Self-service portal
The self-service portal is provided by CloudOS 7.0 for tenants to apply for, use, and manage cloud services. Through the self-service portal, users can apply for IaaS service resources, application services, big data services, and development testing services.
Extensive cloud service catalog
CloudOS 7.0 abstracts IT resources into a wide variety of cloud services, allowing users to apply for and use them on-demand as needed. Cloud services offered by CloudOS 7.0 include:
IaaS services: Elastic cloud hosts, bare metal servers, GPU cloud hosts, cloud disks, object storage, cloud firewalls, high-performance load balancing, elastic public IPs, VPC peering connections, cloud databases, host security, DDoS protection, web application firewalls, and bastion hosts.
PaaS services: Application repositories, application management, image repositories, and continuous delivery.
Development testing services: Project management, project collaboration, and test management.
Big data services: Distributed file systems, NoSQL databases, MPP databases, file services, in-memory databases, offline computing, in-memory computing, stream computing, data integration, data quality, metadata management, workflow scheduling, and data warehouses.
Artificial intelligence services: Machine learning, deep learning, model training and inference, and natural language processing.
Cloud service catalog
Mature IaaS service capabilities
The platform provides a full-stack range of capabilities, from intelligent computing and converged storage to elastic networking and multi-dimensional disaster recovery services, ensuring that customers' cloud migration is more reliable, secure, intelligent, and efficient.
Compute services
Compute services include cloud hosts, bare metal servers, and auto-scaling. Depending on the service scenario, cloud hosts are further categorized into GPU cloud hosts, local disk cloud hosts, general-purpose, compute-optimized, and memory-optimized types. Bare metal servers offer general-purpose, compute-optimized, and GPU-accelerated options. These products are characterized by elasticity, flexibility, simplicity in management, security, and reliability, and are suitable for various scenarios such as web applications, high-performance computing, parallel computing, and artificial intelligence.
Elastic cloud host: Elastic Cloud Host (ECS) is an on-demand, flexibly configurable foundational cloud computing service that helps users create a stable, highly reliable, efficient, and cost-effective application deployment environment. You can easily access industry-leading high-performance computing resources to persistently run your business and reduce operational hassles.
Bare metal server: Bare Metal Server (BMS) is a dedicated physical server that offers high performance, exclusivity, and security. It enables rapid, stable, and convenient application platform construction and comprehensive operational services, meeting the demands of high performance, stability, flexibility, and security while effectively reducing TCO.
GPU cloud host: GPU Cloud Host (GCS) is a cloud computing service based on GPU applications, providing real-time, high-speed parallel computing and floating-point computing capabilities. It perfectly handles high-load, demanding computing tasks and is suitable for scenarios such as graphics rendering, video decoding, deep learning, and scientific computing.
Auto scaling: Auto scaling is a management service that economically and automatically adjusts elastic computing resources based on user business needs and policies. When load increases, it automatically adds elastic cloud hosts to handle the additional load; when resources are idle, it removes cloud hosts to save costs. Users can specify the minimum and maximum number of instances to run, and cloud hosts are automatically added or removed according to scaling policies.
Storage services
Storage services include cloud disks, object storage, and file storage. Multi-replica or erasure coding technologies are used to ensure data reliability. Depending on the business scenario, these are further categorized into high-performance HDD/SSD cloud disks, standard/low-frequency/archive object storage, and capacity/performance file storage.
Elastic Block Storage (EBS): A structured data storage service that provides high reliability, durability, and scalability for cloud servers. Each cloud disk employs mature redundancy strategies within the availability zone to avoid single points of failure, ensuring data security and availability.
Unicloud Object Storage Service (UOS): A secure, flexible, and highly reliable storage product that provides storage solutions for massive unstructured data such as documents, images, audio, and video. CloudOS 7.0 object storage supports standard Restful API interfaces and is compatible with S3 interfaces, allowing users to operate data in object storage securely over the internet from anywhere at any time.
Network Attached Storage (NAS): Provides highly reliable, high-performance, and scalable shared file storage services. NAS can be mounted and used by one or multiple cloud hosts (ECS) simultaneously, supporting general POSIX interfaces and standard NFS/CIFS access protocols to achieve elastic expansion of capacity and performance. It is widely used for unstructured data storage in big data computing, web and content services, media, and entertainment.
