vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Satellite reference architecture for IBM Cloud for Financial Services 

With [IBM Cloud Satellite](https://cloud.ibm.com/docs/satellite), you can create a hybrid environment that brings the scalability and on-demand flexibility of public cloud services to the applications and data that run in your secure private cloud. The Satellite reference architecture for the IBM Cloud for Financial Services is designed to provide a framework for building Satellite-based solutions by using a [shared responsibility model](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-shared-responsibilities) to fulfill the [best practices and requirements](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-best-practices) of the IBM Cloud Framework for Financial Services. This document describes the architecture and provides guidance for deploying, configuring, and managing it.

Satellite achieves this distributed cloud architecture by providing an API-based suite of tools that you can use to represent your on-premises data center, a public cloud provider, or an edge network as a Satellite location. You fill the Satellite location with your own host machines that meet the [minimum host requirements](https://cloud.ibm.com/docs/satellite?topic=satellite-host-reqs). Then, these hosts provide the compute power to run IBM Cloud services, such as workloads in managed Red Hat OpenShift clusters.



 Solution design 

When combined with other IBM Cloud services that run in the cloud and other applications in your on-premises environment, the hybrid architecture of Satellite can be used to build robust solutions that are appropriate for financial and other regulated workloads. This hybrid architecture is shown in the following diagram.

Zoom

![High-level Satellite reference architecture for IBM Cloud for Financial Services](https://cloud.ibm.com/docs-content/v1/content/9ac5c38b41e0aa1cb4ccc6cc7f547751ec805221/framework-financial-services/satellite/images/satellite-crawl/Satellite_FS_Cloud_draft_04-06_with_Labels_beta2.svg)

Figure 1.
On-premises VMware VM to IBM Cloud VPC migration with RMM 

To implement a data center transformation, the RackWare Management Module (RMM) migration solution provides a seamless virtual-to-virtual replatforming for VMware virtual machine (VM) to IBM Cloud® virtual server instance migration. It allows the adoption of existing capabilities of IBM Cloud. Its intuitive GUI allows you to move the OS, application, and data from VMware ESXi to IBM Cloud VPC virtual server instance.

This guide shows you how to complete a migration from your on-premises VMware VM to IBM Cloud VPC.



 Supported operating systems 



* CentOS 7.8, 7.9
* RHEL 7.2, 7.3, 7.4, 8.1
* Ubuntu 18.04, 20.04
* Debian 9.x, 10.x
* Windows 2012, 2012R2, 2016, 2019



The Convert LVM feature is only supported for RHEL 7.x and RHEL 8.x





 Architecture diagram 

Zoom

![Topology](https://cloud.ibm.com/docs-content/v1/content/8aa0853d34cf2349f1d2db8e5c61e6422a580169/cloud-infrastructure/images/On-Prem-1.svg)

Figure 1. Architecture diagram

This diagram is also applicable for On-premises VMware VM to IBM Cloud VPC bare metal migration with RMM.





 Before you begin 



* Check for correct IBM Cloud VPC user permissions. Be sure that your user account has sufficient permissions to create and manage VPC resources. See the list of [required permissions](https://cloud.ibm.com/docs/vpc?topic=vpc-managing-user-permissions-for-vpc-resources) for VPC.
* Understand the capability differences between VMware and VPC infrastructures (the following list is not exhaustive):



* VPC does not support shared volumes or file-based volumes
* GPU is not supported in VPC
* Encrypted volumes are not supported
AWS, Azure, GCP, and OCI workloads to IBM Cloud VPC migration with RMM 

The RackWare Management Module (RMM) migration solution provides a seamless virtual-to-virtual replatforming from other cloud service providers (AWS, Azure, GCP, and OCI (bare metal)) to IBM Cloud® virtual server instance migration, which allows the adoption of the existing capabilities of IBM Cloud. Its intuitive GUI allows you to move the OS, application, and data from other cloud service providers to IBM Cloud VPC instances.

This guide shows you how to complete a migration from AWS, Azure, GCP, and OCI to IBM Cloud VPC.



