Whitesky.cloud Feature wrap
An overview af a pretty broad private managed cloud platform
Infrastructure as a Service
Cloudspaces
A cloudspace is a customer owned layer 2 network with a virtual firewall in which virtual machines can be deployed. The virtual firewall has 0 or more external networks and acts as a gateway to the external networks. Customers can also deploy a virtual machine in their cloudspace that will act as the VFW if they more advanced firewall configurations. By default a virtual machine is never directly exposed to the external networks available to the customer.
- Bound to a cloud location
- Isolated layer 2 network
- Firewall:
- Builtin
- DHCP server
- Cloud init
- Port forwards
- Routing
- VPN access to cloudspace
- Automated VPNs between Cloudspaces (Connected Cloudspaces)
- Custom: any virtualized firewall deployed in a virtual machine can act as the firewall for a cloudspace
- Builtin
- 0 or more external networks (internet, customer network, …)
- Ingress:
- Server pools
- Load balancing:
- (Layer 7) Reverse proxies, SSL offloading, Lets encrypt support
- (Layer 3)
- TCP load balancers, SSL offloading or pass through
- UDP load balancers
Virtual machines
- Bound to a cloudspace
- Create from
- Predefined images
- Install from ISO image
- Clone from a snapshot
- Import from a
- Veeam
- Acronis
- whitesky(*) backup
- Storage
- Software defined
- vDisks based on the integrated whitesky software defined storage (not Ceph!) with or without NVME local cache
- Automated vDisk snapshots on software defined storage every hour. Retention is configurable.
- vDisks via direct attached NVME for high demanding IO workloads.
- Software defined
- CDRom images
- Integrated backup to S3(*) storage
- VGPU, both virtualized and dedicated GPU is possible
- CPU pinning & custom CPU topologies
- Anti-affinity groups
- Networking
- Default cloudspace network interface (VMs are never reachable from the outside in the default configuration)
- Extra interfaces to other cloudspaces
- Extra interfaces to external networks
- Audits
- Dynamic sizing for memory, cpu and vDisks
- Cloud init
- Virtual machine initialization
- Cloud init templates for initializing extra software
- Automation via QEMU agent (get / set files in VM, exec programs)
- Performance stats and spending history
- Microsoft software licensing overview
- Create VM Template
- VM migration
- Import / export via S3 bucket
- VM copy (whitesky to whitesky) via CLI
- Nearly online migration from everywhere to whitesky
- Backup / restore via whitesky Backup
S3 compatible storage
Objectspaces
- Bound to a cloud location
- Security
- Admin access key / secret key
- Bucket level keys for read, write or read-write access
- Object locking support
- Can grow up to 360 PB
- Accessible via the cloudspace network privately or exposed via cloudspace ingress
- Dynamic throughput control
Kubernetes as a Service
Containerspaces
- Automated Rancher deployment in cloudspaces
- Multi cloud location kubernetes via connected clouspaces
- Automated extension
- Integrated load balancers via cloudspace ingress
- Automated installation
- Ingresscontroller
- Certificate manager
- Automated installation of CSI driver for Software defined storage and direct attached NVME
Portal
The whitesky portal is a white-labeled self-service cloud portal that allows the internal or external cloud customers to manage their cloud resources across the cloud locations that are available to them.
Cloud admin: Customer management and other administrations
- Customer management
- Create / accept / delete
- Resource pricing, location access, resource quotas
- Consult customer invoices
- Billing: Generate monthly invoices for cloud customers
- For cloud resouce consumption
- For Microsoft licensed software (daily automated scanning with Octopus.cloud for SPLA & CSP(*))
- Locations: Manage location resource standard pricing
- Notifications: Send notifications to customers
- Audits: Review customer audit records
- Sales analysis: Review how customer cloud resource consumption evolves over time
- Software licenses: Examine Microsoft license software usage by customer calc resources
- Settings:
- General: live chat, self-registration + payment + approval, notifications forwarding, show / hide pricing, license compliance issue notifications
- SPLA: Microsoft SPLA license config
- Invoice settings
- Portal branding
- Payment provider
- Audit record forwarding
- DNS resource settings
- Default resource quotas for new customers
- Support config
- Emergency notifications
- License compliance: Overview of Windows VMs that cannot be automatically scanned for Microsoft licensed software
Customer admin section:
- Customer SSL certificate store: For use in reverse proxies and kubernetes clusters.
- Add SSL certificates
- Update SSL certificates (updates the SSL certificate in the store and in the resources that use them)
- Roles: Define roles and permissions for fine grained resource access
- DNS: DNS settings for automated DNS records for cloud resources
- License notifications: Get a warning when users deploy Microsoft licensed softwares
- Audits: Review audit records
- Emergency notifications: Get notified when cloud resources become unavailable
Identity and Access Management
- Separate deployed OpenID / OAUTH2 Identity access manager
- 2FA is always required via
- Phone number (SMS)
- Authenticator
- Hierarchical Organization based
- JWT support
- Self-registration
- SSO via Microsoft Account / Google Account (*)
Recycle Bin
- Soft deleted cloud resources (cloudspaces, objectspaces, virtual machines, buckets, vDisks, VM Images, CDROM images, vGPUs) remain in the recycle bin for 7 days before they get deleted for real
- Ability to empty recycle bin
Tools and APIs
- 100% complete API (UI is built ontop of the API)
- UI shows which APIs it used for building the user interface
- Swagger UI for exploring the API
- Cli for windows, mac and linux
- Terraform provider
- Ansible support in opensource
Platform
whitesky cloud location (aka the G8)
- Managed by whitesky as a service
- Installation
- Update / upgrade / trouble shooting
- 24/7 monitoring
- Deployed in blocks of up to 6 servers (always n+1 spare server)
- Servers in each block have the same hardware configuration
- Blocks can provide compute, block storage, object storage or a combination of these
- Minimal size: 1 block with 3 servers
- Maximum size: not defined
- Software defined storage
- In house developed, 100% part of the platform
- Uses erasure coding for getting maximum data durability in combination with minimal overhead
- vDisk live migration to support server maintenance or io rebalancing
- Support for flash backend or HDD backend with flash cache
- Used for both vDisk (log structured storage) and S3 compatible storage
- Self-healing infrastructure
- Seamless updates: VM and vDisk life migration in combination with the block-based server deployment allow us to seamlessly update everything, even the host OS.
whitesky cloud location manager (aka meneja)
- Central management UI for managing cloud locations for
- Monitoring
- Capacity planning, performance indicators
- Configuration management
- Virtual machine & CD-ROM image distribution
- External network management
- GPU management
- Virtual machine & CD-ROM image management, validation and distribution
- Reseller management & billing
(*) Coming soon
Contact our team
Get in touch with our sovereign Cloud team.
Prefer to book a meeting? Schedule a call with us here. Otherwise, go ahead and submit your info below and we’ll get back to you as soon as possible. Thanks!
