vania-janet/multiturn-rag-retrieval-data huggingface dataset:
[Create NAT rules](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vmware-as-a-service-vdcvmware-as-a-service-vdc-configure-nat)
5. [Create firewall rules](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vmware-as-a-service-vdcvmware-as-a-service-vdc-configure-fw)
6. [Connect to the virtual machine using integrated web console](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vmware-as-a-service-vdcvmware-as-a-service-vdc-connect-to-vmconsole)
7. [Connect to the virtual machine through the Internet and validate connectivity](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vmware-as-a-service-vdcvmware-as-a-service-vdc-connect-to-vm)



An [alternative tutorial](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vmware-as-a-service-tf) with Terraform is also available.





 Before you begin 

This tutorial requires:



* An IBM Cloud [billable account](https://cloud.ibm.com/docs/account?topic=account-accounts),
* Check for user permissions. Be sure that your user account has sufficient permissions [to create and manage VMware as a Service resources](https://cloud.ibm.com/docs/vmware-service?topic=vmware-service-getting-started).
[SA-15 (9) Development Process, Standards, and Tools | Use of Live Data](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-sa-15.9) 
 System and Communications Protection (SC) [SC-2 Application Partitioning](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-sc-2) 
 [SC-3 Security Function Isolation](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-sc-3) 









 Hub and spoke model 

In cloud, it is common to talk about using a hub and spoke model for networking. In this model, a centralized network hub links many spoke networks (VPCs) together. A centralized hub is typically used to reduce costs and increase scale while still allowing private network connectivity within the cloud.

In this recommendation, we also generalize this hub and spoke pattern, applying it to several different areas of concern including networking, managing infrastructure as code, secrets, shared services, and more.





 Shared application infrastructure 

Creating secure, compliant, robust, and scalable application infrastructure can be difficult to set up and costly to maintain. VMs or clusters must be deployed, logging and monitoring configured, firewalls and vulnerability checks enabled, and all of this must be monitored and kept up to date. In addition, this infrastructure must be scaled to accommodate application burst loads and as a result some aspects of the infrastructure are underutilized most of the time.

Standardizing application infrastructure where possible, and then hosting many applications on the same infrastructure, is essential to reduce operations costs. This set up allows the infrastructure to be better utilized and shares the operations cost across many applications. This also makes it practical to use infrastructure as code to deploy many copies of the infrastructure, amortizing the development and maintenance cost of that infrastructure as code across potentially thousands of applications.

As shown in the volumetric analysis, from 1-100 applications should be hosted per account on this shared infrastructure with an average of perhaps 10-20 applications per account.
For more information, see [Procedure to view the VDC details](https://cloud.ibm.com/docs/vmware-service?topic=vmware-service-vdc-view-deletevdc-view-delete-details).





 Procedure to add virtual data centers 



1. In the VMware Solutions console, click Resources > VMware as a Service from the left navigation pane.
2. In the VMware as a Service table, ensure that the Virtual data centers tab is selected, and then click Create new +.
3. On the VMware as a Service page, ensure that the VMwaaS single-tenant Virtual data center card is selected.
4. Specify the VDC name and select the resource group.
5. Select the Cloud Director location, and PVDC. The site and PVDC names are preset based on the instance settings, but you can change them.
6. Optionally toggle fast provisioning of VMs on.
7. To order a network edge, ensure that the toggle for Create without network edge is off and specify the edge type. Edge storage costs might occur.



