! !

! !

Affordable!Broadband!VSAT!Connectivity!
For
!Ministry!of!Health,!Timor!Leste!
2nd!April!2015!
Technical!Description!!
&!!
Service!Offer

“Kacific: Connecting the Dots”

 CONTENTS

41.! WHO&WE&ARE:&Kacific&value&proposition&....................................................................&3!
2.! TECHNICAL&DESCRIPTION&................................................................................................&4!
2.1.! Overall&System&Performance&.......................................................................................&4!
2.2.! Kacific&HTS&Payload&Performance&..............................................................................&5!
2.3.! Timor&Leste&beam&............................................................................................................&6!
2.4.! Gateway&Performance&....................................................................................................&6!
2.5.! Customer&VNO&environment&........................................................................................&7!
2.6.! Subscriber&Terminal&Performance&............................................................................&7!
2.7.! Kacific&Subscriber&Terminal&Installation&.................................................................&8!
2.8.! Overall&System&Performance&.......................................................................................&9!
2.8.1.! Network&Capabilities&...................................................................................................&9!
2.8.2.! Autonomous&Operation&............................................................................................&14!
2.8.3.! Reliability,&Maintainability,&and&Service&Interruptions&.................................&15!
2.9.! Maximizing&aggregate&bandwidth&availability&over&Timor&Leste.&.................&15!
3.! PRICING&................................................................................................................................&18!

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
2
198891&Singapore/&Registration&number&201317505N&&
 1. WHO WE ARE: Kacific value proposition

Kacific is a satellite operator dedicated to bring affordable high speed Internet to the residents of the
South East Asia and the Pacific islands. Created by experienced space professionals, Kacific uses
the latest ground system innovations and reliable flight-proven spacecraft technology to close the
internet digital divide over the region.

Our bandwidth enables to connect telecom networks, government offices, enterprises, schools,
community centers, in-land and coastal industries and households. Today, the 40 million people
living in the Pacific region have very limited Internet and voice connectivity, and sometimes the
1
highest prices on Earth . The Pacific, Timor Leste, Eastern Indonesia and the Philippines are very
particular markets with extremely remote and disseminated population, yet seeing the emergence
of middle-class that is well educated and Internet savvy. Despite a large Internet demand per
capita, the cost of infrastructure and the low population density leads existing broadband
penetration to lag most of the rest of the world, and saturated installations are far from answering
the growing needs.

Kacific sells managed bandwidth that includes the teleport and international Internet traffic. Our
customers are able to set their desired QoS and contention ratio through their Kacific portal and sell
turnkey Kacific-powered connectivity to their end-users. Those solutions include enterprise and
consumer direct-to-premises broadband with adaptable bandwidth up to 50Mbps per site, available
across all the served Timor Leste territories including remote places and islands.

Launching its first satellite late 2017, Kacific will be the first to provide the whole Pacific region with
truly affordable, accessible, direct-to-premises high speed Internet, in the same way than Viasat or
Hugues Network have successfully done in the US. Economic and social research shows that this
Internet supply will fuel economic growth and improve government services such as education and
health services throughout the region.
!
Footnote:!1!ITU!report!“Measuring*the*Information*Society*Report,*2014”*
*
!
&

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
3
198891&Singapore/&Registration&number&201317505N&&
 2. TECHNICAL DESCRIPTION

Kacific has conducted a technical study for Timor Leste and designed its technical solution as
detailed in this section.

2.1. Overall System Performance

The Kacific High Throughput Satellite (HTS) provides forward (FWD)/return (RTN) links from/to the
gateway(s), to/from residential and enterprise subscribers using multiple, frequency re-use circular
spot beams covering Timor Leste.

Kacific operates HTS payload on a geostationary communication satellite and sells its bandwidth to
customers in its areas of coverage. Government, Residential and enterprise Internet connectivity to
all districts of Timor Leste will be provided. Service commencement is planned in Q1 2018.

Figure&1:&Kacific&HTS&

The HTS payloads have a large number of high-power beams nominally approximately 0.7° in
diameter. The subscriber terminal service operates as a traditional star hub-and-remote VSAT
network.

