vania-janet/multiturn-rag-retrieval-data huggingface dataset:
* [How IBM Cloud ensures high availability and disaster recovery](https://cloud.ibm.com/docs/overview?topic=overview-zero-downtime)
* [Responsibilities for operating services in your deployment](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-responsibilities)







 Related controls in IBM Cloud Framework for Financial Services 

The following IBM Cloud Framework for Financial Services controls are most related to this guidance. However, in addition to following the guidance here, ydo your own due diligence to ensure you meet the requirements.



Table 2. Related controls in IBM Cloud Framework for Financial Services

 Family Control 

 Contingency Planning (CP) [CP-2 Contingency Plan](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cp-2) <br>[CP-7 Alternate Processing Site](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cp-7) 
 System and Communications Protection (SC) [SC-6 Resource Availability](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-sc-6) 







 Next steps 



* [Development processes and software integrity](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-development-processes)
* [Common issues when creating a new load balancer](https://cloud.ibm.com/docs/loadbalancer-service?topic=loadbalancer-service-load-balancer-provisioning-troubleshooting)
* [Error message troubleshooting](https://cloud.ibm.com/docs/loadbalancer-service?topic=loadbalancer-service-error-message-troubleshooting)



* [Getting help and support](https://cloud.ibm.com/docs/loadbalancer-service?topic=loadbalancer-service-getting-help-and-support-for-ibm-cloud-load-balancer)



* [Go to product UI](https://cloud.ibm.com/catalog/infrastructure/load-balancer-group) [About this product](https://www.ibm.com/cloud/load-balancer)



Expand all | Collapse all

Collapse



1. [IBM Cloud Docs](https://cloud.ibm.com/docs)
2. [IBM Cloud Load Balancer](https://cloud.ibm.com/docs/loadbalancer-service)
3.



Search in collection

Search in collection





LangSwitcher dropdown

English

Close menu

DeutschEnglish

EspañolFrançaisItaliano日本語한국어Português/Brasil简体中文繁體中文





 Choosing a preferred cipher suite for your HTTPS application * Last updated 2018-11-12 

Cipher algorithms help the IBM Cloud® Load Balancer form secure connections with its HTTP clients. IBM offers a suite of approved ciphers for you to choose from so that you secure the communication between your load balancer and your clients.

To choose a preferred cipher suite for an existing load balancer:



1. Access the Cipher table from the Protocols tab.

There must be at least one existing HTTPS protocol.
2. Click Edit to enable editing, and select (or clear) the required ciphers.
3. When you're done, click Save to save your changes.
ibmcloud is catalog-image-offering CATALOG OFFERING [--output JSON] [-q, --quiet]



 Command example 



* ibmcloud is catalog-image-offering 2497ae83-40cb-46ba-ac7f-5303514a2669 54372a73-7a0a-4799-ac9c-8736620c67f1







 Command options 



* CATALOG: ID of the catalog.
* OFFERING: ID of the offering.
* --output: Specify output format, only JSON is supported. One of: JSON.
* -q, --quiet: Suppress verbose output.



--------------------









 Instances 



 ibmcloud is instance 

View details of a virtual server instance.

ibmcloud is instance INSTANCE [--output JSON] [-q, --quiet]



 Command options 



* INSTANCE: ID or name of the instance.
* --output: Specify output format, only JSON is supported. One of: JSON.
* -q, --quiet: Suppress verbose output.



--------------------







 ibmcloud is instance-initialization-values 

View initialization details of a virtual instance.

ibmcloud is instance-initialization-values INSTANCE [--private-key (KEY | @KEY_FILE) --private-key-passphrase PRIVATE_KEY_PASSPHRASE]] [--output JSON] [-q, --quiet]



 Command options 



* INSTANCE: ID or name of the instance.
* --private-key: key|@key-file. The private key in PEM format to decrypt password.
* --private-key-passphrase: The passphrase for the encrypted private key.
* --output: Specify output format, only JSON is supported. One of: JSON.
* -q, --quiet: Suppress verbose output.
For example:



* [Managing IAM access, API keys, service IDs, and access groups](https://cloud.ibm.com/docs/cli?topic=cli-ibmcloud_commands_iam)
* [Viewing usage for accounts, orgs, resource groups, and resources](https://cloud.ibm.com/docs/cli?topic=cli-ibmcloud_billing)