 Supported operating systems 



* CentOS 7.8, 7.9
* RHEL 7.2, 7.3, 7.4, 8.1
* Ubuntu 18.04, 20.04
* Debian 9.x, 10.x
* Windows 2012, 2012R2, 2016, 2019



The Convert LVM feature is only supported for RHEL 7.x and RHEL 8.x





 Architecture diagram 

This diagram shows the architecture that you create with the guide.

Zoom

![Architecture](https://cloud.ibm.com/docs-content/v1/content/8aa0853d34cf2349f1d2db8e5c61e6422a580169/cloud-infrastructure/images/AnyCloud_final.svg)

Figure 1. Architecture diagram

This diagram is applicable for bare metal to bare metal, bare metal to virtual server, and virtual server to virtual server in AWS, Azure, GCP, and OCI workloads to IBM Cloud VPC migration.





 Step 1: Order RMM 

The RMM tool is available in the IBM Cloud catalog. After you order, a virtual server with RMM software is installed into your VPC of choice. The RMM server has a public IP address for reachability and a default login.
[Entrust CloudControl](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-entrust-cc_considerations) 6.6 NSX-T only 
 [F5 BIG-IP](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-f5_considerations) BIG-IP VE 17.1 
 [FortiGate Virtual Appliance](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-fortinetvm_considerations) 7.2.5 
 [VMware HCX](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-hcx_considerations) Periodically updated to the most recent version 
 [IBM® Security Services for SAP](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-managing-ss-sap) 
 [Juniper vSRX](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-juniper-overview) 3.0 (23.1R2) 
 [KMIP for VMware](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-kmip_standalone_considerations) 2.0 
 [PrimaryIO HDM](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-managing_pio) 
 [Red Hat OpenShift for VMware](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-ocp_overview) 4.12 NSX-T only <br>If you add the service to an existing instance with an NSX-T version earlier than 3.1, you must first upgrade NSX-T to 3.1 or later.
High Availability Reference Architecture solutions <br><br> * [High Availability infrastructure on IBM Classic](https://cloud.ibm.com/docs/ha-infrastructure?topic=ha-infrastructure-ha-introduction)<br> * [Building a highly available 3-tier web application in VPC](https://test.cloud.ibm.com/docs/ha-infrastructure?topic=ha-infrastructure-components-three-tier-architecture)<br> * [Building a highly available 3-tier infrastructure in VPC](https://cloud.ibm.com/docs/ha-infrastructure?topic=ha-infrastructure-ha-3-tier)<br><br><br> 
 High Availability how-to solutions <br><br> * [Building highly available and scale wep application in classic](https://cloud.ibm.com/docs/ha-infrastructure?topic=solution-tutorials-highly-available-and-scalable-web-application)<br> * [Enabling Auto Scale for better capacity and resiliency](https://cloud.ibm.com/docs/ha-infrastructure?topic=ha-infrastructure-ha-auto-scale)<br> * [Building blue green (A/B) deployment in VPC](https://cloud.ibm.com/docs/ha-infrastructure?topic=ha-infrastructure-ha-pools-origins)<br> * [Deploying critical application in an MZR](https://cloud.ibm.com/docs/ha-infrastructure?topic=ha-infrastructure-multi-zone-resiliency)<br><br><br> 
 Backup <br><br> * [Backup reference architecture for 3-tier web application in VPC](https://cloud.ibm.com/docs/ha-infrastructure?topic=ha-infrastructure-regional-snapshots-3-tier-arch)<br> * [How-to guide for setting up snapshots for a 3-tier application in VPC](https://cloud.ibm.com/docs/ha-infrastructure?topic=ha-infrastructure-create-three-tier-architecture)<br><br><br>
Set up environment for deployment and configuration 

Automation is an important part of any cloud solution, and it's even more so in regulated industries. You want to ensure that your deployment, operations, and management procedures are secure and repeatable. Manual activities can be error prone and lead to the introduction of vulnerabilities. So, as you work with the [reference architectures](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-reference-architecture-overview) for the IBM Cloud for Financial Services, you will want to take advantage of the tools that IBM Cloud provides to make automation possible.

If using Virtual Private Cloud (VPC) reference architecture, is highly recommended that you use the [VPC landing zone deployable architectures](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-deploy-infrastructure-as-code) which provide a preconfigured set of infrastructure as code (IaC) assets to help you get started with your deployments.