Table 1. Network edge descriptions

 Edge type Details 

 Efficiency These edges allocate networking resources that can be used by up to 100 VDCs before another efficiency edge needs to be created. The first time an efficiency edge is selected new CPU, RAM, and storage resources are required. CPU and RAM are used from the single tenant site. New edge storage is allocated at a cost. Subsequent VDCs up to 100 can use this edge at no extra cost. This option is suitable for saving resources and costs with independent networking control per VDC. 
 Performance - M This option is suitable when only L2 through L4 features such as NAT, routing, L4 firewall, L4 load balancer are required and the total throughput requirement is less than 2 Gbps. 
 Performance - L This option is suitable when only L2 through L4 features such as NAT, routing, L4 firewall, L4 load balancer are required and the total throughput is in the range 2 - 10 Gbps.
3. In the following situations, review the information the IBM Cloud infrastructure credentials area for the steps that you need to take:



* If you have both an IBM Cloud infrastructure account and an IBM Cloud account that are not linked, you must link them. Follow the instructions in [Upgrading your account](https://cloud.ibm.com/docs/account?topic=account-upgrading-account), then click Retrieve credentials to complete the credentials automatically.
* If you do not have an IBM Cloud infrastructure account, and you do not have a billable IBM Cloud account, first [upgrade your account](https://cloud.ibm.com/docs/account?topic=account-upgrading-account), and then [create a classic infrastructure API key](https://cloud.ibm.com/docs/account?topic=account-classic_keyscreate-classic-infrastructure-key).



4. Click Save credentials. If you receive a message that administrator access is required, you can locate an account administrator by using the steps in [Locating an IAM account administrator](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-iam_verify_permissions).







 Results after you update user account credentials 

After the IBM Cloud account and the IBM Cloud infrastructure account are linked, the console automatically retrieves the IBM Cloud infrastructure account credentials to communicate with your VMware® environment on IBM Cloud.

The stored IBM Cloud infrastructure account credentials are used in future operations that require interaction with the IBM Cloud infrastructure.







 Related links 



* [Setting up your environment for your first order](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-completing_checklist)
* [FAQ](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-faq-vmwaresolutions)
* [Ordering vCenter Server instances](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vc_orderinginstance-req)
All supported operating systems (such as RHEL, CentOS, Windows, Ubuntu, and others), databases that are supported, and software add-ons are also available with this offering.







 GPU 

GPU profiles are best for high-performance workloads that require more compute density to reduce resource management and costs. The GPU profiles are ideal for artificial intelligence processes, intense graphic and data applications, or developing new applications that require fast performance.

Powered by NVDIA Tesla GPUs, IBM Cloud Accelerated Compute “ac1” and "ac2" profiles both offer block and local SSD storage. The following GPU profiles are available globally for you to choose from:



Table 14. P100 GPU profiles

 Profile GPU GPU RAM (GB) vCPU vCPU RAM (GB) Storage Type Boot Disk (GB) Secondary Disks (2 and 3) (GB) 

 ac1.8x60x25 1 P100 16 8 60 Block (SAN) 25 None 
 ac1.8x60x100 1 P100 16 8 60 Local SSD or SAN 100 None (SAN), 300 (Local) 
 ac1.16x120x25 2 P100 32 16 120 Block (SAN) 25 None 
 ac1.16x120x100 2 P100 32 16 120 Local SSD or SAN 100 None (SAN), 600 (Local) 





Table 18. V100 GPU profiles

 Profile GPU GPU RAM (GB) vCPU vCPU RAM (GB) Storage Type Boot Disk (GB) Secondary Disks (2 and 3) (GB) 

 ac2.8x60x25 1 V100 16 8 60 Block (SAN) 25 None 
 ac2.8x60x100 1 V100 16 8 60 Local SSD or SAN 100 None (SAN), 300 (Local) 
 ac2.16x120x25 2 V100 32 16 120 Block (SAN) 25 None 
 ac2.16x120x100 2 V100 32 16 120 Local SSD or SAN 100 None (SAN), 600 (Local) 





 GPU prerequisites 

Review the following GPU prerequisites.



1.
: After a Vyatta version (released by Ciena) is more than 2 years old, the Vyatta release enters the maintenance support phase. In this phase, patches are restricted to only blocker and critical security vulnerability fixes. This phase is often referred to as end of engineering (EOE). If a bug or non-blocker/critical CVE is found on a version in maintenance support, the path forward is to update to the latest available full support version.





