Enterprise Cloud. Service Description. Ver 4.64 June 5 th, ntt.com. Copyright 2013 NTT Communications Corporation. All rights reserved

Transcription

1 Enterprise Cloud Service Description Ver 4.64 June 5 th,

2 Version History Issue Date Comments Nov-2012 Initial version (YT) Nov-2013 Updated the following: (KK/RA) Global Backup to Global File Storage. Functions of Virtual Machine Terminology Apr-2014 Updated the following: (RA) Compute Resource (Shared) Compute Class: Guaranteed Internet Connectivity:1G Best Effort 200Mbps~1G Guaranteed VPN Connectivity: 100Mbps/200Mbps/1G Guaranteed MS SQL: available in US/UK June-2014 Updated the following: (RA) Internet Connectivity: 1G Best Effort (US/UK) Guaranteed: 10Mbps/100Mbps~1Gbps (US/UK) Integrated Network Appliances: available in JP (Yokohama) MS SQL: available in US/UK/TH RDSSAL: available in MY/SIN June-2014 Updated the following: (RA) EC available in Germany DC June-2014 Updated the following: (RA) Dedicated Compute (Medium) available in US/UK/SG June-2014 Updated the following: (RA) Guaranteed Compute available in US/UK/SG Image Backup: Start Time Window for VM Backup Internet Connectivity: 1G Best Effort JP(Kinrakuji) August-2014 Updated the following: (RA) MSSQL: available in SG/HK/MY/AU RDSSAL: available in TH Internet Connectivity: 10Mbps/100Mbps Guaranteed (SG/MY) 200Mbps/300Mbps/500Mbps/700Mbps/1G Guaranteed (SG) 1G Best Effort (SG) 2

3 Issue Date Comments September-2014 Updated the following(ra) Guaranteed Compute: available in HK Internet Connectivity Guaranteed 10Mbps/100Mbps: available in TH/DE Windows Server 2012: available in DE/UK MSSQL: available in DE RDS SAL: available in US/HK Image Backup: available in JP October-2014 Updated the following(ra): Internet Connectivity Guaranteed 10Mbps/100Mbps: available in AU Windows Server 2012: available in TH Image Backup: available in US(Lundy) Added Customer Portal supported function for Internet Connectivity: Kinrakuji DC Customer Portal supported function for VPN Connectivity: Yokohama DC Customer Portal supported function for Server Segment: Kinrakuji DC/UK Added File Backup available in Yokohama DC November-2014 Updated the following(ra): Integrated Network Appliance: available in US/UK/JP(Kinrakuji) Windows Server 2012: Added OS template December-2014 Updated the following (RA): December-2014 Updated the following (RA): Updated OS License: Added Windows Server R2 Template Updated Server Segment: Added description on Customer s carried-in Global IP Address Deleted description of Service Specification in Frankfurt DC as it is currently aligned with other DCs. Guaranteed Compute: available in TH January-2015 Updated the following (RA): Windows Server R2 Template: available injp(yokohama)/uk/de/my/th Added Saitama No.1 DC Service Specification for Customer Portal Compute Resource : added vapp feature Updated VM characteristics - MSSQL/Private Catalog/Image Backup: Added description - Customer Portal 2.0: available in Frankfurt DC March-2015 Updated the following(ra): 3

4 Issue Date Comments Updated Service Menu List in each Updated OS License Added Windows Server 2012/R2 in SG Updated Server Segment 24 Server Segments are available in INA. Maximum ServerSegments which can connect to INA are up to 7. DNS suffix can be specified by Customer. Added Colocation Interconnectivity Updated Customer Portal Version List Ver2.0 is available in Saitama No.1 Updated File Backup: Added description March-2015 Updated the following (RA): Updated Compute Resource Availability Guaranteed Compute available in AUS Updated OS License Windows Server 2012/R2 available in AUS Updated Colocation Interconnectivity Kyoto No.2 is available in AUS Updated Customer Portal Availability List Ver2.0 available in UK April-2015 Updated the following (RA): Updated API feature June-2015 Updated the following: (RA) Added France Paris 2 to all service menus Updated Customer Portal Availability List Ver 2.0 available in all DCs expect in Yokohama Updated Compute Resource Storage can be specified by 1GB increment Updated Private Catalog Disk space of Private Catalog can be configured in increment of 1GB Updated OS License Added feature: OS License Switch Updated Server Segment Added IP Address Restriction in France DC Updated Service Interconnectivity Available in UK DC Updated Global File Storage 4

5 5

6 Table of Contents 1 Enterprise Cloud Service Description Purpose Definitions and Terminology Contractual Considerations Service Name and Product Owner Brief Description Enterprise Cloud Service Details Service Offering Additional components High Availability architecture Security and Compliance Compute Compute Resource Overview Features Restrictions vapp Virtual Machine Private Catalog Overview Features Restrictions License OS base Microsoft SAL Backup Image Backup Overview Features Restrictions File Backup Overview Features Restrictions

7 2.7 Network Internet Connectivity Overview Features VPN Connectivity Overview Features Restrictions Server Segment Overview Feature Restrictions Service Interconnectivity Overview Features Colocation Interconnectivity (CIC) Overview Features Layer 2 (L2) Connection Restrictions On-Premises Interconnectivity (OPIC) Overview vfirewall (Hardware Type) Overview Features vload Balancer (Hardware Type) Overview Features Restrictions Integrated Network Appliance Overview Features Restrictions External Storage Global File Storage Overview Features

8 2.9 Japan Local Option Menu Image Backup Overview Features Backup a VM Restore a VM Restrictions Initial Delivery Management Platform Billing A sample calculation of pay per use with monthly cap method A sample calculation of billing for Image Backup Customer Portal Customer Portal 1.0 and Customer Portal Customer Portal User s Guide API feature Overview Features vcloud Native API API Objects Managed by NTT Supported API List Restrictions Service Support General API Restrictions Geographic Coverage SLA Disclaimer

