vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Architecture overview of roll-your-own VMware solution on VPC 

An architecture overview of the roll-your-own VMware® solution in IBM Cloud® Virtual Private Cloud is presented in the following diagram. The architecture uses the new IBM Cloud bare metal server for IBM Cloud VPC. This fast provisioning IBM Cloud bare metal server provides you compute capacity to host VMware clusters in the IBM Cloud VPC. Through the integration with the VPC platform, you can take full advantage of the network, storage, and security capabilities provided by the VPC.

Zoom

![Architecture Overview of VMware on IBM Cloud VPC](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/vmwaresolutions/images/vpc-ryo-diagrams-aod-non-nsx-based.svg)

Figure 1. Architecture Overview of VMware on IBM Cloud VPC

You can also use VMware software-defined networking for your workloads and NSX-T™. If you use NSX-T with your solution, then you need extra subnets, such as TEP traffic and NSX-T uplinks. NSX-T Tier-0 Logical Router uplinks are separated to private and public networks. You can use IBM Cloud VPC provided public IP addresses on the NSX-T solution, which is routed without network address conversion that is done by IBM Cloud VPC.

Zoom

![Architecture Overview of VMware with NSX-T on IBM Cloud VPC](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/vmwaresolutions/images/vpc-ryo-diagrams-aod-nsx-t-based.svg)

Figure 2. Architecture Overview of VMware with NSX-T on IBM Cloud VPC

These two architectures serve as the baseline designs for deploying VMware on IBM Cloud VPC.
[Platform metrics](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-shared-monitorshared-monitor-metrics) 







 VPC 

With IBM Cloud® Virtual Private Cloud (VPC), you can provision a VPC in the IBM Cloud to run an isolated environment within the public cloud. VPC gives you the security of a private cloud, with the agility and ease of a public cloud. The VPC infrastructure contains a number of Infrastructure-as-a-Service (IaaS) offerings, including Virtual Servers for VPC. [Learn more](https://cloud.ibm.com/docs/vpc?topic=vpc-getting-started).

You can monitor various aspects of VPC services with IBM Cloud Monitoring dashboards. For more information, see [IBM Cloud VPC monitoring dashboards](https://cloud.ibm.com/docs/vpc?topic=vpc-ibm-monitoring).

The following table lists services that are enabled for IBM Cloud Monitoring:



Table 14. List of VPC services (generation 2)

 Service Description Metrics 

 [VPC virtual server instances](https://cloud.ibm.com/docs/vpc?topic=vpc-about-advanced-virtual-servers&interface=ui) With virtual server instances for VPC, you can quickly provision instances with high network performance. [Platform metrics](https://cloud.ibm.com/docs/vpc?topic=vpc-vpc-monitoring-metrics) 
 [Flow Logs for VPC](https://cloud.ibm.com/docs/vpc?topic=vpc-flow-logs) Flow Logs for VPC enable the collection, storage, and presentation of information about the Internet Protocol (IP) traffic going to and from network interfaces within your Virtual Private Cloud (VPC). [Platform metrics](https://cloud.ibm.com/docs/vpc?topic=vpc-fl-monitoring-metrics)
As an IBM Cloud® customer with a nonsubscription multi-year account, understanding the different invoices that are available to you can help you understand your monthly cost breakdown.

Managing billing and usage



* 15 minutes
* 2022-08-30



[Getting started with the IBM Cloud CLI](https://cloud.ibm.com/docs/cli?topic=cli-getting-started)Getting started with the IBM Cloud CLI

In this tutorial, you install the the latest version of the stand-alone IBM Cloud® Command Line Interface.

IBM Cloud CLI



* 30 minutes
* 2023-06-01



[AWS, Azure, GCP, and OCI workloads to IBM Cloud VPC migration with RMM](https://cloud.ibm.com/docs/cloud-infrastructure?topic=cloud-infrastructure-migrating-images-cloud-rackware)AWS, Azure, GCP, and OCI workloads to IBM Cloud VPC migration with RMM

The RackWare Management Module (RMM) migration solution provides a seamless virtual-to-virtual replatforming from other cloud service providers (AWS, Azure, GCP, and OCI (bare metal)) to IBM Cloud® virtual server instance migration, which allows the adoption of the existing capabilities of IBM Cloud. Its intuitive GUI allows you to move the OS, application, and data from other cloud service providers to IBM Cloud VPC instances.