Network services
Network services include Virtual Private Cloud (VPC), Elastic IP (EIP), Server Load Balancer (SLB), and VPN gateway. Supported by the advanced architecture of the Ziluan platform, these services enable the construction of a new homogeneous hybrid cloud, achieving seamless coverage across private clouds, public clouds, hybrid clouds, and edge clouds.
VPC: A dedicated, private, and isolated network environment requested by users. Users can customize IP address ranges, subnets, and other sub-services, and combine them with auto-scaling and elastic IPs to build their own business systems. Additionally, users can interconnect on-cloud VPCs with traditional IDCs through cloud dedicated lines or VPN gateways to create flexible and scalable hybrid clouds.
EIP: Provides independent public IP resources, including public IP addresses and public egress bandwidth services. EIPs can be bound to or unbound from instances such as ECS, bare metal servers, and SLB, allowing users to flexibly manage their cloud resources.
SLB: Distributes user access requests to multiple cloud hosts based on specific load balancing algorithms, enhancing the service capacity and availability of the entire business system. By setting a virtual service address (VIP), SLB virtualizes multiple cloud host resources in the same region into a high-performance, highly available application service pool. It distributes network requests from clients to the cloud host pool based on specified protocols and ports.
VPN gateway: Enables rapid expansion of local business to the cloud through VPN connections, meeting the needs for application and business elasticity and flexible expansion while ensuring stable business operations. It also allows the construction of on-cloud disaster recovery centers based on VPN gateways to back up business resources, prevent disruptions, and ensure business data security.
NAT gateway: Converts IP addresses in IP datagram headers to other IP addresses. In practical applications, NAT is primarily used on edge devices connecting two networks to allow internal network users to access external public networks and enable external public networks to access certain internal network resources (such as internal elastic cloud hosts and bare metal servers).
Disaster recovery services
CloudOS 7.0 provides comprehensive disaster recovery mechanisms and technologies, combining actual business attributes, node distances, network latency, and disaster recovery levels to build secure, compliant, reliable, and stable disaster recovery centers.
Supports local/same-city/cross-region/hybrid cloud backups.
Management platform backup.
Cloud host backup/cloud disk/database backup.
Multi-cloud disk consistent snapshots, supporting consistent replication and disaster recovery protection for entire VMs and all volumes of multiple VMs.
On-cloud active-standby disaster recovery: Cross-center high availability of the cloud platform, SDN network multi-fabric, automatic switching of primary and standby egresses, cloud host SRM disaster recovery, storage asynchronous replication, and tenant VPC cross-data center Layer 2 interconnection.
Cross-cloud active-standby disaster recovery: Independent egresses for each center, GSLB cross-center traffic scheduling, cloud host SRM disaster recovery, and storage asynchronous replication.
On-cloud business dual-active: Cross-center high availability of the cloud platform, SDN network multi-fabric, dual-active egresses, and storage dual-active deployment.
Cross-cloud business dual-active: Independent deployment of cloud management platforms per center, independent egresses for each center, GSLB cross-center traffic scheduling, and storage dual-active deployment.
Security services
CloudOS 7.0 provides tenants with comprehensive security products covering system security, network security, application security, security management, and data security. These products feature on-demand usage and elastic scalability, helping customers protect on-cloud application systems and critical data while offering compliant, one-stop security solutions.
Host security: Host Security Service enhances the overall security of hosts by providing asset management, virus detection and removal, security monitoring, vulnerability management, intrusion detection, baseline checks, and tamper-proofing, helping enterprises reduce host security risks.
Web application Firewall: A cloud service for web security protection, compliant with information security standards such as PCI-DSS, level protection, and internal corporate controls. By identifying and intercepting business traffic to websites or apps, it provides real-time protection against common web attacks targeting websites and web applications, ensuring business data security and improving website availability. It is used in scenarios such as preventing CC attacks in e-commerce and finance industries and defending against crawlers and fraudulent activities in social industries.
Vulnerability scanning: A software service that monitors and analyzes security vulnerabilities in networks or host systems. By scanning for vulnerabilities, it provides users with detailed vulnerability reports and remediation suggestions, enabling timely fixes before attacks occur to ensure secure business operations.
