Service Catalogue on Empowering European Innovation

API Access

Mon, 20 Jan 2025 00:00:00 +0000

All Safespring’s services have APIs to enable the user to use the services in a more automated fashion.

Compute API

Safespring Compute is built upon OpenStack which comes with an extensible API. The services that Safespring provides API access for are:

Nova Compute. This API supports creation, deletion and modification of instances (virtual machines) in the platform.
Keystone Identity. The API handles all identity handling and RBAC in the platform. This is the API to which a user login in order to get an authentication token which then can be used to subsequent calls to other APIs in the platform.
Glance Image handling. This API handles images and snapshots, from which an instance can be created. The used can also use this API to upload custom images to the platform.
Neutron Network. This API handles networking. Since Safespring is using the networking engine Calico, this API is restricted since not all operations can be done when using this networking engine.
Cinder Block Storage. This API gives access to block storage operation such as creating and attaching volumes to instances.

Storage API

Safespring Storage support the S3 API. The S3 API is the de-facto standard for interacting with object storage services. The service is provided with the Ceph storage project, and the operations supported by the implementation can be viewed here: https://docs.ceph.com/en/latest/radosgw/s3/.

Backup as a service

Mon, 20 Jan 2025 00:00:00 +0000

Agent base cloud backup services with deduplication and secure off-site storage.

Backup Service

The backup service comes in three subscription models depending on the users needs.

Prerequisites

None.

Configurations

Product Code	Service
BAAS-on.demand	Subscription suitable for small sized on-demand needs.
BAAS-small	Subscription suitable for medium sized needs.
BAAS-large	Subscription suitable for large sized needs.

Backup for applications and file systems

The software needed for backing up file systems can be complimented with application aware agents for secure backup of different flavors of databases..

Bring Your Own License – BYOL

Mon, 20 Jan 2025 00:00:00 +0000

Safespring’s Compute services are available without bundled paid software licenses from software vendors making the Safespring Compute services a perfect fit for customers who have existing licensing agreements which allows for deployments on a public cloud.

Safespring does not impose any artificial limitations to customers’ abilities to implement Bring Your Own License (BYOL), it is solely up to the vendors licensing agreements.

Disclaimer

As Safespring is a third party to the licensing agreement between the Customer and the software vendors, it is the customer’s responsibility to make sure it fulfils the licensing requirements for running the software on the cloud platform.

Cloud Compute Service

Mon, 20 Jan 2025 00:00:00 +0000

On this page, you'll find information about our Infrastructure as a Service (IaaS) cloud compute services, including detailed configurations and categories of compute services available.

Cloud compute services contains the following categories (OpenStack flavors):

Compute with local NVMe storage (‘L2’)
Compute (‘B2’)

Base disks are default root disk sizes unless a volume with a different size is specified when deploying an image. Ephemeral disks are extra local storage devices accessible to a virtual machine on a specific hypervisor, for flavour types where applicable.

Cloud Image Service

Mon, 20 Jan 2025 00:00:00 +0000

The Compute service additionally contains a cloud image service (OpenStack Glance).

Cloud Images

Cloud images are prepared OS images that are deployable in a cloud environment where, for example the server-to-be’s name, IP or MAC address is not known in advance. The images need to have the framework cloud-init installed, which provides OpenStack with an API to interact with the created instances to set these variables in the instance.

Courses

Mon, 20 Jan 2025 00:00:00 +0000

Safespring offers the following training courses provides several platform-as-a-service services on top of the Compute platform.

Product Code	Service
TRAIN-intro.iaaS	Introduction to IaaS for managers, 1 day
TRAIN-cxo.strategy	Cloud strategy for top-level managers, 1 day
TRAIN-intro.cloud	Introduction to cloud computing, technical, 4 days
TRAIN-devops.microservices	Modern DevOps & Microservices, technical, 4 days

Introduction to IaaS for managers

One of our two course packages aimed for staff with overall technical overview but with no expertise level. The goal of the course is to strengthen the understanding and knowledge at management level, both of cloud computing and the benefits a company can gain from adopting modern cloud computing practices.

Database as a service

Mon, 20 Jan 2025 00:00:00 +0000

Database as a Service

Safespring provides MariaDB, MySQL, Redis, PostgreSQL and MongoDB as services on top of the Compute platform.

Updates and upgrades

The DBaaS is kept up to date with security patches and new versions. This includes the database application.

Backups and disaster recovery

A full backup of the database is taken every day. The time when the backup should be performed as well as retention time can be set in the service.
Backups stored in Safespring’s S3 Storage service in another datacenter.

Get in contact with Safespring

Support: support@safespring.com
Sales: +46855107370 or sales@safespring.se

Network services

Mon, 20 Jan 2025 00:00:00 +0000

Mandatory and optional network services when using the IaaS platforms.

The network design of the Compute platform is based on L3 (IP) and hardware-based routing. Virtual routers or L2 overlay networks are not used. This ensures maximum network performance and operational simplicity at all scales. Security is based on sets of L3 IP address access control lists. If a customer requires overlay networks, they are free to deploy them – at less overhead and at higher performance than in competing provider solutions.