Virtual Private Cloud (VPC) Virtual Servers for Classic

+1

Building infrastructure



* 45 minutes
* 2022-11-23



[Creating a resilient three-tier highly available infrastructure VPC in multiple regions with Terraform](https://cloud.ibm.com/docs/cloud-infrastructure?topic=cloud-infrastructure-create-three-tier-resilient-vpc-mzr)Creating a resilient three-tier highly available infrastructure VPC in multiple regions with Terraform

Terraform on IBM Cloud® enables predictable and consistent provisioning of IBM Cloud VPC infrastructure resources so that you can rapidly build complex, cloud environments. The IBM Cloud VPC infrastructure that is created uses Intel Xeon CPUs and additional Intel technologies.
* [Provision a IBM Cloud VPC for VMware deployment](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-bm-vmware-vpcvpc-bm-vmware-vpc)
* [Provision IBM Cloud DNS Services for VMware deployment](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-bm-vmware-dnsvpc-bm-vmware-dns)



[Login](https://cloud.ibm.com/docs/cli?topic=cli-getting-started) with IBM Cloud CLI with username and password, or use the API key. Select your target region and your preferred resource group.

The used variables e.g. $VMWARE_VPC_ZONE, $VMWARE_SUBNET_HOST and $VMWARE_DNS_ZONE are defined in the previous steps of this tutorial.





 Step 1: Validate Bare Metal Servers for VPC images 



1. Before provisioning a Bare Metal Servers for VPC, you need to get the Operating System Image ID. To list all available images, you can use the following CLI command:

ibmcloud is images
2. For VMware deployment, an ID for ESXi image is needed and you can search that with a key word esx. In this example, IBM Cloud provided licenses are used.

$ ibmcloud is images | grep esx | grep available
r006-29e4a5c0-cc2f-45ff-b3f2-9cb64cf7e407 ibm-esxi-7-0u3g-20328353-amd64-1 available amd64 esxi-7 7.x 1 public provider none Default -

The available images vary over time. Always pick the latest to get the most recent updates available.
3. Record the image ID as a variable, which is going to be used when provisioning the BMSs.
Automating SAP workload deployment on IBM Cloud® Virtual Private Cloud (VPC) with Terraform and Ansible 

Terraform on IBM Cloud® enables predictable and consistent provisioning of IBM Cloud Virtual Private Cloud (VPC) infrastructure resources so that you can rapidly build complex, cloud environments. IBM Cloud VPC infrastructure consists of SAP certified hardware that uses Intel® Xeon CPUs and other Intel® technologies.

You can use Terraform scripts to create a single-tier VPC and create the SAP and SAP HANA in a distributed architecture on the bastion server that you create. Creating the bastion server is a prerequisite for all IBM SAP VPC automated solutions. The Terraform scripts use the VPC information that you provide and then call the Ansible playbook to create the SAP architecture on the specified VPC.



 IBM Cloud® VPC introduction 

A VPC is a public cloud offering that an enterprise uses to establish its own private cloud-like computing environment on shared [public cloud](https://www.ibm.com/cloud/public) infrastructure. VPCs give an enterprise the ability to define and control a virtual network that is logically isolated from all other public cloud tenants, creating a private, secure place on the public cloud.

Imagine that a cloud provider’s infrastructure is a residential apartment building and multiple families live inside. Being a public cloud tenant is akin to sharing an apartment with a few roommates. In contrast, having a VPC is like having your own private condominium; no one else has the key, and no one can enter the space without your permission.

A VPC’s logical isolation is implemented by using virtual network functions and security features that give an enterprise customer granular control over which IP addresses or applications can access particular resources. It is analogous to the “friends-only” or “public/private” controls on social media accounts used to restrict who can or can’t see your otherwise public posts.

With IBM Cloud VPC, you can use the UI, CLI, and API to manually provision virtual server instances for VPC with high network performance. VPC infrastructure contains a number of Infrastructure-as-a-Service (IaaS) offerings, including virtual servers for VPC.
Public frontend and private backend in a Virtual Private Cloud 

This tutorial may incur costs. Use the [Cost Estimator](https://cloud.ibm.com/estimator/review) to generate a cost estimate based on your projected usage.

