Instance
An instance is a virtual machine or server that runs the images of operating
systems in Cloud, such as VM instance and elastic baremetal
instance.
What is License
Licensing in ZStack Cloud is supplied in
different functionality packages as Base and Plus.
- Base License
- Provides the basic and essential features of the Cloud, which can meet the mainstream business requirements.
- Covered functionalities: Standard, Enterprise Trial, and Enterprise Prepaid. For more detailed information about these editions, see contact official sales.
- Plus License
- Provides add-on features or feature enhancements to meet the specific business requirements.
- Covered functionalities: VMware Management, ZMigrate Migration Service, Tenant Management, ARM64 Management, Backup Service, Continuous Data Protection (CDP) Service, Cryptography Security Compliance, Baremetal Management, Elastic Baremetal Management, Alibaba Cloud Hybrid Cloud Management, 5x8 (7x24) After-Sales Service, SR-IOV NIC Service, GPU Service, Billing Management, CloudFormation, Auto-Scaling Service, SDN Network, Container Service-CPU, and Container Service-vCPU.
- A Base license is required to install the Plus license.
Licensing Mechanism
ZStack Cloud licensing mechanism is detailed as follows.
Note:
| Licensing Mechanism | Functionality Covered | Description |
|---|---|---|
| / | Community |
Provides a simple, ease-of-use, and productized private cloud
platform with diversified features for community users.
|
| Base License | Standard |
Provides a full set of computing, storage, and network
virtualization features. This helps to meet the various and
flexible business requirements.
|
| Enterprise Trial |
Provides a full set of computing, storage, and network
virtualization features, and enhanced features such as GPU,
CloudFormation, and auto-scaling. This helps to meet the
various and flexible business requirements.
|
|
| Enterprise Prepaid |
Provides a full set of computing, storage, and network
virtualization features, and enhanced features such as GPU,
CloudFormation, and auto-scaling. This helps to meet the
various and flexible business requirements.
|
|
| Plus License | VMware Management |
Manages all the features of vCenter and provides an
independent CPU license for VMware compute nodes.
|
| ZMigrate Migration Service |
Licenses the migration of VM instances and their data from
VMware environments to the current cloud platform.
|
|
| Tenant Management |
Provides the full functionalities of Tenant Management, such as project management, organizational structure, users, permissions, and Cloud operations, during the licensed period.
|
|
| ARM64 Management |
Provides a specified number of ARM hosts within the licensed
period, and provides stable support for ARM64 servers.
|
|
| Backup Service |
Backs up VM data to backup servers online in various
scenarios, such as local backup, remote backup, and hybrid
cloud backup. This enhances the data reliability.
|
|
| Continuous Data Protection (CDP) Service |
Provides second-level and fine-grained continuous data
protection for VM instances, ensuring that VM instances can
quickly recover when a failure occurs.
|
|
| Baremetal Management |
Provides a specified number of dedicated physical servers
within the licensed period to ensure the high performance
and stability of core applications.
|
|
| Cryptography Security Compliance |
Provides applications with cloud security capabilities based
on commercial cryptographies, meeting the requirements of
commercial cryptography application security assessments.
|
|
| Elastic Baremetal Management |
Provides the license for managing specified number of
flexible physical servers during the licensed period,
improving the ease of use and flexibility in addition to
ensuring the high performance and stability of physical
servers.
|
|
| Alibaba Cloud Hybrid Cloud Management |
Provides all features of Alibaba Cloud Hybrid Cloud
Management, realizing the interconnection between the
control plane and the data plane.
|
|
| Container Service-CPU |
Provides independent CPU license for an enterprise-level
container service, enabling you to conveniently use
multiple-tenant management, multiple cluster management,
resource allocation, CI/CD, microservice governance, and
other container-related features.
|
|
| Container Service-vCPU |
Provides independent vCPU license for an enterprise-level
container service, enabling you to conveniently use
multiple-tenant management, multiple-cluster management,
resource allocation, CI/CD, microservice governance, and
other container-related features.
|
|
| 5x8 (7x24) After-Sales Service |
Provides 5x8 or 7x24 official after-sales technical support
within the specified period.
|
|
| SR-IOV NIC Service |
Allows you to generate VF NICs from physical NICs based on
the SR-IOV specification and allocate these VF NICs to VM
instances. This provides VM instances strong I/O performance
comparable to that of physical NICs.
|
|
| GPU Service | Allows you to passthrough a physical GPU
(pGPU) to VM instances or divide a pGPU into multiple virtual
GPUs (vGPUs) and distribute the vGPUs to VM instances. This
empowers VM instances with strong computing capabilities of
physical GPUs.
|
|
| Billing Management | Provides billing methods like that of the
public cloud, uses pricing lists to manage billing of resources
of various unit prices, and offers billing services to the admin
and tenants based on the pricing lists.
|
|
| CloudFormation | Uses stack templates to batch deploy and
configure resources and manage the lifecycle of the resources.