The aggregated signals will be connected to the Internet at Kacific gateways, in line with the Timor
Leste regulations.

Data rates and link budgets vary depending on the size of the antennas, uplink power and the
modulation and coding that is used. In the VSAT star network configuration, the hub will be located
at a Kacific teleport using large (e.g. 9.2 m) tracking antennas. The subscriber terminals will include
non-tracking, stationary antennas between 90-cm and 1.2-m in diameter. The forward channel from
the hub to the remote subscriber terminals will typically operate in a broadcast mode using a time
division multiplexed (TDM) stream. Such links use shared DVB-S2X carriers at data rates up to 50
Mbps where the signal is available to all terminals in the customer beam of service. Alternately, an
SCPC frequency division multiplexed forward link may be used. The return link from the remote
subscriber terminals uses TDMA Time Division Multiple Access or SCPC frequency division
multiple access. Kacific intends to procure the gateway hubs and their associated earth-station
antennas and place them in Indonesia and Hawaii. Kacific customers will operate as Virtual
Network Operators (VNO) on the network. This feature is fully included in our costing to customers,
which enter into an early commitment with Kacific. !

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
4
198891&Singapore/&Registration&number&201317505N&&
 !
2.2. Kacific HTS Payload Performance

The Kacific HTS satellite payloads are designed to have a large number of high gain spot beams of
approximately 0.7° diameter as viewed from the geostationary orbital position. The subscriber beam
edge-of-coverage (“EOC”, worst case) single carrier (CW) saturated EIRP is at least 60dBW and
the G/T at the EOC is at least 12dB/K. Most terminals will be in a much higher forward link EIRP
region approaching 63 dBW and will have higher return link G/T, greater than 16 dB/K. Gateway
beams will have EIRP of at least 63dBW and G/T of 16dB/K.

The HTS payload incorporates a Ka-band beacon system for uplink power control (UPC), which
allows for very high Forward Uplink availability.

The Kacific frequencies and polarizations for the FWD and RTN links are described in Figure 2. A
four-color frequency re-use scheme is used, which is shown in Figure 3.

The spectrum allocated to the return channel is equal to the spectrum allocated to the forward
channel on each beam. The FWD to RTN link data capacity ratio per beam will be at most 2:1.

!
Figure&2:&Available&Kacific&Frequencies&and&Polarizations&
!

Figure&3:&Baseline&Design&Four]Color&Frequency&Reuse&Concept&

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
5
198891&Singapore/&Registration&number&201317505N&&
 2.3. Timor Leste beam

Based on respectively 90cm and 1.2m terminals, the full spectrum allocated to Timor Leste on
Kacific satellite corresponds to capacity of downlink of 1 Gbps to 1.5 Gbps and uplink of 500 Mbps
to 750 Mbps.

Figure&4:&Timor Leste FWD&

!
2.4. Gateway Performance

Kacific will install gateways and hubs in 2 or 3 predefined and suitable locations around the Pacific
and our customers will benefit from this infrastructure without having to install their own uplink
stations. The locations chosen for the Kacific gateways allow a very high availability of the Ka-band
link, a stable, secured and experienced environment for the teleport operations and a very
affordable fiber link from the teleport towards Internet node in the US or in Australia.

The following gives a high-level performance outline of the hub.

The minimum EIRP of the gateway hub will not be less than 63dBW at 27 GHz. Uplink power
control will keep the received power at the spacecraft input constant during rain fades. The gateway
G/T will not be less than 16 dB/K measured at 17.7 GHz.

The Gateway antenna reflector is sized to meet the required ground uplink EIRP and ground-
receive G/T requirements. The feed is designed for co-polarization in both transmit and receive
directions.

The gateway hub antenna uses a 9.2 meters mono-pulse tracking system to maintain pointing
towards the satellite. Tracking error will not result in more than a 0.5 dB signal loss.

