V Decisions and risks

38 Decisions on open items

No.ItemDesign decisionStatus
1Embedding model/runtimeQwen3-Embedding 4BClosed.
2RerankerQwen3-Reranker 4BClosed.
3OCRDocling and PaddleOCRClosed.
4Object StorageSeaweedFS, data on NASClosed.
5Backup softwareAcronis, database dumps and pgBackRest, copies of critical set to the cloud, offline copy to external SSDClosed.
6Audit loggingOTel, Loki, Tempo, audit table in PostgreSQLClosed.
7TimescaleDB editionCommunity; check the terms of the licenseClosed.
8Qdrant editionSingle node, Apache 2. 0Closed.
9Redpanda Community or EnterpriseCommunity, core and memory limitsClosed.
10Odoo edition and usersCommunity in step 1; Custom, 5 users in step 2Closed.
11Micromine licensingMicromine 2016 is available, off budget. Option A: site; option B: cloudDesign decision recorded; stage 1 test remains
12Geobank licensingPostponed, not before stage 2Delayed.
13Civil 3D licensingOne named-user licence, 2027 edition; test monthly before annual purchaseClosed.
14Metashape licensingTrial period in stage 1; purchase 3,499 in stage 2; option B: license in the cloudDelayed.
15Trimble Business Center licensingDeferred to stage 2Delayed.
16Proxmox or KVM/libvirtKVM/libvirt on UbuntuClosed.
17Windows Server and CALEvaluation now; 24 cores and 5 CAL in stage 2Delayed.
18Data acquisition equipmentDocument scanner in stage 1; drone and GNSS scenariosPartly closed.
19NAS and HDD modelsSynology DS1823x+ and 8x16TBClosed.
20PoE switch and portsDefined components and estimates in section 10; verify Startdrive licence termsClosed.
21VFD standComposition and evaluations in section 10; Startdrive software checkPartly closed.
22Specific LLMQwen3-30B-A3B-Instruct-2507, FP8Closed.
23Windows 11 and VDAEnterprise Evaluation for Test; License and VDA in Stage 2Delayed.
24Cloud channelAt least 100 Mbit/s cloud internet; site-to-cloud link limited to 10 Mbit/sClosed.
25GPU in the cloud in option BRetain the 96 GB local GPU and dedicate it to level 1 AIClosed.
26GPU site in option BLeave 96GB, give level 1Closed.
27TrackersTraccar in the cloud, VPS cancelledClosed.
28Choice of option A or BBasic option for stages 0-1: A; transition to B after three checks (Section 28.4)Open.
29Transfer of Micromine and Metashape licensesConfirm the assumed cloud capacity against actual specificationsOpen.
30Actual characteristics of the cloudConfirm the assumption of "no worse than the site"Open.
31Delay and availability of the site channelMeasure in two weeksOpen.

39 Risks and pre-purchase checks

No.Risk or verificationAction
1GPU price and availability; the source notes a 55% rise and higher unauthorised resale listingsRequest quotes from authorized suppliers before ordering the rest
2Wide USD 3,000–8,000 estimate for 256 GB RAMObtain a quotation; consider 128 GB for the initial test if required
3Blackwell support for vLLM, PyTorch, DeepStream, Frigate, PaddleOCRTest the software stack before purchasing the remaining equipment
4GPU reset at passthrough (VFIO reset), option ATest GPU switching between the host and VM with a controlled hook script
5Micromine 2016 compatibility with Windows 11 and license key typeTest Windows compatibility and USB passthrough; under Option B, verify USB-over-IP or a software key
6Compatibility of PostgreSQL versions with Odoo, Traccar, TimescaleDBCompatibility table, Odoo on a separate cluster
7Synology policy on third-party disksCheck the compatibility list for the DS1823xs +
8Acronis Licensing for KVM Host and Cloud LoadsUse guest agents; confirm licensing with the supplier
9Windows Server Evaluation (180 days) and ADMaintain emergency local accounts and a licence-expiry reminder
10License Terms: TimescaleDB Community, Redpanda BSL, model licensesLegal review before production use
11Tool Gateway and VFD: the ability to bypass the gatewayTest before first start, human confirmation, emergency stop
12PoE budget and switch portsPort diagram and calculation before installation
13Legal requirements for video surveillanceCheck legal requirements at the local site
14Electrical safety and VFD connectionOnly an electrician with clearance.
15Channel delay and availability unknownMeasure delay, loss and bandwidth over two weeks
16Assumption of “the cloud is no worse than the site”Confirm the actual configuration: GPU, RAM, disk, network
17Jurisdiction and data policyLegal review before sending geological data
18Replication lag and split-brain riskUse a single authoritative writer and monitor replication lag
19Cloud as a new entry point for trackersFirewall, SIM and address restriction, tracker buffer check
20Emergency switching not checkedTest launching critical services in the cloud from replicas at least quarterly
21Cloud Compromise and Site AccessSeparate keys, private access to VLAN 50 and Tool Gateway
22Option B: Transfer of Micromine and Metashape licensesWritten confirmation of vendors prior to decision
23Option B: the dependence of engineering work on the channelKeep local project exports; measure link availability; require MFA and Windows VM audit logging
24Option B: Cloud GPU scheduleSwitch script, work windows, confirmation of unscheduled switches