In addition, offers designers that allow efficient orchestration
of cloud resources.
|
|
| Auto-Scaling Service | Allows automatic scale-in or scale-out of VM
instances based on the load balancing result of application
workloads, thereby improving resource utilization, lowering
maintenance costs, and securing stable business operations.
|
|
| SDN Network | Supports hardware SDN integration and
provides advanced network service management capabilities based
on OVS-DPDK software SDN networks.
|
|
| SE Device | Supports SE device detection and management,
including virtualization/ungeneration and attachment to VM
instances, which provides security and encryption services.
|
Note:
- For more details, contact us by sending emails to sales@zstack.io.
- To obtain a trial, or to purchase or upgrade your ZStack Cloud license, send your key ID or request key with your requirements to sales@zstack.io. We will contact you as soon as possible.
Feature Comparison
ZStack Cloud provides multiple license editions with advanced features to meet the your needs in different scenarios. For differences about features provided in different editions, contact our official sales.
Install a License
ZStack Cloud supports two licensing methods: Local Licensing and
Server Licensing. The admin can use either of the two methods to install licenses for
the Cloud.
- Local Licensing: Install local licenses using either a request key or an
USB key. The Cloud consumes the local license quota.
- USB Key: Plug the authorization USB Key into the management node to complete the local license installation.
- Request Key: Use the request key to apply for licenses and upload the obtained license file locally to complete the installation.
- Server Licensing: Connect to a license server and consume the license quota on the license server.
Local Licensing (USB Key)
This topic details the method for local authorization using a USB key, covering the license installation, license renewal, and USB key status verification.
Install License
To install a license by using a USB key, the admin can follow these steps:
- Insert the USB key into the management node.
- On the main menu of ZStack Cloud, choose . Then, the License Management page is displayed.
- On the License Management page, click the
Refresh button to the left of Upload
License.
Figure 1. Refresh License 
- Then, you can see the whole licensing information.
Figure 2. Whole Licensing Information 
Note:
- If you have got a license by using a request key, you can view Plus License of both the request key and USB key after inserting the USB key. If the Plus License is the same, the latest uploaded one will be taken as a reference.
- If you get a license by using the USB key, every time you enter the License Management interface of the Cloud, there will be about two seconds of information reading, and the relevant information of the USB key will appear after two seconds.
- If you are using a dual-MN environment, note that:
- You can obtain the authorization by inserting only one USB key into the management node.
- If the node with the USB key inserted is faulty, we recommend that you remove the USB key and insert it into another healthy node to ensure the business continuity.
- If you update from a single management node environment to a dual-MN environment, you do not need to get the additional license.
Renew License
To resize or add licenses after uploading the license, the admin can follow these
steps to renew the license by using a USB key:
- Insert the USB key into the management node.
- On the main menu of ZStack Cloud, choose . Then, the License Management page is displayed.
- On the License Management page, click the Copy
button to the right of the Key ID.
Figure 3. Copy Key ID 
- Apply for a license by using the USB Key ID to get the licensing file.
- Go back to the License Management page, Click
Upload License to upload the licensing file.
Figure 4. Upload License 
- Check whether the licensing information is correct.
Note:
- If you do not insert a USB key into the management node, you can not upload a license by using the USB key.
- If the USB key ID dose not match the applied license, you can not upload the license by using the USB key.
- If you apply a new license by using a USB key, you need to fill in previous all applied information and then add new Plus License information when the USB key does not match the request key.
View USB Key Status
On the main menu of ZStack Cloud, choose . Then, the License Management page is displayed. You can view the current status of the USB key of the Cloud.
USB Key Status
USB key has the following statuses.
| Status | Description |
|---|---|
| Ready | The USB key is Ready when there is only one USB key inserted into the management node and it works properly. |
| Missing | After unplugging the USB key, the USB key is
Missing.Note: When unplugging the USB key, the Cloud will
check whether the current license is expired.
|
| Abnormal | For a dual-MN environment, you might face a
possibility of USB key failure if you:
Note: The USB key in an abnormal state does not affect the
license. |
| Fault |
Note: When the USB key status is Faulty, you can not use the
license after the buffer license is expired. |
Local Licensing (Request Key)
This topic details the method for local authorization using a request key covering the license installation and license renewal.
Install License | UI
To install a license by using a request key, the admin can follow these steps:
- On the main menu of ZStack Cloud, choose . Then, the License Management page is displayed.
- On the License Management page, click Upload
License in the upper right corner. On the displayed
Upload License window, set the following
parameters:
- Licensing Method: Select Local Licensing.
- License: Upload the license file.
Note:
- You can upload both the Base license and Plus license at the same time by using a tar.gz package or a .txt file.
- If you are using a dual-MN environment, we recommend that you download the request key and upload the license file on the management node where the virtual IP address is located. Then, the licensing information on both nodes can be updated.
- Only the admin has the permission to load or delete licenses. Note that the Base license cannot be deleted.
Install License | Command Line
- Import the license by using a command line tool after getting the new
license.
