ZStack Cloud 5.3.28
Highlights
- OVS-DPDK Network Architecture Enhancements: Supports network services including QoS, DHCP, and security group and optimizes OVS bond mode to cover more business scenarios.
- Load Balancer Advanced Monitoring: Provides comprehensive monitoring metrics and detailed connection statistics with multi-dimensional filtering and visualization capabilities, improving network O&M efficiency.
- New Plugin Management Feature: Supports plugin-based integration of cryptographic security compliance and Single sign-on resources, achieving efficient resource integration and deployment to enhance platform agility and scalability.
Overview
- Supports filtering data volumes by instance.
- OVS-DPDK network architecture enhancements.
- OVS-DPDK network now supports QoS, DHCP, and security group.
- OVS bond mode optimization.
- New SDN network plus license.
- Introduces load balancer advanced monitoring.
- Supports rich monitoring metrics with multi-dimensional filtering.
- Supports detailed and visualized connection statistics.
- SharedBlock storage supports hot migration of data volumes.
- Primary storage supports displaying physical storage utilization.
- Supports default Base64 encoding for scripts.
- Introduces new applications in Application Market.
- Supports flexible integration of SSO servers.
- Supports flexible integration of cryptographic resource.
- Enhances compatibility with UKeys.
- Optimizes process of enabling certificate login.
- Supports choosing cryptographic resource usage.
- Supports integrity protection for user-role binding.
- Plugin management.
- Supports plugin uploading and lifecycle management.
- Empowers flexible resource integration and expansion.
- Advanced monitoring server.
- Supports lifecycle management of advanced monitoring server.
- Empowers resource monitoring expansion.
- Supports log server dedicated for receiving Cloud operation logs.
VM Instance & Volume
Supports Filtering Data Volumes by Instance
ZStack Cloud 5.3.28 supports filtering data volumes by instance, allowing you to quickly locate data volumes attached to a specified instance.
Cloud Network
OVS-DPDK Network Architecture Enhancements
ZStack Cloud 5.3.28 introduces the following enhancements to the OVS-DPDK network architecture.
OVS-DPDK Network Now Supports QoS, DHCP, and Security Group Services
- QoS: Supports bandwidth threshold configuration for flat network NICs, allowing flexible bandwidth allocation based on business requirements to prevent network congestion and ensure smooth operation of critical services.
- DHCP: Supports DHCP service configuration to automatically assign IP addresses to VMs, significantly improving network deployment efficiency.
- Security Group: Implements inbound and outbound access control policies for NICs to allow or deny specific traffic, further enhancing network security.
OVS Bond Mode Optimization
ZStack Cloud 5.3.28 optimizes OVS bond mode, now supporting the following three types: Active-Backup, Balance-SLB, and Balance-TCP.
New SDN Network Plus License
ZStack Cloud 5.3.28 introduces the SDN plus license. This license authorizes hardware SDN network integration and advanced network service management capabilities based on OVS-DPDK software networks.
- Add hardware SDN controllers
- Create HardwareVxlanNetworks
- Create hardware SDN-type VXLAN Pools
Introduces Load Balancer Advanced Monitoring
ZStack Cloud 5.3.28 introduces advanced monitoring for load balancers. Add an advanced monitoring server and enable Advanced Monitoring on the load balancer's details page, you can view comprehensive and intuitive monitoring charts.
Currently, you can view advanced monitoring for HTTP and TCP listeners of load balancers.
Supports Rich Monitoring Metrics with Multi-Dimensional Filtering
The Advanced Monitoring page displays key performance indicators of a load balancer through intuitive line charts, including inbound/outbound traffic, active connections, and concurrent connections, and supports filtering based on time span, client IP, frontend IP, and backend server IP for quick data location. This enables O&M personnel to gain deep insights into the load balancer's performance, promptly identify anomalies, and proactively address potential risks.
Supports Detailed and Visualized Connection Statistics
The Advanced Monitoring page provides a detailed visualization of connection statistics for a load balancer in a structured list format, including access time, listener, client IP, front IP, backend server IP, status code, inbound traffic volume, outbound traffic volume, active connections, and concurrent connections. By presenting data visually, the page enhances O&M convenience and assists O&M personnel in tracing traffic sources, identifying abnormal traffic, and ensuring business stability.
Cloud Storage
SharedBlock Storage Supports Hot Migration of Data Volumes
ZStack Cloud 5.3.28 introduces hot migration for SharedBlock data volumes. You can now migrate SharedBlock data volumes to other SharedBlock storage while VM instances remain running.