9 1 Enterprise Cloud Service Description 1.1 Purpose The purpose of this document is to provide a detailed description of Enterprise Cloud offered by NTT Com Group. It provides information about service features, operational procedures, technology options, service levels and technical specifications. This document provides information about the specific operations of the service but it is generic in nature. The details of particular Services will be outlined in the relevant sales proposal and project implementation documentation. Please note that all features of Enterprise Cloud are subject to change. 1.2 Definitions and Terminology Best Effort Term Compute Class Compute Resource Compute Resource Pool CPU Customer Customer Portal Dedicated Device Abbre viation CRP CP DC Definition Burstable connectivity up to the selected bandwidth. A classification to represent performance of CPU and Memory. A service to provide virtual resource in combination of CPU, Memory and Storage necessary to create virtual servers. Comprises an amount of CPU, Memory and Storage resources provisioned from Enterprise Cloud Infrastructure. These resources are then allocated to Virtual Machine set up within Compute Resource Pool. A component in a computer which helps executing IT programs. Central processing unit. Any legal entity including any individual, corporation or unincorporated body, which is interested in requesting / has requested NTT Com Group to provide Enterprise Cloud, details of whom will be set out in the applicable Service Order. Enterprise Cloud web portal, which allows Customer to manage their resource in Enterprise Cloud. A facility used to house computer systems and associated components such as telecommunications, servers and Storage systems. Facilities (physical server and Storage device) used for Enterprise Cloud to provide Compute Resource dedicated for a Customer. 9

10 Enterprise Cloud Enterprise Cloud Infrastructure Global File Storage Global IP Address Guaranteed Hypervisor Image Backup Integrated Network Appliance Internet Connectivity Internet Gateway Internet Transit Memory NTT Com Group On-Premises Interconnectivity Private Catalog Public Catalog Server Segment Service Interconnectivity INA OPIC An enterprise grade infrastructure as a service provided by NTT Com Group via the Internet to Customer. The platform is orchestrated via software, and comprises of servers, Storage and network elements coupled with Virtualization Technology and operating system software. A set of tangible resources (machine room, cabling, power, UPS, etc.), hardware resources (server racks, physical servers) and Software resources (operating system and Software components) deployed by NTT Com Group to supply Enterprise Cloud. A service to provide an external Storage area for storing backup data. The Storage area can be in the same or a remote. Public routable IPv4 Internet addresses. A plan that is designed to guarantee the available bandwidth for the customer. A piece of computer software program that creates and runs Virtual Machine. A solution for backing up a Virtual Machine. Customer can select frequency and retention period for their backup. A virtual appliance which has basic security & networking functions required for the cloud environment managed by the Customer. A service that allows Customer to connect Internet to Enterprise Cloud Infrastructure by utilizing Internet Gateway and Internet Transit. A gateway device to connect to the Internet. A device to provide connection between the Internet Gateway and vfirewall. A Memory that is required to run OS and/or applications by CPU, and a component of Virtual Machine. NTT Communications and/or any of its subsidiaries, related corporation (existing and future) who provide Enterprise Cloud to Customer. A service that allows Customer to connect on-premises system and Enterprise Cloud in the same network segment using SDN-compatible gateway equipment installed in the Customer s system. A disk space for storing Customers' own Virtual Machine Template that is available only to the Customer. A disk space for storing Template pre-registered by NTT Com Group that is available to all Customer. The secure logical network partition that Customer can order and configure to connect to its Virtual Machines, vload Balancers, vfirewalls, Service Interconnect Gateway, and On-Premises Interconnectivity. A service that allows Customer to connect services that requires Service Interconnect Gateway such as collocation, Global File Storage to Enterprise Cloud. 10

11 Service Interconnect Gateway Shared Device Storage Storage Class Template vapp vcpu vfirewall Virtual Machine Virtual Private Virtual Room Virtualization Technology vload Balancer VPN VPN Connectivity SIG vfw VM VPDC vlb A device that allows Customer to connect services such as collocation, Global File Storage to Enterprise Cloud. A facilities (physical server and Storage device) used for Enterprise Cloud to provide Compute Resource for more than one Customer. An area where Customer can store their data. A classification to represent performance of Storage. A copy of root disk/data disk as an image of Virtual Machine. Private Template is the Template created by Customer on Private Catalog using Customer Portal or Image Backup, which is available only to the Customer. Public Template is the Template provided by NTT Com Group on Public Catalog, which is available to all Customers. A container for Virtual Machines managed by VMware. A virtual CPU hardware constituting a Virtual Machine. You can allocate more than one vcpu to a Virtual Machine. (vcpu stands for virtual CPU ) A virtual appliance that employs mainstream security technology that has been optimized for virtual environments and that Customer is able to manage. (vfirewall stands for virtual Firewall ) A software implemented abstraction of the underlying hardware, which is presented to the application layer of the system. Virtual Machines may be based on specifications of a hypothetical computer or emulate the computer architecture and functions of a real world computer. A virtual environment of physical that allows control over Customer's Enterprise Cloud. A Virtual Private contains one or more Virtual Rooms. An underlying virtual environment of Virtual Private that allocates resources to Customer. Within a Virtual Room Customer can create and manage Compute Resource Pools, vload Balancers and vfirewalls. A computing technology of simulating Compute Resource such as a hardware platform, operating system, Storage device, or network resources. A virtual appliance that allows the implementation of load balancing mechanism between Virtual Machines by setting up a load balancing module. (vload Balancer stands for virtual Load Balancer ) An extension of local networks, which preserve the logical security to Enterprise Cloud within a local network. It is the interconnection of local networks via a tunneling technic. A service that allows Customer to connect NTT Com Group IP-VPN service (Arcstar Universal One) to the Enterprise Cloud Infrastructure by utilizing VPN Gateway and VPN Transit. 11

12 VPN Gateway VPN Transit A device to connect to NTT Com VPN service (Arcstar Universal One) to Enterprise Cloud. A connection between the VPN Gateway and vfirewall. 1.3 Contractual Considerations This document replaces all former Service Descriptions for this service. 1.4 Service Name and Product Owner Service Name: Enterprise Cloud Global Product Owner: NTT Communications Cloud Services 1.5 Brief Description Enterprise Cloud service offering from NTT Com Group is an Enterprise grade infrastructure as a service provided by NTT Com Group to Customer. The platform is orchestrated via purpose-built software, and comprises of servers, Storage and network elements coupled with Virtualization Technology and operating system software. 12