The forward link format is DVB-S2X. Either time division multiplexed (TDM) or single channel per
carrier (SCPC) may be used. A TDM forward-link modulator will support symbol rates up to at least
50 Msps. SCPC modulators support symbol rates to at least 20 Msps. Symbol rates are
configurable by the monitor and control (M&C) system. The return link is DVB-S2X/TDMA or SCPC
with a minimum symbol rate of 1 Msps and a maximum symbol rate 10 Msps. Adaptive coding and
modulation (ACM) will be used on all links, in both forward and return direction. The QoS handles
Layer 2 and Layer 3 (IP) prioritization for marked packets within ACM queues. Uplink Power Control
(UPC) is implemented on the forward link. Advanced implementations of UPC will be used.

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
6
198891&Singapore/&Registration&number&201317505N&&
 2.5. Customer VNO environment

Kacific customers will effectively operate as VNOs on the Kacific network. The customers will “own”
their dedicated leased Kacific bandwidth and configure it using a portal on the Kacific Network
Management System (NMS). This web-based graphical user interface is fully included in our offer.
This will enable the customer to perform operations such as devising end-user commercial
packages, remote monitoring, statistics and segmented performance reporting of the system and of
each terminal, configuration, control, alarm functions for the hub and subscriber terminals, access
control, QoS, Contention, Maximum throughput, Network Statistics, Billing, etc.

Customers will have 24/7 access by phone or email to the Kacific NOC and technical support
regarding all requests by the customer. The Kacific NOC will in turn be coordinating operations with
the Teleport and the satellite control center.

!
&
Figure&5&:&Kacific&Network&and&Support&Topology

2.6. Subscriber Terminal Performance

The Kacific system can use a range of terminal dish antenna sizes. To maximize the bandwidth
available from Kacific spectrum in Timor Leste, we recommend a mixed distribution of 90cm and
1.2-m antenna. Kacific customer will typically purchase the terminal directly from vendors
recommended and qualified by Kacific. The polarization of each remote terminal network may be
either right-hand circular or left-hand circular (LHCP and RHCP). The antenna will be capable of
being field-configured for either type of polarization. The following are examples of specification of
terminals being qualified by Kacific:

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
7
198891&Singapore/&Registration&number&201317505N&&
 90cm Terminal
• Less than US$700
• High-speed, downstream rates up to 40 Mbits/s and upstream rates up to 20 Mbits/s
• High-speed Internet access
• Video and Voice-over-IP
• High-speed video conferencing
• Multicast media and content delivery

120cm Terminal
• Less than US$1000 (ex-works)
• High-speed two-way performance-up to 50 Mbits/s downstream and 20 Mbits/s upstream
• High-speed Internet access
• Private network access with full Ethernet capabilities
• High quality Voice-over-IP (VoIP)
• High-speed video conferencing
• Multicast media and content delivery
• Remote office connectivity-extending the corporate network
• Remote communications for industry, government and disaster recovery

Minimum Subscriber Terminal EIRP and G/T

nominal EIRP (dBW) G/T(dB/K)

at 19.7 GHz at 29.5GHz
90cm 47 20
120cm 49 23

2.7. Kacific Subscriber Terminal Installation

Kacific small, lightweight and low cost terminals are easy to install.

The terminal manufacturer will provide detailed installation procedure and personnel training to
customers. Time required to install a subscriber terminal will typically be 20 minutes for a 90cm and
40min for a 1.2m. A straightforward procedure will be available for bringing customer terminals on-
line for the initial contact and subsequent remote operator guidance for pointing optimization by the
subscriber.

Wall Mount and Roof Mount

!
Figure&6&Wall&and&roof&mounting

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
8
198891&Singapore/&Registration&number&201317505N&&
 The direct access terminal has the great advantage of not requiring any additional investment
building ADSL or Microwave infrastructure. Each village or even household may have its own
inexpensive Kacific terminal. These small terminals are not only very easy to install but also come
maintenance-free. The terminal even folds in a small form-factor package and is easy to transport
or relocate.

Figure&7&Visualisation&of&high]density&usage&

2.8. Overall System Performance

!
2.8.1. Network Capabilities
!
The IP gateway (IPGW) implements a TCP Performance Enhancing Proxy (TPEP) for both IPv4
and IPv6 for in-route and out-route traffic that includes TCP spoofing, TCP acknowledgement
reduction, per TCP connection flow control, and path maximum transmission unit (Path MTU)
discovery support.

