The Open Telekom Cloud – Deutsche Telekom's public cloud – is getting a new release. The primary feature is the update to Queens, the new OpenStack version. Most of the improvements are to the backend: "The update to OpenStack Queens brings new functions and updated APIs, which now allow additional parameters and further configuration options. This makes the new software version more convenient for our users," says Torsten Deutsch, Product Manager Open Telekom Cloud. "But there are also changes in the frontend: Independent of the new software version Queens, there are also various improvements in the user interface. For example, the user interface of the Elastic Cloud Server (ECS) has been redesigned. Users benefit from a better structure and more intuitive usability. To improve execution, the user interfaces (UI) of the Virtual Private Cloud Service (VPC), the Elastic Load Balancer (ELB) and the Elastic Volume Service (EVS) have also been overhauled.
Web Application Firewall (WAF): More security for web applications
For operators of web portals such as online stores, the Open Telekom Cloud will be even more secure: The new Web Application Firewall (WAF) protects websites from targeted attacks by hackers. For example, the new WAF service can thwart SQL injections. This increases security when operating SQL databases in the public cloud. In addition, the WAF can provide faster remedies for zero-day attacks. Because patches for troubleshooting security gaps can be applied independently of third-party providers, website operators will be able to react faster to such attacks in the future. Attacks via proxy servers or through several hijacked systems can also be filtered by the WAF and thus also fended off. Furthermore, the WAF service detects manipulated code from websites and automatically blocks the execution.
Health Dashboard online: Availability always in view
The Health Dashboard that was already announced at the end of 2018 is now online. Companies can check the status and availability of the Open Telekom Cloud services at any time at https://status.otc-service.com/. This enables them to rule out an error on the part of Telekom if one of their cloud services is not working at some point. "The Open Telekom Cloud offers guaranteed availability of 99.95 percent," says Torsten Deutsch. "This makes a malfunction on the Telekom side extremely unlikely. Nevertheless, it is a great convenience factor for companies to be able to rule out an error on the Telekom side at a glance if something is not working.”
Update for Docker container: New Kubernetes version 1.11.3
Kubernetes 1.9.2-r2 has been updated to version 1.11.3 within the Open Telekom Cloud. This makes companies that use the Cloud Container Engine (CCE) in the Open Telekom Cloud even more flexible and independent of the platform. In addition, the Helm Client is now supported. With CCE, containers can now also run on virtual machines (VMs) in the Elastic Cloud Server (ECS) category as well as on hypervisor-independent Bare Metal Server flavors. This makes container-based applications even easier to roll out and move between different servers and platforms.
Elastic Cloud Server to Dedicated Host – and back again
With the update of the Open Telekom Cloud, companies can flexibly convert virtual machines from the Elastic Cloud Server range. With immediate effect it is now possible to move virtual machines directly from one Dedicated Host Server (DeH) to another. In addition, virtual machines can be moved from the shared environment to a DeH. This now makes it possible to move workloads from a shared environment to a dedicated one and thus react spontaneously, for example, if the license conditions of software operated in the cloud change. Similarly, virtual machines based on the Xen hypervisor can also be transferred to a KVM-based equivalent.
Further innovations at a glance
- API Extension: Companies gain more transparency about the versions of the programmable interfaces (API) used in the Open Telekom Cloud. In the future, users will be able to enquire about the versions of the APIs of the following flavors, services and components: Bare Metal Server (BMS), Auto Scaling (AS), Image Management Service (IMS), Dedicated Host (DeH), Simple Message Notification (SMN), Virtual Private Cloud (VPC), Elastic Load Balancer (ELB), Network Address Translation Gateway (NAT), Domain Name Service (DNS), Cloud Eye Service (CES), Cloud Trace Service (CTS), Tag Management Service (TMS), Migration as a Service (MaaS) and Storage Disaster Recovery Service (SDRS)
DWS: Some functions of the Data Warehouse Services (DWS) have been enhanced.
DWS clusters now also support internal DNS servers. Users can modify the private network domain on the cluster detail page. DWS now also supports custom Java functions (User Defined Functions UDF). This allows users to write Java methods in their favorite development environment (IDE).
Users can now configure the time zone within the service themselves.
DWS supports Identity and Access Management (IAM). Users can now log on to the DWS with the data stored in the Open Telekom Cloud.
PLAS Scaling: Users can scale the bandwidth of the Private Line Access Services (PLAS) both up and down. This means they now have the option of booking higher bandwidths via PLAS as required and cancelling them if necessary.
Hypervisor switch: Users can now independently switch virtual machines from the Elastic Cloud Server (ECS) offering that run on the Xen hypervisor to a corresponding flavor based on the KVM hypervisor.
Tags for DeH: Users can mark resources from the Dedicated Host offering with the Tag Management Service (TMS) via API.
WKS on KVM: The Work Space Service (WKS) is now available based on the KVM hypervisor. This results in noticeable performance improvements.
RDS: The Relational Database Service (RDS) has been extended.
RDS now supports PostgreSQL 10.0 and Microsoft SQL Server 2016 SE/EE.
The storage capacity per database has been increased to 4 terabytes.
With just a few clicks individual instances can now be upgraded to high availability instances by activating up to three availability zones.
VPN: The Virtual Private Network Service (VPN) now also supports other Diffie-Hellmann groups (DH) in the Internet Key Exchange Protocol (IKW) such as DH-20 (384-bit random ECP group) and DH-21 (521-bit random ECP group).
IMS: The Image Management Service (IMS) has been extended to allow images larger than 128 gigabytes. The IMS also supports the fast creation of private operating system images up to one terabyte in size. Users simply upload their image to the Object Storage (OBS) and register it in the IMS as a private image. If the size is 128 GB or bigger then only RAW or ZVHD2 images are supported. Smaller images are still supported in many other formats such as VHD, VMDK, QCOW2, VHDX, QCOW, VDI, QED and ZVHD.
ECS: Windows 2019 is now available for virtual machines from the Elastic Cloud Server offering.
At a glance: the benefits of Open Telekom Cloud
- Security: The data are hosted in highly secure Telekom computing centres in Germany.
- Scalability: Computing power and memory can be ordered and set up online and adapted flexibly at any time.
- Pricing models: We offer you flexible and fixed contractual periods as well as a combination of both models.
- No vendor lock-in: Open Telekom Cloud is based on OpenStack, a freely available open-source standard. You can change the provider at any time.
- Individual configuration: CPU, RAM, storage, network – you can put a package together for yourself that matches your requirements to the optimum degree.
- IaaS for all: Open Telekom Cloud is extremely flexible and therefore suitable for companies of every size.