Database audit: A database security auditing product compliant with information security standards such as level protection, classified protection, internal corporate controls, SOX, and PCI.
SSL certificate: In collaboration with globally renowned digital certificate service providers, H3C provides HTTPS solutions for websites and mobile applications, enabling encrypted data transmission between clients and servers. This makes websites highly trustworthy and equipped with security features such as anti-hijacking, anti-tampering, and anti-eavesdropping, enhancing website security.
Cloud bastion host: A cloud security service that provides efficient operations, authentication management, access control, security auditing, and report analysis. Cloud tenant operators can use the cloud bastion host for asset operations and operational auditing, effectively addressing enterprise operational management challenges as a professional auditing tool.
Webpage anti-tampering: A cloud security service focused on website page content security. To protect against web security risks, SQL injection vulnerabilities, and XSS cross-site scripting vulnerabilities, it provides a website application security protection system for website file content protection and user-submitted data auditing, effectively ensuring website integrity and authenticity.
DDoS protection: A paid value-added service designed to address service unavailability caused by large-scale DDoS attacks on internet servers. By configuring high-defense IPs, users can redirect attack traffic to these IPs for cleaning, ensuring stable and reliable operation of the source site. It is widely used in scenarios such as portal websites, game streaming, and large-scale e-commerce.
Log audit: By collecting security logs from various devices and applications in enterprise and organizational information systems and combining them with cloud-based threat intelligence, it performs statistical and correlation analysis on massive security logs, helping users accurately and quickly identify security incidents and respond promptly.
Rich PaaS service capabilities
PaaS capabilities
CloudOS 7.0 provides PaaS service capabilities for business support and platform support.
Application repository service
The application repository service is an application storage service provided for users. Users can upload, download, edit, view, and deploy applications in the repository on demand. The platform provides private and public application repositories, enabling users to store applications as needed while enhancing application security. The application repository supports unified storage management for containerized applications and traditional applications, further improving the repository's storage capacity.
Application group service
An application group is an independent and complete business system consisting of one or more applications. Users can view the application list within a specific application group, basic information about the services covered by the applications, container instances, change records, and perform operations such as starting, restarting, and deleting applications.
Application list service
The application list service displays all currently deployed applications, supporting operations like starting, restarting, and deleting existing applications. It allows users to create applications, including container images, Jar packages, War packages, Helm packages, etc., and supports rapid creation and deployment of applications based on custom YAML.
Image repository service
The image repository service is a private cloud image center service developed based on the Harbor project. Users can push, pull, edit, view, and deploy images in the repository on demand. The platform provides private and public image repositories, enabling users to store images as needed while enhancing image security. Additionally, by adding scan configurations to the image repository, image scanning is triggered upon pushing images to discover security vulnerabilities.
Continuous delivery service
The continuous delivery service uses pipelining as its core engine, connecting the end-to-end delivery process from code to release and deployment, achieving automated, standardized, and agile high-quality application delivery. Pipelines provide simple and convenient automated CI/CD functionality. Through custom pipeline tasks, it enables continuous automated deployment, updates, upgrades, and other capabilities. It also allows management of build data, supporting viewing of build history lists, checking the process status of a specific build, and deleting build history.
Application service instance view
The application service instance view is a global service view based on application spaces provided to users. Users can view the service topology of a specific application space or platform based on the service directory, examine application call chains, and manage specific applications.
Application service gateway
As business demands of enterprises grow, departmental operations within companies become increasingly fragmented. The repeated construction of capabilities due to isolated business governance leads to cumbersome interactions between systems, inability to share new technologies, version overlaps, application capability overlaps, and increased maintenance costs. External access to systems involves numerous protocols and port types. The service gateway can optimize interactions between external systems and internal systems, as well as between internal systems, enabling capability sharing.
The service gateway, also known as an API gateway, is a key component in microservices architecture, used to protect, enhance, and control external access to services. It serves as the entry point for the entire microservices system and the sole access point for external services, handling load balancing, caching, routing, access control, and more for all services. Through the service gateway, unified authentication across the microservices system in terms of business form can be achieved while ensuring minimal intrusion into the business system's microservices. The main functions of the service gateway are as follows:
The service gateway sits between the application (external caller) and backend services (service providers), isolating and protecting the services. Therefore, services hidden behind the gateway can discard cumbersome peripheral designs such as load balancing, high availability, and access logging, focusing solely on business logic.