The IPGW supports configurable QoS management, implementing four traffic classes
(Conversational, Interactive, Streaming, and Background) with differentiated priority handling,
configured traffic classification rules for mapping traffic flows to classes, out-route service plan rate,
volume limits for users, and proportional fair handling in case of congestion or offered load
exceeding the user service plan rate.

The IPGW supports configurable traffic classification (classifier rules) into traffic classes based on
differentiated services code points (DSCP), packet size, source and destination IP address,
protocol field, IPv6 flow label, and source and destination port number. The IPGW, in conjunction
with deep packet inspection and DSCP change, can move a flow to a different priority if the
classification based on the information above is not sufficient for identifying the priority of a traffic
flow.

The IPGW primarily uses DSCP to work with external traffic management equipment. In this
scenario, the external traffic shaper provides the sophisticated traffic classification and sets the
appropriate DSCP code point to signal priority handling, and the IPGW respects the indicated
prioritization with separate queuing and handling for each priority. External traffic classification may
be signaled at the start of a flow and may also be changed based on deep packet inspection (DPI)
for flows already in progress. This enables the system operator, for example, to implement policies
to demote automatic OS updates, cloud backups, peer to peer traffic, and other non interactive
traffic to be given background QoS handling and to promote flows such as video streaming to
streaming QoS handling.

The IPGW supports differentiated user service plans, with parameters configurable from the
network management system (NMS) including Peak Information Rate (PIR) and daily, weekly, or
monthly Volume Usage Quota Policing. Applying the appropriate configuration may also disable
volume usage throttling due to exceeding a volume usage quota. Provision is also made for
congestion control of out-route traffic, including fair proportional flow control when aggregate offered
load exceeds out-route capacity, or when user offered load exceeds the user service plan rate. Fair
in this case means weighted by priority according to configurable weights and in case of out-route
congestion in proportion to out-route service plan rate, (i.e., a user with a higher out-route service

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
9
198891&Singapore/&Registration&number&201317505N&&
 plan would get proportionally more bandwidth than a user with a lower service plan in event of
congestion).

The volume usage information, along with other billing and per-terminal statistics data is staged on
a shared storage (i.e., the gateway’s Network Attached Storage [NAS] System) that is accessible
from all IPGWs in the gateway. This usage information is then forwarded by the Statistics Collector
(SC) of the gateway NMS to the central NMS from which it may be copied to other external
systems.

IP Networking Technology Summary

• “L3 bridged” IPv4 networks: The hub acts as a router with groups of terminals are logically
attached to that hub ‘router’ in a bridged way sharing the same IP subnet. The VSAT
terminals don't need a routable address for their own, only the CPE behind it needs a public
IP address.

• IPv4 Layer-3 Routed Networks: the Hub acts as a L3 router. IPv4 subnets at the terminals
LAN interface can be connected to an IPv4 subnet behind the hub. A router behind the hub
is used as default gateway of the system router: traffic from terminals is always routed to
that default gateway router. In this mode an operator can implement routing/fire-walling
policies between terminals in that router.

• Isolated networks: multiple IP networks can share the same hub infrastructure. These
networks operate in isolation from one another, meaning they each have their own routing
domain. Addresses may be re-used across different networks.

• IPv6 networks: similarly as for IPv4 Layer-3 routed networks, the system can act as a
Layer-3 IPv6 router4. IPv6 subnets at the terminals LAN interface can be connected to an
IPv6 subnet behind the hub.

• IPv4/IPv6: dual Stack Networks are supported as well.

Gateway LAN/WAN Subsystem

• The following logical LAN segments exist within the system:

• Internet LAN
• Activation/Service Walled Garden LAN
• Management LAN
• Admin LAN

There is a single Management LAN, Admin LAN and WG LAN across an entire gateway. A
separate Internet LAN exists per out-route processor (ORP).