[root@localhost ~]# zstack-ctl install_license -f zstack-license.tar.gz - Refresh the license.Reload the license by using the following commands:
[root@localhost ~]# zstack-cli ZStack command line tool Type "help" for more information Type Tab key for auto-completion Type "quit" or "exit" or Ctrl-d to exit >>>LogInByAccount accountName=admin password=password { "inventory": { "accountUuid": "36c27e8ff05c4780bf6d2fa65700f22e", "createDate": "May 25, 2016 8:12:54 PM", "expiredDate": "May 25, 2016 10:12:54 PM", "userUuid": "36c27e8ff05c4780bf6d2fa65700f22e", "uuid": "d505bde1bcce46cb9c79774440654f42" }, "success": true } >>>ReloadLicense
Renew License
To resize or add licenses after uploading the license, the admin can follow these
steps to renew a license by using a request key:
- On the main menu of ZStack Cloud, choose . Then, the License Management page is displayed.
- On the License Management page, click the
Download button next to Request
Key.
Figure 7. Download Request Key 
- Apply for a license by using a request key to get the licensing file.
- Go back to the License Management page, upload the licensing file.
- Check whether the licensing information is correct.
Server Licensing
About this task
This topic describes how to use server licensing. The main process includes the following steps:- Prepare a license server.
- Connect to the license server.
Procedure
-
Prepare a license server.
Prepare the license server, and obtain the license server address and port.
-
Connect to the license server.
-
On the License Management page, click Upload License in the upper right corner. The Upload License page is displayed.
Configure the following parameters as needed:
- Licensing Method: Select Server Licensing.
- License Server Address: Enter the license server address.
Note: After server licensing is used, the current environment consumes the license quota on the license server and cannot switch back to local licensing.Note: A ZMigrate license belongs to a specific cloud platform and is not added to the shared pool of the license server. The license server serves only as a centralized management portal. License data and related operations are still processed by the ZMigrate service of the corresponding cloud platform. For configuration instructions, see Configure a ZMigrate License Through a License Server.
-
On the License Management page, click Upload License in the upper right corner. The Upload License page is displayed.
Check License Status
The admin can check the current license status of the Cloud platform through a graphical interface and command line tool.
Graphical Interface
On the main menu of ZStack Cloud, choose . Then, the License Management page is displayed. You can view the current license status of the Cloud.
License Status
A license has the following statuses.
| Status | Description |
|---|---|
| Valid | The Base license is in the valid status. |
| Expired | The Base license or a Plus license expired. If a Plus license expires, the corresponding features are unavailable. |
Command Line Tool
You can get the current authorization information of the Cloud through command line
tools.
[root@localhost ~]# zstack-cli
ZStack command line tool
Type "help" for more information
Type Tab key for auto-completion
Type "quit" or "exit" or Ctrl-d to exit
admin >>>LogInByAccount accountName=admin password=password
{
"inventory": {
"accountUuid": "36c27e8ff05c4780bf6d2fa65700f22e",
"createDate": "Jul 26, 2017 9:30:27 AM",
"expiredDate": "Jul 26, 2017 11:30:27 AM",
"userUuid": "36c27e8ff05c4780bf6d2fa65700f22e",
"uuid": "c65bf1e9cf2842e389a4d17e361fbbdc"
},
"success": true
}
admin >>>GetLicenseInfo
{
"inventory": {
"availableHostNum": 4,
"expired": false,
"expiredDate": "2017-08-23T12:27:01.000+08:00",
"hostNum": 5,
"issuedDate": "2017-07-24T12:27:01.000+08:00",
"licenseRequest": "eyJwcml2YXRlS..."
"licenseType": "Paid",
"managementNodeUuid": "d0666cee13e83c2a8d2b420012704174",
"user": "test@zstack.io"，
"uuid": "5c73a91fdf7c42679890df1368588787"
},
"success": true
}License Exception Reminder
If an exception occurs to your license, the Cloud will remind you accordingly. The
details are listed as follows.
| Exception | Details |
|---|---|
| License to Expire | When the remaining license period is less
than 15 days, a banner prompt will appear after you log in to
the Cloud.Note:
|
| License Expired | When the Base license expired, you will be
redirected to the License Management page
after login. In order not to affect your use of the Cloud, we
recommend that you contact us as soon as possible for
authorization update.Note:
|
| Licensed Quota Exceeds | When you update your license, you may find
that the used resources exceed the authorized quota. In this
case, most features of the Cloud become unavailable. To ensure
your business continuity, we recommend that you update your
license to expand the capacity. The limitations and operations
that you can perform are as follows:
Note:
|
| License Server Disconnected | The Cloud uses server licensing but the
license server is disconnected.Note:
|
Licensing Record
On the main menu of ZStack Cloud, choose . Then, the Licensing Record page is displayed.
The admin can view the licensing records of the Cloud on the UI, including the upload time, license type, authorized items, authorization method, authorized quota, state, time when the license was issued, and time when the license expires.
Glossary
VM Instance
A VM instance is a virtual
machine instance running on a host. A VM instance has its own IP address and can
access public networks and run application services.
Volume
A volume provides storage space for a VM instance. Volumes
are categorized into root volumes and data volumes.
