Service Catalog

service catalog service catalog is a central source of information about the services ionos cloud offers to its customers scope of validity this document offers details on the worldwide provision and operation of all services provided by ionos cloud it is valid for ionos cloud se and its national affiliates the ionos cloud platform ionos cloud provides a comprehensive, enterprise grade cloud computing platform offering both infrastructure as a service (iaas) and platform as a service (paas) solutions the portfolio encompasses scalable virtual and dedicated compute resources, high performance block and object storage, and advanced software defined networking, alongside fully managed services for kubernetes, databases, and artificial intelligence workloads resources are provisioned on an on demand basis, with billing calculated according to the specific consumption of compute, storage, and network capacity as defined in the current price list users maintain full control over the provisioning and decommissioning of resources ionos cloud provides interfaces for this purpose, allowing customers to control the resources in a flexible manner the following interfaces are currently available https //docs ionos com/cloud/support/general information/service catalog#data center designer \<font color="#007dff">\</font> ionos cloud model data center designer ionos cloud provides the customer with access to a personalized web application called the “data center designer” (dcd) the dcd can be accessed via modern internet browsers specifically, the dcd allows the customer to both control and manage the services or sub services provided by ionos cloud, including creating, editing, and deleting virtual data centers creating, (re )starting, stopping, and deleting virtual servers, including optional storages configuring/modifying existing virtual servers, including optional storages creating, editing, and deleting snapshots uploading, editing, using, and deleting private images reserving and managing static public ip addresses creating and managing private and public lans, including firewall setups creating and managing ssh keys management of integrated cloud services (for example, ionos cloud object storage, managed kubernetes, backup service) virtual data center on the ionos cloud platform, the customer can create so called “virtual data centers” (vdc) a vdc is a repository for all infrastructure resources ordered by the customer access to the resources in a vdc – similar to operating a physical data center – is only possible via a corresponding network or internet connection within a vdc, the ionos cloud software allows for the distribution of various resources to different availability zones ionos cloud provides the customer with the flexibility to change the ownership of the vdc any ionos cloud customer who is a billing contract owner has the capability of transferring the ownership of a vdc created under the scope of his account with all related rights and responsibilities to any other customer having a billing contract with ionos cloud to change the ownership of his vdc the customer is requested to contact the 24/7 enterprise level support multi user management account types the authentication on the data center designer requires that an account is assigned at least one username and one password there are three distinct types of accounts contract owner – this account is created automatically for the user who initially registered with ionos cloud only one "contract owner" account can exist per contract made with ionos cloud a “contract owner” is authorized to fully access all resources, create and delete “user” accounts, and assign an “administrator” role to them administrator this role has the same privileges as the "contract owner", except this account type is restricted from changing the contract payment method “administrators” can assign “administrator” roles to “user” accounts it is possible to revoke the "administrator" role after it has been assigned user this is the most basic account type “contract owner” and "administrator" account types can create or delete an unlimited number of accounts of the "user" type this account type can be upgraded to the "administrator" role and assigned specific privileges resource authorization multi user management controls access to the following resource types virtual data centers snapshots images ip blocks backup units kubernetes clusters the assigning of rights is based on groups a group contains one or more “user” accounts a “user” account can be a member of several groups “contract owner” or “administrator” accounts are exempt from group management, as they have access to all contracted resources multi user management distinguishes between the following authorizations for resources read – the resource and the objects they contain are visible the attributes of objects can be displayed the resource and the object it contains cannot be changed, nor can additional objects be added the read authorization is implicit as soon as a group is assigned to a resource edit – the resource and the objects they contain are visible the attributes of objects can be displayed and changed the resource and the objects they contain can be deleted sharing – authorizations for access to the resource can be changed group rights the following group rights can be configured per group create data center create new virtual data centers create snapshots create snapshots of storages for which the group members hold at least “read” authorization reserve ip blocks reserve additional ipv4 blocks or give back ipv4 blocks, which are available to the group members via the “edit” authorization create internet access allows provisioning of public lans inside a virtual data center use object storage access ionos cloud object storage create backup units create a new backup unit account for backup agent registration and activation create kubernetes clusters create new kubernetes clusters access activity log view activity logs for the entire contract two factor authentication for every account that is configured for access to the ionos cloud dcd (“contract owner”, "administrator" or “user”), the use of 2 factor authentication can optionally be configured with a one time password pursuant to rfc 6238 totp 2 factor authentication provides increased security during the login process in addition to their user name and password, when they log in, they are required to provide a code, which is generated using a special application (an “authenticator”) each account type can activate or deactivate this option in the dcd > account management > security for the respective account “contract owner” type accounts can set two factor authentication as a mandatory requirement for "administrator" and “user” type accounts remote console integrated kvm console a fully interactive, browser based html5 console providing direct out of band access to a server's monitor, keyboard, and mouse this ensures secure access to the instance even if external network connectivity (ssh/rdp) is disrupted, without requiring additional plugins or client side software ionos cloud apis ionos cloud provides a comprehensive suite of apis that enable full programmatic control over the infrastructure these apis allow customers to automate the provisioning, configuration, and management of all resources—including compute, storage, networking, and managed services—and integrate them directly into existing ci/cd pipelines and third party tools official documentation & specifications for the complete, up to date list of available apis, openapi specifications, and technical endpoints, please refer to \<font color="#007dff">\</font> ai ai model hub the ai model hub is a fully managed, serverless inference platform that provides secure api access to a curated selection of open source foundation models it enables the integration of generative ai capabilities—including text generation, code completion, and image creation—into applications without the need for customers to provision, manage, or scale the underlying physical gpu infrastructure key service capabilities foundation model access on demand access to state of the art large language models (llms) and text to image models retrieval augmented generation (rag) integrated support for vector databases and text embeddings, allowing users to index proprietary document collections and ground model responses in their own private data api compatibility provides a fully openai compatible api endpoint, ensuring seamless interoperability with existing ai sdks, libraries, and toolchains usage based scaling the platform operates on a serverless architecture with transparent rate limiting (base and burst limits) and billing based on consumed tokens or generated images hosting region germany (berlin) all data processing and inference occur exclusively within this region service availability global the api endpoints are available from any location via the public internet backup & storage backup service the backup service is a fully integrated backup solution powered by acronis technology it enables customers to perform efficient backups of virtual machines, physical servers, and applications running within the ionos cloud or on premises backup data is stored in iso 27001 certified data centers, ensuring strict data sovereignty and security customers can choose to store data in the fully managed backup service repositories or target their own ionos cloud object storage buckets the infrastructure leverages high bandwidth internal connectivity (up to 10 gbit/s) to ensure short backup windows and seamless data throughput for both incremental and full system restores features of the fully integrated backup function encrypted data storage in iso certified data centers in germany comprehensive image backup (full backup) or incremental backup standard workload support incremental and differential backups basic scheduling rapid disaster recovery (one click