At the access layer are the data LAN switches that are connected to all devices carrying user traffic.
The Network Address Translation (NAT) routers provide a carrier grade NAT function to consolidate
IPv4 addresses if required, perform the function of consolidating routes for all terminals from the
IPGWs, and also provide other NAT functions. At the edge, the peering routers provide connectivity
to the Internet. The NAT router is capable of providing traffic marking to facilitate classification of
packets by the IPGW.

Management and admin traffic are isolated both physically and logically from user (or data) traffic
for both security and accessibility reasons. All management devices connect to dedicated access
switches. Management traffic to and from the central NMS flows via the Unified Threat
Management (UTM) firewall. The firewall hosts VPN tunnels from each gateway to the central NMS
to carry this management traffic.

All devices on the data path within the Gateway LAN/WAN subsystem are redundant.

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
10
198891&Singapore/&Registration&number&201317505N&&
 Data LAN switches within the Gateway LAN/WAN subsystem provide redundancy at the access
layer. These switches provide redundant connections to each chassis and use Spanning Tree
Protocol to provide link redundancy and failover paths.

The data network uses 10G connectivity between these layers to offer maximum flexibility and
optimize cabling requirements. This also allows for a one-time deployment of the network
infrastructure to all unmanned GW sites. Redundant NAT routers may be connected to carry control
traffic for NAT. All management devices are on 1G links.

Internet LAN
The Internet LAN handles user data traffic between the IPGWs and the Internet via the peering
router/firewall. It also handles Web Accelerated Traffic to/from the IPGW and to/from the Internet
via the peering router/firewall. Only IPGWs providing normal Internet access services are
connected to this LAN. IPGWs performing the following roles are not connected to this LAN:
• Walled Garden IPGWs
• Management Gateways

All the links (inter-router, inter-switch, router-switch, router-DPI, and switch-DPI) are trunk lines
carrying traffic from multiple IPGWs that are aggregated into different VLANs based on the out-
route in which they reside.

Activation/Service Walled Garden LAN

The Activation WG IPGW is an IPGW that limits Internet access to those sites pending activation. A
Service WG IPGW is an IPGW that limits Internet access because the terminal is suspended (e.g.,
due to a delinquent account). WG IPGWs have a single WG interface that handles both Activation
WG and the Service WG traffic. Whether a terminal is in the Activation WG LAN or the Service WG,
the LAN is designated by the WG IPGW via the choice of subnet it assigns to the terminal.

Management LAN
The Management LAN is used to relay management traffic between the NMS and Gateway
components, including gateway management traffic and terminal management traffic relayed
through gateway components.

Admin LAN
The Admin LAN is used to relay out-of-band management traffic between the central NCC site and
gateway equipment that is not managed by the central NMS, for example chassis management
agents, Ethernet-based power strips, and COTS switches and routers.

Terminal Ethernet and IP Functions

The VSAT terminal supports 1000BaseT Ethernet Interface.

The terminals implement IPv4/IPv6 dual stack and support both public and private addresses with
terminal facing network. The private IPv4 addresses are supported by using NAT router at the hub
IP gateway.

The terminals implement a wide range of router functions. These functions are entirely implemented
within the software of the terminal and can be configured and controlled remotely. The major router
features implemented within Kacific terminals include the following:

• IPv4/IPv6 dual stack: VSAT terminal can support both versions simultaneously at the
terminal and at the gateway, and for both versions of which the system supports
differentiated QoS handling, TCP protocol acceleration, and efficient compression and
transport and congestion and performance management.

• IP transport, signaling, and routing protocols: Including TCP, UDP, FTP, ICMPv4, ICMPv6,
RIPv1, RIPv2, RIPng (IPv6), DHCP (IPv4) and IPv6 Stateless Auto-configuration Protocol
(IPv6), ARP (IPv4), and IPv6 Neighbor Discovery Protocol (IPv6), IGMPv1, IGMPv2, and
IGMPv3.

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
11
198891&Singapore/&Registration&number&201317505N&&
 • Efficient end-to-end transport: Of higher layer protocols over IP, including but not limited to
HTTP, HTTPS, FTP, SMTP, and IPSec (note that protocol acceleration is not possible for
externally encrypted traffic).

• DHCP Server: The terminal is enabled with DHCP server capability to manage IP addresses
on the remote LAN.