Services are exposed externally through the service gateway, which acts as a proxy for multiple services, enabling routing, forwarding, filtering, and common processing across all services, facilitating capability sharing among services.
The service gateway supports integration with traditional applications and cloud-native applications, enabling mutual conversion between WebService and HTTP protocols. This allows backend service code to remain unchanged while providing services externally through the gateway.
The service gateway also provides authentication, secure access control, traffic management, and other functions for services.
The service gateway implements high-availability architecture deployment and high-performance elastic expansion capabilities.
Application diagnostic service
Application diagnostics provide comprehensive observation of applications integrated into enterprise systems, offering administrators insights into the health status of cloud-based operations. It performs time-sharing and categorized statistical analysis to assist managers in decision-making. For operations and development personnel, it provides health observation and statistics for business applications, offering global fault analysis and localization capabilities for business failures in applications. Through full-stack, end-to-end topology discovery, it correlates faults across metrics, links, and logs to identify root causes. It provides intelligent diagnostic models to enable intelligent early warning, analysis, and recovery of faults, ensuring the healthy and stable operation of cloud-based businesses.
Service dashboard: Visualizes the overall architecture of applications and operational data of components, providing visualization of business application systems managed and operated within enterprise applications, automatically constructing their architectural topology, and visualizing dependencies on middleware and databases.
End-to-end topology: Automatically discovers the full-link traffic topology from user front-end to service gateway, applications, middleware, and databases, and automatically marks fault points. Enables visual problem localization and responsibility demarcation for applications and platform software. Provides a full-link resource topology mapping from applications to containers, virtual machines, CVKs, and storage (software to hardware), enabling visual problem localization and responsibility demarcation for applications or platform software and hardware.
Temporal-spatial playback: Restores the panoramic state of all components at the moment of a fault, recording the status of each component's metrics when the fault occurred. Reconstructs the actual scenario at the time of the fault through link topology, metrics, and log information, providing dynamic display of current application health data. Records operational quality data over long time spans, supporting later statistical analysis and trend comparison of business service quality.
Intelligent diagnostics: Utilizes built-in intelligent diagnostic models, such as slow SQL analysis models, disk I/O analysis models, abnormal time analysis models, alarm noise reduction models, and one-click diagnostic models, to enable intelligent early warning, analysis, and recovery of faults, ensuring the healthy and stable operation of cloud-based businesses.
Cloud-based big data service
The cloud-based big data service allocates and manages host resources for big data clusters requested by users, allowing them to focus solely on their business needs, purchase big data services on demand, and provides scaling (expansion and contraction) capabilities for big data clusters. The cloud-based big data service offers two deployment methods: bare metal and virtualization. Virtual machine deployment is suitable for scenarios with small data volumes and low performance requirements, improving server resource utilization. Bare metal deployment is suitable for scenarios with large data volumes and high performance, enhancing user business capabilities.
Lakehouse service
The big data service provides a self-developed DLH engine, offering unified SQL access services. It is compatible with general standard SQL, enabling a smooth transition from databases to big data services, improving SQL compatibility. It can connect to data sources such as ES, HBase, and Hive, lowering the platform's usage barrier. It provides an enhanced unified SQL on Hadoop solution, supporting graph computing and machine learning SQL, significantly improving platform ease of use.
Public cloud-level operations capabilities
The CloudOS 7.0 operational platform provides private cloud enterprise customers with robust operational data support, enabling end-to-end visual data management across the entire business process. This includes defining and publishing cloud service specifications, maintaining tenant information and assigning permissions, handling cloud resource application and approval for delivery, real-time usage statistics and accurate charging, as well as tenant billing confirmation and settlement.
Multi-level user role classification
Based on the needs of data center cloud business operations, CloudOS 7.0 categorizes users into three main types: operations administrators, organization administrators, and project users.
Operations administrator
Operations administrators are responsible for the operation and maintenance of the cloud data center. On one hand, they handle the maintenance of cloud data center infrastructure; on the other hand, they manage operational tasks such as organization management, user management, cloud service management, process management, and billing management. In large cloud data centers, cloud operation and maintenance administrators may be assigned to different personnel.