Root Volume
A root volume provides support for the system operations
of a VM instance.
Data Volume
A data volume provides extended storage space for a VM
instance.
Image
An image is a template file used to create a VM instance
or volume. Images are categorized into system images and volume
images.
Instance Offering
An instance offering defines the number of vCPU cores,
memory size, network bandwidth, and other configuration settings of VM
instances.
Disk Offering
A disk offering defines the capacity and other
configuration settings of volumes.
GPU Specification
A GPU specification defines the frame per second (FPS),
video memory, resolution, and other configuration settings of a physical or virtual
GPU. GPU specifications are categorized into physical GPU specifications and virtual
GPU specifications.
vNUMA Configuration
vNUMA uses CPU pinning to passthrough the topology of
associated host physical NUMA (pNUMA) nodes to a VM instance, generating a topology
of virtual NUMA (vNUMA) nodes for the VM instance. This topology enables a vCPU on a
vNUMA node to primarily access the local memory and thus improves VM
performance.
NUMA (Non-Uniform Memory Access)
Non-uniform memory access (NUMA) is a computer memory
design where the memory access time depends on the memory location relative to the
CPU. Under NUMA, a processor can access its own local memory faster than non-local
memory and thus improves VM performance.
pNUMA Node (physical NUMA Node)
A pNUMA node (physical NUMA node) is a host NUMA node
predefined based on the host NUMA architecture. It is used to manage the CPUs and
memory of the host.
pNUMA Topology (physical NUMA Topology)
A pNUMA topology (physical NUMA topology) is the topology
of the host NUMA nodes predefined by the CPU vendor based on the host NUMA
architecture.
vNUMA Node (virtual NUMA Node)
A vNUMA node (virtual NUMA node) is generated by
passing-through associated pNUMA nodes via CPU pinning. It is used to manage the
CPUs and memory of a VM instance.
vNUMA Topology (virtual NUMA Topology)
A vNUMA topology (virtual NUMA topology) is the topology
of VM NUMA nodes generated by passing-through associated pNUMA nodes via CPU
pinning.
Local Memory
Local memory is the memory that a CPU (pCPU or vCPU)
accesses through the Uncore iMC (Integrated Memory Controller) of the same NUMA
(pNUMA or vNUMA) node. Compared with accessing non-local memory, accessing local
memory has lower latencies.
CPU Pinning
CPU pinning assigns the virtual CPUs (vCPUs) of a VM
instance to specific physical CPUs (pCPUs) of the host, which improves VM
performance.
EmulatorPin Configuration
EmulatorPin assigns all other threads than virtual CPU
(vCPU) threads and IO threads of a VM instance to physical CPUs (pCPUs) of the host
so that these threads run on assigned pCPUs.
Auto-Scaling Group
An auto-scaling group is a group of VM instances that are
used for the same scenarios. An auto-scaling group can automatically scale out or in
based on application workloads or health status of VM instances in the
group.
Snapshot
A snapshot is a point-in-time capture of data status in a
volume.
Affinity Group
A VM scheduling policy is a resource orchestration policy
based on which VM instances are assigned hosts to achieve the high performance and
high availability of businesses.
Zone
A zone is a logical group of resources such as clusters,
L2 networks, and primary storage. Zone is the largest resource scope defined in the
Cloud.
Cluster
A cluster is a logical group of hosts (compute
nodes).
Host
A host provides compute, network, and storage resources
for VM instances.
Primary Storage
A primary storage is one or more servers that store volume
files of VM instances. These files include root volume snapshots, data volume
snapshots, image caches, root volumes, and data volumes.
Image Storage
An image storage is a storage server that stores VM image
templates, including ISO image files.
iSCSI Storage
iSCSI storage is an SAN storage that uses the iSCSI
protocol for data transmission. You can add an iSCSI SAN block as a Shared Block
primary storage or pass through the block to a VM instance.
FC Storage
FC storage is an SAN storage that uses the FC technology
for data transmission. You can add an FC SAN block as a Shared Block primary storage
or pass through the block to a VM instance.
NVMe Storage
A type of storage implemented via the NVMe-oF (NVMe over
fabrics) protocol. You can add a block device configured from an NVMe storage as
SharedBlock primary storage.
L2 Network
An L2 network is a layer 2 broadcast domain used for layer
2 isolation. Generally, L2 networks are identified by names of devices on the
physical network.
VXLAN Pool
A VXLAN pool is a collection of VXLAN networks established
based on VXLAN Tunnel Endpoints (VTEPs). The VNI of each VXLAN network in a VXLAN
pool must be unique.
L3 Network
An L3 network includes IP ranges, gateway, DNS, and other
network configurations that are used by VM instances.
Public Network
Generally, a public network is a logical network that is
connected to the Internet. However, in an environment that has no access to the
Internet, you can also create a public network.
Flat Network
A flat network is connected to the network where the host
is located and has direct access to the Internet. VM instances in a flat network can
access public networks by using elastic IP addresses.
VPC Network
A VPC network is a private network where VM instances can
be created. A VM instance in a VPC network can access the Internet through a VPC
vRouter.