• DHCP Client: The terminals can also be configured to act as a DHCP client or relay agent.

• Internet Group Management Protocol (IGMP): The VSAT terminal supports the IGMP
capability. IP hosts on the local LAN can use the standard IGMP protocol to join or leave
multicasts with proper configuration of the remote terminal.

• Internet Control Message Protocol (ICMP): The VSAT terminal responds to standard ICMP
messages, such as ping, which originates from local LAN hosts.

• Acceleration (e.g., TCP and HTTP) and compression techniques: compensate the effects of
satellite latency (delay) and improve transmission efficiency, providing users with terrestrial
equivalent—or better—performance on their IP applications.

• Payload compression using V.44 on TCP traffic and can be enabled or disabled per class of
service. Web traffic is also payload compressible. The system also supports byte level
caching in tandem with shorter-range compression techniques for web traffic.

• IP protocol header compression: such as IP, UDP, TCP, RTP etc., using ROHCv2
standards.

• Terminal status: can be obtained either from NMS or an external SNMP compliant poller.
The Network Management System supports RESTful API to OSS/BSS systems.

VNO Functionality
The virtual network configuration provides the ability to allocate an isolated, network partition to a
service provider. The virtual network configuration can enable the Virtual Network Operator (VNO)
with complete service configuration capabilities. The VNO will subsequently be able to log in, see
their partition, and configure the full set of terminal resources (service plans and terminal profiles) to
assign when provisioning terminals. Service plan configuration contains the complete set of terminal
configuration parameters, including (but not exclusive to) downlink/uplink speeds, classification
rules, IP addressing, and terminal identification parameters. The VNO will also be able to actively
monitor real-time throughput (Mbps) against the configured limits on a per-beam basis.

The following terminologies are used in the context of virtual network:

• Host Network Operator (HNO): The provider who owns network infrastructure

• VNO: The reseller of HNO service (no physical equipment; just allocated bandwidth)

• Virtual Network: The logical network partition allocated to the VNO

• Bandwidth Pool: A partition of Mbps on either the in-route or out-route path on a per-beam
basis, which is exclusively allocated to a VNO

The gateway baseband system supports shared model network. The system is designed in a
modular fashion such that a client can set up a VNO without incurring all the startup expense of the
HNO. A VNO customer may purchase a VNO license and bandwidth in the HNO’s hub/gateway site
in order to run their own private network. The financial outlay for this is much less since the client
leverages the existing infrastructure.

The HNO provides the space segment (satellite capacity) to the VNO, in addition to making the hub
real estate and teleport infrastructure available. HNS deploys an HNO-VNO model network for a
variety of applications. The allocation of bandwidth to a provider (VNO) to be used for end user
services, allowing the VNO to create and manage their own service offerings without investing in
physical infrastructure

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
12
198891&Singapore/&Registration&number&201317505N&&
 HNO-VNO Responsibility

HNO VNO
1. Maintains RF and satellite connectivity 1. Defines their own service for their allocated
2. Configuration and management of all physical NOC bandwidth
equipment 2. Configures terminal devices
3. Establishes access control/configuration separation 3. Monitors allocated bandwidth
between VNOs 4. Manages/troubleshoots terminals and service
4. Allows oversubscription (capacity of VNOs) without involvement from HNO
5. Allows oversubscription (capacity of terminals)

!
Figure&8&HNO]VNO&model&network&&&
& !
VNO Types
Two types of VNO are supported in the system:
• Shared VNO: Mbps-based model with shared physical resource

– Provides the ability for HNO to efficiently manage bits and take advantage of internal
compression when leasing bandwidth to VNOs.

– The HNO has the responsibility to efficiently guarantee Mbps and police bandwidth
across VNOs.

• Dedicated VNO: MHz (spectrum)-based model with dedicated equipment

– The HNO dedicates a portion of spectrum, but does not have any added advantage
since the spectrum is exclusively used by the dedicated VNO.

– The HNO defers more operational costs to the VNO. The HNO is only responsible for
the management of physical resources. Operations regarding bandwidth management
are passed onto the VNO.