13 2 Enterprise Cloud Service Details 2.1 Service Offering Each Customer has access to a Virtual Private containing one or more Virtual Rooms supporting the Compute Resource Pools (CPU, Memory and Storage), vfirewall, vload Balancer, Server Segments and other components. Every Virtual Machine created by Customer is dedicated to Customer on a shared Enterprise Cloud Infrastructure (bandwidth, connection to the Hosting Platform via the Internet and/or VPN, network and security equipment, server maintenance, premises, racks, Storage, etc.). The initial Enterprise Cloud configuration will be set up for Customer using standard or optional components, as selected by Customer on the Order. Customer will identify on the Order: the components selected: elements of Virtual Private, elements in Virtual Room, Compute Resource Pools resources, network connections; and the initial configuration of Enterprise Cloud: standard and optional components to be included, and the options which Customer wishes to subscribe to. Customer can modify the initial configuration of Enterprise Cloud via the Customer Portal for elements that can be automatically modified by Customer and via a written Order Form for elements that can only be modified by NTT Com Group. The physical server(s) used by NTT Com Group for Enterprise Cloud will remain the exclusive property of NTT Com Group. All hosted data and applications provided by Customer will remain the property of Customer. Enterprise Cloud offering is based on a number of components listed below: 13

14 Menu Compute Resource Compute Class Storage Class Guaranteed Premium Standard Premium Standard Compute Backup Compute Resource (Dedicated Device) Private Catalog License Image Backup File Backup Compute Class Storage Class OS base Microsoft SAL Large Medium Small Premium + Premium Windows Server Red Hat MS SQL SE RDS SAL Internet Connectivity Best Effort Guaranteed 10Mbps 100Mbps 1Gbps 1Mbps~100Mbps 200Mbps~1Gbps Global IP Address Network External Storage VPN Connectivity Server Segment Interconnectivity vfirewall (Hardware Type) vload Balancer (Hardware Type) Integrated Network Appliance Global File Storage Best Effort Guaranteed Service Interconnectivity Colocation Interconnectivity On-Premises Interconnectivity 100Mbps 100Mbps 200Mbps 1Gbps Compact Compact (Redundant) Large Large (Redundant) Primary Storage Secondary Storage Boost 14

15 2.2 Additional components In addition to these components, NTT Com Group can provide additional modular services such as managed backup, managed Storage, managed security and application management to provide a complete end to end solution that meets Customer requirements. 2.3 High Availability architecture Enterprise Cloud is built with high availability. All components; vfirewall, vload Balancer, Internet Connectivity, VPN Connectivity, Service Interconnectivity and On-Premises Interconnectivity are designed to have high redundancy. If in the rare case a Node fails, the software will quickly redistribute Virtual Machine to other nodes on the platform ensuring minimum downtime. 2.4 Security and Compliance Enterprise Cloud platform is located in some of NTT Com Group top tier facilities. All areas in each are fully monitored 24x7x365 by Closed Circuit cameras and onsite guards. Security is assured within the virtualized environment by logically partitioning servers so that each Customer is fully isolated from other Customer. Customer is also able to use NAT and VIP functions from within Customer Portal allowing full control into each Server Segment. For additional security, dedicated firewalls are also available by connecting them to Enterprise Cloud using our Service Interconnectivity (*device and service may differ depending on location) Customer can connect securely to Enterprise Cloud from NTT Com Group IP-VPN (Arcstar Universal One) through VPN Connectivity. Customer can manage Enterprise Cloud via the Customer Portal by accessing a Secure HTTPS connection and will be provided with a unique Username/Password for each administrator. 15

16 Diagram 01: Enterprise Cloud logical network diagram example Specifications of : Full-scale preparations for power outage and fire disaster. Green equipped with efficient cooling facilities. Security system installing the latest authentication methods. 24/7 operation and maintenance system. System redundancy in power supply, air conditioning and network. Stable network achieved by using backbones and access lines from multiple carriers Quality is certified by Enterprise Cloud standards. 2.5 Compute Enterprise Cloud Infrastructure is a multi-tenanted architecture fully managed by NTT Com Group. Segments of Enterprise Cloud Infrastructure are allocated to Customer who NTT Com Group designates when purchasing Enterprise Clouds. This allocated Compute Resource is called a VPDC (Virtual Private ). Within the Virtual Private, Customer is able to divide the computing resource into multiple Compute Resource Pools. This allows for example, the creation of a Compute Resource Pool per subsidiary or per application layer. Each Customer will have the ability to have access and control to multiple Virtual Private s across Geographic regions and locations as specified in the Geographic coverage section of this document with a limit currently of one Virtual Private per physical. Customer is also able at any time to increase and decrease the amount of Compute Resources through Customer Portal. VPDC contains one or more Virtual Rooms and within each Virtual Room, Compute Resource Pools contain CPU, Memory and Storage. These resources are used by the Virtual Machines. 16

17 Diagram 02: Compute Resources Compute Resource Overview NTT Com Group is able to offer a number of Compute Resource to provide virtual resource in combination of CPU, Memory and Storage necessary to create Virtual Machines Japan North America Europe APAC Menu Yokohama No.1 JP Kansai1 Saitama No.1 US San Jose Lundy Virginia Sterling UK DE FR SIN HK MY TH AU Hemel Hempstead 2 Frankfurt 2 Paris 2 Singapore Serangoon Hong Kong Tai Po Malaysia Cyberjaya3 Thailand Bangna Australia Sydney1 Compute Resource (Shared Device) Compute Resource (Dedicated Device) Compute Class (CPU/Memory) Storage Class Compute Class Storage Class Guaranteed Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes N/A Yes Yes Premium Yes Yes N/A Yes Yes Yes N/A N/A Yes Yes Yes Yes Yes Standard Yes Yes N/A Yes Yes Yes N/A N/A Yes N/A N/A N/A N/A Premium Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Standard Yes Yes Yes Yes Yes Yes Yes Yes Yes N/A N/A N/A N/A Large Yes Yes Yes N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Medium N/A N/A N/A Yes Yes Yes Yes N/A Yes Yes Yes Yes Yes Small Yes Yes Yes N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Premium + Yes Yes Yes Yes Yes Yes Yes N/A Yes Yes Yes Yes Yes Premium Yes Yes Yes Yes Yes Yes Yes N/A Yes Yes Yes Yes Yes Table 01: Compute Resource Availability 17