Management Network
A management network is used to manage physical resources
in the Cloud. For example, you can create a management network to manage access to
hosts, primary storage, image storage, and VPC vRouters.
Flow Network
A flow network is a dedicated network for port mirror
transmission. You can use a flow network to transmit the mirrors of data packets of
NIC ports to the target ports.
VPC vRouter
A VPC vRouter is a dedicated VM instance that provides
multiple network services.
VPC vRouter HA Group
A VPC vRouter HA group consists of two VPC vRouters.
Either VPC vRouter can be a primary or secondary VPC vRouter for the group. If the
primary VPC vRouter does not work as expected, the VPC vRouter becomes the secondary
VPC vRouter in the group to ensure high availability of business.
vRouter Image
A vRouter image encapsulates network services and can be
used to create VPC vRouters.
Dedicated-Performance LB Image
A dedicated-performance load balancer (LB) image
encapsulates dedicated-performance load-balancing services and can be used to create
load balancer instances. However, a dedicated-performance load balancer image cannot
be used to create VM instances.
vRouter Offering
A vRouter offering defines the number of vCPU cores,
memory size, image, management network, and public network configuration settings of
VPC vRouters. You can use a vRouter offering to create VPC vRouters that can provide
network services for public networks and VPC networks.
LB Instance Offering
A load balancer (LB) instance offering defines the CPU,
memory, image, and management network configuration settings used to create LB
instances. LB instances provide load balancing services for the public network, flat
network, and VPC network.
SDN Controller
The SDN controller is the core of the SDN architecture,
responsible for centralized management and control of network
devices.
SDN Cluster
A cluster of dedicated VM instances designed to provide highly available SDN capabilities.
SDN Instance
A dedicated VM instance designed to provide SDN network
capabilities.
SDN Image
An SDN image encapsulates an SDN software and can be used
to create SDN instances.
SDN Instance Offering
An SDN instance offering defines the CPU, memory, SDN
image, and management network configuration used for creating SDN
instances.
Security Group
A security group provides security control services for VM
NICs. It filters the ingress or egress TCP, UDP, and ICMP packets of VM NICs based
on the specified security rules.
VIP
In bridged network environments, a virtual IP address
(VIP) provides network services such as serving as an elastic IP address (EIP), port
forwarding, load balancing, IPsec tunneling. When a VIP provides the preceding
network services, packets are sent to the VIP and then routed to the destination
network where VM instances are located.
EIP
An elastic IP address (EIP) functions based on the NAT
technology. IP addresses in a private network are translated into an EIP that is in
another network. This way, private networks can be accessed from other networks by
using EIPs.
Port Forwarding
Port forwarding functions based on the layer-3 forwarding
service of VPC vRouters. This service forwards traffic flows of the specified IP
addresses and ports in a public network to specified ports of VM instances by using
the specified protocol. If your public IP addresses are insufficient, you can
configure port forwarding for multiple VM instances by using one public IP address
and port.
Load Balancer
A load balancer distributes traffic flows of a virtual IP
address to backend servers. It automatically inspects the availability of backend
servers and isolates unavailable servers during traffic distribution. This way, the
load balancer improves the availability and service capability of your
business.
Listener
A listener monitors the frontend requests of a load
balancer and distributes the requests to a backend server based on the specified
policy. In addition, the listener performs health checks on backend
servers.
Forwarding Rule
A forwarding rule forwards the requests from different
domain names or URLs to different backend server groups.
Backend Server Group
A backend server group is a group of backend servers that
handles requests distributed by load balancers. It is the basic unit for traffic
distribution by load balancer instances.
Backend Server
A backend server handles requests distributed by a load
balancer. You can add a VM instance on the Cloud or a server on a third-party cloud
as a backend server.
Frontend Network
A frontend network is a type of network that is associated
with a load balancer. Requests from the network are distributed by the load balancer
to backend servers based on a specified policy.
Backend Network
A backend network is a type of network that is associated
with a load balancer. Requests from frontend networks are distributed by the load
balancer to servers in the backend network.
Load Balancer Instance
A load balancer instance is a custom VM instance used to
provide load balancing services.
Certificate
If you select HTTPS for a listener, associate it with a
certificate to make the listener take effect. You can upload either a certificate or
certificate chain.
Firewall
A firewall is an access control policy that monitors
ingress and egress traffic of VPC vRouters and decides whether to allow or block
specific traffic based on the associated rule sets and rules.
Firewall Rule Set
A firewall rule set is a set of rules that a firewall uses
to defend against network attacks. You need to associate a rule set with the egress
or ingress flow direction of VPC vRouter NICs to make the rule set take
effect.
Firewall Rule
A firewall rule is an access control entry associated with
the egress or ingress flow direction of VPC vRouter NICs to defend against network
attacks. A firewall rule includes rule priority, match condition, and
behavior.
Rule Template
A rule template is a template that you can select when you
add rules to a rule set or a firewall.
IP/Port Set
An IP or port set is a set of IP addresses or ports that
you can select when you add rules to a rule set or a firewall.