In addition to the IBM Cloud CLI, Cloud Shell is preconfigured with all IBM Cloud CLI plug-ins and many tools and runtimes to help you work in the cloud. For the full list, see [Installed plug-ins and tools](https://cloud.ibm.com/docs/cloud-shell?topic=cloud-shell-plugins-tools).
* [Provision a IBM Cloud VPC for VMware deployment](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-bm-vmware-vpcvpc-bm-vmware-vpc)
* [Provision IBM Cloud DNS Services for VMware deployment](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-bm-vmware-dnsvpc-bm-vmware-dns)
* [Provision bare metal servers for VMware deployment](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-bm-vmware-bmsvpc-bm-vmware-bms)
* [Provision vCenter Appliance](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-bm-vmware-vcentervpc-bm-vmware-vcenter)
* [Provision vSAN storage cluster](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-bm-vmware-vsanvpc-bm-vmware-vsan) or [Provision NFS storage and attach to cluster](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-bm-vmware-nfsvpc-bm-vmware-nfs)
* [Provision IBM Cloud VPC network interfaces for NSX-T](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-bm-vmware-nsx-t-hostsvpc-bm-vmware-nsx-t-vlannics)



[Login](https://cloud.ibm.com/docs/cli?topic=cli-getting-started) with IBM Cloud CLI with username and password, or use the API key.
[IBM Cloud® Load Balancer](https://cloud.ibm.com/docs/loadbalancer-service?topic=loadbalancer-service-getting-started) Use this service to improve availability of business-critical applications by distributing traffic among multiple application server instances, and by forwarding traffic to healthy instances only. [More info](https://cloud.ibm.com/docs/loadbalancer-service?topic=loadbalancer-service-data-logging) 







 Security services 

The following table lists Cloud services that send logs to IBM Log Analysis:



Table 9. List of security Cloud services

 Service Description More info 

 [IBM Cloud® Secrets Manager](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-getting-started) With IBM Cloud Secrets Manager, you can create, lease, and centrally manage secrets that are used in IBM Cloud services or your custom-built applications. [More info](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-service-logs) 



You can monitor logs through the Log Analysis instance that is configured to receive platform services logs in the location where the service is running.

To see the list of IBM Log Analysis locations where these services send logs, see [Security services](https://cloud.ibm.com/docs/log-analysis?topic=log-analysis-cloud_services_locationscs_locations_security).
Block Storage for Classic locations 

IBM Cloud® Block Storage for Classic with enhanced capabilities is available in the following regions and data centers.

United States

Latin America

Canada



Table 1. US infrastructure availability
This table has row and column headers. The row headers identify the capability. The column headers identify where that capability is located. To understand where a capability is located in the table, navigate to the row, and look for the location you are interested in.

 Capabilities DAL05 DAL09 DAL10 DAL12 DAL13 SJC01 SJC03 SJC04 WDC01 WDC04 WDC06 WDC07 

 10 IOPS per GB option ![Checkmark icon.](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Checkmark icon.](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Checkmark icon.](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Checkmark icon.](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Checkmark icon.](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Checkmark icon.](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Checkmark icon.](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Checkmark icon.](https://cloud.ibm.com/docs-content/v1/content/icons/checkmark-icon.svg) ![Checkmark icon.]
List the zones associated with the region.

ibmcloud is zones us-south

For this example, you see a response similar to the following output:

Name Region Status
us-south-1 us-south available
us-south-3 us-south available
4. List the available profiles for creating your instance template.

ibmcloud is instance-profiles

For this example, you see a response similar to the following output:

Name Architecture Family vCPUs Memory(G) Network Performance (Gbps) GPUs
bx2-2x8 amd64 balanced 2 8 4 -
bx2-4x16 amd64 balanced 4 16 8 -
bx2-8x32 amd64 balanced 8 32 16 -
bx2-16x64 amd64 balanced 16 64 32 -
bx2-32x128 amd64 balanced 32 128 64 -
bx2-48x192 amd64 balanced 48 192 80 -
cx2-2x4 amd64 compute 2 4 4 -
cx2-4x8 amd64 compute 4 8 8 -
cx2-8x16 amd64 compute 8 16 16 -
cx2-16x32 amd64 compute 16 32 32 -
cx2-32x64 amd64 compute 32 64 64 -
mx2-2x16 amd64 memory 2 16 4 -
mx2-4x32 amd64 memory 4 32 8 -
mx2-8x64 amd64 memory 8 64 16 -
5. List the subnets that are associated with the IBM Cloud VPC.