Shared VNO Bandwidth Pool

A partition of Mbps on both the in-route or out-route path is exclusively allocated to a shared VNO.
The system supports the following VNO bandwidth pool provisioning and management functions.

Provisioning
Bandwidth is allocated as “bandwidth pools” both on in-route and out-route by the HNO to VNOs.

The VNO bandwidth is allocated on a per-beam basis within a gateway site separately for in-route
and out-route. The allocation comprises two components: minimum bandwidth (which is
guaranteed) and maximum bandwidth.

For the maximum bandwidth component, HNO can oversubscribe the physical capacity per beam
via the number of VNOs/amount allocated to each VNO within a beam. Also VNO can
oversubscribe the subscription by committing more bandwidth to the set of configured terminals
than the subscription.

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
13
198891&Singapore/&Registration&number&201317505N&&
 Management
The gateway implements the in-route and Bandwidth Manager Subsystem that performs VNO
bandwidth policing and congestion management functions. The bandwidth manager also provides
the ability to extract statistics related to terminal SLA and VNO bandwidth usage for both HNO and
VNO monitoring.

Service-Oriented Model
Each VNO has full service configuration capabilities to configure service plans and terminals within
the allocated bandwidth or dedicated resources. The benefits of the service-oriented model are as
follows:

• Flexibility in what can be offered to the VNO

– Complete set of capabilities available
– Multiple VNO types (hierarchical model)
• Can sell to VNOs in terms of Mbps
– Selling to VNOs in terms of true bandwidth
– Considers complete end-to-end service infrastructure
• Complete network partitioning for resources allocated to VNO
• Streamlined operations for creating and managing VNOs
• Maximizes physical spectrum and space link efficiencies

The system supports service-oriented RESTful API to integrate with the HNO OSS/BSS to allow
HNO to easily tie their own OSS/BSS into the NMS for VNO provisioning and service configuration.
VNO Capabilities and Portal
The HNO has the ability to selectively assign a set of management capabilities to the VNO during
virtual network setup. VNO can log in to the VNO portal and utilize the assigned capabilities provided
by the HNO.

The VNO portal is a Web-based management system for VNO to configure/monitor their virtual
network. This is semi-independent of HNO NMS and provides simplified network management to
facilitate ease for VNO.

The following are the list of VNO capabilities supported in the system:

• Full configuration/management of terminals

– Assign service plans
– Configure terminals
– Manage terminal activation/deactivation (commissioning)
• Rich set of monitoring capabilities and reporting
– Monitor total bandwidth usage against bandwidth subscription
– Monitor terminal usage (throughput) in real time
– Long-term bandwidth trending on a per-terminal basis

• Troubleshooting and diagnostics

– Control terminals (reset, change configuration, etc.)

– Terminal diagnostics and pertinent real-time statistics (i.e., EsNo, SQF, current
rate/MODCOD)

Alarm management for events related to dedicated gateway resources and terminals
!
2.8.2. Autonomous Operation
The entire subscriber network, including all data processing systems and antennas, will operate
continuously without human intervention. There will not be a need for periodic reboots, resets, or
other operational discontinuities during normal system operation.

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
14
198891&Singapore/&Registration&number&201317505N&&
 2.8.3. Reliability, Maintainability, and Service Interruptions
Kacific only uses widely validated terminal models validated and with track records of installations
of hundreds of thousands of units.

Gateway hub equipment will be fully redundant and will not require any system downtime for
maintenance. Gateways redundancy will be used for both backup and site diversity.

Hardware and software will be maintainable using commonly available tools and operating system
utilities. Firmware upgrade of remote units will be done without on-site visits.

Mechanical fixtures to aid installation and/or maintenance will be delivered with each terminal
system.

Terminal hardware is designed to allow field replacement in the unlikely event of defective modules,
the terminal manufacturer will have spare parts plan to provide Kacific customers with guidance in
repairing systems with minimal service interruptions.

Kacific will support any ongoing quality control unit batch testing and a Kacific terminal certification
process with the terminal manufacturer.