IPsec Tunnel
An IPSec tunnel encrypts and verifies IP packets that
transmit over a virtual private network (VPN) from one site to
another.
OSPF Area
An Open Shortest Path First (OSPF) area is divided from an
autonomous system based on the OSPF protocol. This simplifies the hierarchical
management of vRouters.
NetFlow
A NetFlow monitors the ingress and egress traffic of the
NICs of VPC vRouters. The supported versions of data flows are V5 and
V9.
Port Mirroring
Port mirroring mirrors the traffic data of VM NICs and
sends the traffic data to the target ports. This allows for the analysis of data
packets of ports and simplifies the monitoring and management of data traffic and
makes it easier to locate network errors and exceptions.
Route Table
A route table contains information about various routes
that you configure. Route entries in a route table must include the destination
network, next hop, and route priority.
CloudFormation
CloudFormation is a service that simplifies the management
of cloud resources and automates deployment and O&S. You can create a stack
template to configure cloud resources and their dependencies. This way, resources
can be automatically configured and deployed in batches. CloudFormation provides
easy management of the lifecycle of cloud resources and integrates automatic O&S
into API and SDK.
Resource Stack
A resource stack is a stack of resources that are
configured by using a stack template. The resources in the stack have dependencies
with each other. You can manage resources in the stack by managing the resource
stack.
Stack Template
A stack template is a UTF8-encoded file based on which you
can create resource stacks. The stack template defines the resources that you want,
the dependencies between the resources, and the configuration settings of the
resources. When you use a stack template to create a resource stack, CloudFormation
parses the template and the resources are automatically created and
configured.
Sample Template
A sample template is a commonly used resource stack. You
can use a sample template provide by the Cloud to create resource
stacks.
Designer
A designer is a CloudFormation tool that allows you to
orchestrate cloud resources. You can drag and drop resources on a canvas and use
lines to establish dependencies between the resources.
Baremetal Cluster
A baremetal cluster consists of baremetal chassis. You can
manage baremetal chassis by managing a baremetal cluster where the chassis
reside.
Deployment Server
A deployment server is a server that provides PXE service
and console proxy service for baremetal chassis.
Baremetal Chassis
A baremetal chassis is used to create a baremetal instance
and is identified based on the BMC interface and IPMI configuration
setting.
Preconfigured Template
A preconfigured template is used to create a preconfigured
file that allows for unattended batch installation of an operating system for
baremetal instances.
Baremetal Instance
A baremetal instance is an instantiated baremetal chassis.
Elastic Baremetal Management
Elastic Baremetal Management provides dedicated physical
servers for your applications to ensure high performance and stability. In addition,
this feature allows elastic scaling. You can apply for and scale resources based on
your needs.
Provision Network
A provision network is a dedicated network for PXE boot
and image downloads while creating elastic baremetal instances in a gateway proxy
cluster.
Elastic Baremetal Cluster
Provides a separated cluster to manage baremetal
nodes.
Gateway Node
A gateway node is a node where the ingress and egress
traffic of the Cloud and elastic baremetal instances in gateway proxy clusters is
forwarded.
Baremetal Node
A baremetal node is used to create a baremetal instance
and is identified based on the BMC interface and IPMI configuration
setting.
Elastic Baremetal Instance
An elastic baremetal instance has the same performance as
physical servers and allows elastic scaling. You can apply for and scale resources
based on your needs.
Elastic Baremetal Offering
An elastic baremetal offering defines the number of vCPU
cores, memory size, CPU architecture, CPU model, and other configuration settings of
elastic baremetal instances.
vCenter
The Cloud allows you to take over vCenter and manage
resources on the vCenter.
VM Instance
A VM instance is an ESXi virtual machine instance running
on a host. A VM instance has its own IP address to access public networks and can
run application services.
Network
A vCenter network defines the network settings of VM
instances on vCenter, such as IP range, gateway, DNS, and network
services.
Volume
A volume provides storage space for a VM instance on
vCenter. A volume attached to a VM instance can be used as a root volume or data
volume. A root volume provides support for the system operations of a VM instance. A
data volume provides extended storage space for a VM instance.
Image
An image is a template file used to create a VM instance
or volume on vCenter. Images are categorized into system images and volume
images.
Event Message
Event Message displays event alarm messages of vCenter
that is took over by the Cloud. This feature allows you to locate errors and
exceptions efficiently.
Network Topology
A network topology visualizes the network architecture of
the Cloud. It allows for efficient planning, management, and improvement of network
architecture. Network topologies can be categorized into global topologies and
custom topologies.
Performance Analysis
Performance Analysis displays the performance metrics of
key resources monitored externally or internally in the Cloud. You can view the
performance analysis or export the analysis report as needed to improve the O&M
efficiency.
Capacity Management
Capacity Management visualizes the capacities and usages
of key resources in the Cloud. You can use this feature to improve O&S
efficiency.
MN Monitoring
Management Node (MN) monitoring allows you to view the
health status of each management node when you use multiple management nodes to
achieve high availability.
