- General purpose Infrastructure as a Service (IaaS)
- Based on OpenStack
- ISO 27001 certified
- In production since 2013
- Data located in Kajaani, Finland
- Publicly accessible over the internet
---
# XaaS
- The service provider manages the lower layers
- You manage the layers above
- cPouta gives you an operating system and everything above it
IaaS vs PaaS vs SaaS responsibilities
---
# IaaS example providers
- CSC cPouta and ePouta
- Alibaba Cloud Elastic Compute Service (ECS)
- Amazon Web Services (AWS) EC2
- DigitalOcean Droplets
- Google Compute Engine (GCE)
- Hetzner Cloud Servers
- IBM Cloud Virtual Servers
- Microsoft Azure Virtual Machines
- Oracle Cloud Infrastructure (OCI) Compute
- OVHcloud Public Cloud Instances
- Tencent Cloud Virtual Machine (CVM)
---
# Accessing Pouta
- A My CSC project with the Pouta service activated
- Web user interface: Horizon at
- Programmatic interface: `openstacksdk` (Python)
- CLI implementation available on PyPI
---
# The Horizon dashboard
- Many independent machines…
- …connected together on a local network
- A useful mental model for Pouta networking
CC BY-SA 3.0, commons.wikimedia.org/w/index.php?curid=7380926
---
# Pouta network architecture
flowchart TB
NET(( Internet ))
NET --- R{{Router}}
R --- A["VM 192.168.0.1 (floating IP)"]
R --- B["VM 192.168.0.2"]
R --- C["VM 192.168.0.3"]
R --- D["VM 192.168.0.4"]
---
# Only LAN, no party
- Compute instances share a private local network
- By default they are **not** reachable from the internet
- A floating public IP + security group opens the door
- We will set this up in the next section