18 Features Compute Resource (Shared Device) - Compute Class Guaranteed o o CPU and Memory that are configured and Guaranteed to Customer. This Class does not have burst capabilities, however SLA is applicable for this service component. Compute Resource Pool in different Zones (Zone A and B) guarantees that Virtual Machines in different Zones reside in a physically separate hardware. (Different Zones(ZoneA and B) is available only in Yokohama DC) - Compute Class - Premium: o o CPU and Memory that are configured and Guaranteed to Customer. In addition to the Guaranteed CPU and Memory, Customer also receives the capability to burst up to 25% of configured resources. However, this burst portion is not Guaranteed and could be subject to contention according to load on the environment. Compute Resource Pool in different Zones (Zone A and B) guarantees that Virtual Machines in different Zones reside in a physically separate hardware. (Different Zones(ZoneA and B) is available only in Yokohama DC) - Compute Class - Standard: o CPU and Memory are not Guaranteed to customer and thus provided at a lower price compared to Compute Class - Premium. This class does not have burst capabilities. - Storage Class - Premium: o Class of Storage utilizing SAS drives to provide optimum performance. - Storage Class - Standard: o Class of Storage utilizing Nearline SAS drives for cost effective usage of Storage Compute Resource (Dedicated Device) - Compute Class o NTT Com Group offerscustomers a dedicated Compute Resource residing on physical servers dedicated to the Customer. Customer needs to fills in the Service Order form for managing the Compute Resource Pool for Dedicated Device. There are three different types of Compute Class. Large: The Physical Server of Large is the largest. The Physical Server of Large provides the largest CPU Resource and Memory The CPU performance (frequency) of Large is higher than that of Medium. 18

19 Medium: The Physical Server of Medium is larger thatn that of Small and smaller than that of Large. The Physical Server of Medium provides larger CPU Resource and Memory Resource than Small. Small: The Physical Server of Small is the smallest. The Physical Server of Small provides smaller CPU Resource and Memory Resource than Medium. - Storage Class Premium +: o o o Class of Storage utilizing SAS drives configured to increase Storage performance compared to Storage Class Premium. The Storage IO performance of Premium + is better than that of Premium. The cost per GB of Premium + is worse than that of Premium. - Storage Class Premium: o Class of Storage utilizing SAS drives to provide optimum performance. o The Storage IO performance of Premium is worse than that of Premium +. o The cost per GB of Premium is better than that of Premium +. Customer is able to deploy different types of Compute Resource Pool within each Virtual Private environment. Multiple Compute Resource Pool in the same Virtual Room can be linked together Restrictions Compute Resource (Shared Device) Compute resources are sold to Customer in the following units. Customer must at all times have at least one Compute Resource Pool consisting of at least 1GHz CPU, 1GB Memory and 50GB Storage. CPU: can be specified from 1 GHz to 48 GHz by 1 GHz increments; and Memory: can be specified from 1 GB to 144 GB by 1 GB increments; and Storage: can be specified from 50 GB to 4,000 GB by 1GB increments. Within each Virtual Private, a Customer can define as many Compute Resource Pool as they require. 19

20 Compute Resource (Dedicated Device) This is a set of Dedicated Devices made for a specific Customer. One Dedicated Device consists of multiple Physical Servers and one Storage Device. Compute Resources are sold to Customer in the following units. Large: *Provided in JP only CPU: can be specified from 1GHz to 80GHz by 1 GHz increments Memory: can be specified from 1GB to 730GB by 1GB increments Medium:*Currently N/A CPU: can be specified from 1GHz to 65GHz by 1 GHz increments Memory: can be specified from 1GB to 182GB by 1GB increments Small: *Provided in JP only CPU: can be specified from 1GHz to 29GHz by 1GHz increments Memory: can be specified from 1GB to 115GB by 1GB increment Physical Servers of different Compute Class, cannot construct a same cluster. Physical servers of the same compute class can be added within the maximum limit of servers being set. There are two types of server role as follows. Type Active Standby Description An Active server offers CPU and Memory Resource to Compute Resource Pools on the Dedicated Device. A Standby server takes a role as spare equipment in the Dedicated Device. - - A Standby server doesn t offer CPU and Memory Resource at normal times. And the number of Active or Standby servers per Dedicated Device is limited as follows. Minimum Maximum Step The number of Active Server The number of Standby Server Total

21 A Dedicated Device consists of one Storage Device. Noted that multiple Storage Devices cannot be configures per Dedicated Device. Minimum Maximum Step Description The number of Storage Device (1) (1) - Constantly one The type of Physical Storage Class cannot be changed after delivery of services. Plan change is available, but the storage device itself cannot be deleted The minimum period of use is one year. However, if you make a plan change of storage device, then one year will be count from the day of the service-in. Storage amount of disk resource may vary due to constitution. Please refer to the following table for disk resource of each service plan. Storage Class Service Plan Disk Resource Premium Premium + 3TB 6TB 9TB 12TB 15TB 18TB 21TB 24TB 3TB 6TB 9TB 12TB 15TB 18TB 21TB 24TB 3,072GB 6,144GB 9,216GB 12,288GB 15,360GB 18,432GB 21,504GB 24,576GB 3,072GB 6,144GB 9,216GB 12,288GB 15,360GB 18,432GB 21,504GB 24,576GB 21

22 Adjustable Reservation Ratio For Compute Resource (Dedicated Device) service, customer could specify the value of the reservation ratios by three types of parameters (Limit/ Reservation Ratio/ Reservation Value). The parameter for each resource is as follows. Limit Reservation Ratio Reservation Value Maximum limit of available resource for CRP The percentage that reservation value covers in limit. This would be a parameter for CPU and Memory resource. The resource value which is definitely available for Compute Resource. This would be a parameter for CPU, Memory, and disk resource. Service CPU Reservation Value CPU Limit CPU Reservat ion Ratio Memory Reservation Value Memory Limit Memory Reservatio n Ratio Compute Resource (Dedicated Device) Calculated by CPU Limit CPU Reservation Ratio Any value specified by Customer Any value specified by Customer Calculated by Memory Limit Memory Reservation Ratio Any value specified by Customer Any value specified by Customer Also, the below is the condition for Reservation Ratios. Minimum Maximum Step CPU Reservation Ratio Memory Reservation Ratio 0% 100% 1% 20% 100% 1% If Customer needs, he or she can create the 100% Guaranteed Compute Resource Pool. On the other hand, Customer can create the 100% Best Effort Compute Resource Pool vapp vapp is a new feature that can be seen on Customer Portal 2.0. vapp is a container for Virtual Machines which is managed by VMware. All functional characteristics of vapp is currently not supported in Enterprise Cloud. vapp for Enterprise Cloud can only support one single Virtual Machine. 22