recovery) and complete data restore data migration continuous data protection backup support for microsoft sql advanced database & cluster support application aware and cluster aware backups for microsoft sql server (aag), microsoft exchange (dag), oracle db, sap hana, mariadb, and mysql data protection map and compliance reporting off host data processing advanced virtualization tools remote operations with bootable media the backup service allows the customer to perform a quick and efficient backup of data from applications and any images the customer is using the customer can also backup data from applications that run on premises or in private clouds in commonly used virtualized environments such as vmware and hyper v the fully integrated backup system supports the following platforms windows server and desktop operating systems linux mac hyper v and other hypervisor solutions workstations, physical and virtual servers the following advanced protection packs can be enabled for each workload (a virtual machine, a server, or a workstation) note the advanced backup feature pack has been discontinued all capabilities previously included in that pack — such as continuous data protection, sql and cluster backup support, and off host data processing — are now included in the base backup service at no additional cost direct backup to public cloud you can store backup data directly in public cloud storage instead of the default managed backup service repositories backup directly to public cloud storage for example, use our ionos cloud object storage advanced security protects your workloads continuously from all malware threats antivirus and antimalware protection with local signature based detection (with real time protection) exploit prevention url filtering endpoint firewall management forensic backup, scan backups for malware, safe recovery, corporate allowlist smart protection plans (integration with cpoc alerts) centralized backup scanning for malware remote wipe microsoft defender antivirus microsoft security essentials advanced management allows you to patch vulnerabilities on the protected workloads patch management disk health software inventory fail safe patching cyber scripting remote assistance file transfer and sharing selecting a session to connect observing workloads in multi view connection modes control, observe, and curtain connection via the quick assist application remote connection protocols near and screen sharing session recording for near connections screenshot transmission session history report – 24 monitors threshold based monitoring anomaly based monitoring block storage block storage allows the customer to use a dual redundant storage system each block storage created by the customer is stored on two storage servers, providing active active redundancy for additional data protection, every storage server is based either on a hardware raid system or on a software raid system direct attached storage (das) block storage based on non volatile memory express (nvme) are single redundant storage systems as this storage is installed directly into the physical server hosting the virtual machine, the storage volume is not stored across two servers however, every das volume is covered by a software raid system access to the hdd and ssd volumes requested by the customer is achieved via the internal infiniband (rdma) network das volumes are connected to the mainboard of the server and benefit from fast peripheral component interconnect express (pci express) bus performance for solid state drive volumes, ionos cloud offers two performance classes that can be selected at the time of ordering the volume ssd premium is optimized for high performance while ssd standard is recommended for fast data access with general purpose scenarios hdd and das volumes deliver a static performance profile independent of the volume size in comparison, ssd volumes deliver higher performance depending on the volume size and get capped at a specific size drive type hard disk drive (hdd) use shared minimum and maximum size 1 gib – 4 tib per volume (up to 24 hdd per vm supported) read / write speed, sequential 200 mb/s at 1 mib block size read / write speed, random 1,100 iops at 4 kib block size larger volumes available on request drive type solid state drive (ssd) premium use shared minimum and maximum size 1 gib – 4 tib per volume (up to 4 ssd per vm supported) read / write speed, sequential 1 mb/s per gib at 1 mib block size max read / write speed, sequential 600 mb/s per vm at 1 mib block size and min 4 cores, 4 gb ram read speed, random 75 iops per gib at 4 kib block size max read speed, random 45,000 iops per vm at 4 kib block size and min 4 cores, 4 gb ram write speed, random 50 iops per gib at 4 kib block size max write speed, random 30,000 iops per vm at 4 kib block size and min 4 cores, 4 gb ram larger volumes available on request drive type solid state drive (ssd) standard use shared minimum and maximum size 1 gib – 4 tib per volume (up to 24 ssd per vm supported) read / write speed, sequential 0 5 mb/s per gib at 1 mib block size max read / write speed, sequential 300 mb/s per vm at 1 mib block size and min 2 cores, 2 gb ram read speed, random 40 iops per gib at 4 kib block size max read speed, random 24,000 iops per vm at 4 kib block size and min 2 cores, 2 gb ram write speed, random 30 iops per gib at 4 kib block size max write speed, random 18,000 iops per vm at 4 kib block size and min 2 cores, 2 gb ram larger volumes available on request drive type direct attached storage (das) nvme use shared minimum and maximum size predefined per template 30 gib 640 gib (1 das per cubes vm) read / write speed, sequential 250 mb/s at 1 mib block size read / write speed, random 5000 iops at 4 kib block size bandwidth burst 500 mb/s at 1 mib block sizefor 60 seconds iops burst 10000 iops at 4 kib block sizefor 60 seconds snapshot ionos cloud allows the customer to create so called snapshots of individual block storages (hdd, ssd, das) a copy of each block storage can be accessed (and deleted) via dcd and cloud api, and new block storage of any type can be created based on a snapshot the provisioning speed is 50 mb/s available images the following list provides an overview of the standardized images provided by ionos cloud open source linux alma linux debian linux rocky linux ubuntu linux enterprise linux suse linux enterprise server (sles) note a bring your own subscription (byos) model is applicable for sles, and it is available in the following regions in germany berlin de/txl frankfurt de/fra and de/fra2 red hat enterprise linux microsoft windows server microsoft windows server 2016 microsoft windows server 2019 microsoft windows server 2022 microsoft windows server 2025 microsoft sql server microsoft sql server 2019 (web, standard, enterprise) microsoft sql server 2022 (web, standard, enterprise) microsoft sql server 2025 (standard, enterprise) note ms sql enterprise is only available on request for more information, see \<font color="#007dff">\</font> new versions of the standardized images may be added and old versions will be removed when the vendor no longer supports them note we reserve the right to add non lts and testing/beta versions please follow the vendor's recommendations and refrain from using them for production use cases image upload ionos cloud allows the customer to upload their own images to the infrastructure via upload servers this procedure is to be completed individually for each data center location ionos cloud optionally offers transmission with secure transport (tls) the uploading of hdd and cd rom/dvd rom images is supported specifically, the uploading of images in the following formats is supported cd rom / dvd rom iso — 9660 image file hdd images vmdk vmware hdd images vhd, vhdx hyperv hdd images cow, qcow, qcow2 qemu hdd images raw binary hdd image vpc virtualpc hdd image vdi virtualbox hdd image a dedicated upload server is available for each data center location images can be transmitted to the upload server encrypted via ftps (ftp tls) or unencrypted via ftp the following upload servers are available berlin ftp txl ionos com frankfurt ftp fra ionos com (de/fra) and ftp fra 2 ionos com (de/fra/2) karlsruhe ftp fkb ionos com london ftp lhr ionos com worcester ftp bhx ionos com paris ftp par ionos com logroño ftp vit ionos com las vegas ftp las ionos com newark ftp ewr ionos com lenexa ftp mci ionos com once the image has been transmitted to the upload server, the image will be converted into the internal image format of ionos cloud the user will be informed by email when the conversion process starts once the conversion is complete, the image will be available for use in the dcd or cloud api under the name by which it was transmitted to the upload server data upload service ionos cloud offers customers the ability to transfer large amounts of data via a physically mailed data storage medium this service supports a variety of data carrier interfaces like usb or sata to ensure data security, the data on the delivered data storage medium must be encrypted and have a total size of at least 1 tb all uploads are performed as a one to one copy to a volume and provided in the data center chosen by the customer the customer can attach this volume to a virtual server of their choice in the chosen virtual data center after the upload is complete, the data storage medium will be returned to the customer the data upload service can be requested by the 24/7 enterprise level support storage availability zones customers can assign availability zones to hdd and ssd storage volumes to secure data, improve reliability, and create high availability scenarios note that the storage availability zone for ssd in data center location karlsruhe is not provided das storage volumes do not support availability zones as they are installed on the physical compute servers directly virtual storage volumes with different storage availability zones assigned