ibmcloud is subnets

For this example, you see a response similar to the following output:

ID Name Status
0076-2249dabc-8c71-4a54-bxy7-953701ca3999 subnet1 available
0767-173bn4aa-060b-47e7-am45-b3395a593897 subnet2 available

For the best performance of an auto scale instance group, ensure that you use a subnet size of 32 or greater.
IBM Cloud service endpoints 99.999% [Secure access to services using service endpoints](https://cloud.ibm.com/docs/account?topic=account-service-endpoints-overview) 







 Storage services 

The following table describes the service level objectives (SLOs) for the vital IBM Cloud storage services in a high availability configuration.



Table 4. Service level objectives (SLOs) for the IBM Cloud storage services

 Storage service Availability target Performance target Performance detail Data durability target High availability guidance 

 IBM Cloud Object Storage 99.999% 99.999999999% [Comparison of persistent storage options for single zone clusters](https://cloud.ibm.com/docs/containers?topic=containers-storage_planningpersistent_storage_overview) 
 Block Storage for VPC 99.999% Disk Performance > 90% in 99.9% of the time [Block storage capacity and performance](https://cloud.ibm.com/docs/vpc?topic=vpc-capacity-performanceiops-profiles) 99.99999999999% [About Block Storage for VPC](https://cloud.ibm.com/docs/vpc?topic=vpc-block-storage-about) 







 Database services 

The following table describes the service level objectives (SLOs) for the vital IBM Cloud database services in a high availability configuration.



Table 5. Service level objectives (SLOs) for the IBM Cloud databases services

 Databases service Availability target Performance detail Storage back end used for data Storage back end used for backups High availability guidance 

 IBM Cloud Databases for PostgreSQL 99.999% [Performance](https://cloud.ibm.com/docs/databases-for-postgresql?topic=databases-for-postgresql-performance) Block Storage Object Storage [High-Availability](https://cloud.ibm.com/docs/databases-for-postgresql?topic=databases-for-postgresql-high-availability) 







 Security services 

The following table describes the service level objectives (SLOs) for the vital IBM Cloud security services in a high availability configuration.



Table 6.
Extending IBM Cloud CLI with plug-ins 

The IBM Cloud® Command Line Interface supports a plug-in framework to extend its capability. Install a plug-in from a repository, a URL, or install a plug-in binary locally.

For more commands to manage plug-ins, run ibmcloud plugin to see the help messages. For more information, see [Adding and removing IBM Cloud CLI plug-ins](https://cloud.ibm.com/docs/cli?topic=cli-ibmcloud_commands_settings).



 Before you begin 

Install the stand-alone [IBM Cloud CLI](https://cloud.ibm.com/docs/cli?topic=cli-install-ibmcloud-cliinstall-ibmcloud-cli) so that you can install CLI plug-ins for IBM Cloud.





 Searching for a plug-in 

Use the ibmcloud plugin repo-plugins command to discover all the available plug-ins in the repository.

ibmcloud plugin repo-plugins

Status Name Versions Description
Update Available container-service/kubernetes-service 0.3.49, 0.3.47, 0.3.34... IBM Cloud Kubernetes Service for management of Kubernetes clusters
Update Available cloud-functions 1.0.32, 1.0.30, 1.0.29... Manage Cloud Functions
...





 Installing a plug-in from the IBM Cloud CLI repository 



 Installing a specific plug-in 

Use the ibmcloud plugin install PLUGIN_NAME command to install a specific plug-in. For example, use the following command to install the IBM Cloud Code Engine CLI plug-in:

ibmcloud plugin install code-engine

Looking up 'code-engine' from repository 'IBM Cloud'...
Plug-in 'code-engine 1.23.2' found in repository 'IBM Cloud'
Attempting to download the binary file...
IBM Cloud Databases for PostgreSQL 99.999% [Performance](https://cloud.ibm.com/docs/databases-for-postgresql?topic=databases-for-postgresql-performance) Block Storage Object Storage [High-Availability](https://cloud.ibm.com/docs/databases-for-postgresql?topic=databases-for-postgresql-high-availability) 







 Security services 

The following table describes the service level objectives (SLOs) for the vital IBM Cloud security services in a high availability configuration.