 Latest version availability 

Ciena Vyatta NOS is updated regularly, sometimes more than one time per month, and newly released versions are run through a vetting process on IBM Cloud hardware by IBM Cloud Support before being released to you. You can find information on the latest available versions in [Vyatta 5600 vRouter software patches](https://cloud.ibm.com/docs/virtual-router-appliance?topic=virtual-router-appliance-ciena-vyatta-5600-vrouter-software-patches), subreleases 2204 and 2208 are currently being tested for release. You can use the information in [Upgrading the OS](https://cloud.ibm.com/docs/virtual-router-appliance?topic=virtual-router-appliance-upgrading-the-os) process to update Vyatta NOS on the VRA. You can also use the information in [Resolving upgrade issues](https://cloud.ibm.com/docs/virtual-router-appliance?topic=virtual-router-appliance-upgrade-issues) to find help when an upgrade fails.
* ChatOps - A ChatOps interface that connects with your preferred tools, including PagerDuty and Slack. This further accelerates the SRE’s ability to receive and react to incidents immediately using the tools they use every day.







 Hybrid Policy Model 

The updates to Governance, Risk, and Compliance policies allow for a faster, more flexible solution for both VMs and containers. This hybrid approach to policy applications allows operators to apply a policy that is enforced, even as applications are edited and moved by development teams. These enhancements also include templated policy-as-code for industry standards such as HIPAA, FISMA, NIST, and PCI. This policy-based Governance and Risk dashboard is ready out of the box and is versatile and adaptable for your unique compliance and governance requirements.





 Cost and license management 

Managing cloud costs is a priority in any organization. IBM Cloud Pak for Multicloud Management cost modeling and asset management now provide a more seamless experience. The capabilities that are included are:



* IT Cost Modeling, Showback, and Chargeback are enhanced with new visibility features to find resources and more detailed report generation.
* Chargeback generation steps are simplified to three key steps: Define rate cards, assign rate cards, and generate the chargeback report.









 Install IBM Cloud Pak for Multicloud Management 



 Before you begin 



* Before you can install the Cloud Pak, you must purchase a license through [IBM Passport Advantage](https://www.ibm.com/software/passportadvantage/index.html). For part numbers, see [Passport Advantage part numbers](https://www.ibm.com/support/knowledgecenter/en/SSFC4F_2.1.0/about/part_numbers.html).
* You must have a supported version of OpenShift Container Platform that is installed by using IBM Cloud Kubernetes Service so that the managed OpenShift service is supported. For the list of supported versions, see [Supported OpenShift versions and platforms](https://www.ibm.com/support/knowledgecenter/en/SSFC4F_2.1.0/install/supported_os.html).
* ChatOps - A ChatOps interface that connects with your preferred tools, including PagerDuty and Slack. This further accelerates the SRE’s ability to receive and react to incidents immediately using the tools they use every day.







 Hybrid Policy Model 

The updates to Governance, Risk, and Compliance policies allow for a faster, more flexible solution for both VMs and containers. This hybrid approach to policy applications allows operators to apply a policy that is enforced, even as applications are edited and moved by development teams. These enhancements also include templated policy-as-code for industry standards such as HIPAA, FISMA, NIST, and PCI. This policy-based Governance and Risk dashboard is ready out of the box and is versatile and adaptable for your unique compliance and governance requirements.





 Cost and license management 

Managing cloud costs is a priority in any organization. IBM Cloud Pak for Multicloud Management cost modeling and asset management now provide a more seamless experience. The capabilities that are included are:



* IT Cost Modeling, Showback, and Chargeback are enhanced with new visibility features to find resources and more detailed report generation.
* Chargeback generation steps are simplified to three key steps: Define rate cards, assign rate cards, and generate the chargeback report.