operate on different physical resources availability zones can be assigned using the dcd or cloud api cloud init ionos cloud offers cloud init support for all linux images for windows images, no cloud init functionality is provided the feature is activated in all locations all public ionos cloud linux images support cloud init for private images, it is the customer's responsibility to make sure that their own images support cloud init currently, ionos cloud supports injecting user data network file storage network file storage is a managed service that provides shared file storage to multiple virtual machines of the virtual datacenter using the nfs protocol the product is based on the zfs open source file system it can detect and correct errors while in use without the need for a dedicated file system checker, making it suitable for mission critical applications that require high availability network file storage uses 2 virtual machines in active passive mode to provide high availability access to the ssd volumes is achieved via the internal infiniband (rdma) network storage is based on the ssd standard performance class recommended for fast data access with general purpose scenarios data is stored on two storage servers, providing active active redundancy for additional data protection, every storage server is based either on a hardware raid system or on a software raid system network file storage provides access using the nfs v4 2 protocol it allows standard linux clients to read and write directly to storage, scaling performance linearly for both iops and throughput, maximizing the limits of storage and network infrastructures reduced protocol overhead with compound operations and caching efficient file operations with minimal server interaction enhanced performance with multiple parallel network connections detailed file level access and performance telemetry drive type ssd standard usage mode shared minimum and maximum cluster size 2 tib – 42 tib maximum bandwidth 300 mb/s per 4 tib with a 1 mib block size maximum read iops 24 000 iops per 4 tib with a 4 kib block size maximum write iops 18 000 iops per 4 tib with a 4 kib block size ionos cloud object storage ionos cloud object storage is a secure, scalable storage solution that offers high data availability and performance the product adheres to the s3 api standards, enabling the storage of vast amounts of unstructured data and seamless integration into s3 compatible applications and infrastructures it supports the following features versioning logging (available for user owned buckets) server side encryption with ionos cloud managed keys (sse s3) server side encryption with customer provided keys (sse c) access management via bucket policies and access control lists (acls) lifecycle management static website hosting cross region replication (available for user owned buckets) object lock with governance and compliance modes bucket and object tagging public access block access from a private lan to object storage endpoints using a managed network load balancer ionos cloud object storage is included with every contract, with no need for additional registration or activation through a user friendly graphical interface and standard s3 compatible object storage clients, customers can efficiently manage their objects and configure access controls using bucket policies in accordance with the object storage standard currently, ionos cloud object storage is available in the following locations, with more locations to be added soon location ionos cloud object storage api endpoint static website bsi it grundschutz bucket type frankfurt (de/fra) s3 eu central 1 ionoscloud com s3 website de central profitbricks com compliant user owned berlin (de/txl) s3 eu central 2 ionoscloud com s3 website eu central 2 ionoscloud com compliant user owned logroño (es/vit) s3 eu south 2 ionoscloud com s3 website eu south 2 ionoscloud com compliant user owned frankfurt (de/fra/2) s3 eu central 4 ionoscloud com s3 website eu central 4 ionoscloud com compliant contract owned berlin (de/txl) s3 eu central 3 ionoscloud com s3 website eu central 3 ionoscloud com compliant contract owned lenexa (us/mci) s3 us central 1 ionoscloud com s3 website us central 1 ionoscloud com compliant contract owned note the hostname of the static website for location frankfurt points to a profitbricks object storage installation which was the legal predecessor of ionos cloud compute services compute engine dedicated core server these virtual machines run on dedicated cpu cores with dedicated core servers you gain full access to the provisioned cpu resources,free from resource sharing with other virtual machines on the same physical host this guarantees optimal performance, stability, reduced latency, and predictable performance you can freely configure the number of cores and ram required for your workloads, while choosing from the available cpu types available in your current vdc dedicated core servers can start from a storage volume, a cd rom, or a nic furthermore, it is also possible for a dedicated core server to be configured with the help of advanced settings for the use of “live vertical scaling” (lvs) lvs allows further resources to be added to your virtual machine while the operating system is in use the scaling of resources without having to restart your virtual machine can be applied as follows upscaling cpu, ram, nics, storage volumes, downscaling nics, storage volumes for ionos cloud provided public images, lvs is activated by default lvs capabilities on private images and snapshots can be changed before applying them to new instances the image manager provides edit functionality to these properties linux supports all standard lvs functions, windows server instances, however, only support upscaling of cpu, nics and storage volumes, and downscaling of nics at this time lvs for ram is possible starting from 1 gb ram and in full increments of gb possible configurations of a virtual server are presented in the table below amd processors components minimum maximum processor core (core) 1 core 62 cores random access memory (ram) 0 25 gb ram 230 gb ram pci slots (nics and storage volumes) 0 pci slots 24 pci slots cd rom 0 cd rom 2 cd roms increment/decrement of 1 gb when lvs is activated, ram expansion beyond the defined maximum size possible on request intel processors components minimum maximum processor core (core) 1 core 62 cores random access memory (ram) 0 25 gb ram 230 gb ram pci slots (nics and storage volumes) 0 pci slots 24 pci slots cd rom 0 cd rom 2 cd roms increment/decrement of 1 gb when lvs is activated, ram expansion beyond the defined maximum size possible on request core generation amd epyc gen 3 amd epyc gen 5 intel xeon gen 5 intel xeon gen 5 intel xeon gen 5 intel xeon gen 6 cpu model milan turin haswell / broadwell skylake ice lake sierra forest use exclusive exclusive exclusive exclusive exclusive exclusive clock frequency 2 0 ghz 2 6 ghz 2 0/2 1/2 4 ghz 2 0/2 1 ghz 2 0 ghz 2 4 ghz core processing hyper threading hyper threading hyper threading hyper threading hyper threading high throughput cores the different data center locations may be equipped with different cpu models if the cpu model is listed below, but not displayed on the contract, please contact the ionos cloud support team for further assistance cpu / location amd epyc gen 3 (milan) amd epyc gen 5 (turin) intel xeon gen 5 (haswell / broadwell) intel xeon gen 5 (skylake) intel xeon gen 5 (ice lake) intel xeon gen 6 (sierra forest) berlin (de/txl) ✅ ✅ ✅ ✅ frankfurt (de/fra) ✅ ✅ ✅ ✅ frankfurt (de/fra/2) ✅ ✅ karlsruhe (de/fkb) ✅ london (gb/lhr) ✅ ✅ worcester (gb/bhx) ✅ ✅ paris (fr/par) ✅ ✅ logroño (es/vit) ✅ ✅ las vegas (us/las) ✅ ✅ newark (us/ewr) ✅ ✅ lenexa (us/mci) ✅ ✅ legacy cpu models the amd opteron cpu is classified as a legacy model and is not available for new provisionings its availability is limited to supporting existing workloads within the following locations karlsruhe (de/fkb) las vegas (us/las) newark (us/ewr) amd core ionos cloud offers epyc processors in selected locations, optimized for high performance within cloud infrastructure the current processor design allows for a high number of cores within one host system therefore, virtual machines may have up to 62 amd cores intel core the intel xeon processors provided by ionos cloud include both gen 5 and gen 6 models, each utilizing advanced multi core technologies intel xeon 5 cores from the haswell, skylake, and ice lake families support hyper threading, allowing each physical core to handle two simultaneous threads this can improve performance by enabling more efficient parallel processing, provided the software supports multi threading modern operating systems, including windows and linux, can fully leverage this feature the latest gen 6 intel xeon processors, including sierra forest, use a multi core architecture, where each physical core is presented as a single core within your virtual machine this design ensures efficient and optimized resource allocation for demanding workloads in cloud environments host systems many host systems are kept ready at each location for operating virtual servers for the customers each host server is redundantly connected to the infiniband network the host systems are assembled by the manufacturers based on our specifications and then delivered to the site vcpu server vcpu servers provide a good balance of compute resources, which are ideal for a wide range of applications unlike dedicated core servers, which come with guaranteed dedicated resources, vcpu servers do not this means that cpu resources are optimized by the hypervisor the vcpu servers are well suited for typical workloads that prioritize cost efficiency and can accommodate variations in performance within the dcd or cloud api, you can freely configure the ratio of vcpus to ram for your virtual machines however, unlike the dedicated core servers product, you do not have the option to