Swisscom EntCloud Documentation
website·Indexed 37 days ago
https://docs.entcloud.swisscom.com/Technical documentation for Swisscom EntCloud services, including Managed Kubernetes (TKGi), Event Exposure via Apache Kafka, Object Storage S3, Managed RHEL, and Managed MS SQL. It provides guides on cluster lifecycle management, storage configuration, and API specifications for catalog requests and Day 2 actions.
What's inside EntCloud
- The Managed OS Service transfers operating system level tasks from the customer to Swisscom within the Enterprise Service Cloud environment. This service includes antivirus protection, patching, monitoring of system-relevant parameters (alarming), OS hardening, and incident management. It is designed for business-critical applications.
Overview of Swisscom Windows Managed OS service capabilities
The Swisscom Windows Managed OS service provides server operating system management. Swisscom maintains exclusive administration/root authorization on the server. If a customer is granted temporary administration rights, the Service Level Agreement (SLA) is suspended. Key service features include:
- SLA on the OS
- Monitoring and Alarming
- Troubleshooting
- Malware Protection
- Patching
- Reporting
- Lifecycle management (Swisscom Agents and Tools)
Overview of File Service Premium
File Service Premium provides network share services using NFS, SMB, and iSCSI protocols. It includes an indelible backup service for shares with configurable retention periods: 30 days (30xDay), 90 days (90xDay), and 365 days (30xDay, 53xWeekly).Overview of Managed RHEL Service
The Managed RHEL service transfers Operating System tasks to Swisscom, including antivirus protection, patching, monitoring of base OS parameters (alarming), and incident management. It is designed for business-critical applications in the Enterprise Service Cloud environment.Overview of Managed Microsoft SQL Server monitoring
Managed Microsoft SQL Server platform products (DBMS, DBA, and AlwaysOn) are monitored using SCOM (System Center Operations Manager). The monitoring relies on two primary Microsoft System Center Management Packs: 'Management Pack for SQL Server' and 'Management Pack for Windows Server Operating System'.Overview of Swisscom Incident Management
Swisscom Incident Management focuses on restoring service performance as quickly as possible using standardized methods and procedures. The process ensures a consistent flow of information to stakeholders and customers. Key characteristics include:
- Priority Determination: Ticket priority is established collaboratively between Swisscom and the customer.
- Escalation Path: Troubleshooting is structured in stages to ensure the appropriate level of technical expertise is applied.
- Field Service: On-site operations are supported by a professional field service.
- Proactive Monitoring: Swisscom actively monitors service infrastructure to initiate troubleshooting immediately, often before the customer notifies them of an issue.
Overview of Managed F5 BIG-IP Virtual Edition
The Managed F5 BIG-IP Virtual Edition is a virtual appliance fully managed by Swisscom, running on the Swisscom Enterprise Service Cloud within a customer tenant. It utilizes BIG-IP LTM (Local Traffic Manager) licensing to provide full proxy capabilities, allowing users to inspect, manage, and report on application traffic. The service is deployed as a High Availability (HA) active-standby pair: one device (ACTIVE) handles workload traffic while the other (STANDBY) is ready for failover, ensuring minimized maintenance interruptions.Overview of Swisscom Cloud Hooks
Hooks are subscriptions to predefined events that notify you when a specific trigger occurs, allowing you to react programmatically. Events are categorized into 'event topics'. To use hooks, you must provide a REST endpoint to receive the event data payload in JSON format.Overview of Network Security (NSX) Portal
The Security section of the portal provides a centralized interface for managing Network Security (NSX). Authorized users can access these tools via the top navigation bar. The security suite includes management for Firewall Rules, Security Sections, Services, IP Sets, Security Groups, Security Tags, and Flow Logs.Overview of SSMS Actions for Managed MS SQL
Administrative actions on a SQL instance can be executed via SSMS, SSDT GUI, or T-SQL statements. Members of thecustomerAdminserver role can perform actions allowed by the permission model, such as creating, deleting, or modifying databases, logins, users, and SQL jobs. Other users are limited to database-level actions based on permissions granted bycustomerAdminmembers.Overview of Swisscom Object Storage S3
Object Storage S3 is an object-based cloud storage service that uses a standardized S3 compatible API. Key characteristics include:
- API Compatibility: Supports the Amazon S3 API, enabling the use of any S3 compatible client or CLI.
- Data Redundancy: User data is distributed and stored across four different Swisscom datacenter locations by default.
- Network Access: Accessible via private network by default, with an option to enable Internet access.
- Security: Swisscom does not store user credentials.
- Data Protection: Includes an 'Archive Safe' option to prevent data from being changed or deleted for a defined period of time.
To use the service, order 'Object Storage S3' via the service catalog in the ESC Portal.
Overview of Swisscom Managed Reverse Proxy
The Managed Reverse Proxy is a customer-specific instantiation operated by Swisscom. Provisioning, modification, and decommissioning are automated end-to-end. Each instance is assigned a Swisscom public IP address, enabling automated BGP routing.