DocsAPI Explorer
ZHEN
Documentation›ZCF›ZStack Cloud›Feature OverviewZCF

ZStack Cloud 4.5.0

Overview of new features in ZStack Cloud 4.5.0

  1. ZStack Cloud Supports Single Sign On (SSO) Protocol
    • More 3rd-party authentication types are supported in Enterprise Management, including OIDC, OAuth2, and CAS.
    • Sub-Account Setting begins to support 3rd-party authentication.
  2. Enhancement of Cryptography Security Compliance
    • Provides 3rd-party cryptographic service and alarms.
  3. Enhancement of V2V Migration Service
    • Data volumes can be attached to V2V conversion hosts to store cached data.
  4. Optimization of IPsec
    • Adds more parameters and changes some original parameters on the Create IPsec Tunnel page.
    • Supports manual IPsec reconnection and automatic recovery.
    • Optimizes the IPsec status monitoring.
    • Improves the user experience of the IPsec upgrading.
    • Allows flexible IPsec configuration modifications.
  5. DRS Supports an Auto Mode.
  6. VM VNC Consoles Support Text Pasting.
  7. Enhancement of VM Storage Migration
    • Allows entire VM hot migration across SharedBlock and Ceph primary storage.
    • Change Host and Primary Storage supports autoconvergence.
  8. Optimization of Ceph Storage Pool
    • Adds a column Virtual Capacity Allocation Rate to the Storage Pool tab page.
    • Adds more alarm metrics for Ceph storage pools and improves some original alarm metrics.
    • Allows to specify a Ceph storage pool for the Ceph storage pool alarm.
    • Optimizes the Alarm Resource tab page on the details page of an alarm on Ceph storage pools.
  9. Optimization of VM Instance HA Setting (Adding a Global Setting Effective on All the VMs on the Cloud)
  10. Other Features and Improvements

ZStack Cloud Supports Single Sign On (SSO) Protocol

From 4.5.0 version, ZStack Cloud begins to support standard Single Sing On (SSO) protocol. You can access 3rd-party authentication systems through Enterprise Management and Sub-Account Setting, allowing 3rd-party users to single-sign on the Cloud via the authentication system and perform actions on the cloud resources.

More 3rd-party authentication types are supported in Enterprise Management, including OIDC, OAuth2, and CAS

Enterprise Management has supported AD and LDAP 3rd-party authentication protocols in the earlier versions. From ZStack Cloud 4.5.0, more authentication protocols can be used in Enterprise Management, including OIDC, OAuth2, and CAS. After adding a 3rd-party authentication server and configuring mapping rules, you can synchronize the 3rd-party user information to the Cloud and generate password-free login URLs for 3rd-party users to log in to the Cloud without passwords.

Figure 1. Add an OAuth2 authentication server


Sub-Account Setting begins to support 3rd-party authentication

ZStack Cloud 4.5.0 allows you to configure 3rd-Party authentication in Sub-Account Setting (OIDC protocol only). After adding a 3rd-party authentication server and configuring mapping rules, you can synchronize the 3rd-party user information to the Cloud and generate password-free login URLs for 3rd-party users to log in to the Cloud without password.
Figure 2. Add an OIDC authentication server


Enhancement of Cryptography Security Compliance

ZStack Cloud 4.5.0 provides 3rd-party cryptographic service and alarms.

ZStack Cloud 4.5.0 and later versions provide 3rd-party cryptographic service through the Cryptography Security Compliance feature. You can add a 3rd-party cryptographic service and enable the platform cryptography security compliance to get higher cryptography capabilities. 3rd-party cryptographic services can integrate with HSMs from different vendors, shielding the underlying hardware differences and reducing your hardware dependency.
Figure 1. Add 3rd-Party cryptographic service


Meanwhile, ZStack Cloud 4.5.0 begins to provide a default event alarm, 3rd-Party Cryptographic Service Error, to monitor the health states of 3rd-party cryptography services in real time, helping O&M personnel make response in time to protect the platform resources.

Figure 2. 3-rd-Party cryptographic service error default alarm


Enhancement of V2V Migration Service

In the earlier ZStack Cloud versions, the VM systems and data are cached on the local disks of hosts during V2V migration by default.

ZStack Cloud 4.5.0 and later versions allow you to attach data volumes to conversion hosts to store cached data. You can flexibly choose local disks or data volumes to cache the migrated data according to your business requirements. You can set the cache location on 3 pages, including the Add V2V Conversion Host page, the V2V Conversion Host page, and details page of the conversion host.

Figure 1. Add V2V conversion host page


Figure 2. V2V conversion host page


Figure 3. Details page of conversion host


Optimization of IPsec

ZStack Cloud 4.5.0 makes optimizations on the IPsec feature.