choose the cpu type for your vcpu server currently, vcpu servers are available in berlin (de/txl) frankfurt (de/fra) frankfurt (de/fra/2) london (gb/lhr) worcester (gb/bhx) paris (fr/par) logroño (es/vit) newark (us/ewr) lenexa (us/mci) vcpu servers can start from a storage volume, a cd rom, or a nic additionally, vcpu servers can use "live vertical scaling" (lvs) for advanced configuration lvs enables adding resources like vcpus, ram, nics, and storage to a running virtual server without requiring a restart this scaling process can be done to increase or decrease resources limitations components minimum maximum vcpu 1 vcpu 60 vcpus ram 0,25 gb ram 230 gb ram nics and storage 0 pci connectors 24 pci connectors cd rom 0 cd roms 2 cd roms larger ram sizes can be made available on request while provisioning the vcpu server product, users cannot select the cpu model through the dcd or cloud api customer cannot auto migrate from vcpu server type to dedicated core virtual servers a virtual machine recreation process is required vcpu can be single or multi threaded, depending on the underlying hardware cubes cubes are a separate type of virtual machine while virtual servers have the option to use cores exclusively as 'dedicated cores', cubes share them with other cubes instances and expose virtual cpus (vcpu) still, these virtual machines are fully isolated and separated so that no data is available to any other virtual machine running on the same physical core in addition, cubes are delivered with one nvme storage that is directly attached to the physical server unit this block storage device uses one of the pci slots available by default cubes are designed for cost optimization and workloads for which failover gets realized by the application and not the infrastructure cubes are currently rolled out to all european locations but may not be available to specific virtual data centers even if the feature is announced for availability in a particular location due to technical dependencies, cubes may not be available for all legacy virtual data centers in the location frankfurt the product is available for newly created virtual data centers currently, cubes are released in berlin (de/txl) frankfurt (de/fra) frankfurt (de/fra/2) london (gb/lhr) worcester (gb/bhx) paris (fr/par) logroño (es/vit) newark (us/ewr) lenexa (us/mci) a cubes instance consists of the following components virtual cpus memory (ram) network interface cards nic (optional) direct attached nvme storage volume (mandatory) block storage volumes (optional) cd roms (optional) in comparison to virtual servers, cubes get ordered by pre defined instance size templates and cannot be configured in a fully flexible model list of available cubes instances name vcpu ram das storage basic cube xs 1 2 gb 60 gb basic cube s 2 4 gb 120 gb basic cube m 4 8 gb 240 gb basic cube l 8 16 gb 480 gb basic cube xl 16 32 gb 960 gb memory cube s 2 8 gb 120 gb memory cube m 4 16 gb 240 gb memory cube l 8 32 gb 480 gb memory cube xl 16 64 gb 960 gb cubes can start from any storage volume, a cd rom, or a nic this type of instance does not support "live vertical scaling" (lvs) of cpu or ram even if it is enabled on an image it is impossible to migrate to higher or lower tiers of cubes lvs is limited to nics and block storage volumes please note that the number of directly attached nvme storage volumes is limited to 1 (one) and it cannot be expanded, deleted, removed from the cubes instance, or migrated to any other instance attaching further block storage volumes must be of type hdd or ssd the scaling of resources without having to restart a virtual server can be applied as follows upscaling nics, hdd/ ssd storage volumes downscaling nics, hdd/ ssd storage volumes additional services ionos cloud cubes can be used inside a virtual data center with any other service provided in this location host systems ionos cloud operates different types of host systems based on amd and intel cpu architecture all systems are configured to deliver the same performance a specific cpu type cannot be selected by the customer nor guaranteed by the ionos cloud cloud gpu vm cloud gpu vms deliver high end accelerated computing with dedicated nvidia gpus, optimized for demanding ai and high performance computing (hpc) workloads cloud gpu vms come with predefined templates you cannot create new templates or modify the existing templates use cloud api standard operations with template read access and volume management to deploy cloud gpu vms plan your storage requirements carefully and select the best template for your use case; otherwise, you must use additional volumes for your storage needs the product is available for virtual data centers in the following locations frankfurt (de/fra/2) the server sizing model allocates cloud gpu vms with corresponding dedicated cpu cores and ram based on available host capacity the architecture uses pcie passthrough for direct hardware access and optimal performance you may choose between the following templates name gpu model gpus dedicated vcpus ram storage h200 – s h200 pcie 1 15 267 gib 1 000 gib h200 – m h200 pcie 2 30 534 gib 1 536 gib h200 – l h200 pcie 4 60 1 068 gib 2 048 gib h200 – xl h200 pcie 8 127 2 136 gib 4 000 gib the templates can only be used with the cloud gpu vms cpu and ram allocate proportionally to the number of gpus resources use dedicated cores with limited flexibility the first connected volume serves as the start volume, containing the operating system and required system files provision start volumes with adequate capacity at the initial cloud gpu vm provisioning, because they use fixed sizing and cannot be detached or upscaled after deployment known limitations this section outlines important policies and infrastructure limitations for gpu cloud vms instance lifecycle policy maintenance restarts while we prioritize planned maintenance windows, critical security patches, and urgent stability issues may require emergency maintenance without advance notification design your applications to handle unexpected restarts and configure services to restart automatically on start maintenance downtime gpu cloud vms do not support seamless background transfers during maintenance consequently, some planned infrastructure updates will require a temporary shutdown or restart of your instance fixed resource scaling size your servers appropriately at creation time cpu core and ram upscaling or downscaling are not currently supported after provisioning management restrictions api only support you can manage gpu cloud vms only via the cloud api you cannot use the data center designer (dcd) or other interfaces for management templates you cannot create new templates or modify existing templates images the platform supports ionos cloud linux images only at start start volume restrictions the first connected start volume has the following restrictions it cannot be detached from the vm it cannot be upscaled after deployment size must be determined during the initial provisioning resource scaling restrictions size servers appropriately at creation time, because cpu core and ram upscaling or downscaling are not currently supported plan your workload requirements carefully during the initial provisioning volume management additional volumes support standard management operations, including scaling up, detaching, and attaching across the cloud api interface default quotas by default, you can deploy a maximum of 1 (one) h200 – s cloud gpu vm instance per contract to increase this limit, contact ionos cloud support https //docs ionos com/cloud/support/general information/contact information containers managed kubernetes the managed kubernetes is a managed service based on the open source system for automating the deployment, scaling, and management of containerized applications it groups containers that make up an application into logical units for efficient management and discovery it reduces the operational overhead of container technology while maintaining development flexibility managed kubernetes facilitates the fully automated setup of kubernetes clusters several clusters can be quickly and efficiently deployed, for example, to set up staging environments, and terminated when no longer needed kubernetes also significantly simplifies the automation of ci/cd pipelines in terms of testing and deployment managed kubernetes offers maximum transparency and control of the kubernetes cluster this includes fully automated setup of entire kubernetes clusters and kubernetes node pools (with optional horizontal auto scaling of nodes) highly available and geo redundant control plane full cluster admin level access to kubernetes api dedicated cpu and memory resource assignment double redundant and persistent hdd/ssd storage integration of cloud services regular security and version updates managed kubernetes is free of charge the customer pays only for the underlying ionos cloud infrastructure that is actually needed please note that ipv6 support has limitations for the ionos cloud managed kubernetes service private container registry private container registry is a universal repository manager that stores and manages custom container images and other oci compliant artifacts it can be used as part of ci/cd workflows for container workloads in ionos cloud managed kubernetes setups specifications for the private container registry are as follows highly available service is managed, including any components on which it is built located in the region of frankfurt am main (de) (further locations will follow) support of the docker registry http api v2 more than one repository per registry support of permanent and temporary access authentication tokens data encrypted when stored garbage collection to release storage space vulnerability scanning of artifacts to identify security vulnerabilities available locations frankfurt data analytics event streams for apache kafka fully managed apache kafka service delivering