23 Virtual Machine Virtual Machines are created with the Operating System selected by Customer from the Public or Private Catalog and configured with standard technical features. Customer will set the name and description of a Virtual Machine through the Customer Portal. Virtual Machines can be accessed or managed via the Customer Portal and/or accessed directly via Internet or IP-VPN connection. Customer console access to Virtual Machines through the Customer Portal is via the VMware browser plugin over SSL. Customer will access or manage the Virtual Machines console with Software made available by NTT Com Group. All Software are supplied as is and Customer will have only such warranties, express or implied, if any, as provided by the third party Software licensor of such Software. NTT Com Group will not be involved in the design, development, production or maintenance of Customer s Internet or Intranet website, Customer IT management and administration tools, or any applications services Customer installs on the Virtual Machines, nor provide any antivirus to Customer as an integrated part of the Enterprise Cloud. Customer hereby confirms that it is knowledgeable in and fully understands VM management concepts and related tools, and that it has the required skills in the field of VM administration and related tools, and this under whatever environment (including, but not limited to MS Windows, Linux). a) Virtual Machine (VM) characteristics The technical characteristics of a VM are different with Customer Portal 1.0 and Customer Portal 2.0.: For Customer Portal 1.0 Number of vcpus : o Number of vcpus can be modified when the VM is turned off ; * Configurable value of vcpus on Customer Portal 1.0 is limited to1,2,4,6,or 8. Odd number vcpus are not configurable. Memory: o In increments of 1 GB; o Memory resource allocated to a VM can be modified when the VM is turned off. 23

24 o Virtual disks usable disk space: Each virtual disk has; Minimum Value: 1 GB; Maximum Value: 2000 GB; In increments of 1GB; *Virtual Disks cannot be configured in MB unit on Customer Portal 1.0. For Customer Portal 2.0 Number of vcpus o Number of vcpus can be modified when the VM is turned off ; o Number of vcpus can be assigned in increments of 1vCPU. o Memory Memory resource allocated to a VM can be modified when the VM is turned off; 24

25 o Virtual disks usable disk space for Premium/Standard Storage: Each virtual disk has; Assigned Unit: GB Minimum Value: 1 GB; Maximum Value: 2,047 GB; In increments of 1GB; Assigned Unit: MB Minimum Value: 1 MB; Maximum Value: 2,097,151 MB; In increments of 1MB; o o o o o o o Customer can increase the capacity of existing disk, but cannot decrease. After increasing the capacity of the disk, customers must edit the disk partition and make it available from the OS by themselves. A VM can be connected to a maximum of 6 virtual disks, plus 1 Root Disk. For Customer Portal 2.0, a VM can be connected to a maximum of 59 virtual disks, plus 1 Root Disk. There is no limit for total disk capacity. However, the total disk capacity (no limit) + Memory Resource (different for each Compute Class) must be below the amount of space left in storage resource. Virtual disks can be added or removed from the VM at any time when on and off. When removing a virtual disk, all data contained on the virtual disk is lost; Restrictions 1. It is required to install the VMware tool to execute disk expansion. 2. During the image snapshot by Image Backup, disk expansion cannot be executed. 25

26 3. When using Integrated Network Appliance, customer needs to click Start Monitoring button in order to start the ping monitoring for VMs. This will start automatically for vfirewall. o o o Virtual Network Interface Cards (vnics) A maximum of 8 vnics per VM; This is applicable for both Customer Portal 1.0 and Customer Portal 2.0. A maximum of 1 IP address per vnic; In increments of 1 vnic; o The MAC address of vnic is defined at deployment, Customer cannot modify the MAC address; o Multiple vnics on the same Virtual Machine cannot be connected to the same Server Segment; o o VM; o One vnic will be assigned as primary vnic; The primary vnic is used to monitor the VM, and is the default gateway for the vnics of a VM can be reconfigured when the VM is turned off. When creating a VM, Customer must configure the number of vcpus and the RAM resources, the Public or Private Template, the name and optional description of the VM, and select at least 1 vnic and 1 Server Segment to which the VM will be connected. The table below describes the relationship rules between VMs and the resources of their Compute Resource Pool: VM creation VM start up Running VM VM off Compute Resource Pool Premium CPU RAM non limiting factor non limiting factor non limiting factor limiting factor utility (limited to max GHz per vcpu 80% reserved (+ boot overhead) (20% above are utility) Storage limiting factor limiting factor 100% reserved Table 02: VM and resource pool relationship rules available available 100% reserved The table refers to the following definitions: non limiting factor: action can be performed even when resource is not available in sufficient quantity in the CRP; limiting factor: sufficient resources in the CRP (25% CPU & RAM burst included) are required to perform the action; reserved: the resource is dedicated to the VM and is not available for other VMs (not shared); utility: the resource is shared amongst VMs within a single resource pool, and limited to the VM configuration parameters; 26

27 CRP. available: the resource is not used by the VM, and is available to other VMs in the A VM may require up to 2.5% of available overhead RAM to power on and run, and up to 10% RAM overhead for booting. Customer can create as many VMs as he requires in a Compute Resource Pool. The total amount of CPU and RAM resources configured to all the VMs contained in a particular Compute Resource Pool may exceed the total resources of this Compute Resource Pool. Resources utilization is limited by the capacity available in the Compute Resource Pool and Customer may have to increase the capacity of the Compute Resource Pool to enable all VMs to run concurrently. A VM is created with a virtual disk containing a minimum amount of Storage required to support the OS, called the Root Disk. This minimum amount cannot be modified or deleted and is related to the OS installed on the VM. There must be sufficient Storage resources available in the Compute Resource Pool when creating the VM. When allocated to a VM, Storage resource is reserved to the VM and cannot be allocated to another VM. Customer may increase the Storage capacity of the Compute Resource Pool to add virtual disks to a VM. When calculating the disk size, Customer should add the Memory size to the total disk size. Storage can be freed by deleting existing disks attached to other existing VMs Private Catalog Overview A Private Catalog is a disk space for storing Templates of a VM(Virtual Machine). Customer may create a Template from a VM in a Compute Resource Pool. From the Template stored in the Private Catalog, Customer are able to replicate a new VM. The infrastructure used for Private Catalog is provided by using shared disk resources in Storage facilities for multiple Customers. However, Templates stored in the Private Catalog solely accessible to Customer. Private Catalog is available, however, only at the same as that of the Compute Resource Pool. Therefore, it cannot be used in another. Menu Yokohama No.1 Japan North America Europe APAC JP US UK DE FR SIN HK MY TH AU San Hong Saitama Virginia Singapore Malaysia Thailand Australia Kansai1 Jose Hemel Kong No.1 Sterling Frankfurt 2 Paris 2 Serangoon Cyberjaya3 Bangna Sydney1 Lundy Hempstead 2 Tai Po Private Catalog Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Table 03:Private Catalog Availability Features The following features will be provided for Private Catalog. Features provided Storage for storing Templates Feature overview Customer is able to configure the disk space of Private Catalog. Private Catalog can be ordered per CRP under the conditions below; o Minimum value: 10 GB; 27

