Huawei Cloud Stack Online (HCSO) is an extension of Huawei Cloud in customers' on-premises data centers. It delivers an integrated full-stack cloud service platform with the same architecture, services, and APIs as the Huawei Cloud platform. HCSO provides physically isolated resources to ensure security compliance, and its O&M plane is connected to the O&M center through Direct Connect to reduce customers' O&M costs. HCSO is an optimal option for government, finance, and large enterprises to migrate their workloads to the cloud.

Technical capabilities

Ecosystem

Business thoughts and maintenance support

Compared with private clouds, HCSO has the following advantages:

HCSO uses the same architecture as Huawei Cloud. In addition to basic IaaS capabilities, HCSO also provides more than 110 cloud services, such as PaaS, EI, big data, blockchain, and IoT services. Cloud services can be deployed on demands. Cloud services can seamlessly evolve with those on the public cloud to meet the requirements of enterprises for digital transformation.

HCSO uses the same APIs as Huawei Cloud and interconnects with the operations and maintenance platforms of Huawei Cloud, so that customers can enjoy consistent cloud experience.

HCSO provides collaborative O&M. The Huawei professional SRE O&M team is responsible for more than 90% of the management plane O&M, which ensures high-quality and stability of the cloud infrastructure. The customer's O&M personnel only focus on the O&M of their service planes.

With the full-stack dedicated cloud and powerful ecosystem capabilities of Huawei Cloud, customers can develop their own industry cloud ecosystem and obtain optimal services from Huawei Cloud KooGallery.

Compared with public clouds, HCSO has the following advantages:

HCSO is a secure and compliant solution that can physically isolate customer's service resources and meets industry security compliance requirements.

HCSO supports local deployment to ensure low latency.

HCSO enables customers to change the console logo and its style to match their preferences.

HCSO provides more than 110 cloud services. For details, contact the Huawei Cloud customer service.

Yes. HCSO provides integrated hardware and software. It is compatible with some third-party hardware listed in a trustlist. Customers can only buy the hardware in the trustlist. If customers use third-party hardware, they and their vendors are responsible for maintenance.

HCSO is mainly tailored to individual or industry customers (such as governments, finance companies, and enterprises) who are eager for data controllability and resource isolation. It operates independently of Huawei Cloud, except for O&M.

Independent accounts: IAM is independently deployed for HCSO. The accounts of HCSO are independent of the public cloud accounts, and these two types of accounts cannot be used to log in to the platform of each other.

Independent access entry: HCSO has independent portal and console. HCSO regions are independent from public cloud regions.

HCSO can be deployed on at least 10 physical servers, and can be expanded to 20,000 nodes.

The power consumption of a single cabinet is at least 5,000 W (with a weight of 500 kg). The power consumption of a fully configured cabinet is up to 8,500 W (with a weight of 650 kg).

HCSO supports the following storage services:

Elastic Volume Service (EVS) is a virtual block storage service built on a distributed architecture that supports elastic scalability.

Object Storage Service (OBS) is a cloud storage service that stores unstructured data such as documents, images, audios, and videos.

Scalable File Service (SFS) provides fully hosted, shared file storage (SFS Turbo) for cloud servers.

Storage Disaster Recovery Service (SDRS) provides VM-level disaster recovery protection across AZs or regions with an RPO of just seconds. If a fault occurs at the production site, customers can quickly restore services at the DR site. This significantly shortens service interruption duration and reduces economic losses.

Cloud Backup and Recovery (CBR) enables customers to back up cloud servers and cloud disks to ensure data security.

HCSO inherits the full-stack security system of Huawei Cloud. It provides security protection in the following aspects:

Tenant security. HCSO provides a wide variety of security services, such as Anti-DDoS, Data Encryption Workshop (DEW), Host Security Service (HSS), and Database Security Service (DBSS) protect tenant's applications.

Architecture security. HCSO uses the same cloud architecture as Huawei Cloud, absorbs Huawei's abundant experience in security fields during the past 30 years, and fully considers high security and reliability in networking and system design.

As stated in the shared security responsibility model, customers are responsible for tenant-side security, and Huawei provides security services. Customers can also select third-party security products from Huawei Cloud KooGallery.

When customers deploy HCSO in a new region, they can enjoy the O&M and security equivalent to public cloud standards over persistent connections. If customers set up an independent industry cloud, they can still use Huawei Cloud deterministic SRE best practices.

Centralized O&M outperforms traditional O&M in the following aspects:

Deployment mode: A single set of components is deployed at the central site, with a few additional components at branch sites. This mode enables high utilization of management resources.

O&M personnel assignment: An O&M team is required at the central site, with a few assigned to branch sites for equipment room and hardware maintenance. This approach significantly reduces labor costs for O&M.

Centralized management: O&M data of all sites is centrally managed and analyzed on the O&M platform.

Evolving O&M capabilities: The O&M platform can provide O&M for various scenarios, and evolves with the public cloud.

No. O&M connections must be in the active/standby mode.

O&M data (such as logs and alarms) is reported to the Huawei centralized O&M center in real time. If the O&M data is stored locally for more than 24 hours, the data will be overwritten. As a result, faults are hard to be located or rectified, and the local visualization capability may be lost.

If the platform fault is rectified slowly after the connection is interrupted for more than 24 hours, customers will be responsible for any consequences.

There may be the following risks:

Alarms cannot be received, and faults cannot be identified.

The faults cannot be handled, and the fault recovery is uncontrollable.

The site cannot be upgraded and optimized for routine maintenance. The site robustness cannot be ensured.

Passwords cannot be changed remotely. If the passwords are not changed for a long time, there will be security risks.

Cloud service addition, deletion, modification, and query are not affected. Local API calling is not affected. However, if the cloud service is faulty, the fault cannot be rectified.