single‑tenant clusters for real‑time event streaming while ionos cloud handles deployment, scaling, patching, and monitoring key features provision kafka clusters natively inside an ionos public cloud vdc fixed size profiles (xs – xl) with automatic fail‑over tls‑encrypted endpoints; user & acl management via api or data center designer optional private‑lan peering for internal workloads databases the ionos cloud database as a service (dbaas) is a comprehensive web service designed to simplify the setup, operation, and scaling of databases within the ionos cloud this managed solution offers cost efficient, resizable capacity for industry standard databases, ensuring high availability, performance, and reliability hosted and integrated within the ionos cloud ecosystem, it alleviates common database administration tasks, providing an integration with other ionos cloud services ionos cloud dbaas currently supports the following engines in memory db mariadb mongodb postgresql every database engine in our dbaas has a unique set of supported features designed to improve performance and functionality additionally, as each database engine evolves, new versions introduce distinct features, ensuring that database capabilities continuously improve and adapt to the latest technological advancements network services virtual data center (vdc) networking virtual network ionos cloud allows virtual entities to be equipped with network cards (“network interface cards”; nics) only by using these virtual network interface cards is it possible to connect multiple virtual entities together or to the internet parameter size performance throughput, internal mtu 1,500 up to 6 gbps throughput, external mtu 1,500 up to 6 gbps the maximum external throughput may only be achieved with a corresponding upstream of the provider compatibility the use of virtual mac addresses or the changing of the mac address of a network adapter is not supported among others, this limitation also applies to the use of carp (common address redundancy protocol) gratuitous arp (rfc 826) is supported virtual router redundancy protocol (vrrp) is supported based on gratuitous arp for vrrp to work, ip failover groups must be configured ip address management ionos cloud provides the customer with both ipv4 and ipv6 public ip addresses that, depending on the intended use, can be booked either permanently or for the duration for which a virtual server exists currently, only ipv4 addresses can be booked by the customer these ip addresses provided by ionos cloud are only needed if connections are to be established over the internet internally, virtual machines can be freely networked for this, ionos cloud offers a dhcp server that allows or simplifies the assignment of ip addresses however, one can establish one’s own addressing scheme public ipv4 addresses every virtual network interface card that is connected to the internet is automatically assigned a public ipv4 address by dhcp this ipv4 address is dynamic, meaning it can change while the virtual server is operational or when restarted customers can reserve static public ipv4 addresses for a fee these reserved ipv4 addresses can be assigned to an internet connected virtual network interface card as primary or additional ip addresses private ipv4 addresses in networks that are not connected to the internet, each virtual network interface card is automatically assigned a private ipv4 address this is assigned by the dhcp service these ipv4 addresses are assigned statically to the mac addresses of the virtual network interface cards the use of the ip address assignment can be enabled or disabled for each network interface card any private ipv4 addresses pursuant to rfc 1918 can be used in private networks network address range cidr notation abbreviated cidr notation number of addresses number of networks per network class (historical) 10 0 0 0 to 10 255 255 255 10 0 0 0/8 10/8 224 = 16 777 216 class a 1 private network with 16,777,216 addresses; 10 0 0 0/8 172 16 0 0 to 172 31 255 255 172 16 0 0/12 172 16/12 220 = 1 048 576 class b 16 private networks with 65,536 addresses; 172 16 0 0/16 to 172 31 0 0/16 192 168 0 0 to 192 168 255 255 192 168 0 0/16 192 168/16 216 = 65 536 class c 256 private networks with 256 addresses; 192 168 0 0/24 to 192 168 255 0/24 public ipv6 addresses every virtual data center is assigned a public /56 ipv6 cidr block by default customers can choose to enable ipv6 in a lan per their needs and a maximum of 256 ipv6 enabled lans can be created per vdc on enabling ipv6 in a lan, the customer can either select a /64 ipv6 cidr block from the /56 ipv6 cidr block assigned to the vdc or have a /64 block automatically assigned to the lan public ipv6 addresses are assigned to both private and public lans every connected virtual network interface card is then assigned a /80 ipv6 cidr block and a single /128 ipv6 address either automatically, or the customer can also select both they must though both be assigned from the /64 ipv6 cidr block assigned to the corresponding lan the first public ipv6 address is assigned by dhcp and in total a maximum of 50 ipv6 addresses can be assigned per network interface ipv6 addresses are static, meaning they remain assigned when a virtual server restarts dhcp for every network interface of a virtual server, ionos cloud provides an ip configuration via dhcp in this context, the type of configuration distinguishes between whether the network interface is connected with the public internet or a private ethernet public internet the following parameters are provided for the configuration via dhcp public ipv4 address network mask (255 255 255 255) gateway address dns server address mtu (1,500) similarly, dhcpv6 is supported for ipv6 public addresses private networks the following parameters are provided for the configuration via dhcp private ip address (for example, 10 0 0 1 ) network mask (255 255 255 0) mtu (1,500) the dhcp server always uses the address a b c 1 in the class c network, which corresponds to the assigned ip address the configuration through dhcp can be optionally activated or deactivated via network interface (dcd, or cloud api) the configuration via dhcp is activated for newly created network interfaces ip failover the ionos cloud ip failover feature helps to minimize packet loss for high availability or failover setups if one of the virtual machines experiences an outage by setting up ip failover groups for public traffic, customers can define the network interfaces of virtual servers that are part of a high availability setup “user” type accounts can create or edit ip failover groups using only reserved ip addresses, for which they have been granted access the ip failover feature only provides provisioning of the same ip to multiple network interfaces from different virtual servers on the same lan it does not monitor the availability of the service to be accessed by the given ip the monitoring and garp announcements to gateways must be made by the customer individually on each virtual server that is a member of an ip failover setup ip failover groups cannot be created for ipv6 addresses and is an ipv4 only feature connectivity & hybrid cloud cloud connect cloud connect enables the customer to create a direct and dedicated layer 3 connection between their company network and their virtual data center (vdc) the customer can use cloud connect if both of the following conditions are fulfilled the connecting vdc is operated at the locations of frankfurt (de/fra), berlin (de/txl), or las vegas (us/las) the customer has a dedicated line connection to the corresponding data center a connection can take place in different ways, for example, dark fiber, mpls, or cross connect for this purpose, the customer can contract a telecommunications company to establish the connection the 24/7 enterprise level support is available to assist with any questions about cloud exchange and connection managed nat gateway in all locations, ionos cloud provides a managed network address translation (nat) gateway this service is exposing a source nat gateway which means it allows access from the virtual instance to the internet but blocks requests from the internet to the virtual infrastructure this enables internet access to virtual machines without exposing them to the internet by a public interface while being "hidden" from the internet and not being exposed to threats, the virtual machine still can initiate a connection to the customizable targets on the internet, e g , to download new software updates or patches a managed nat gateway requires the configuration of a reserved public ip address for the target configuration the managed nat gateway allows the configuration of multiple, individual nat rules which can be applied to virtual machines being members of the listener lan individually these rules allow dedicated configuration of target subnets and port ranges which are explicitly allowed to be accessed by virtual machine instances the managed nat gateway supports tcp, udp, and icmp protocols and up to six private networks per nat gateway the number of managed nat gateways per contract is limited to five (5) gateways this limit can be adjusted by contacting the ionos cloud support team the managed nat gateway supports the recording of flow logs the managed nat gateway operates in high availability mode and service recovery is executed within seconds the managed nat gateway will be regularly maintained by ionos cloud and updated with the latest software versions and new features ionos cloud reserves a weekly maintenance window that it can use for regular updates it is scheduled every monday between 02 00 04 00 am local time of the data center in which the managed nat gateway service is deployed during maintenance, a service interruption of up to 5 seconds may occur additional update deployments may be possible and carried out outside the maintenance window, for example, when urgent security patches are needed note