Simplified Network

TECS Cloud OS supports the unified life cycle management of VMs, bare metal, and acceleration resources to meet diversified resource requirements of customers. 
1. VM 
Performance Enhancement: The vCPUs of the VM can be bound with the CPUs of the physical host, and the vCPUs and memory of the VM can be automatically allocated from the same NUMA node. In addition, the memory of the VM supports huge page to improve the operation performance of the VM. The VM supports SR-IOV and DVS distributed routers as well as multiqueue technology, improving network performance of the VM. SR-IOV and DVS can share the same physical NIC for flexible configuration. It also supports RDM function which allows the VM being directly mounted with raw disks to improve the I/O performance, and supports the real-time operating system and real-time VM to improve the real-time performance.
Scheduling Strategy: The VMs can be deployed in host or host aggregates as the unit to deploy various kinds of VMs, such as affinity group (VMs in the group are deployed on the same physical node), anti-affinity group (VMs in the group are deployed on different physical nodes), soft affinity group (Affinity group in preference. If resources are not enough, VMs can be deployed freely), and soft anti-affinity group (Anti-affinity group in preference. If resources are enough, VMs can be deployed at random), VM e occupying CPUs exclusively, VM occupying NUMAs exclusively, VM assigning nodes/NUMAs, and centralized/decentralized deployment of VMs, meeting customers’ different requirements.
Dynamic Adjustment: The system supports hot-swappable disks, NICs, and online/offline migration of storage. Meanwhile, it supports the change of specifications/hard disks of VMs to meet real-time resource requirements of service VMs.
QoS Function: By flexibly controlling the quality of the CPU, IO and network bandwidth of VMs, it provides controllable computing capability of VMs, so as to ensure or restrict the VM’s capability to use computing resources within the specified range. In this way, the VMs with different service requirements can obtain the most appropriate computing performance, thus achieving optimal resource reuse and cost reduction.
2. Bare Metal
Lifecycle Management: It supports the query, registration, update, discovery, recovery and deletion of bare metal to implement convenient management of bare metal and meet the customer's requirements. 
Co-Management of VM and Bare Metal: The solution can simultaneously manage VMs and bare metal in a system to address diversified application deployment scenarios.
Management Enhancement: The solution supports to divide bare metal into AZs to meet the requirements of bare metal partition management, and supports bare metal KPI to monitor the health status of bare metal in real time.
3. Accelerated Resources
Life Cycle Management: The solution supports automatic discovery, query, enabling, application and allocation of hardware acceleration resources, so that acceleration hardware can be used as cloud resource on demand.
Management Enhancement: The solution supports unified management of acceleration resources used by VMs and bare metal. It also supports such O&M management functions as acceleration resource KPI and status monitoring to monitor the health status of acceleration resource.

Support for 25G/40G NIC: Supports virtual switch connecting 25G/40G physical NIC, and supports to use the SR-IOV function of 25G/40G NIC; Supports virtual switch and SR-IOV function sharing 25G/40G NIC, that is, one physical NIC supports both virtual switch and SR-IOV function, and the VM can mix the two kinds of NICs as needed.
IPv4/IPv6 Dual Stack: Supports the management plane using IPv4 or IPv6, while the service plane using the both.
Smart NIC: Supports 25G/100G smart NICs to implement the vSwitch forwarding plane to the edge, reduce forwarding costs, and improve service performance.

Lightweight Deployment: Supports lightweight OpenStack systems. Computing and control systems are co-located to meet the lightweight requirements of edge scenario management resources. The system supports integrated deployment of computing and storage devices, reducing storage management resources and improving resource utilization while meeting storage reliability requirements.
High Performance: Supports high-precision clock to meet the high-precision requirements on the access side. The platform supports acceleration hardware vGPU/GPU/smart NICs to improve service performance.
Network Automation: The platform supports the network automation module, and can automatically configure the vSwitch, hardware switches, and hardware firewalls to implement automatic service network connectivity and facilitate fast service provisioning.
 

All-Round KPI Display: Provides 500+ multilevel indexes of the wholes system, host and VM, and supports self-defined report panel to achieve customized report.
Unified Deployment of VM/Bare Metal: Support to treat bare metal as special VM to manage and deploy.
Intelligent Network Monitoring: Supports monitoring the status of network nodes (such as vNIC and vSwitch) topology display, packet capture, packet marking, coloring, and packet analysis of network nodes (such as vNIC, vSwitch, and switches) to implement intelligent network monitoring and quickly locate network problems.
Intelligent Inspection: Supports checking the configuration and health status of nodes in the system, supports one-click information collection and log collection, generates health reports, analyzes offline logs, and quickly diagnoses system health status.
 

Automated Installation and Deployment: Provides navigational automated deployment tool Daisy which automatically installs the TECS cloud OS, rapidly deploys large-scale clusters, and supports plug-and-play host.
Visual Configuration: Supports to configure OS and OpenStack rapidly through the interface.
Upgrade and Rollback: Support online/offline upgrade and rollback of cloud OS software; for online upgrade/rollback, it is not needed to power off the VM, and VM can run normally.

Highly-Available VM: Supports watchdog monitoring mechanism to detect exceptional VM in time and recover the VM through resetting; supports local self-healing and remote rebirth of VM, so that VM can automatically recover from its own failure or physical node failure; supports multipath storage, to guarantee storage reliability; supports inspection and recovery of cloud disk read-only, preventing storage link broken from leading to cloud disk read-only; Supports inspecting the physical network and carrying out VM rebirth according to failure state, guaranteeing VM operation; supports disaster recovery server which can recover VM quickly when most of hosts power down.
Reliability of the System: The system supports the management nodes and multi-node clusters of services to ensure the reliability of management nodes and services, and support the protection capability for key processes. When these processes are abnormal (for example, suspended or frozen), they can be automatically recovered.
Multiple Backup and Restoration Mechanisms: The system provides a reliability protection mechanism for databases, cluster configuration data (parameter files, HTTPS/IPSec-related root certificates, SSH keys, and configuration files used during the virtual layer mechanism), VMs, and logs. Multiple backup and restoration mechanisms are provided to meet the requirements of various scenarios, such as snapshot-based VM backup and restoration and storage-based local/remote backup and restoration.
Disaster Recovery System: Supports distributed disaster recovery management system in 1+1/N+1 mode, and provides disaster recovery function of infrastructure layer, to improve system-level reliability.

OS Security: Implements simplification and security enforcement on the OS layer.
Data Security: Supports image signature and storage encryption; Supports cleaning contents of VM memory and cloud disk when deleting the VM and cloud disk; Supports data encryption of NTP and database.
Account Security: VM supports SeLinux and VNC login password protection; Supports unified account management, authentication management and network access management, achieving unified secure access portal (https); Supports SSO single point login.
Fully meets security requirements of GDPR and DPA.