Adds more parameters and changes some original parameters on the Create IPsec Tunnel page

ZStack Cloud 4.5.0 optimizes the IPsec creation logic on the UI, make the IPsec configurations better apply to business scenarios.
  • Adds a new parameter Local IP Address to form a couple of symmetric configuration with the parameter Peer Public IP, which is changed from the original Peer Public IP. Meanwhile, the original Local Subnet and Peer CIDR are respectively changed as Source Network CIDR and Destination Network CIDR and form a couple of symmetric configuration.
  • Supports a new ID configuration method, allowing you to configure IDs of local and remote devices by IP addresses or names for device authentication.
  • Reorganizes the advanced configurations in the earlier versions and splits them into IKE Configuration and IPsec Configuration.
  • Adds IKEv2 configurations and change the default values of most of the advanced configuration items, making them apply to the mainstream business scenarios better.
Figure 1. Create IPsec tunnel - earlier versions


Figure 2. Create IPsec tunnel - 4.5.0 version


Supports manual IPsec reconnection and automatic recovery

ZStack Cloud 4.5.0 supports manual IPsec reconnection and automatic IPsec recovery. If an IPsec is disconnected, you can manually reconnect it or wait the system to reconnect it automatically.

Figure 3. Manual IPsec reconnection


Optimizes the IPsec status monitoring

ZStack Cloud 4.5.0 adds two IPsec status, Connecting and Disconnected, and the original status Ready is changed to Connected. The cloud realizes a completed monitoring on IPsec connection status.

Figure 4. Optimization of IPsec status monitoring


Improves the user experience of the IPsec upgrading

The Cloud displays an eye-catching alert when your IPsec-related widget is of a lower version. You can upgrade IPsec tunnels in batch conveniently.

Figure 5. Upgrade IPsec tunnel


Allows flexible IPsec configuration modifications

ZStack Cloud 4.5.0 and later versions support IPsec configuration modifications, allowing you to flexibly modify IPsec configurations according to your business changes.

Figure 6. Modify IPsec configuration


DRS Supports an Auto Mode

Earlier ZStack Cloud versions support only manual DRS. On this basis, ZStack Cloud 4.5.0 and later versions support auto DRS. Currently, both manual and automatic DRS apply to Ceph and SharedBlock storage scenarios.

When the host CPU utilization or memory utilization in a cluster achieves a specified threshold, you can choose either manual DRS or auto DRS to balance the workloads running on hosts of the cluster and ensure the platform stability. If you choose the manual mode, you need to manually schedule resources according to scheduling recommendations. If you choose the auto mode, the system automatically schedules resources according to the scheduling algorithm.

Figure 1. Configure DRS policy


VM VNC Consoles Support Text Pasting

ZStack Cloud 4.5.0 and later versions allow you to paste text to the VNC consoles of VM instances, VPC vRouters, LB instances, and elastic baremetal instances. Click Local Command Paster, and then the Paste command window is displayed. Paste the command you copied and click OK, and the command is pasted to the console command line page. This further improves the console action efficiency.

Figure 1. VM VNC Consoles support text pasting


Enhancement of VM Storage Migration

ZStack Cloud 4.5.0 makes optimizations on the VM storage migration feature.

Allows entire VM hot migration across SharedBlock and Ceph primary storage

In the earlier ZStack Cloud versions, you can click Change Primary Storage on the VM action list to realize an entire VM hot or cold migration across SharedBlock primary storage. On this basis, ZStack Cloud 4.5.0 and later versions begin to support entire VM hot migration across SharedBlock and Ceph Primary Storage.

If you migrate a VM instance from a SharedBlock primary storage to a Ceph primary storage, you can specify a root volume storage pool and data volume storage pool for the VM volumes, thus making the VM migration more fine-grained and improving the business stability.

Figure 1. Entire VM hot migration across SharedBlock and Ceph primary storage


Change Host and Primary Storage supports autoconvergence

Earlier ZStack Cloud versions provide an Auto Converge switch in Global Setting to enable or disable the autoconvergence policy for all VM instances on the Cloud. ZStack Cloud 4.5.0 and later versions allow you to enable or disable the autoconvergence policy for the VM instance when you change its host and primary storage, and the global setting no longer takes effect on this VM instance.

This feature applies to scenarios with high workloads. If your business VM instance is in a high-workload state for a long time, you can enable the autoconvergence policy when change the VM host and primary storage to improve the migration success rate.

Figure 2. Enable autoconvergence policy when change VM host and primary storage


Figure 3. Autoconvergence policy setting in Global Setting


Optimization of Ceph Storage Pool

ZStack Cloud 4.5.0 makes optimizations on Ceph storage pools.

Adds a column Virtual Capacity Allocation Rate to the Storage Pool tab page

ZStack Cloud 4.5.0 and later versions add a column Virtual Capacity Allocation Rate on the Storage Pool tab page, displaying the capacity usage of storage pools in a same Ceph primary storage. This usage information helps you better arrange your storage resource.