This tutorial walks you through creating your own IBM Cloud® Virtual Private Cloud (VPC) with multiple subnets and a virtual server instance (VSI) in each subnet. A VPC is your own, private cloud on shared cloud infrastructure with logical isolation from other virtual networks.

A subnet is an IP address range. It is bound to a single zone and cannot span multiple zones or regions. For the purposes of VPC, the important characteristic of a subnet is the fact that subnets can be isolated from one another, as well as being interconnected in the usual way. Subnet isolation can be accomplished by Security Groups that act as firewalls to control inbound and outbound traffic for one or more virtual server instances.

A good practice is to have a subnet used for resources that must be exposed to the outside world. Resources with restricted access that should never be directly accessed from the outside world are placed within a different subnet. Instances on such a subnet could be your backend database or some secret store that you do not want to be publicly accessible. You will define Security Groups to allow or deny traffic to the VSIs.

In short, using VPC you can:



* create a software-defined network (SDN),
* isolate workloads,
* have fine control of inbound and outbound traffic.





 Objectives 



* Understand the infrastructure objects available for virtual private clouds
* Learn how to create a virtual private cloud, subnets and server instances
* Know how to apply security groups to secure access to the servers



Zoom

!
Connectivity to IBM Cloud services with private endpoints 

IBM Cloud services should be used only over private routes. Private routes are not accessible or reachable over the internet. By using the IBM Cloud private endpoints feature, you can protect your data from threats from the public network and logically extend your private network.

When inside a VPC, this private access can be accomplished by using a [virtual private endpoint (VPE)](https://cloud.ibm.com/docs/vpc?topic=vpc-about-vpe) to map a VPC IP address to the IBM Cloud service. VPEs are virtual IP interfaces that are bound to an endpoint gateway created on a per service, or service instance, basis (depending on the service operation model). The endpoint gateway is a virtualized function that scales horizontally, is redundant and highly available, and spans all availability zones of your VPC. Endpoint gateways enable communications from virtual server instances within your VPC and IBM Cloud service on the private backbone. VPE for VPC gives you the experience of controlling all the private addressing within your cloud.

The [VPE supported services](https://cloud.ibm.com/docs/vpc?topic=vpc-vpe-supported-services) page list all of the IBM Cloud services that support VPE and provide links that describe the private hosts to use and any special instructions that might be needed. Not only does this list include the Financial Services Validated IaaS and PaaS services that are available, but they also include a number of platform services, such as [Cloud Identity and Access Management (IAM)](https://cloud.ibm.com/apidocs/iam-access-groupsendpoint-urls).

Private endpoints should be used whether you are accessing a service by using the CLI, API, or Terraform. For more information, see:



* [Securing your connection when using the IBM Cloud CLI](https://cloud.ibm.com/docs/cli?topic=cli-service-connection)
Entrust CloudControl on IBM Cloud overview 

Entrust CloudControl™ on IBM Cloud (formerly known as HyTrust CloudControl) enforces and controls compliance against security standards, which includes role-based access control (RBAC), approval, and auditing. Entrust CloudControl on IBM Cloud is a non-IBM product that is offered under terms and conditions from Entrust, not IBM.

New installations of Entrust CloudControl are supported only for VMware vCenter Server® with NSX-T™ instances. The Entrust CloudControl version available for deployment is 6.6. Previous installations of Entrust CloudControl 5.6 are still supported for existing VMware® vCenter Server with NSX-V instances V4.7 and earlier.

IBM Cloud® for VMware Solutions offers promotions for some services. Promotional pricing offers a number of months without charge for a service license, if the service has license charges. For more information, see [Promotions for VMware Solutions services](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vc_addingservicesvc_addingservices-service-promotions).



 Technical specifications for Entrust CloudControl 

For more information about resource requirements and capacity checking for some services, see [Resource requirements for services](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vc_addingservicesvc_addingservices-resource-requirements).

Entrust CloudControl is preconfigured with connections to the following components:



* Microsoft® Active Directory™
* vCenter Server
* VMware NSX-T



As part of Entrust CloudControl service configuration, global PIP is enabled.