Primary Storage Supports Displaying Physical Storage Utilization
ZStack Cloud 5.3.28 now displays physical storage utilization in the primary storage list, allowing users to promptly identify potential storage space shortages and take preventive measures to avoid failures.
Platform O&M
Supports Default Base64 Encoding for Script
Starting form ZStack Cloud 5.3.28, the platform Base64-encodes script content by default when you create a script in Script Library, further improving the data storage and transmission security and ensuring the script compatibility.
Operation Management
Introduces New Applications in Application Market
ZStack Cloud 5.3.28 introduces three new applications in Application Market, including Kylin-V10-SP3, ZStack AI Model Platform, and ZStack CMP. These applications support one-click deployment and quick usage, further enhancing the platform's scalability and helping enterprises accelerate digital transformation.
Tenant Management
Supports Flexible Integration of SSO Servers
ZStack Cloud 5.3.28 introduces support for packaging SSO server connection information as standardized plugins for upload, enabling the addition of various types of SSO servers to provide SSO services. This resolves compatibility differences between different server vendors, reduces server adaptation costs, and enhances platform flexibility and scalability.
The platform currently supports plugin-based integration with SSO servers using OIDC and OAuth2 protocols.
Cryptography Security Compliance
Supports Flexible Integration of Cryptographic Resource
ZStack Cloud 5.3.28 introduces a plugin-based method for adding cryptographic resources. This method involves encapsulating resource connection information into a standardized plugin and using this plugin to add the corresponding resource to the Cloud. This enables flexible integration of various cryptographic resources, regardless of the vendor, type, or model, and significantly reduces the adaptation costs and time consumption of enabling Cryptography Security Compliance.
For backward compatibility, ZStack Cloud continues to support the traditional method of adding cryptographic resources by the specified vendor, type, and model. You can choose either method based on your business need.
Enhances Compatibility with UKeys
ZStack Cloud 5.3.28 allows you to fill in UKey integration information when enabling Certificate Login with plugin-based cryptographic resources, including the UKey's certificate acquisition interface, signing interface, and the UKey PIN. This flexibility allows you to use various UKey devices for certificate login based on your needs, rather than being limited to UKey devices specified by the Cloud.
Note: For UKey devices adapted using this method, ZStack Cloud does
not provide UKey drivers or signature controls. You need to prepare them by
yourself.
Optimizes Process of Enabling Certificate Login
Starting from ZStack Cloud 5.3.28, when enabling Certificate Login for admin with plugin-based cryptographic resources, you do not need to enter UKey PIN. Only the certificate serial number is required.
Supports Choosing Cryptographic Resource Usage
Starting from ZStack Cloud 5.3.28, you can specify usage when adding a cryptographic resource to label whether it is intended for Certificate Login, Data Protection, or both Certificate Login and Data Protection.
Supports Integrity Protection for User-Role Binding
Starting from ZStack Cloud 5.3.28, Data Protection includes integrity protection for the binding relationship between users and roles, further enhancing permission security.
Platform & System Setting
Plugin Management
Supports Plugin Uploading and Lifecycle Management
ZStack Cloud 5.3.28 introduces the Plugin Management page. On the main menu of ZStack Cloud, choose . Then, the Plugin Management page is displayed. On this page, you can upload and delete plugins.
Empowers Flexible Resource Integration and Expansion
Plugins encapsulates integration information for expanded resources or tools. By developing and uploading standardized plugins, you can quickly integrate and install these resources or tools on the Cloud. This enhances the resource integration agility and boosts the Cloud's scalability.
Currently, ZStack Cloud allows you to use plugins to integrate cryptographic resources and SSO servers.
Advanced Monitoring Server
Supports Lifecycle Management of Advanced Monitoring Server
ZStack Cloud 5.3.28 introduces the Advanced Monitoring Server page. On the main menu of ZStack Cloud, choose . Then, the Advanced Monitoring Server page is displayed. On this page, you can manage advanced monitoring servers and related images and offerings.
Empowers Resource Monitoring Expansion
An advanced monitoring server is a dedicated VM instance used to receive advanced monitoring data of cloud resources. It enables richer monitoring data and more comprehensive metrics.
Currently, you can use an advanced monitoring servers to provide advanced monitoring service for load balancers.
Supports Log Server Dedicated for Receiving Cloud Operation Logs
ZStack Cloud 5.3.28 introduces a new log server type dedicated for receiving Cloud operation logs. The following output types are supported: Syslog, Elasticsearch, Forward, Kafka, and Loki.
Cloud operation log servers support multi-tenant isolation. Each project can have up to one Cloud operation log server which receives only logs of operations performed by the members within that project. This ensures the data isolation and security in multi-tenant scenarios.