28 Deploy VM from Private Catalog Create Template Import Template Export Template Table 04:Private Catalog Features o Maximum value: 4000 GB; * If the Virtual Machine is over 4,000GB for total disk capacity + the memory resource, the template cannot be created. o In increments of 1GB; Customer is able to deploy VM from Template stored in the Private Catalog. Customer is able to convert a VM in Compute Resource Pool to a Template and store in Private Catalog. Customer is able to import (upload) VM images which Customer created on a local server etc. to Private Catalog. Customer is able to export (download) VM images stored in Private Catalog to Customer s local environment Restrictions Customer shall be liable for the VM image they bring in. NTT Com Group assumes that all data brought in to Enterprise Cloud, including but not limited to guest OS licenses and application licenses, will be handled by Customer. It is necessary for Customer to confirm with their license provider whether they are allowed to be used in Enterprise Cloud environment. 28

29 Diagram 03: Concept of disk consumption for Private Catalog Restrictions for Windows server guest OS When creating Virtual Machine from Template of Windows Server, the Sysprep runs automatically at the first startup of the Virtual Machine. According to the product specification and licensing conditions of Microsoft Corporation, the maximum number of runs of Sysprep on Virtual Machine the guest OS of which is Windows Server is three times. When trying to run Sysprep over the limit, the Virtual Machine may be unavailable. *Sysprep A tool which conducts the prior system construction of Windows OS License OS Overview When creating a VM, Customer may choose a Public Template to use OS License provided through NTT Com Group at Public Catalog. There are currently two types of OS Licenses, OS License for Windows or the right to use subscription of Red Hat Enterprise Linux. OS License and the subscription in Enterprise Cloud will be provided as NTT Com Group's service under the SPLA license agreement with Microsoft Corporation, and the contract executed with Red Hat, Inc., respectively. The table below shows the availability for OS license. Japan North America Europe APAC Menu Yokohama No.1 JP Kansai Saitama No.1 San Jose Lundy US Virginia Sterling UK DE FR SIN HK MY TH AU Hemel Hempstead 2 Frankfurt 2 Paris 2 Singapore Serangoon Hong Kong Tai Po Malaysia Cyberjaya3 Thailand Bangna Australia Sydney1 License OS Windows Server Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Red Hat Enterprise Linux Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Table 05: OS License Availability Features You can use the following features in OS License. Feature Provision of an OS license Provision of a Public Catalog OS License Switch Overview A feature for using an OS license to run Windows or Linux on a Virtual Machine in Compute Resource. A feature that uses a template of the OS-installed Virtual Machine to provide the above license. A feature that switch OS license of a Virtual Machine to SPLA license provided by NTT 29

30 Communciations when Customer create Virtual Machines on Enterprise Cloud from their Virtual Machine template created on their local servers Provision of an OS License The OS licenses and subscriptions provided in OS License are shown below. One license is provided for one Virtual Machine. Microsoft OS License Red Hat subscription Table 06:OS Public Template Windows Server 2008 R2 SP1 Enterprise Edition English/Japanese64bit Windows Server 2012 Standard English/Japanese 64bit Windows Server 2012 R2 Standard Japanese/English 64bit Red Hat Enterprise Linux Server 5.8 English keyboard layout 64bit Red Hat Enterprise Linux Server 5.8 Japanese keyboard layout 64bit Red Hat Enterprise Linux Server 6.2 English keyboard layout 64bit Red Hat Enterprise Linux Server 6.2 Japanese keyboard layout 64bit When you use OS License, you can use the software access and software maintenance features from the Red Hat Enterprise Linux software subscription. Please follow the instructions from NTT Communications regarding the procedure and access method for using these features Provision of a Public Catalog You can use a template for creating a Virtual Machine for which a Microsoft OS license and Red Hat subscription have been provided. You can use templates from the Customer Portal when creating a Virtual Machine in Compute Resource or Compute Resource(Dedicated Device) OS License Switch This feature switches OS license of a Virtual Machine to SPLA license provided by NTT Communciations when Customer create Virtual Machines on Enterprise Cloud from their Virtual Machine template created on their local servers. OS license switch will be executed by NTT Communications based on Customer s application. Available OS License The list of Available OS License for OS License Switch. 30

31 Windows Server 2008 R2 Standard Japanese/English 64bit Windows Server 2008 R2 Enterprise Japanese/English 64bit Windows Server 2008 Standard Japanese/English 64bit/32bit Windows Server 2008 Enterprise Japanese/English 64bit/32bit Windows Server 2012 Standard Japanese/English 64bit Windows Server 2012 R2 Standard Japanese/English 64bit Restrictions Monitoring of the OS (such as daemons, services) or operational services (such as applying patches, installing software) is not included in this service. NTT Com Group will not provide Customer support related to the provided OS. By using the program provided in this service, Customer is deemed to have accepted the Services Provider Use Rights (SPUR) for Microsoft products, or the Red Hat Enterprise Contract for Red Hat products. For detailed information, see the explanations on the following URL. Microsoft Services Provider Use Rights (SPUR) h.aspx?mode=3&documenttypeid=2 * See the latest version of Services Provider Use Rights (Worldwide). Red Hat Enterprise Contract Activation key and a subscription number cannot be disclosed to Customer. Restrictions related to Windows Server If Customer would like to install additional Microsoft products on top of VMs with OS License provided by NTT Com Group, Customer must confirm with Microsoft Inc. if the Microsoft Product License is permitted to be used on a shared server. Restrictions related to Red Hat Enterprise Linux All Virtual Machines which use the subscription provided must be registered in the Red Hat network and such registration must reflect the latest state. RHN login ID which enables Customer to login to the Red Hat end user portal (formerly known as Red Hat Network) is not provided in this service. 31