Table 6. Service level objectives (SLOs) for the IBM Cloud security services

 Security service Availability target High availability guidance 

 IBM Key Protect for IBM Cloud 99.999% [High availability and disaster recovery](https://cloud.ibm.com/docs/key-protect?topic=key-protect-ha-dr) 
 Hyper Protect Crypto Services 99.999% [High availability and disaster recovery](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-ha-dr) 









 Service level objectives for high impact IBM Cloud services 

High impact services are not vital, but have great influence over the rest of the environment. These services are generally called upon in most deployments and might be of interest as they impact performance or usability of the environment.



 Platform services 

The following table describes the service level objectives (SLOs) for the high impact IBM Cloud platform services in a high availability configuration.



Table 7. Service level objectives (SLOs) for the IBM Cloud platform services

 Platform service Availability target High availability guidance 

 IBM Cloud Security and Compliance Center 99.999% [Understanding high availability and disaster recovery for Security and Compliance Center](https://cloud.ibm.com/docs/security-compliance?topic=security-compliance-ha-dr) 
 IBM Cloud Shell 99.999% [Understanding high availability and disaster recovery for Cloud Shell](https://cloud.ibm.com/docs/cloud-shell?topic=cloud-shell-ha-dr) 







 Compute services
For more information, see [Provisioning IBM Cloud® resources](https://cloud.ibm.com/docs/ibm-cloud-provider-for-terraform?topic=ibm-cloud-provider-for-terraform-manage_resourcesprovision_resources).

To view sample Terraform templates with the complete Terraform configuration files to test, refer to [Sample templates](https://cloud.ibm.com/docs/ibm-cloud-provider-for-terraform?topic=ibm-cloud-provider-for-terraform-provider-templatesample-templates).

For an overview of the Terraform resources and data sources that you can use, see the [Index of Terraform on IBM Cloud® resources and data sources](https://cloud.ibm.com/docs/ibm-cloud-provider-for-terraform?topic=ibm-cloud-provider-for-terraform-resources-datasource-list).
As you might find in the following table, few of the technologies reported are not supported on the public cloud space, but they are included here since IBM CRO works in the hybrid space and provides a full management of a Hybrid DR solution.



Table 1. Platform and technologies that work with IBM CRO

 Platforms Applications Replication* 

 Linux flavors WebSphere, WebLogic, IIS NetApp SnapMirror 
 Windows SAP EMC SRDF, RecoverPoint 
 AIX, HP UX IBM MQ Server HP Continuous Access 
 Solaris Oracle IBM Global Mirror, SVC 
 Oracle Exadata MS SQL Server Hitachi TrueCopy/UR 
 FlexPod IBM Db2 Oracle Dataguard 
 VMware PostgreSQL SQL Mirroring and Log Shipping, 
 Amazon Web Services MySQL Zerto Virtual Replicator 
 Mainframes MS Exchange 
 AS 400 





 Why should you use it? 

Tightening IBM CRO technology into the DR design and recovery procedures provides a single point of control and management among all the different class of services, technologies, and hybrid-implementations.

Benefits of IBM CRO include, but are not limited to the following:

Automation
: Maximum automation of the recovery runbooks, replacing manual actions with predeveloped, and pretested software commands

DR readiness
: Automated recovery workflows are designed to be active and always on standby, enabling fast reaction to outages and the simplicity of "push button" recovery activation.

Recovery speed
: The recovery process is run at software speed following predesigned, pretested, frequently exercised recovery workflows that are designed to maximize automation and minimize human reliance.

Confidence
: IBM CRO helps in keeping the recovery runbooks in-sync with the changes in the production's environment and detects errors and misalignment early, so they can be caught and remedied in low-stress test activities rather than real high-stress outages.

Reporting
: Business line owners and application owners can have detailed understanding of the recovery design points and DR readiness of their specific areas of interest. These details are captured and stored in IBM CRO's own database for ease of report generation, whether ad hoc or on a schedule.