ipv6 support has limitations for the managed nat gateway vpn gateway the fully managed vpn gateway service provides secure and scalable connectivity, enabling encrypted communication between your ionos cloud resources in a vdc and remote networks (on premises, multi cloud, private lans in other vdcs, etc ) a vpn gateway requires configuring a reserved public ip address for the gateway configuration vpn gateway supports ipsec and wireguard vpn protocols and allows the configuration of multiple ipsec tunnels or wireguard peers for remote connectivity note ipv6 support has limitations for the vpn gateway traffic management & performance classic load balancing ionos cloud offers the customer the function of a classic load balancer for public traffic within their infrastructure this load balancer distributes the incoming network traffic according to an ecmp algorithm on the servers configured behind the load balancer the classic load balancer is for basic balancing scenarios and does not provide granular configuration or health checks setting value throughput 50 mbps max open connections 40,000 connections max backend servers 100 managed network load balancer ionos cloud offers a managed network load balancer (nlb) that is balancing layer 4/ tcp based network traffic this service is available in all locations network load balancers can be provisioned as a private and a public load balancer a public load balancer requires the configuration of a reserved public ip address for the target configuration the network load balancer allows the configuration of multiple, individual load balancer rules which can be applied to virtual machines being members of the listener lan the network load balancers support multiple load balancing algorithms round robin least connection random source ip furthermore, it offers options to specify health parameters to include or exclude nodes from the balancing configuration and manually remove listener targets from the load balancer (for example, when the node is in maintenance) the number of managed network load balancers per contract is limited to five (5) nlbs this limit can be adjusted by contacting the ionos cloud support team the managed network load balancer supports the recording of flow logs the managed network load balancer operates in high availability mode and service recovery is executed within seconds the managed network load balancer will be regularly maintained by ionos cloud and updated with the latest software versions and new features ionos cloud reserves a weekly maintenance window that it can use for regular updates it is scheduled every monday between 02 00 04 00 am local time of the data center in which the managed network load balancer service is deployed during maintenance, a service interruption of up to 5 seconds may occur additional update deployments may be possible and carried out outside the maintenance window, for example, when urgent security patches are needed note ipv6 support has limitations for the managed network load balancer managed application load balancer next to the managed network load balancer, ionos cloud also offers a managed application load balancer (alb) that is balancing layer 7 http or https based network traffic this service is available in all locations while the managed network load balancer forwards the request according to the forwarding rule, the managed application load balancer will examine the content of the http or https request header to determine where to route the request based on user specified forwarding rules both types of managed load balancers can be used in a stack for sequential traffic balancing furthermore, the managed application load balancer can be provisioned as private and public load balancers (similar to the managed network load balancer) the managed application load balancer supports http and https protocols for forwarding rule configuration (incl port specification) the configurations are managed in target groups which can contain multiple targets an included ssl/ tls certificate manager enables tls offloading of the traffic in addition, it can identify the server name, thus supporting multiple secure websites using one public ip but individual certificates the following types of routing are supported path based routing hostname based routing routing support for query strings header based routing url redirection static/fixed response when forwarding requests, the source ip can be preserved and forwarded in respective headers to the target so that the application can use information about the client that actually made the request it offers options to specify health parameters to include or exclude nodes from the balancing configuration and manually remove listener targets from the load balancer (for example, when the node is in maintenance) the number of managed application load balancers per contract is limited to five (5) albs this limit can be adjusted by contacting the ionos cloud support team the managed application load balancer supports the recording of flow logs the managed application load balancer operates in high availability mode and service recovery is executed within seconds the managed application load balancer will be regularly maintained by ionos cloud and updated with the latest software versions and new features ionos cloud reserves a weekly maintenance window that it can use for regular updates it is scheduled every monday between 02 00 04 00 am local time of the data center in which the managed application load balancer service is deployed during maintenance, a service interruption of up to 5 seconds may occur additional update deployments may be possible and carried out outside the maintenance window, for example, when urgent security patches are needed note ipv6 support has limitations for the managed application load balancer cloud dns ionos cloud dns allows customers to publish domain name system (dns) zones for their domains and subdomains on public name servers customers can manage their dns zones and records via the cloud dns api and also create and manage reverse dns records for ipv4 and ipv6 addresses the ionos cloud name server infrastructure is distributed across 14 points of presence (pops) in europe and the usa to ensure fast and reliable dns resolution for customers in these locations caching dns for the resolution of public domain names, ionos cloud operates a redundant set consisting of two dns servers at every data center location these dns servers are operated as “caching” dns servers or dns resolvers, and are automatically assigned to the virtual customer entities via the dhcp ip address resolution customer specific internal domains cannot be resolved on caching dns servers reverse dns a standard reverse entry is assigned to all public ipv4 addresses, which are assigned to the virtual entities these entries follow the format ipaaa bbb ccc ddd pbiaas com, whereby aaa bbb ccc ddd corresponds to the ipv4 octets for statically assigned ipv4 and ipv6 addresses, the existing reverse entry can be adapted according to the customer requirements via cloud dns api content delivery network with the ionos cloud content delivery network (cdn), you can quickly deliver web content and applications to users with exceptional availability and performance cdn offers a range of security features, including layer 7 distributed denial of service (ddos) protection and a web application firewall (waf), making it an adaptable and secure solution for content delivery cdn can be configured both via the dcd and cdn api ionos cloud content delivery network (cdn) is a network of servers located across the ionos cloud global edge network to speed up the delivery of static and dynamic web content to users cdn uses anycast routing in ionos cloud's global backbone network infrastructure with multiple highly available edge locations where content is distributed for reduced latency and high reliability of content loading on websites currently, cdn hosts its edge locations in two european metro regions network security firewall ionos cloud allows the customer to use a software firewall within their infrastructure for this purpose, the virtual network interface cards of a virtual server can be assigned a packet filter the network traffic, which is aimed at the virtual server, is already filtered before the customer’s virtual machine setting value throughput up to 6 gbps network security groups ionos cloud enables customers to establish network security groups (nsgs) that act as centralized policy managers for firewalls these nsgs facilitate the filtering of network traffic both to and from virtual network resources within a specific virtual data center (vdc) each nsg comprises security firewall rules that manage ingress (incoming) and egress (outgoing) network traffic these rules apply to network interface cards (nics) and virtual machine (vm) resources that are configured as members of the nsg network security groups are subject to the below limits number of nsgs that can be created per vdc 200 number of rules that can be created per nsg 100 number of nsgs a vm can be a member of 10 number of nsgs a nic can be a member of 10 ddos protect ddos protect is a managed distributed denial of service defense mechanism, which ensures that every customer resource hosted on ionos cloud is secure and resilient against layer 3 and layer 4 ddos attacks this is facilitated by a filtering and scrubbing technology, which, if an attack is detected, filters the malicious ddos traffic and lets through only the genuine traffic to its original destination hence, enabling applications and services of our customers to remain available under a ddos attack known attack vectors regularly evolve and new attack methods are added ionos cloud monitors this evolution and dedicates resources to adapt and enhance ddos protect as much as possible to capture and mitigate the threat the service is available in all our data centers and is a highly reliable, geo distributed