32 Actions including those listed below constitute a breach of the contract between Customer and Microsoft Corporation and the Enterprise Contract between Customer and Red Hat, or fall into unauthorized use prescribed in NTT Com Group's Service Conditions and may be subject to penalty imposed by NTT Com Group to Customer such as termination of the service. In addition, Customer may be subject to the penalty of unauthorized use imposed by Microsoft. Examples of such actions include but not limited to the following actions: Use the license or subscription provided in this service outside Enterprise Cloud environment specified by NTT Com Group. Export or download a VM image created from a VM created from Public Template using the Customer Portal features to export to a location outside of the Enterprise Cloud. Customer also may not export and import to a different Enterprise Cloud VPDC unless otherwise allowed by NTT Com Group. Duplicating VM image without notice to NTT Com Group using methods other than Private Catalog and Image Backup base Overview When creating a VM, Customer may choose a Public Template to use base license provided through NTT Com Group at Public Catalog. There is currently one type of base license; Microsoft SQL Server (MS SQL) server license. base license provided in Enterprise Cloud will be provided by NTT Com Group s SPLA license agreement with Microsoft Corporation. The table below shows the availability for base license. Menu Yokohama No.1 Japan JP Kansai1 Saitama No.1 North America US San Jose Lundy Virginia Sterling UK DE FR SIN HK MY TH AU Singapore Hong Kong Malaysia Thailand Frankfurt 2 Paris 2 Serangoon Tai Po Cyberjaya3 Bangna Hemel Hempstead 2 Europe APAC Australia Sydney1 License base MS SQL Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Table 07:base License Feature The following table is the list of Public Templates provided in Public Catalog. OS Windows Server 2008 R2 Enterprise Windows Server 2012 Standard base SQL Server 2008 R2 Standard (64bit)- Japanese/English SQL Server 2012 Standard (64bit) Japanese/English SQL Server 2012 Standard SP2 (64bit) Japanese/English 32

33 SQL Server 2014 Standard (64bit) Japanese/English Table 08:base Public Template*base Licence which is provided with Windows Server 2012 Standard is only available in Japan DC. Other centers are also scheduled to be deployed. base Template has OS and base pre-installed. Each time a Customer creates a VM with base license, one license would be charged per VM. Customer can use between one and four vcpus with SQL Server Standard Edition. Please do not set more than 5 vcpu on Customer Portal Restrictions Monitoring of the base software or operational services (such as applying patches) is not included in this service. NTT Com Group will not provide Customer support related to the provided base. By using the OS and base provided in this service, Customer is deemed to have accepted the Services Provider Use Rights (SPUR) for Microsoft products. For detailed information, see the explanations on the following URL. Microsoft Services Provider Use Rights (SPUR) h.aspx?mode=3&documenttypeid=2 * See the latest version of Services Provider Use Rights (Worldwide). Activation key and a subscription number cannot be disclosed to Customer. Actions including those listed below constitute a breach of the contract between Customer and Microsoft Corporation or fall into unauthorized use prescribed in NTT Com Group's Service Conditions and may be subject to penalty imposed by NTT Com Group to Customer such as termination of the service. In addition, Customer may be subject to the penalty of unauthorized use imposed by Microsoft. Examples of such actions include but not limited to the following actions: Use the license or subscription provided in this service outside Enterprise Cloud environment specified by NTT Com Group. Export or download a VM image created from a VM created from Public Template using the Customer Portal features to export to a location outside of Enterprise Cloud. Customer also may not export and import to a different Enterprise Cloud VPDC unless otherwise allowed by NTT Com Group. Duplicating VM image without notice to NTT Com Group using methods other than Private Catalog and Image Backup. When creating a new VM with base Template, it may take about two hours for Customer to be able to login. Until the login window is displayed in the console, do not power off, reset, shutdown, suspend or restart the VM via the Customer Portal. Do not uninstall MS SQL Server from the OS. Customer will still be charged for the SQL Server even if the base is uninstalled. NTT Com Group can znot re-install SQL server, Customer must create a new VM from Template. 33

34 Do not create Template and store in Private Catalog nor create a VM Image Backup rule to back up a VM with MS SQL server installed. The SQL server will be unable to operate normally due to the Sysprep process. NTT Com Group will bear no liability for the operation and other behavior of the created Virtual Machine Microsoft SAL Overview Microsoft SAL (RDS SAL) is a service that provides a Microsoft Remote Desktop Service Subscriber Access License (called an RDS SAL below) on Virtual Machines created in Compute Resource. This makes it possible for three or more users to connect to a remote desktop (Remote desktop session host server, Windows Server) for a specific Virtual Machine in Compute Resource. Japan North America Europe APAC JP US UK DE FR SIN HK MY TH AU Menu Yokohama No.1 Kansai1 San Saitama Virginia Jose Hemel No.1 Sterling Frankfurt 2 Paris 2 Lundy Hempstead 2 Singapore Serangoon Hong Malaysia Thailand Australia Kong Cyberjaya3 Bangna Sydney1 Tai Po License Microsoft SAL RDS SAL Yes Yes Yes Yes Yes Yes Yes N/A Yes Yes Yes Yes Yes Table 09:Microsoft SAL License Features You can use the following features in Microsoft SAL (RDS SAL). Provided Feature Provision of an RDS SAL Provision of a Public Catalog Feature Overview A feature that uses an RDS SAL to allow a remote desktop connection for three or more users for a specific Virtual Machine (Windows Server) in Compute Resource. A feature that uses a template of the Virtual Machine to provide the above license Restrictions The required number of license is the number of total users that might connect, not the number that will connect at the same time. Failure to purchase enough licenses is a license violation. We recommend use in a domain environment with the specifications formulated by Microsoft. To increase or decrese RDS SALs, add or delete servers. Please add or delete servers by yourself. NTT Communications cannot perform these actions. The system requirements (number of vcpus, Memory capacity, and Disk Capacity) for 34

35 the Virtual Machine (remote desktop license server) are listed below. Item vcpu Memory Capacity Disk Capacity Quantity 1 or more 2GB or greater 100GB or greater For information on settings for the remote desktop session host server, refer to the user s manual provided by NTT Communications. Setting up a remote desktop session host server in an On-Premises Environment to ask a Virtual Machine (remote desktop license server) created using Microsoft SAL (RDS SAL) for a RDS SAL is prohibited based on the license restrictions. Prohibited Acts The acts listed below violate the agreement between the user and Microsoft, or are considered incorrect usage of NTT Communications services. Users engaged in such acts may be subject to penalties imposed by NTT Communications such as suspension of service, or incorrect usage penalties imposed by Microsoft. The following acts are specific examples. The acts that may be subject to penalties are not limites to the acts below. Using licensed products provided through Microsoft SAL (RDS SAL) outside of the cloud environment specified by NTT Communications. Using the Customer Portal features to create and save another template of the Virtual Machine image, using the export feature to store the template outside of the NTT Communications cloud environment, creating a new Virtual Machine based on that file, and running licensed products that have been provided by NTT Communications. Duplicating and using the software without notifying NTT Communications. Using Microsoft SAL (RDS SAL) to duplicate the image of the Virtual Machine that you are running and then running it as another Virtual machine without notifying NTT Communications. 2.6 Backup Image Backup Overview Image Backup is a service that provides features to acquire and store Virtual Server images (called Backup Images below) and features to restore the Virtual Server from the stored backup images. *You can use Image Backup at a that provides Compute Resource, or Compute Resource (Dedicated Device). 35