Visibility
Load balancers for VPC overview 

IBM Cloud provides two families of load balancers for VPC, Application Load Balancer for VPC (ALB) and Network Load Balancer for VPC (NLB). There are several differences between the two that you should be aware of when choosing a load balancer.

IBM Cloud provides public- and private-facing application load balancers. An application load balancer provides layer 7 and layer 4 load balancing on IBM Cloud and supports SSL offloading. All incoming and outgoing packets flow through the load balancer.

Application load balancers are primarily intended for layer 7, web-based workloads and support virtual server instances, bare metal server instances, and Power Systems™ Virtual Server instances connected over IBM Cloud Direct Link as back-end pool members. In contrast, a network load balancer provides only layer 4 load balancing on IBM Cloud, and does not support SSL offloading. The client sends public network traffic to the network load balancer, which forwards it to target virtual servers. Then, the target virtual servers respond directly to the client by using Direct Server Return (DSR). Network load balancers are primarily intended for workloads that require low latency and high data throughput.

This gives network load balancers an advantage over application load balancers by enhancing performance in the following ways:



* The return traffic from the target servers bypasses the network load balancer and responds directly to the client.
* The network load balancer is only required to process incoming traffic, which allows it to be a fast distributor of traffic/load.
* The network load balancer has a single highly available VIP that can be used directly, instead of through the assigned fully qualified domain name (FQDN). This helps clients that must use an IP to access the application/service served by the load balancer. It also helps with faster recovery in the event of failures compared to a DNS-based availability that the application load balancer uses.



The following table provides a comparison of the types of load balancers.



Table 1. Comparison of network and application load balancers

 Network load balancer Application load balancer 

 HA mode Active-standby (with single VIP) Active-active (with multiple VIPs assigned to a DNS name)
IBM Cloud Block Storage for Classic driver and plug-in v2.1.3 v2.1.6 Updated to use Go version 1.16.13. 
 IBM Calico extension 900 923 Updated universal base image (UBI) to the 8.5-218 version to resolve CVEs. Updated to use Go version 1.16.13. 
 Cluster health image v1.2.20 v1.2.21 Updated to use Go version 1.17.5, updated Go dependencies and golangci-lint. 
 IBM Cloud Controller Manager v1.21.7-3 v1.21.9-1 Updated to support the Kubernetes 1.21.9 release and to use Go version 1.16.12. 
 Key Management Service provider v2.3.12 v2.4.0 Decrypted data encryption key is persisted in memory until the root key is changed, disabled, or rotated. Update multiple go dependencies. 
 Load balancer and load balancer monitor for IBM Cloud Provider 1659 1747 Updated the Alpine base image to the 3.15 version to resolve CVEs. Updated to use Go version 1.17.6. 
 Red Hat OpenShift configuration N/A N/A Updated the [feature gate configuration](https://cloud.ibm.com/docs/openshift?topic=openshift-service-settingsfeature-gates). 
 Red Hat OpenShift Control Plane Operator v4.8.0-20211201 v4.8.0-20220107 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0+20220107). 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.8.0-20211201 v4.8.0-20220107 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0+20220107).
IBM Cloud Security and Compliance Center Workload Protection provides the following CLIs:

[Compliance](https://cloud.ibm.com/docs/workload-protection-cli-plugin?topic=workload-protection-cli-plugin-workload-protection-compliance-cli)
: The compliance CLI lets you determine the available frameworks, platforms, and scope options as well as create and manage benchmark and compliance tasks.

[Policy](https://cloud.ibm.com/docs/workload-protection-cli-plugin?topic=workload-protection-cli-plugin-workload-protection-policy-cli)
: The policy CLI lets you create and manage compliance policies.

[Policies](https://cloud.ibm.com/docs/workload-protection-cli-plugin?topic=workload-protection-cli-plugin-workload-protection-policy-cli)
: The policies CLI lets you list configured compliance policies.

[Version](https://cloud.ibm.com/docs/workload-protection-cli-plugin?topic=workload-protection-cli-plugin-workload-protection-version-cli)
: The policy CLI lets you determine the version of IBM Cloud Security and Compliance Center Workload Protection CLI that is running on your account.