Sample users and groups are preconfigured in Active Directory (AD) and are displayed on the service details page. If you delete Entrust CloudControl, the sample users are deleted from AD too. A sample trust manifest is set up that gives single sign-on (SSO) permissions to the sample users that are created.
IBM Cloud® services are connected to a three-tiered network, segmenting public, private, and management traffic.



* Private endpoints are available for most requests originating from within IBM Cloud. Private endpoints provide better performance and do not incur charges for any outgoing or incoming bandwidth even if the traffic is cross regions or across data centers. Whenever possible, it is best to use a private endpoint.
* Public endpoints can accept requests from anywhere and charges are assessed on outgoing bandwidth. Incoming bandwidth is free. Public endpoints should be used for access not originating from an IBM Cloud cloud computing resource.
* Direct endpoints are used in Bring-Your-Own-IP scenarios, generally for requests originating from [resources within VPCs](https://cloud.ibm.com/docs/vpc?topic=vpc-about-vpc). Like Private endpoints, Direct endpoints provide better performance over Public endpoints and do not incur charges for any outgoing or incoming bandwidth even if the traffic is cross regions or across data centers. Directions for connecting to IBM Cloud Object Storage from VPC are available [here](https://cloud.ibm.com/docs/vpc?topic=vpc-connecting-vpc-cos).



Requests must be sent to the endpoint associated with a given bucket's location. If you aren't sure where a bucket is located, there is an [extension to the bucket listing API](https://cloud.ibm.com/docs/cloud-object-storage/api-reference?topic=cloud-object-storage-compatibility-api-bucket-operationscompatibility-api-list-buckets-extended) that returns the location and storage class information for all buckets in a service instance.

When using Virtual Private Endpoints in an application that makes requests to IBM COS, it may be necessary to add some additional configuration for authentication. The IBM COS SDKs will automatically attempt to fetch an IAM token from https://iam.cloud.ibm.com/identity/token. If you are using a virtualized endpoint for token acquisition you will need alter the IAM endpoint appropriately.





 Regional Endpoints
For all version dates 

Bare metal servers for VPC. Accounts that have been granted special approval to preview this feature can now create bare metal servers to host VMware clusters in IBM Cloud VPC. You can set up VMware management applications and create VMware virtual machines on the bare metal servers. As bare metal servers are integrated with the VPC platform, you can take advantage of the network and security capabilities of IBM Cloud VPC. For more information, see [About Bare Metal Servers for VPC (beta)](https://cloud.ibm.com/docs/vpc?topic=vpc-about-bare-metal-servers) or dive into the new [API methods](https://cloud.ibm.com/apidocs/vpc-betalist-bare-metal-server-profiles).

This feature is now generally available. See the [VPC API change log](https://cloud.ibm.com/docs/vpc?topic=vpc-api-change-log1-february-2022).







 24 June 2021 



 For all version dates 

Placement groups. Placement groups for IBM Cloud® Virtual Private Cloud are logical groupings of virtual server instances that can be configured to reduce the risk of correlated failures inherent in your physical environment, such as networking issues, power loss, or hardware failure. Define a placement group strategy for high-availability workloads, such as for host or power spread. For more information, see [About placement groups](https://cloud.ibm.com/docs/vpc?topic=vpc-about-placement-groups-for-vpc) or dive into the new [API methods](https://cloud.ibm.com/apidocs/vpclist-placement-groups).

This feature is now generally available. See the [VPC API change log](https://cloud.ibm.com/docs/vpc?topic=vpc-api-change-log17-august-2021).







 6 April 2021 



 For all version dates 

File storage for VPC. Accounts that have been granted special approval to preview this feature can now create NFS-based file shares in a zone in your region.
[solution tutorial icon](https://cloud.ibm.com/media/docs/images/homepage/solution-tutorial.svg) [Use a VPC/VPN gateway for secure and private on-premises access to cloud resources](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-site2site-vpn)Use a VPC/VPN gateway for secure and private on-premises access to cloud resources Solution tutorial

This tutorial provides the automation to create resources that demonstrate Virtual Private Network (VPN) connectivity between on-premises servers and cloud resources like IBM Cloud® Virtual Private Cloud Virtual Service Instances (VSIs) and IBM Cloud data services. DNS resolution to cloud resources is also configured. The popular strongSwan VPN Gateway is used to represent the on-premises VPN gateway.