The Kacific terminals support carrier ID data insertion and extraction by the network management
system. The following Carrier-ID information will be transmitted with the carrier to identify the source
of all transmissions to the Kacific system and isolate rogue terminals and terminals with
performance problems: customer name, contact telephone number, geo coordinates, terminal
manufacturer, and terminal serial number.

!
2.9. Maximizing aggregate bandwidth availability over Timor Leste.

The Kacific system is designed to reach 99.8% of aggregate bandwidth availability in Timor Leste.
Kacific terminals use Adaptive Coding Modulation (ACM). Information rates for different Modcod
values are shown in the table below. The performance will vary depending on the terminal size
used. For a 1.2m antenna, bps/Hz Vs availability graph is shown here below.

Figure&9:&bps/Hz&and&availability&

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
15
198891&Singapore/&Registration&number&201317505N&&
 !
Table&1:&Information&rate&for&&
different&MODCOD&

ACM is a powerful tool that increases the throughput and availability. Kacific terminals adapt
different modcod under different weather conditions. Under clear sky conditions the Kacific system
reaches a high spectral efficiency. More than 80% of the time the weather condition in Timor Leste
is clear sky.

Figure&10:&ACM&performance&of&each&terminal&under&different&weather&conditions&&

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
16
198891&Singapore/&Registration&number&201317505N&&
 Based on ITU-R model, our studies show that the proposed Kacific powerful narrow beams
infrastructure mitigates the effect of weather, even in high rainfall areas. An individual Kacific 1.2m
terminal will be at 99.5% availability.

Kacific satellite’s Ka-band frequency range is from 19.7 GHz to 30 GHz into Timor Leste. We
calculated the atmospheric losses over Timor Leste based on the frequencies 30 GHz. Thus the
real-life results would be even better than those depicted in the table below.

!
Table&2:&Availability&predicted&for&Timor&Leste&atmospheric&conditions&(worst&case)&
!
0
Kacific terminals in Timor Leste will have an excellent average elevation angle of 58 , which further
mitigates any weather effect.

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
17
198891&Singapore/&Registration&number&201317505N&&
 3. PRICING

We are pleased to offer Ministry of Health- Timor Leste the following pricing for its long-term
commitment:

USD 260/Mbps/month, for simplex dedicated bandwidth

While this offer is conditional on purchasing Kacific bandwidth planned for Timor Leste, Kacific will
offer Ministry of Health- Timor Leste as follows:

Committed Committed Unit Price Cap Additional

Dedicated FWD Dedicated RTN Price per (GB/Month) capacity beyond
Bandwidth (Mbps) Bandwidth (Mbps) (*) Month cap (per GB) (*)
(*)
Years 1
50 Mbps 25 Mbps 260 19,500 12,700 1.50
to 5
Table&3&Service Fees

For this price, we guarantee 99.6% availability of the aggregated bandwidth. And we garantee for
50 Mbps forward and 25 Mbps return committted dedicated bandwidht.
!
(*) Price in USD, excluding taxes, import duties, excise, in-country license cost and all other
government charges.

Provided Service Customer Beam (return and forward bandwidth)

Service Term 5 years after the Service Commencement Date

Service Commencement Window 6 months after the satellite Ready For Service Date
Service Fees See table above
Security 5% of the total value of the contract as bank guarantee
Table&4&Service Terms

In addition to a substantially low price of bandwidth we are providing you with an Early Commitment
Package as follows:

Portal Access to Teleport Free of Charge

Service Activation Fee (s) Free of Charge
Teleport Services Free of Charge
IP Transit from Teleport Free of Charge
NMS Portal Free of Charge
Table&5 Early Commitment Package

The commitment from Ministry of Health- Timor Leste shall be in form of a Framework Services
Agreement (FSA) for a five years contract.
th
This commercial offer is valid until April 30 2015.

Confidential!Proprietary!Information!HAll!rights!reserved.!Passing!on!and!copying!of!this!document,!use!and!communication!of!
its!contents!not!permitted!without!the!written!authorization!of!Kacific
Kacific&Broadband&Satellites&Pte&Ltd/&Kacific&32A&Kandahar&Street&&
18
198891&Singapore/&Registration&number&201317505N&&