 Install IBM Cloud Pak for Multicloud Management 



 Before you begin 



* Before you can install the Cloud Pak, you must purchase a license through [IBM Passport Advantage](https://www.ibm.com/software/passportadvantage/index.html). For part numbers, see [Passport Advantage part numbers](https://www.ibm.com/support/knowledgecenter/en/SSFC4F_2.0.0/about/part_numbers.html).
* You must have a supported version of OpenShift Container Platform that is installed by using IBM Cloud Kubernetes Service so that the managed OpenShift service is supported. For the list of supported versions, see [Supported OpenShift versions and platforms](https://www.ibm.com/support/knowledgecenter/en/SSFC4F_2.0.0/install/supported_os.html).
* ChatOps - A ChatOps interface that connects with your preferred tools, including PagerDuty and Slack. This further accelerates the SRE’s ability to receive and react to incidents immediately by using the tools they use every day.







 Hybrid Policy Model 

The updates to Governance, Risk, and Compliance policies allow for a faster, more flexible solution for both VMs and containers. This hybrid approach to policy applications allows operators to apply a policy that is enforced, even as applications are edited and moved by development teams. These enhancements also include templated policy-as-code for industry standards such as HIPAA, FISMA, NIST, and PCI. This policy-based Governance and Risk dashboard is ready out of the box and is versatile and adaptable for your unique compliance and governance requirements.





 Cost and license management 

Managing cloud costs is a priority in any organization. IBM Cloud Pak for Multicloud Management cost modeling and asset management now provide a more seamless experience. The capabilities that are included are:



* IT Cost Modeling, Showback, and Chargeback are enhanced with new visibility features to find resources and more detailed report generation.
* Chargeback generation steps are simplified to three key steps: Define rate cards, assign rate cards, and generate the chargeback report.









 Install IBM Cloud Pak for Multicloud Management 



 Before you begin 



* Before you can install the Cloud Pak, you must purchase a license through [IBM Passport Advantage](https://www.ibm.com/software/passportadvantage/index.html). For part numbers, see [Passport Advantage part numbers](https://www.ibm.com/support/knowledgecenter/en/SSFC4F_2.3.0/about/part_numbers.html).
* You must have a supported version of OpenShift Container Platform that is installed by using IBM Cloud Kubernetes Service so that the managed OpenShift service is supported. For the list of supported versions, see [Supported OpenShift versions and platforms](https://www.ibm.com/support/knowledgecenter/en/SSFC4F_2.3.0/install/supported_os.html).
Depending on how you store your master key parts, you might initialize the new crypto units with the TKE CLI plug-in, or smart cards together with the Management Utilities. Make sure to configure the new crypto units the same as the existing crypto units by referring to the following instructions:



* If you load the master key from your workstation, see [Initializing service instances with the IBM Cloud TKE CLI plug-in](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-initialize-hsm).
* If you load the master key from smart cards, see [Initializing service instances with smart cards and the Management Utilities](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-initialize-hsm-management-utilities).



Extra monthly costs apply for each new crypto unit. You can check the detailed charges on the [billing and usage](https://cloud.ibm.com/billing/) page under your account.





 Step 3: Request to activate the new crypto units 

After you initialize the new crypto units, you need to raise another support ticket to activate them.



1. In your IBM Cloud dashboard, click the Help icon ![Help icon](https://cloud.ibm.com/docs-content/v1/content/217f108cc44e2ce15fb692d4b57b4c628464e908/icons/help.svg) > Support center from the IBM Cloud console menu bar to enter the Support Center. Click View all in the Recent support cases panel and click Create new case. Or, you can directly go to the [Manage cases page](https://cloud.ibm.com/unifiedsupport/cases) and click Create new case.
2. On the Create a case page displayed, select the offering Hyper Protect Crypto Services, and then specify the following values:



Table 2. Describes the fields that are required to activate new crypto units

 Field name Action 

 Subject Enter Activate new crypto units.
IBM Cloud Transit Gateway overview 

With IBM Cloud® Transit Gateway (TGW), you can create a single or multiple transit gateways to connect VPCs together. You can also connect your IBM Cloud classic infrastructure to a Transit Gateway to provide seamless communication with Classic Infrastructure resources. Any new network that you connect to a Transit Gateway is then automatically made available to every other network connected to it.

