ZStack Cloud Platform
Single Server, Free Trial for One Year
-
Documentation&Tools
Comprehensive product documentation and tools
-
Support & Services
Upholding the value of Customer First and the mission of Serving Customer, ZStack is dedicated to providing secure and stable services for customers.
-
Training & Certification
To educate ZStack partners and interested individuals about cloud computing and to cultivate cloud computing talent.
-
Content
ZStack provides innovative cloud infrastructure for ten major industries
VMware-to-ZStack Case Collection
The report provides three major
solutions and customer case studies for transitioning from VMware to ZStack.
ZStack Cloud 5.4.0>ZStack Cloud Product Manuals>ZStack Cloud Security Whitepaper>Product Security Analysis>Computational Security
Product Security Analysis
Computational Security
HTTPS-encrypted UI Login
The management interface supports HTTPS-encrypted login to enhance system security.
- HTTPS is not enabled by default.
- After HTTPS is enabled, the system uses port 5443 by default and supports specifying a custom port for login.
- After HTTPS is enabled, if you use port 5000 for HTTP login, the system automatically redirects the login request to HTTPS. Currently, only automatic redirection from HTTP port 5000 to HTTPS is supported.
- The system supports PKCS12 certificate by default. Currently, only PKCS12 and JKS certificate are supported. If you use other certificate formats, convert the formats by yourself.
VM Instance Console
The VM instance console provides quick access for monitoring and managing VM instances. You must have appropriate permissions to access the console. The console supports two authentication methods for login: SSH key authentication and username or password authentication.
- SSH Key Authentication
- SSH key-based login is supported for Linux VM instances.
- A SSH key pair, generated by an encryption algorithm, consists of a public key and a private key. The public key is disclosed, while the private key is retained by the user.
- After a public key is bound to a VM instance, you can use the corresponding private key to SSH into the VM instance from another VM instance without entering a password.
- To bind a public key during VM instance creation, ensure that the VM image has cloud-init pre-installed. The recommended cloud-init versions are 0.7.9, 17.1, 19.4, and later versions.
- To bind a public key after VM instance creation, ensure that the VM instance is running and has Qemu Guest Agent (QGA) installed and running. You can install QGA by using the performance optimization tool. If you install QGA by using other methods, install version 2.5 or later.
- Username or Password Authentication
- Username or password-based login is supported for VM instances.
- The fixed username for Linux VM instances is root, and the fixed username for Windows VM instances is administrator.
- After a password is injected into a VM instance, you can use the username or password to SSH into the VM instance from another VM instance.
- Ensure that the VM image has cloud-init pre-installed. The recommended cloud-init versions are 0.7.9, 17.1, 19.4, and later versions.
High Availability (HA)
VM Instance High Availability
VM instances support the high availability (HA) mode. If a VM instance stops due to routine maintenance (planned) or unexpected exceptions (unplanned), the HA policy can trigger an automatic restart of the VM instance to improve VM instance availability.
NeverStop VM High Availability Mechanism:
- The mechanism detects the VM instance status through polling and triggering. If the VM instance is confirmed stopped, the HA-enabled VM instance will restart automatically.
- If the VM instance status cannot be confirmed through polling and triggering, the mechanism performs detection in the following steps:
- Based on the existing network configuration, select the most accurate method to detect the status of the host where the VM instance resides.
- If the status of the host is abnormal, the HA-enabled VM instance will attempt to restart automatically.
Load Balancing
Multiple VM instances can use the load balancing service to form a cluster, eliminating single points of failure and improving application availability.
Next Chapter: Network Security