The remainder of this topic describes how to set up the following tools for working with your IBM Cloud resources.



* IBM Cloud Command Line Interface (CLI)
* Application programming interfaces (APIs)
* Terraform for IBM Cloud



Use private routes to IBM Cloud service endpoints to enhance control and security over your data when you use the services that make up the reference architectures. Private routes are not accessible or reachable over the internet. By using them, you can protect your data from threats from the public network and logically extend your private network. For more information, see [Secure access to services by using service endpoints](https://cloud.ibm.com/docs/account?topic=account-service-endpoints-overview) and [Securing your connection when you use the IBM Cloud CLI](https://cloud.ibm.com/docs/cli?topic=cli-service-connection).



 IBM Cloud Command Line Interface 

The [CLI](https://cloud.ibm.com/docs/cli?topic=cli-getting-started) offers a powerful set of commands to work with your resources.
Help and support 

  How to fix it 

You can determine the status of the IBM® Db2® on Cloud service in IBM Cloud by checking the [IBM Cloud: Status](https://cloud.ibm.com/status?selected=status) page.



  Getting help and support for Db2 on Cloud 

If you have problems or questions when using Db2 on Cloud, you can get help by searching for information or by asking questions through a forum. You can also open a support case.

You can review [Stack Overflow](https://stackoverflow.com/search?q=ibm-cloud) to see whether other users ran into the same problem. When using the forum to ask a question, tag your question with ibm-cloud and db2 so that it is seen by the IBM Cloud® development teams.

See [Getting help](https://cloud.ibm.com/docs/get-support?topic=get-support-using-avatarasking-a-question) for more details about using the forums.

For information about opening an IBM support case, or about support levels and case severities, see: [Working with support cases](https://cloud.ibm.com/docs/get-support?topic=get-support-open-caseopen-case).
service.SetServiceURL("https://$ACCOUNT-bluemix.private.cloudantnosqldb.appdomain.cloud")

if err != nil {
panic(err)
}

If it succeeds, you are ready to go. Otherwise, you might want to check a few things:



* Are your CSEs correctly enabled?
* Can you reach the CSE endpoints from where you're running the command?
* Do other CSE endpoints in the same account work correctly?
* Do your firewall rules block access?



If none of these tasks fix the problem, you can talk to our [IBM Cloud Support Center](https://cloud.ibm.com/unifiedsupport/supportcenter) team.





 Disabling public service endpoints for IBM Cloudant 

If you use the dedicated hardware plan, you can deny access from the public network. To accomplish this task, make a request to update the firewall rules for your clusters to the [IBM Cloud Support Center](https://cloud.ibm.com/unifiedsupport/supportcenter).

This option is not available to multi-tenant users.
* One IBM Cloud bare metal server with VMware vSphere Enterprise Plus 7.0 or 6.7u3 for V4.7 and earlier.
* Optional VMware components presented in [Technical specifications for VMware vSphere](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vs_vsphereclusteroverviewvs_vsphereclusteroverview-specs).



You must manage the ESXi servers, optional VMware components, and extra hardware that is ordered and delivered to your IBM Cloud account only from the IBM Cloud infrastructure customer portal. After you create a new instance in the IBM Cloud for VMware Solutions console, you can return to the console, and add capacity to the new instance. For more information, see [Adding ESXi servers to VMware vSphere instances](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vs_addingservers).







 Related links 



* [VMware vSphere BOM](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vs_bom)
* [Planning for VMware vSphere](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vs_planning)
* [Ordering VMware vSphere instances](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vs_orderinginstances-req)
* [Adding ESXi servers to VMware vSphere instances](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vs_addingservers)
VMware as a Service docs 

IBM Cloud for VMware as a Service is an IBM Cloud offering that deploys a comprehensive portfolio of automated and on-demand services for VMware workloads to the cloud. Learn how to make the most of your VMware as a Service experience by using the docs.