IBM Cloud Transit Gateway supports local and global routing between VPCs and the IBM Cloud classic infrastructure. Connections to and from an IBM Cloud Transit Gateway on the IBM private network are not shown to the public internet. This arrangement reduces public egress and VPN costs and reduces security threats. IBM Cloud Transit Gateway is a fully redundant, fault-tolerant service with no single point of failure within IBM Cloud multizone regions.

IBM Cloud Transit Gateway provisions and defines connections between resources on the IBM Cloud network, providing private interconnectivity between IBM Cloud data centers worldwide. It also provides a central hub for connectivity, making it easier to provision and manage your networks. With IBM Cloud Transit Gateway, you can create a single Transit Gateway or multiple transit gateways to connect IBM Cloud VPCs. You can also connect your IBM Cloud classic infrastructure to a Transit Gateway to provide seamless communication with classic infrastructure resources. Any new resource that you connect to a Transit Gateway is automatically made available to every other resource connected to it. All data remains within the private IBM Cloud backbone and is optimized for performance.

For more information, see [About IBM Cloud Transit Gateway](https://cloud.ibm.com/docs/transit-gateway?topic=transit-gateway-about).



 Considerations with roll-your-own VMware solution on VPC 

When you use Transit Gateway with your VMware® solution on VPC, the routing differs slightly between the two networking architectures.

When you use VMware virtual machines (VMs) on VPC subnets architecture, your VMs are attached to VPC subnets and the routing behaves in the same way as with VPC Virtual Servers. The VPC subnets are provisioned from the zone prefix, and when the VPC is attached to a Transit Gateway, the routing works between other VPCs without any required changes.
Deleting a project 

When you delete a project, destroy any resources that were deployed by configurations within the project to avoid additional costs.

By default, when you delete a project, any resources that were deployed are destroyed automatically. Confirm that this setting is enabled by opening your project and going to Manage > Settings. If this setting is disabled and you delete your project, the resources remain deployed, but you lose the ability to manage them easily with your project. Deployed resources continue accruing costs in your target account.

To delete a project, complete the following steps:



1.  In the IBM Cloud® console, click the Navigation menu icon ![Navigation Menu icon](https://cloud.ibm.com/docs-content/v1/content/d4595e5202a9a27767cf034e81b038cdf772e0d5/icons/icon_hamburger.svg) > Projects.
2.  Click the Actions icon ![Actions icon](https://cloud.ibm.com/docs-content/v1/content/d4595e5202a9a27767cf034e81b038cdf772e0d5/icons/action-menu-icon.svg) > Delete project.
3.  Enter the project name into the required field. Make sure that you want to delete a project because after you delete a project the action can't be undone.
4.  Click Delete.
It means that Code Engine reduces the running instances to zero if there is no workload on the app. This saves costs, but requires a short app restart when scaling up from zero again. You can avoid this by using the paramater --min 1 when creating or updating the app.
2. To utilize the provisioned services, you have to bind them to the app. First, bind Db2 on Cloud, then App ID:

ibmcloud ce application bind --name ghstats-app --service-instance ghstatsDB

ibmcloud ce application bind --name ghstats-app --service-instance ghstatsAppID

Each application bind creates the folowing resources and relationships:



1. An [IAM Service ID](https://cloud.ibm.com/iam/serviceids).
2. An IAM API key is created in the IAM Service ID.
3. A resource service key. These are called (Service credentials in the IBM Cloud console. Try the following command to display the App ID entry:



ibmcloud resource service-keys --instance-name ghstatsAppID

Instead of binding the services to the app, you could also [use secrets and configmaps](https://cloud.ibm.com/docs/codeengine?topic=codeengine-configmap-secret). They can be populated from values stored in files or passed in as literal. A sample file for secrets and related instruction are in the [GitHub repository for this tutorial](https://github.com/IBM-Cloud/github-traffic-stats).







 Step 4: App ID and GitHub configuration (browser) 

The following steps are all performed using your Internet browser. First, you configure App ID to use the Cloud Directory and to work with the app. Thereafter, you create a GitHub access token. It is needed by the app to retrieve the traffic data.



1.