Figure 1. Virtual capacity allocation rate


Adds more alarm metrics for Ceph storage pools and improves some original alarm metrics

Earlier ZStack Cloud versions provide two alarm metrics for Ceph storage pools, including Ceph Storage Pool Capacity Available Percent and Ceph Storage Pool Capacity Percent Used.

Figure 2. Alarm metrics for Ceph storage pools - earlier versions


ZStack Cloud 4.5.0 and later versions add a new alarm metric Ceph Pool Virtual Capacity Available Percent, and change the original Ceph Storage Pool Capacity Available Percent and Ceph Storage Pool Capacity Percent Used respectively to Ceph Storage Pool Physical Capacity Available Percent and Ceph Storage Pool Physical Capacity Percent Used.

Figure 3. Alarm metrics for Ceph storage pools - 4.5.0 versions


Allows to specify a Ceph storage pool for the Ceph storage pool alarm

ZStack Cloud and later versions allows you to specify a Ceph storage pool for a Ceph storage pool alarm. This meet the requirement of fine-grained monitoring on different storage pools.

Figure 4. Specify a Ceph storage pool


Optimizes the Alarm Resource tab page on the details page of an alarm on Ceph storage pools

ZStack Cloud 4.5.0 and later versions can display the alarm resources of Ceph storage pool alarms according to the storage pools they belong to. Meanwhile, a column Primary Storage is added to the Alarm Resource tab page. You can view all the storage pools and primary storage associated with the alarm and improve the O&M efficiency.

Figure 5. Alarm Resource tab page


Optimization of VM HA Setting (Adding a Global Setting Effective on All the VMs on the Cloud)

Earlier ZStack Cloud versions allow you to set the HA mode for one VM instance individually. ZStack Cloud 4.5.0 adds a new item VM HA Mode in Global Setting, which is used to set the HA mode for all the VM instances on the Cloud. Effective priority: setting on individual VM instance > global setting. If you have set the HA mode for one VM instance individually, this global setting does not take effect on this VM instance.
  • Global setting: sets the HA mode for all the VM instances on the Cloud. Valid values: None (default) and NeverStop.
  • Setting on individual VM instance: sets the HA mode for one VM instance individually.
    Note: By default, the HA mode is consistent with the global setting for a newly created VM instance. If you have set the HA mode for one VM instance individually, the global setting does not take effect on this VM instance.
Figure 1. VM HA Mode - Global Setting


Figure 2. Set HA mode for a VM instance individually


ZStack Cloud 4.5.0 optimizes the display method of all global setting items relevant with the VM HA policy. Choose Global Setting > Basic, and you can view following items relevant with the HA policy:
  • VM HA: Chooses whether to make all the VM instances on the Cloud support the HA feature. Valid values: true (default) and false.
  • VM High Availability Policy: Sets the HA trigger policy for all the VM instances on the Cloud. Valid values: Permissive (default) and Force.
  • VM HA Mode: Sets the HA mode for all the VM instances on the Cloud. Valid values: None (default) and NeverStop.
Figure 3. Optimization of the display method of HA-relevant setting items


Other Features and Optimizations

  • Optimizes the calculation logic of the VM root volume capacity, covering LocalStorage, NFS, SMP, Ceph, and SharedBlock primary storage.
  • The limit of the number of reserved VM snapshots only takes effect on automatic snapshots (created by scheduled jobs), and the number of the manual snapshots (created manually) is not influenced by the limit.
  • A column named Authorization Method is added to the Licensing Record tab page.
  • New parameters, SN and IPMI Address, are added to details pages of hosts.
  • L3 network IPs can be sorted by their IPv4 addresses on the IP Statistic tab page.
  • Allows you to filter untagged resources.
  • Allows you to jump to corresponding resource pages by clicking Resource Utilization Trend and Resource Usage Statistics modules on the dashboard.
  • More resource lists can be exported in the CSV format, including the alarm message lists, EIP lists, Port Forwarding lists, VPC vRouter lists, and ingress and egress rule lists of security groups.
  • VM Custom Column Item includes a new option "Host", allowing you to add a list displaying the names of the hosts where VM instances are running on the VM Instance page.
  • Optimizes risk reminders triggered by turning on or turning off the VirIO switch on the VM instance details page.
  • Optimizes the One-Click Inspection feature. After the CPU Utilization of VM Instance and Storage Usage of VM system Volume inspections, only abnormal results, including failed, fault, and warning, are displayed.
  • The exported VM and image URLs contain the corresponding file names for you to identify the URLs more quickly and conveniently.
  • A new item Voice Card Type on Boot is added to Global Setting.
PreviousZStack Cloud 4.5.3NextZStack Cloud 4.4.24