 Developer tools 

[API & SDK reference](https://cloud.ibm.com/apidocs/vmware-service)

 Recommended content 

[Getting started with VMware as a Service Get familiar with the process of ordering a VMware as a Service instance.](https://cloud.ibm.com/docs/vmware-service?topic=vmware-service-getting-started)[Planning the deployment Ensure that you plan your deployment properly.](https://cloud.ibm.com/docs/vmware-service?topic=vmware-service-tenant-plan-deploy)[Ordering instances You can order a VMware as a Service instance.](https://cloud.ibm.com/docs/vmware-service?topic=vmware-service-tenant-ordering)[Adding hosts You can increase or decrease the capacity of your deployment.](https://cloud.ibm.com/docs/vmware-service?topic=vmware-service-host-adding-deleting)[Adding virtual data centers You can deploy one or more virtual data centers.](https://cloud.ibm.com/docs/vmware-service?topic=vmware-service-vdc-adding)[Viewing instances You can view the information of the instances that are provisioned for your account.](https://cloud.ibm.com/docs/vmware-service?topic=vmware-service-tenant-viewing)

 Learn more 

[IBM Developer<br><br>Visit IBM Developer for technical articles, code patterns, tutorials, and more.<br><br>!
Serving static websites with IBM Cloud Object Storage 

A new hosted static website can be created with IBM Cloud® Object Storage in minutes using [this simple tutorial](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-static-website-tutorial). This topic contains the details and some advanced configuration options for hosting static websites.



 Overview 

Modern web development requires modern tools and secure infrastructure. Static websites represent the latest developments in high-availability, SEO improvement, and increased security. While covering every available option is beyond the scope of this hands-on overview, the ease of serving static content on IBM Cloud Object Storage allows for many possible strategies.

Hosted static websites focus on the content your users desire: information and media. By removing the administration of webservers like Apache or Nginx, management of your website focuses directly on content, from generation to deployment.

Static content differs substantially from dynamic web content. However, if you don't need to generate dynamic content on the web or if your workflow results in content saved to a fixed form, then the hosted static solution featured here presents the best choice.





 Capabilities
Integrations 

Integrations in App Configuration represent list of other IBM Cloud services that are connected to your App Configuration instance.

The Integrations page displays the services supported along with integrations in the current App Configuration service. Following service integrations are supported:

Zoom

![List of integrations](https://cloud.ibm.com/docs-content/v1/content/f3dada89f147af3b88388a2218ddbf64b3c41e5f/app-configuration/images/ac-integrations-default.png)

Figure 1. List of integrations



1.  Key Management - You can encrypt the data that you store in IBM Cloud databases by using encryption keys that you can control. Manage the lifecycle of your encryption keys that are used for your IBM Cloud resources, services and applications. For more information, see [Integrating with a Key management service](https://cloud.ibm.com/docs/app-configuration?topic=app-configuration-ac-int-key-management).
2.  Event Notifications - Enable lifecycle notifications for your App Configuration instance by connecting an Event Notifications service instance. For more information, see [Integrating with Event Notifications service](https://cloud.ibm.com/docs/app-configuration?topic=app-configuration-ac-int-en).
How do I know that my data is safe? 

Designed with secure engineering practices, the IBM Cloud® platform provides layered security controls across network and infrastructure. IBM Cloud focuses on protection across the entirety of the compute lifecycle, which includes everything from the build process and key management to the security of data services. IBM Cloud also provides a group of security services that can be used by application developers to secure their mobile and web apps. These elements combine to make IBM Cloud a platform with clear choices for secure application development.

In addition to our own diligence in creating and operating a secure cloud, IBM® also engages many different firms to assess the security and compliance of our cloud platform. For more information, see [IBM Cloud compliance programs](https://www.ibm.com/cloud/compliance) for a detailed list of certifications and attestations.

IBM Cloud ensures security readiness by adhering to security policies that are driven by best practices in IBM for systems, networking, and secure engineering. These policies include practices such as source code scanning, dynamic scanning, threat modeling, and penetration testing. IBM Cloud follows the IBM Product Security Incident Response Team (PSIRT) process for security incident management. See the [IBM Security Vulnerability Management (PSIRT)](https://www.ibm.com/support/pages/ibm-security-vulnerability-management) site for details.