Organization administrator
Organization administrators are responsible for maintaining information about subordinate organizations, projects, and members within the organization. They also approve cloud resource applications from organization members and have management permissions for cloud resources and billing within the organization.
Project user
Organization Administrators can create projects based on the actual needs of companies or departments and add members to these projects. As users of cloud resources, Project Users apply for, use, and manage cloud resources through the self-service portal.
Organization structure
Resource authorization based on organizations
Operations administrators grant corresponding cloud resource usage permissions to organizations based on their specific business needs. When adjustments to organizational resource permissions are required, operations administrators can make changes as needed.
Operations administrators authorize organizations
Service approval process design
For enterprise users in industries such as government and education, the use of cloud resources often requires approval. CloudOS 7.0 provides cloud service application management. When users need to use cloud resources, they must submit an application. Once approved, the cloud resources are automatically deployed and made available to users through the self-service portal.
Cloud service approval and activation process
Flexible definition of product specifications
Through a five-level data structure—Product Category, Product, Component, Specification Family, and Specification—CloudOS 7.0 enables flexible customization of product specifications, supporting rapid launch and sales of product services. It also provides inventory management capabilities based on product specifications, assisting operations in planning cloud resource construction and expansion.
Flexible definition of product specifications
Comprehensive operational billing strategies
The CloudOS 7.0 operational platform includes six billing modules: Pricing, Sales, Orders, Bills, Transactions, and Promotions. It provides online sales and billing management capabilities for cloud services to service-oriented enterprise customers, enabling them to sell, collect payments, and track accounts. It also supports sales and operational scenarios targeting "customers' customers."
Public cloud-level operations and maintenance capabilities
The CloudOS 7.0 operations and maintenance platform is designed for public cloud, dedicated cloud, and hybrid cloud operators. Through the operations and maintenance data middle platform, it provides precise and rapid data processing capabilities for operation and maintenance tasks. It supports multi-tenant management and authentication through LDAP. Based on the public cloud operations and maintenance foundation, it offers performance analysis, capacity forecasting, and anomaly alarms for products such as computing, storage, network, and databases. This helps operators gain a comprehensive understanding of the health status of physical and virtual resources, enabling them to quickly locate issues and ensure the smooth operation of platform-side and customer-side resources.
Panoramic view
CMDB
CMDB is the cornerstone of the operation and maintenance platform. It serves as an information repository related to all components of the IT system, focusing on resource management, including physical resources, virtual resources, and logical resources. Through automatic collection and manual entry, resource information is standardized and integrated, accurately maintaining resource information and the relationships between resources. It also records the change process and real-time lifecycle status of resources. Combined with application configuration management, it enables process-oriented and standardized resource management.
Scalability
The overall design of CMDB follows flexible and scalable principles. The platform comes pre-configured with some resource models and supports custom resource models, offering design and orchestration capabilities for data dictionaries to operators.
Real-time capability
It tracks and records the lifecycle status of assets in real time and provides multi-dimensional query capabilities, offering data support for asset statistics and analysis.
Openness
It provides external API interfaces, supplying foundational data for alarm platforms, resource orchestration and management, and configuration management. This achieves integrated operation and maintenance data and improves operational efficiency.
Cloud resource management
CloudOS 7.0 cloud resource management provides full lifecycle management for cloud-provisioned and on-premise managed resources. It offers rich and visual resource management functions for operators. With one-click management of servers and network devices, it supports automatic or custom integration into different clusters. It uses an election mode to achieve high availability of servers within clusters, automatically triggering migration and rebuilds to ensure the continuity of cloud resource services. It provides comprehensive cloud resource operation logs and supports inspection functions at the cloud product level. Based on intelligent orchestration, it enables automatic problem analysis and offers the ability to quickly handle failed processes. Resources are categorized and managed according to cloud services, with full IaaS services and some PaaS services already integrated.
One-click resource incorporation
Compatible with one-click incorporation of heterogeneous servers and network devices.
Flexible scheduling and allocation
Supports flexible grouping of resources through cluster scheduling and pre-configuration management.
Intelligent orchestration and location
Based on the self-developed Intelligent Orchestration 3.0, it performs detailed analysis of process tasks, enabling real-time viewing and quick location of abnormal processes and tasks.