![solution tutorial icon](https://cloud.ibm.com/media/docs/images/homepage/solution-tutorial.svg) [Use trusted profiles as foundation for secure cloud environments](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-trusted-profile-for-enterprise-security)Use trusted profiles as foundation for secure cloud environments Solution tutorial

This tutorial may incur costs. Use the Cost Estimator to generate a cost estimate based on your projected usage.

![solution tutorial icon](https://cloud.ibm.com/media/docs/images/homepage/solution-tutorial.svg) [VPC landing zone - Standard variation](https://cloud.ibm.com/docs/deployable-reference-architectures?topic=deployable-reference-architectures-vpc-ra)VPC landing zone - Standard variation Reference architecture

The Standard variation of the VPC landing zone deployable architecture uses two Virtual Private Clouds (VPC), a Management VPC, and a Workload VPC to manage the environment and the deployed workload. Each VPC is a multi-zoned, multi-subnet implementation that keeps your workloads secure.
Save and share multiple estimates by using the IBM Cloud Cost Estimator
: The IBM Cloud Cost Estimator now allows a customer to save multiple estimates to their account and share those estimates with users that belong to the same account. For more information, see [Estimating your costs](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-cost).







 December 2022 



 15 December 2022 

Checklist for getting started on IBM Cloud
: A new checklist is now available in the IBM Cloud docs for [Getting started on IBM Cloud](https://cloud.ibm.com/docs/overview?topic=overview-get-started-checklist). This checklist outlines the tasks for you to complete to accelerate your journey to cloud by guiding you through your account setup and organization of resources.







 October 2022 



 10 October 2022 

A new way to provide the IBM Cloud docs team your feedback
: We want to hear from you! Let us know about your experience with the IBM Cloud docs or API docs by submitting your feedback from the Feedback button. You can tell us what you love and even what you’d like to see improved, so we can work together to ensure that you always enjoy the IBM Cloud documentation.





 07 October 2022 

Setting an alternative account owner
: As the owner of an account with classic infrastructure, you can set a trusted profile as the alternative account owner. An alternative account owner ensures that you always have a secure way to manage account ownership if your account owner leaves your organization or isn't available. For more information, see [Setting an alternative account owner](https://cloud.ibm.com/docs/account?topic=account-classic-infra-owner&interface=ui).





 04 October 2022 

Catalog integration with Virtual Private Cloud custom images
: ISV Partners and IBM Cloud customers can now import custom VPC images directly to their account or enterprise, or sell on the IBM Cloud catalog without depending on Terraform. For more information, see [Onboarding a virtual server image for VPC](https://cloud.ibm.com/docs/account?topic=account-catalog-vsivpc-tutorial).
Free cluster tier deprecation
: The free cluster option is deprecated and will be unsupported on 25 July 2023. Existing free tier clusters will be allowed to finish their 30-day trial window. If you want to continue testing IBM Cloud Kubernetes Service, try creating a [Classic cluster](https://cloud.ibm.com/docs/containers?topic=containers-cluster-create-classic). Then [copy your deployments to the new cluster](https://cloud.ibm.com/docs/containers?topic=containers-update_appcopy_apps_cluster).





 22 June 2023 

Cluster autoscaler add-on version 1.0.9_44.
: For more information, see [the change log](https://cloud.ibm.com/docs/containers?topic=containers-ca_changelog).

Istio add-on version 1.17.3.
: For more information, see the [change log](https://cloud.ibm.com/docs/containers?topic=containers-istio-changelog).





 21 June 2023 

Block Storage for VPC add-on versions 5.0.16_127 and 5.1.11_126.
: This patch introduces two new variables to the addon-vpc-block-csi-driver-configmap. To get the latest snapshot configmap values users must add the new values to the existing configmap and apply the changes. For more information, see [Customizing snapshots](https://cloud.ibm.com/docs/containers?topic=containers-vpc-volume-snapshotvpc-customize-snapshot) and [the add-on change log](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog).





 20 June 2023 

Worker node fix pack updates