Platform as a service

Mon, 20 Jan 2025 00:00:00 +0000

Managed Compliant Kubernetes

The managed Compliant Kubernetes platform includes the following features and capabilities:

Security and compliance

Private container registry
Intrusion detection systems (IDS) for alerting in case of breaches
Automated image vulnerability scanning
Integration with authentication providers such as Active Directory, SAML, and OIDC, e.g. Google authentication
Audit logging in the Kubernetes API server to track activities in the cluster
Role based access control (RBAC)
Compliance policy enforcement
Secret management
Automated certificate handling
Network segregation (network zones and isolation east-west traffic)
Network isolation and restrictive firewalls, allowing only permitted network traffic into the platform. Inbound traffic to the cluster is securely handled using the Nginx ingress controller

Platform observability

Monitoring of Compliant Kubernetes platform resource usage
Alerting based on monitoring data
Log aggregation
Analytics based on collected logs

Automation and management

Continuous updates/patches of the Kubernetes platform
Continuous updates/patches of Cluster Services and External Services
Backups and disaster recovery
Enterprise UI to control the cluster and integrate with other services

Managed OpenSearch

Updates and upgrades

OpenSearch and Kibana instances are kept up to date with security patches and new versions.

Backups and disaster recovery

A full backup of the database is taken every day. In addition to this, point-in-time recovery is provided by means of a Write-Ahead-Log.
Disaster recovery is committed to be completed within four hours.

Log aggregation

All logs are stored in OpenSearch and can be viewed in Kibana.
Logs are kept for a maximum of 30 days (GDPR compliance) or up to 50 GB, whichever comes first.

Managed NATS

Updates and upgrades

NATS is kept up to date with security patches and new versions.

Backups and disaster recovery

A full backup is taken every day.
Disaster recovery is committed to be completed within four hours.

Log aggregation

All logs are stored in OpenSearch and can be viewed in Kibana.
Logs are kept for a maximum of 30 days (GDPR compliance) or up to 50 GB, whichever comes first.

Get in contact with Safespring

Support: support@safespring.com
Sales: +46855107370 or sales@safespring.se

Private Cloud

Mon, 20 Jan 2025 00:00:00 +0000

Complete offer for Private Cloud deployment, including hardware, operations and software maintenance. The hardware is owned by the customer and provides datacenter rack space for the installation.

The Compute base offer includes Control Plane and Compute Service with local instance storage only.

Options include Elastic Block Storage (Ceph cluster) and accelerated compute nodes (typically GPU).

The Storage base offer includes Control Plane and storage nodes of either HDD or NVMe type.

Professional services

Mon, 20 Jan 2025 00:00:00 +0000

Safespring provides additional optional professional services allowing customers to extract more value out of the services deployed in the platform.

Product Code	Service
PS-consult.jun	Cloud Infrastructure Consultant, junior expertise level
PS-consult.sen	Cloud infrastructure Consultant, senior expertise level
PS-cloudarch.jun	Cloud Infrastructure Architect Consultant, junior expertise level
PS-cloudarch.sen	Cloud Infrastructure Architect Consultant, senior expertise level
PS-pm.jun	Project Manager, junior expertise level
PS-pm.sen	Project Manager, senior expertise level

Cloud Infrastructure Consultant, junior expertise level

Our Cloud Infrastructure Consultants assist customers with configuration, deployment and implementation of a greenfield cloud architecture, migration to cloud architecture of existing systems on-prem or on other cloud platforms, changes and operations of existing deployments. Junior expertise level.

Storage as a service

Mon, 20 Jan 2025 00:00:00 +0000

The Compute platform contains a storage service based on the Ceph object storage cluster, providing object-storage as a service using an S3-API compatible interface.

S3-API-compatible Storage Service

Safespring provides Storage-as-a-Service using object-based storage, provided by the Ceph Rados Gateway. See the API definitions under section 3.2.

Prerequisites

None.

Configurations

Product Code	Characteristics
S3-archive	HDD-backed with Erasure-coded Ceph
S3 -storage	HDD -backed with 3-replica Ceph

Get in contact with Safespring

Support: support@safespring.com
Info: +46855107370 or ocre@safespring.com

Support

Mon, 20 Jan 2025 00:00:00 +0000

Safespring offers support in several different ways for the platform and related services.

Product Code	Support service
SUPPORT-base	Base Compute Support
SUPPORT-standard	Access to backchannel chat room with support and engineering
SUPPORT-premium	Dedicated Service Manager with quarterly operations meetings

Base Support

Safespring offers support for it’s core service Compute, Storage and Backup. Safespring has one unified support model for all its services. Safespring is operating an expert level support organization that is part of the technical DevOps team. Requests and incidents are handled by personnel with deep technical knowledge of the services provided. Written support requests are handled in English for all customers.

Third-party software licenses

Mon, 20 Jan 2025 00:00:00 +0000

Safespring provides several third-party software licenses for use on our IaaS platforms.

Product Code	Software	Partner
SW-win.ser.2022	Windows Server 2022 Datacenter	Microsoft
SW-ms.sql.ser	Microsoft SQL Server Standard	Microsoft
SW-ms.sql.ser.ent	Microsoft SQL Server Enterprise	Microsoft
SW-nextcloud	Nextcloud Hub	Nextcloud

Get in contact with Safespring

Support: support@safespring.com
Sales: +46855107370 or sales@safespring.se