ddos mitigation solution offering a robust 1 1 tbit/s global filtering capacity, operating across 11 scrubbing blocks in 6 countries the service is available in two packages ddos protect basic this package is enabled by default for all customers and does not require any configuration it provides basic ddos protection for every resource on ionos cloud from common volumetric and protocol attacks and has the following features ddos traffic filtering all suspicious traffic is redirected to the filtering platform where the ddos traffic is filtered and the genuine traffic is allowed to the original destination always on attack detection the service is always on by default for all customers and does not require any added configuration or subscription automatic containment each time an attack is identified the system automatically triggers the containment of the ddos attack by activating the ddos traffic and letting through only genuine traffic protection against common layer 3 and 4 attacks this service protects every resource on ionos cloud from common volumetric and protocol attacks in the network and transport layer such as udp, syn floods, etc ddos protect advanced this package offers everything that is part of the ddos protect basic package plus advanced security measures and support 24/7 ddos expert support customers have 24/7 access to ionos cloud ddos expert support the team is available to assist customers with their concerns regarding ongoing ddos attacks or any related issues proactive support the ionos cloud ddos support team, equipped with alarms, will proactively respond to a ddos attack directed towards a customer's resources and also notify the customer in such an event on demand ip specific ddos filtering if a customer suspects or anticipates a ddos attack at any point in time, they can request to enable ddos filtering for a specific ip or server owned by them once enabled, all traffic directed to that ip will be redirected to the ionos cloud filtering platform where ddos traffic will be filtered and genuine traffic will be passed to the original destination on demand attack diagnosis at the customer's request, a detailed report of a ddos attack is sent to the customer, explaining the attack and other relevant details note ionos cloud sets forth security as a shared responsibility between ionos cloud and the customer we at ionos cloud strive at offering a state of the art ddos defense mechanism successful ddos defense can only be achieved by a collective effort on all aspects including optimal use of firewalls and other settings in the customer environment flow logs flow log is a feature that allows you to capture data related to ipv4 and ipv6 network traffic flows flow logs can be enabled for any network interface of a virtual machine (vm) instance, the managed network load balancer, the managed application load balancer, and the public interfaces of the managed network address translation ( nat) gateway flow logs can help you with several tasks such as debugging connectivity and security issues monitoring network throughput and performance logging data to ensure that firewall rules are working as expected the service can be configured for the direction of network traffic (ingress, egress, bi directional) and action (accepted, rejected traffic packets, or any) data is collected by the services and submitted in a compressed file to a customer's ionos cloud object storage bucket, which can be specified by the customer at the time of flow log activation the service will not update existing files but will send new flow log records in a new compressed in an interval of 10 minutes network infrastructure specifications core network ionos cloud operates a high availability core network at each location for the redundant connection of the product platform all services provided by ionos cloud are connected to the internet via this core network the core network consists exclusively of devices from brand manufacturers the network connections are completed via an optical transmission network, which, by use of advanced technologies, can provide transmission capacities of several hundred gigabits per second connection to important internet locations in europe and america always guarantees the customer an optimal connection data is not forwarded to third countries at the customer’s explicit request, the customer can opt for support in a data center in a third country in the interests of guaranteeing a suitable data protection level, this requires a separate agreement (within the meaning of article 44 50 dsgvo and §§ 78 ff bdsg 2018) internal network ionos cloud operates redundant networks at each location, offering connections up to 100 gbps ionos cloud uses high speed networks based on infiniband technology both for connecting the central storage systems and for handling internal data connections between customer servers external network depending on the location, different capacities for transmitting data to or from the internet are available for operating the ionos cloud service due to the direct connection between the data centers at the german locations, the upstream can be used across locations the total capacity of each respective location is described below location connection location redundancy metro redundancy berlin (de/txl) 2 x 100 gbps 2n 2n+1 frankfurt am main (de/fra) 2 x 100 gbps 2n 2n+1 frankfurt am main (de/fra/2) 4 x 100 gbps 2n 2n+1 karlsruhe (de/fkb) 2 x 100 gbps 2n 2n+1 london (gb/lhr) 2 x 100 gbps 2n 2n worcester (gb/bhx) 2 x 100 gbps 2n 2n logroño (es/vit) 2 x 100 gbps 2n 2n paris (fr/par) 2 x 100 gbps 2n 2n+1 las vegas (us/las) 2 x 10 gbps 2n 2n newark (us/ewr) 2 x 100 gbps 2n 2n+1 lenexa (us/mci) 2 x 100 gbps 2n 2n+1 ionos cloud backbone as 8560, to which ionos cloud is redundantly connected, has a high quality edge capacity of 4000 gbps with 3500 ipv4/ipv6 peering sessions, available in the following internet and peering exchange points ams ix, bw ix,de cix, nl ix, espanix, equinix, franceix, kcix, linx observability activity log for security audits, ionos cloud offers a service called activity log it traces and records activities of users when they log in, retrieve a resource, change, or delete resources the trace records are limited to iaas products paas products will be expanded in near future iteratively activity log is available via restful api only users of role "contract owner" and "administrators" are authorized by default to access the activity log api and are permitted to grant access to the activity log api for the accounts of type "user" the data retention period for activity log is 35 days after the retention period expires the data older than retention period gets purged for longer persistence of activity log data, we recommend downloading the data and storing it on a different storage like ionos cloud object storage logging service logging service is designed to facilitate logging, monitoring, and analysis of logs from applications and infrastructure it encompasses a diverse set of features aimed at enabling effective log monitoring and analysis, providing valuable insights into system behavior using this service can enhance operational efficiency, bolster security measures, and elevate visibility into system performance and errors to use the logging service, users must have the appropriate privileges, which can be configured through the dcd or cloud api logs can be sent from any location, including remote sources or systems outside the ionos cloud data centers the service provides a dedicated log server per logging pipeline instance to every customer or user each instance has a dedicated log server endpoint while the logging service gets managed through a dedicated logging api and a user interface inside the dcd, it provides an endpoint to a grafana dashboard to manage alerting and reporting the architecture of the logging service enables data collection data aggregation indexing and storage analysis and reporting the following log sources are currently supported kubernetes docker systemd http (json rest api) generic limitations rate and bandwidth limit per pipeline for log ingestion default http rate limit 50 requests per second default tcp bandwidth approximately 10,000 logs per second maximum 5 pipelines per contract 10 log streams per pipeline only linux servers are supported (windows planned) available locations berlin, frankfurt, paris, logroño, and london monitoring service monitoring service is a cloud based service that allows you to ingest, aggregate, and analyze data to enhance your understanding of your system's performance and behavior the service collects data from various parts of your environment into a central system that is responsible for storage, aggregation, visualization, and automated responses when certain conditions are met the monitoring service can be managed only through the monitoring service api at the moment, alerting and reporting are available through a central grafana instance, available to your contract per region available locations berlin, frankfurt, paris, logroño, and london berlin https //monitoring de txl ionos com/pipelines frankfurt https //monitoring de fra ionos com/pipelines london https //monitoring gb lhr ionos com/pipelines paris https //monitoring fr par ionos com/pipelines logroño https //monitoring es vit ionos com/pipelines contract limitations each contract can create 10 monitoring pipelines if you require higher limitation boundaries, you can contact the ionos cloud support team to discuss your specific requirements and adjust the limits accordingly sovereign workplace nextcloud workspace nextcloud workspace is a managed, sovereign collaboration and productivity platform hosted securely in ionos cloud data centers it provides teams with a unified environment for secure communication, document management, and file sharing by adhering to strict data protection standards and offering a sovereign infrastructure, the service caters to organizations