40 Outstanding clarifications and next steps

1. Measure site-link latency, packet loss and availability during working hours over two weeks.

2. Confirm the actual cloud configuration: GPU, RAM, disk, network, administration, SLA.

3. Ask Micromine and Agisoft for license terms in the cloud.

4. Obtain supplier quotations for the GPU, RAM, CPU, motherboard, NAS, HDDs and switch.

5. Pilot the software stack on Blackwell and test GPU switching between host and Windows VM, including the scheduled cloud arrangement.

6. Create a diagram of VLAN, ports and calculation of the PoE budget.

7. Identify drone, GNSS, Geobank, Metashape and TBC use cases.

8. Then select Option A or B, prepare procurement version 2.0 and finalise the hardware bill of materials.

Document status: planning estimate until supplier quotations are received.

Annex A Price sources

Public sources used in price reconciliation (October 2026) Prices change and a quote is required before purchase.

ItemSource and meaning
RTX PRO 6000 BlackwellTom's Hardware (June 2026): $13,250 at the NVIDIA store, PNY 11,359.99 USD, Newegg 12,099.99 USD; launch price 8,565 USD. GPU tracker Poet (October 2026): secondary market from 17,860 USD
Threadripper PRO 9965WX / 9975WXAMD Official Prices: $2,899 and $4,099; Retail Offers Higher
RAM DDR5 ECC RDIMM 256 GBCatalogues A-Tech, Newegg, etc. (July 2026): wide range by price and modules
Windows Server 2025 StandardSHI, CDW: 16 cores, about 1,000–1,330 USD (ROK and OEM)
OdooPublic price reviews 2026 (US): Standard 24.90–31.10, Custom 49–61 USD per user per month
Autodesk Civil 3DAutodesk FAQ: $2,870 USD per year, 360 USD per month; CDW: $3,174.99 USD (2027, 1st place)
Agisoft Metashape ProfessionalAgisoft and resellers: 3,499 USD, node-locked
Acronis Cyber ProtectAcronis: Standard from $85 per year (workstation); CDW: Standard Server 619.99 USD; reviews: server 779–925 USD; KVM requires Advanced
Synology DS1823xs+Reviews and retail: $1,800 USD and above; 1 port 10GbE RJ45
MikroTik CRS418-8P-8G-2S+RMWalmart: $439, PoE budget 140W
Fujitsu/Ricoh Fi-8170 scannerEuropean retail: 729 EUR excluding VAT, 882 EUR with VAT
LLM Qwen3-30B-A3B-Instruct-2507Reviews of RAG models 2026: MoE, 30.5 billion parameters, 3.3 billion active, Apache 2.0, 262K context

Annex B Transfer time calculation method

Site: 10 Mbit/s = 1.25 MB/s theoretically; 75% of the usable speed is accepted, that is ~0.94 MB/s (~81 GB / day).

Cloud: 100 Mbit/s = 12.5 MB/s theoretically; accepted 75%, that is ~9.4 MB/s (~810 GB / day).

Transmission time = volume/speed. On the site: 20 GB ≈ 5.9 hours; 30 GB ≈ 8.9 hours; 60 GB ≈ 17.7 hours; 500 GB ≈ 6.2 days; 2 TB ≈ 24.6 days; 96 TB ≈ 3.2 years. In the cloud: 30 GB ≈ 53 minutes; 60 GB ≈ 1.8 hours; 500 GB ≈ 14.8 hours; 2 TB ≈ 2.5 days.

Video: 6 cameras of 8 Mbps = 48 Mbps, which is 4.8 times higher than the site channel.

Events: 100 clips of 10 s at 8 Mbps (~10 MB each) ≈ 1 GB per day.

LLM context: 100 thousand tokens at ~4 bytes per token ≈ 0.4 MB.

RDP: 2–5 Mbps per session; with a 10 Mbps channel, one session takes 20% to 50% of the channel.

All calculations are idealized and do not take into account latency, packet loss, and encryption overhead; with real measurements, they are refined.

← Return to main appendix