Alarm
An alarm is used to monitor the status of time-series data
and events and respond to the status change. Alarms can be categorized into resource
alarm, event alarm, and extended alarm.
One-Click Alarm
A one-click alarm integrates multiple metrics of a
resource. You can create one-click alarms for multiple resources to monitor these
resources.
Alarm Template
An alarm template is a template of alarm rules. If you
associate an alarm template with a resource group, an alarm is created to monitor
the resources in the group.
Resource Group
A resource group consists of resources grouped based on
your business needs. If you associate an alarm template with a resource group, the
alarm rules specified by the template take effect on all the resources in the
group.
Message Template
A message template specifies the text template of a
resource alarm message or event alarm message sent to an SNS system.
Message Source
A message source is used to take over extended alarm
messages. If you configure alarms for message sources, extended alarm messages can
be sent to various endpoints.
Endpoint
An endpoint is a method that users obtain subscribed
messages. Endpoints are categorized into system endpoints, email, DingTalk, HTTP
application, short message service, and Microsoft Teams.
Alarm Message
An alarm message is a message sent the time when an alarm
is triggered.
Current Task
A current task is an ongoing operation performed in the
Cloud. You can perform centralized management over ongoing
operations.
Operation Log
An operation log is a chronological record of operations
on the specified objects and their operation results.
Audit
Audit monitors and records all activities on the Cloud.
You can use this feature to implement operation tracking, cybersecurity classified
protection compliance, security analysis, troubleshooting, and automatic
O&M.
Log Collection
Allows you to collect with one click the log data from the
Cloud and various nodes on the Cloud generated in the specified time period and
download the log data.
One-Click Inspection
Comprehensively inspects the health status of key
resources and services of the Cloud and scores their healthiness based on the
inspection results. In addition, the one-click inspection service provides O&M
suggestions and inspection reports.
Backup Management
Backup management integrates multiple disaster recovery
technologies such as incremental backup and full backup that are suitable for
multiple business scenarios. You can implement local backup and remote backup based
on your business needs.
Backup Job
You can create a backup job to back up local VM instances,
volumes, or databases to a specified storage server on a regular
basis.
Local Backup Data
Local backup data of VM instances, volumes, and databases
is stored in the local backup server.
Local Backup Server
A local backup server is located at the local data center
and is used to store local backup data.
Remote Backup Server
A remote backup server is located at a remote data center
or a public cloud and is used to store remote backup
data.
Continuous Data Protection (CDP)
Continuous Data Protection (CDP) provides second-level and
fine-grained continuous backups for important business systems in VM instances,
allowing users to restore VM data to a specific time state, and retrieve files
without restoring the system.
CDP Task
You can create a CDP task to continuously back up your VM
data to a specified backup server to achieve continuous data protection and
recovery.
CDP Data
The backup data generated from continuous data protection
on VM instances is stored in local backup servers.
Recovery Point
A recovery point is a data point generated during
continuous data protection. A recovery point corresponds to a data record within the
recovery point interval specified by the user.
Locked Recovery Point
You can lock or unlock a recovery point as needed. After a
recovery point is locked, data of the recovery point will not be automatically
cleared or deleted.
Recovery Task
A recovery task helps you quickly restore data by
specifying a CDP task and recovery point, and allows you to view the recovery
progress and logs in a more friendly way.
Cryptography Security Compliance
The Cryptography Security Compliance service provides
applications with cloud security capabilities based on commercial cryptography,
meeting the requirements of commercial cryptography application security
assessments.
HSM Pool
An HSM pool is a logical group of hardware security
modules (HSMs) and is used to provide unified cryptography services such as
signature validation and encryption.
HSM
A hardware security module (HSM) is a dedicated device
that encrypts, decrypts, and authenticates information by using the cryptographic
technology.
Platform Cryptography Security Compliance
Enables the Cloud to meet the requirements of Cryptography
Security Compliance through the cryptography capabilities provided by HSM
pools.
Certificate Login
Authenticates the identity of a user by using a UKey
device.
Data Protection
Protects important data on the Cloud to ensure the data
confidentiality and integrity.
Scheduled Job
A scheduled job defines that a specific action be
implemented at a specified time based on a scheduler.
Scheduler
A scheduler is used to schedule jobs. It is suitable for
business scenarios that last for a long time.
Tag
A tag is used to mark resources. You can use a tag to
search for and aggregate resources.
Migration Service
The Cloud provides V2V migration service that allows you
to migrate VM instances and data from other virtualized platform to the current
cloud platform.
ZMigrate Migration Service
A migration service installed from
Application Market that migrates VM instances and their data from VMware environments
to the current cloud platform.
V2V Migration
V2V Migration allows you to migrate VM instances from the
VMware or KVM platform to the current cloud platform.
V2V Conversion Host
A V2V conversion host is a host in the destination cluster
that you need to specify during V2V migration to cache VM instances and data when
you implement V2V migration. After the VM instances and data are cached in the
V2Vconversion host, they are migrated to the destination primary
storage.
User
A user is a natural person that constructs the most basic
unit in Tenant Management.