Rapid fault recovery
Based on the cluster high availability mechanism, it ensures autonomous recovery of server resources.
Job platform
The CloudOS 7.0 job platform is an automated operation and maintenance platform that handles tasks such as automated inspections and business deployment. It standardizes and models operation and maintenance tasks, improving operational efficiency. The platform supports scripting languages such as Python, Shell, and SaltStack Function. Multiple scripts with different functions are combined to form an application, which is linked to resources and treated as a job. The platform tracks the entire execution process of jobs, allowing operators to view real-time progress, execution results, and historical jobs. The Job Platform integrates with the operation and maintenance monitoring platform to complete client installation for monitoring alarms and real-time distribution of alarm configurations.
Operations and maintenance monitoring
The CloudOS 7.0 operations and maintenance monitoring platform supports real-time monitoring, alarming, and governance of IT infrastructure, application services, and core monitoring metrics from a business perspective. It helps operators quickly detect faults, locate issues, and troubleshoot problems. The platform provides resource monitoring and alarming services for operation and maintenance administrators: it supports multi-dimensional alarm displays, including real-time alarm summaries and sound notifications; it supports alarm rule settings, including alarm severity, alarm rules, alarm message templates, and alarm contact group/person settings; it provides alarm notification functions, sending notifications through email, instant messaging, SMS, etc., to the responsible group/person when alarms matching the rules are received. It offers alarm handling functions, including taking over, suspending, and marking as false positives, to process selected alarms.
Cloud monitoring
CloudOS 7.0 Cloud Monitoring provides monitoring services for various cloud products such as cloud hosts, elastic public IPs, and load balancers for cloud users. It enables real-time monitoring of cloud product performance metrics and probes service availability. The Cloud Monitoring service displays monitoring data in graphical form and supports setting alert rules for monitoring metrics, allowing users to understand resource usage in real time, quickly perceive business status, and take timely actions to ensure service continuity.
Multi-metric monitoring
Provides performance metrics such as CPU, memory, and disk for elastic cloud hosts, meeting various monitoring needs of users.
Real-time monitoring
Real-time sampling of monitoring metrics ensures timely and effective resource monitoring.
Visual chart analysis
Utilizes rich charts to integrate and display large amounts of related data for users, helping them quickly identify abnormal metric data, locate issues, and determine causes.
Capacity platform
The CloudOS 7.0 capacity platform provides an overall view of the allocation and usage of all resources (computing, storage, and network) in the cloud platform. It ensures data accuracy and real-time capabilities through scheduled and manual refreshes, serving as a basis for expansion and helping operators ensure the stable operation of the platform. The platform clearly displays detailed information and historical trends of resources in various dimensions through lists and charts. It also includes alerting functions, allowing operators to customize alert rules and trigger alerts for resource metrics that meet the rules. Following the principles of flexibility and scalability, the platform provides configuration management functions, opening capabilities such as statistical interfaces and statistical frequencies to administrators. It also allows viewing of scheduled tasks, enabling administrators to monitor the operation of statistical tasks at any time and ensuring platform data is updated according to predefined rules.
Log platform
The CloudOS 7.0 log platform is an integrated management system that combines log collection, storage, query analysis, and log alerts. It offers a scalable and flexible log management solution. The platform is divided into two main parts: trace logs and runtime logs. Trace logs follow the OpenTracing specification, enabling distributed application log tracing. They display the response time of business interfaces in charts and show the call hierarchy details of a single trace in a tree structure, achieving application performance management (APM). Runtime logs support logs from devices such as computing, network, storage, and security, and can collect logs from diverse sources and in different formats. Operators can customize projects, log sets, log sources, and segmentation rules to quickly complete log classification, parsing, and storage. The platform provides convenient functions for collecting massive log data, real-time log tracing, and analysis management. It supports real-time keyword alerts and scheduled query statement alerts, quickly feeding abnormal information back to business owners.
Login
Products and Solutions
Based on stable and reliable IaaS service capabilities, it effectively integrates data center infrastructure resources and automates delivery through a comprehensive operation and management portal, helping users elevate their IT infrastructure from a cost center to a value center.
Global unified entry: Product control and operations layer (UCO)
Technical Documents
Software Download