requiring high compliance and data residency security delivered as a fully managed software as a service (saas), ionos cloud handles software maintenance, infrastructure scaling, security patching, and version updates key features real time collaboration the platform provides a full fledged online office suite (collabora) for real time collaborative document editing, including text processing, spreadsheets, and presentations cloud storage each user receives 1 tb of shared cloud storage, featuring secure file sharing, file versioning, and optional end to end encryption unified communication nextcloud talk facilitates digital teamwork by natively combining team chat and professional video conferencing email client the platform features an integrated email client, allowing users to seamlessly connect and access their existing email provider through imap and smtp protocols directly within the workspace private ai assistant an integrated ai assistant powered by the ionos cloud ai model hub provides text generation, summarization, and translation services ai inference runs within ionos cloud infrastructure to contractually guarantee that customer data is never used to train models or exposed to third parties identity and access management (iam) the platform supports enterprise standards such as ldap, saml, and openid connect to securely integrate with existing customer directories scalability currently, a single nextcloud workspace instance supports up to 200 users we are actively working on scaling the service architecture to seamlessly accommodate the requirements of larger enterprise organizations in future releases availability nextcloud workspace is currently hosted in the ionos cloud berlin (txl) data center and is available for global provisioning security certificate manager the certificate manager streamlines the management of ssl/tls certificates for your websites and applications, simplifying the processes of obtaining, installing, and renewing certificates this ensures secure web traffic and the protection of sensitive data key features simplified management manage ssl/tls certificates, ensuring efficient and consistent security across all your digital properties automated workflows automate the issuance and renewal of certificates using acme protocol based domain validation, removing the hassle of manual uploads for certificates and keys seamless integration effortlessly integrate with ionos cloud services like managed application load balancer, cdn, and api gateway to secure your workloads by providing these enhanced capabilities, the certificate manager helps secure your infrastructure while improving the efficiency of certificate management across cloud services ssh key support before provisioning, customers can inject the public part of an ssh key before provisioning using the ionos cloud dcd or cloud api (version 2 0 or higher) to create an ssh login for storage volumes based on a public ionos cloud linux image this feature is not available for snapshots, private images, windows os images, and ms sql images provided by ionos cloud in dcd, it is possible to store up to 100 public ssh keys for later re use it is possible to mark individual ssh keys as "default" which are applied to every provisioning automatically if previously mentioned requirements are fulfilled independent from the ssh key store, customers can also add ssh keys ad hoc which they did not have previously stored it is impossible to share access to an ssh key store across multiple users each user has access to their own ssh key store independent of their account role in cloud api, it is only possible to add ssh keys ad hoc the ssh key store can't be accessed in this manner ionos private cloud powered by vmware ionos private cloud powered by vmware brings vmware enterprise class software defined data center software to the ionos cloud portfolio, enabling customers to run any application across vsphere based private cloud environments the service offering has the following components private cloud consisting of vmware vsphere enterprise plus running on dedicated servers vmware vcenter server appliance vmware nsx t standard to power networking for the service offering vmware vsan standard aggregating host based storage into a shared data store self service provisioning and scaling of private cloud on demand access to the vsphere client and nsx t manager, ability to configure and design the virtual data center that best fits ones use cases maintenance, patching, and upgrades of the pc (the hardware, physical infrastructure, and vmware stack), performed by ionos cloud ionos private cloud powered by vmware can be provisioned and scaled vertically on demand a private cloud cluster includes a minimum of three hosts customers can add hosts, up to the provisioning maximum for their organization (maximum 24 hosts per cluster) customers can select the location of the data center where their private cloud will be provisioned currently, the service is available in berlin (germany), worcester (uk), and logroño (spain) the karlsruhe (airpark) location will continue to operate already provisioned instances but does not allow the provisioning of new private cloud setups ionos private cloud powered by vmware runs exclusively on high performance, state of the art hardware, and virtualization technology vsan, nsx t, intel optane, and nvme storage provide processing speeds that significantly optimize your workloads the backup service can be used together with the private cloud additionally, we offer several other services that can be booked as an add on additional ip for virtual network interface cards connected to the internet, automatic assignment of a dynamic public ipv4 address through dhcp is standard as an added advantage, ionos cloud offers customers one static public ipv4 address included with their private cloud cluster further, customers can opt for additional static public ipv4 addresses at a nominal fee, facilitating assignment to internet connected virtual network interface cards as primary or supplementary ip addresses ipsec vpn connectivity to the vsphere management network of the private cloud is established through openvpn by default, allowing one terminal device connection at a time a more comfortable alternative is provided by the service ipsec vpn this service is integrated in the customer’s cloud panel this service leverages an automated provisioning of a vyos backend gateway, enabling single or multiple ipsec connections to diverse endpoints a singular service extends connectivity to multiple interconnected networks nfs datastore augmenting the local vsan storage offered by the private cloud, the nfs datastore service allows customers to seamlessly incorporate network storage into their vsphere environment this additional service permits scaling of storage from 2tb up to the standard provisioning maximum of 32tb (with an absolute maximum of 128tb) this flexibility empowers clients to scale their storage without the necessity of adding more hosts 24/7 enterprise level support ionos cloud offers its customers technical support by telephone and email experienced system administrators take the customers’ calls and emails and address their concerns immediately 24/7 enterprise level support can be contacted by email or telephone 24 hours a day, seven days a week contact details can be found in the data center designer dashboard https //dcd ionos com/latest/?regdomain=ionos de public cloud locations ionos cloud uses data centers at different locations worldwide the security concepts of data centers are always based on the highest industry standards country / location operator certifications germany / berlin (de/txl) ionos cloud group bsi it grundschutz, iso/iec 27001 germany / frankfurt am main (de/fra) equinix gmbh iso/iec 27001, iso 9001, iso 14001, iso 22301, iso 50001, soc 1 type ii, soc 2 type ii, pci dss germany / frankfurt am main (de/fra/2) digital realty iso/iec 27001, iso 9001, iso 14001, iso 22301, iso 50001, en 50600, germany / karlsruhe (de/fkb) telemaxx telekommunikation gmbh bsi it grundschutz, iso/iec 27001 united kingdom / london (gb/lhr) virtus data centres ltd iso/iec 27001, iso 9001, iso 14001, iso 50001, iso 20000, isae 3402 compliant, pci dss compliant, breeam excellent united kingdom / worcester (gb/bhx) ionos cloud ltd uptime institute tier iv, iso/iec 27001, iso/iec 50001, pci dss spain / logroño (es/vit) arsys internet s l u aenor ecommerce, iso/iec 27001, iso 9001, iso 50001, ens conformity, uptime tier iii, and sap certified in cloud and infrastructure france / paris (fr/par) digital realty iso14001, iso22301, iso27001, iso50001, soc2 usa / las vegas (us/las) switch, inc iso/iec 27001, ssae 16/isae 3402 (soc1, soc2), cica soc3, pci dss usa / newark (us/ewr) qts realty trust, inc iso27001, soc1, soc2, pci dss, hipaa, fisma usa / lenexa (us/mci) ionos cloud inc iso/iec 27001, iso/iec 50001 the karlsruhe location is not available for the creation of new virtual data centers ionos private cloud powered by vmware locations country / location operator certifications germany / karlsruhe (airpark) ionos cloud se iso/iec 27001, iso/iec 50001 germany / berlin ionos cloud group bsi it grundschutz, iso/iec 27001 spain / logroño arsys internet s l u iso/iec 27001, iso/iec 50001 france / niederlauterbach ionos cloud data center sas iso/iec 27001, iso/iec 14001, iso/iec 50001 united kingdom / worcester ionos cloud ltd uptime institute tier iv, iso/iec 27001, iso/iec 50001, pci dss since 5 july 2021 , it is no longer possible to create new private cloud servers at the karlsruhe airpark location legacy products the following cubes instances are not available for new deployments since october 1, 2024 they remain deployed and active for existing deployments name vcpu ram das storage cubes xs 1 1 gb 30 gb cubes s 1 2 gb 50 gb cubes m 2 4 gb 80 gb cubes l 4 8 gb 160 gb cubes xl 6 16 gb 320 gb cubes xxl 8 32 gb 640 gb cubes 3xl 12 48 gb 960 gb cubes 4xl 16 64 gb 1280 gb