ZStack Zaku takes "providing universal cloud-native products" as
its core design concept. It shields the complexity of container technology, simplifies
operations to match the habits of traditional users, deeply integrates computing,
networking, storage, security and other basic components in a pluggable way, and
provides enterprise-grade features such as multi-tenancy, multi-cluster, resource quota,
CI/CD, microservices governance, GPU management and scheduling, disaster recovery and
backup, and O&M management. This allows enterprises to get started quickly and enjoy
the resource optimization and efficiency improvements brought by cloud-native
applications.
See Figure 1:Figure 1. ZStack Zaku Product Architecture
Product Characteristics
Out-of-the-box, easy to operate and maintain
ZStack Zaku enables one-click installation,
shields underlying technical details as far as possible, reduces
O&M complexity, and provides an enterprise-grade platform. It is
deeply adapted to the Cloud platform to achieve unified platform
O&M.
ZStack Zaku is built with infrastructure at
its core, around the four elements of computing, storage, networking
and security, and fully supports CPU and GPU resources of both x86
and ARM architectures. It covers core functions such as full
lifecycle management of workloads, multi-tenant resource quota,
multi-cluster integration, monitoring and O&M, service
governance, and CI/CD, making containers simpler to use and enabling
a one-click leap into the cloud-native era.
Tenant autonomy and safety
Resources are allocated on demand to meet enterprise-grade tenant
isolation and permission management requirements, with full security
coverage for cloud-native application scenarios such as clusters and
containers. ZStack Zaku supports three
levels of privilege division, and isolates users, applications and
networks between tenants, flexibly meeting application management
and O&M needs in a cloud environment.
ZStack Zaku provides full lifecycle
protection, covering pipeline scanning and detection during the
application development phase and repository detection during the
image storage phase, and delivers comprehensive defense capabilities
at runtime.
ZStack Zaku supports security coverage for
all cloud-native application scenarios, including images, runtimes,
orchestration files, services and microservices, K8S clusters and
container networks. It also provides security operation capabilities
such as a large-screen dashboard, an asset management center, a
security compliance center, a multi-tenant management view, and a
vulnerability operation center.
Cluster integrated, open and compatible
External standard K8S clusters can be integrated, supporting
multi-cloud and multi-cluster scenarios. ZStack Zaku clusters have no lock-in and all APIs
are open, so various types of external standard K8s clusters can be
integrated. It adopts a multi-cluster model, associates multiple K8s
engines, supports the creation of both regular and highly available
K8s clusters, and supports backup, recovery and upgrade operations.
In addition, ZStack Zaku supports unified
integration of public cloud and private cloud K8s clusters,
regardless of vendor or version. An externally integrated cluster
only needs to be activated with one click, and the management
functions of the platform are then synchronized to match the
external cluster.
Mainstream domestic IT architectures are fully supported, with
compatibility for domestic chips and operating systems. ZStack Zaku is adapted to mainstream domestic
operating systems and has completed compatibility certification with
domestic chip vendors and hardware server vendors.
Application-driven, continuous delivery
Covers full lifecycle management of application development and
testing to improve iteration efficiency, and provides full lifecycle
control of microservices governance through the service mesh.
Supports service governance for workloads, mainly in the following
areas: canary release when updating an application; traffic
management, including various types of traffic routing and load
policy settings; visualization of application access traffic; and
audit and tracing of application traffic links.