In addition to the regular penetration testing conducted by IBM and our partners, customers may conduct penetration testing of their VPC or Classic Infrastructure resources on IBM Cloud. Prior authorization to do so is not required by IBM Cloud. IBM Cloud customers under an active NDA can request a copy of a penetration testing executive summary by [opening a support case](https://cloud.ibm.com/unifiedsupport/supportcenter).

For more details about security for your applications and environments in IBM Cloud, see [Security architecture for cloud applications](https://www.ibm.com/cloud/architecture/architectures/securityArchitecture/).
The following migration options can help you decide which option is right for your organization. There are no plans for a direct replacement for this service.



1. Looking for increased experience and capability? The IBM Watson IoT Platform technology is still available as an embedded component within IBM’s hybrid cloud solutions for Asset and Facilities Management. IBM Maximo Application Suite and IBM TRIRIGA Application Suite are full hybrid cloud solutions for asset management and facilities management, running on Red Hat® OpenShift®. For more information about these solutions, see [IBM Maximo Application Suite](https://www.ibm.com/uk-en/products/maximo) and [IBM TRIRIGA Application Suite](https://www.ibm.com/products/tririga).

The closest alternative to the IBM Watson IoT Platform cloud service is IBM Maximo Monitor in IBM Maximo Application Suite, which is available as software or as an IBM Managed Service. For more information, see [Remote monitoring in IBM Maximo Application Suite](https://www.ibm.com/uk-en/products/maximo/remote-monitoring3075164).
2. Looking to manage your own IoT devices and data ingestion going forward? IBM has open sourced the core MQTT broker technology at the heart of the IBM Watson IoT Platform. For more details see: [https://www.eclipse.org/amlen/](https://www.eclipse.org/amlen/)
3. Looking for examples of alternative IoT data ingestion techniques using other IBM Cloud services? See [Real-time analytics on IoT data](https://www.ibm.com/blogs/journey-to-ai/2022/09/real-time-analytics-on-iot-data/).







 Migration assistance 

If your organization needs help migrating from IBM Watson IoT Platform to IBM Maximo Application Suite, there are for-pay migration assistance options from IBM teams that are available to you. IBM Sustainability Expert Labs provide deep technical expertise and a proven approach to migrating solutions to IBM hybrid cloud technologies.
Satellite Infrastructure Service is IBM-operated and as such, is covered in the IBM Cloud Satellite cloud service terms with additional information outlined in the [IBM Cloud Additional Services Description](http://www.ibm.com/support/customer/csol/terms/?id=i126-8979).
* What compliance standards does the service meet?

IBM Cloud is built by following many data, finance, health, insurance, privacy, security, technology, and other international compliance standards. For more information, see [IBM Cloud compliance](https://cloud.ibm.com/docs/overview?topic=overview-compliance).

To view detailed system requirements, you can run a [software product compatibility report for IBM Cloud Satellite](https://www.ibm.com/software/reports/compatibility/clarity/softwareReqsForProduct.html).

Note that compliance also might depend on the setup of the underlying infrastructure provider that you use for the Satellite location control plane and other resources.

IBM Cloud Satellite implements controls commensurate with the following security standards:



* International Organization for Standardization (ISO 27001, ISO 27017, ISO 27018)



* What IBM Cloud services can I use with Satellite?

For a complete list of IBM Cloud services that you can deploy to your Satellite location, see Satellite-enabled IBM Cloud services.

Keep in mind that each service might:



* Be available for Satellite locations that are managed from select IBM Cloud regions only, such as from Washington, DC or London.
* Have its own [limitations for use in Satellite](https://cloud.ibm.com/docs/satellite?topic=satellite-requirementsreqs-services).



* Can I estimate my costs?

When you create a resource such as a location or cluster, you can review a cost estimate in the Summary pane of the console. For other types of estimates, see [Estimating your costs](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-costcost).

Keep in mind that some charges are not reflected in the estimate, such as the costs for your underlying infrastructure.
* Can I view and control my current usage?
Service Level Agreements (SLAs) 

IBM Cloud® aims to deliver the highest levels of availability and offers a service level agreement (SLA), which provides credits against service charges should a service fail to meet its stated availability target. For more information, see [IBM Cloud Service Level Agreements](https://www.ibm.com/support/customer/csol/terms/?id=i126-9268&lc=endetail-document).