User Group
A user group is a collection of natural persons or a
collection of project members. You can use a user group to grant
permissions.
Role
A role is a collection of permissions that can be granted
to users. A user that assumes a role can call API operations based on the
permissions specified by the role. Roles are categorized into platform roles and
project roles.
Single Sign-On
The Single Sign-On service provided by the Cloud. It supports seamless access to SSO systems. Through the service, related users can directly log in to the Cloud and manage cloud resources.
Project
A project is a task that needs to be accomplished by
specific personnel at a specified time. In Tenant Management, you can plan resources
at the project granularity and allocate an independent resource pool to a project.
The word Tenant in Tenant Management mainly refers to projects. A project is
a tenant.
Project Member
A project member is a member in a project who is granted permissions on
specific project resources and can use the resources to accomplish tasks. Project
members include the project admin, project managers, and normal project
members.
Process Management
Process management is part of ticket management that
manages the processes related to the resources of projects. Processes can be
categorized into default processes and custom processes.
My Approvals
In the Cloud, only the administrator and project
administrators are granted approval permissions. the administrator and project
administrators can approve or reject a ticket. If a ticket is approved, resources
are automatically deployed and allocated to the specified project.
Bills
A bill is the expense of resources totaled at a specified
time period. Billing is accurate to the second. Bills can be categorized into project bills, department bills, and account
bills.
Pricing List
A pricing list is a list of unit prices of different
resources. The unit price of a resource is set based on the specification and usage
time of the resource.
Console Proxy
Console proxy allows you to log in to a VM instance by
using the IP address of a proxy.
AccessKey Management
An AccessKey pair is a security credential that one party
authorizes another party to call API operations and access its resources in the
Cloud. AccessKey pairs shall be kept confidential.
IP Allowlist/Blocklist
An IP allowlist or blocklist identifies and filters IP
addresses that access the Cloud. You can create an IP allowlist or blocklist to
improve access control of the Cloud.
Application Center
Application Market allows you to add applications to the
Cloud and then access the applications with one click. It extends the functionality
of the Cloud. You can add default applications through the built-in installation
package or add more applications through URLs.
Sub-Account Management
A sub-account can be created by the admin or synced from
an SSO authentication system and is managed by the admin. Resources created under a
sub-account are managed by the sub-account.
Theme and Appearance
You can customize the theme and appearance of the
Cloud.
Email Server
If you select Email as the endpoint of an alarm, you need
to set an email server. Then alarm messages are sent to the email
server.
Log Server
A log server is used to collect management node logs or
the platform operation logs. You can add a log server to the cloud and use the
collected logs for operation trace or troubleshooting. This makes your O&M more
efficient.
Global Setting
Global Setting allows you to configure settings that take
effect on the whole platform.
Scenario Template
Scenario Template provides multiple templates that
encapsulate scenario-based global settings. You can apply a template globally with
one click based on your business needs. This improves your O&M
efficiency.
HA Policy
HA Policy is a mechanism that ensures sustained and stable
running of the business if VM instances are unexpectedly stopped or are errored
because of errors occurring to compute, network, or storage resources associated
with the VM instances. By enabling this feature, you can customize VM HA policies to
ensure your business continuity and stability.
Time Management
Manages the Cloud system time and allows you to configure
time servers for the Cloud. After you configure NTP time servers for the Cloud, the
clock of the time servers is synced with all nodes of the Cloud.
GPU Device
A GPU device is a powerful microprocessor with high
computational capabilities. You can use a GPU device to handle intricate graphics
rendering and parallel computing jobs, thus improving the efficiency of businesses
such as graphic production, video processing, and machine learning.
Script Library
The script library stores and manages script files
centrally. By executing scripts on VM instances, you can complete complex O&M
operations and automated jobs.
XML Hook
An XML Hook is a script that can flexibly insert or modify
parameters in XML files of VM instances. By attaching an XML Hook to a VM instance,
you can customize VM configurations and enable specialized
functionalities.
Container Service
A simple and user-friendly container management service,
providing features like GPU management & scheduling, multi-tenancy,
multi-cluster, quota configuration, CI/CD. and microservice. The service reduces the
container using complexity and aligns well with traditional user's habits, helping
you easily manage and deploy your container cluster, and enjoy the benefits of
cloud-native technologies in a quick and convenient way.
Advanced Monitoring Server
An advanced monitoring server is a dedicated VM instance
used to receive advanced monitoring data of load balancers and other
resources.
Advanced Monitoring Server Image
An advanced monitoring server image encapsulates the
advanced monitoring service and can be used to create advanced monitoring
server.
Advanced Monitoring Server Offering
An advanced monitoring server offering defines the CPU
cores, memory size, image, management network, and public network configurations of
advanced monitoring server. You can use an advanced monitoring server offering to
create advanced monitoring servers.
Plugin Management
You can package extended resources or tools into
standardized plugins for quick installation and integration, expanding the Cloud
capabilities.
Region Management
A region is a self-contained cloud environment with
independent management node(s), networks, hardware, and cloud resources. ZStack IAM
enabled user synchronization and SSO across multiple regions.