36 Japan North America Europe APAC JP US UK DE FR SIN HK MY TH AU Menu Yokohama No.1 Kansai1 Saitama No.1 San Jose Lundy Virginia Sterling Hemel Hempstead Frankfurt 2 2 Paris 2 Singapore Serangoon Hong Kong Tai Po Malaysia Cyberjaya3 Thailand Bangna Australia Sydney1 Image Backup Yes Yes Yes N/A Yes N/A N/A N/A N/A N/A N/A N/A N/A Table 10: Image Backup availability *For Image Backup in Kansai 1 DC, please refer to Image Backup in Japan Local Option Menu Features Customer can use the following features in Image Backup. Backup and Restore Backup and Restore Management A feature that acquires, stores and restores backup images for the purpose of backup. Backup images are stored in a storage device provided by the NTT Communcations. For restoration, backup images are directly overwritten on the Virtual Server. A feature that manages backup of the Virtual Server. It is possible to manage the schedule and check the history of backup and restore Backup a VM A feature that acquires and stores backup images for the purpose of backup of the Virtual Server. Disk images for backup are acquired and stored in backup storage after the backup starts. Following are disks for backup. All disks for the Virtual Server Option Menu Target Disk Start Date (*1) Start Time Window(*2) Retention Period * Backup data will be deleted after the configured retention period Spot All disks Backup process start date 0-1 UTC 1-2 UTC 2-3 UTC 3-4 UTC 4-5 UTC 5-6 UTC 6-7 UTC 7-8 UTC 8-9 UTC 9-10 UTC UTC UTC UTC UTC 7/31/366 days 36

37 Daily All disks Backup process start date UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC 0-1 UTC 1-2 UTC 2-3 UTC 3-4 UTC 4-5 UTC 5-6 UTC 6-7 UTC 7-8 UTC 8-9 UTC 9-10 UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC 1/2/3/4/6/7/8days Weekly All disks Backup process start date 0-1 UTC 1-2 UTC 2-3 UTC 3-4 UTC 4-5 UTC 5-6 UTC 6-7 UTC 7-8 UTC 8-9 UTC 9-10 UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC 7 days/14 days/21 days/28 days/35 days/ 42 days/ 49 days/56 days 37

38 20-21 UTC UTC UTC UTC Monthly All disks Backup process start date 0-1 UTC 1-2 UTC 2-3 UTC 3-4 UTC 4-5 UTC 5-6 UTC 6-7 UTC 7-8 UTC 8-9 UTC 9-10 UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC UTC 31 days/62 days/ 93 days/ 124 days/155 days/186 days/217 days/248 days Table 11: Option Menu List Image Backup does not support Virtual Machines which is over 4,000GB for total disk capacity + the memory resource. Multiple rules can be applied to a single VM Billing starts from Start Date(*1) The exact start hour cannot be select (only Time Window), so Customer are recommended to select a backup window that has the least business impact. Actual time that the backup finishes may exceed the selected time windows (*2) Restore a VM Backup image is overwritten on and restored from the Virtual Server from which backup is acquired. The Virtual Server is restored at the state of Power Off. The Virtual Server needs to be manually started. The restored Virtual Server is restored with the following settings for vcpu, Memory, Disk and vnic. Item Description of Setting 38

39 vcpu Memory Disk vnic Restores the configuration of the Virtual Server targeted for backup. Restores the configuration of the Virtual Server targeted for backup. Restores the configuration of the Virtual Server targeted for backup. Restores the vnic information of the Virtual Server targeted for backup (IP address, net mask, MAC address) Restrictions Backup Image Store Image backup supports following Guest OS. - Windows Server 2008 R2 Enterprise - Windows Server 2012 Standard - Red Hat Enterprise Linux Server 5.8/6.2 The backup image storage capacity is the size of the Disk of the Virtual Server targeted for backup. It is different from the data capacity written into the backup storage. - The Backup Image acquisition process is performed independently of whether the Virtual Server targeted for backup is powered on or off. During backups, the performance of the Disk I/O of the Virtual Server that is being backed up might be reduced. - The backup begins within the Time window you specify. The backup start time cannot be specified in units of minutes and seconds. - Backup cannot be configured in the last 5 miutes (55 minutes to 0 minute) of the 1-hour time slot for backup. (The alert message appears.) - If the number of backup jobs that are performed at the same time in each time slot exceeds the maximum value, we recommend using the closest available time slot within the backup will not be performed. - Disk of the target Virtual Server cannot be extended while performing the backp process. - To ensure consistency of the file system during backup, we recommend setting rest points, such as turning OFF the Virtual Server, and performing the backup. - If the target Virtual Server is restored during the bakup, inconsistency in backup data may occur so do not perform the restore operation during the backup. - When restoring the backup, old root/admin passwords used when performing the backup are enabled. Be careful not to forget old passwords because you cannot log in to the Virtual Server if you do not know these old passwords. 39

40 Backup Image Restore - For restore, backup image is overwritten on and restored from the Virtual Server from which backup is acquired. - In case of Windows Server Guest OS Customization time is more necessary compared with other OS. Please wait for a while and start to operate it. - Restore opearation cannot be performed if the target Virtual Server is deleted. Backup of Compute Resource (Dedicated Device) Be careful with the following points when backing up the Virtual Server used by Compute Resource (Dedicated). - For the backup work area, 10% of the Storage Device that is used by Compute Resource (Dedicated Device) will be used. - During the backup, the performance of the Disk I/O of the Storage Device that is used by Compute Resource (Dedicated Device) may decrease temporarily. Backup of the Compute Resource (Dedicated Device) may not be supported depending on usage of disk I/O so please contact us. If the Virtual Server targeted for backup was using the OS license provided by NTT Communications, the overwritten restored license on the Virtual Server is equivalent to the OS License. Therefore, no OS license is added to the restored Virtual Server. When changing the Guest OS network settings, do not disable a vnic that has been recognized, even if you are not using that vnic. If Vitual Servers with disabled vnic are backup up and restored, failures might occur. Configurable date and time slot are set on the Portal window according to the local time (configured timezone). However the system operated with the universal time coordinated (UTC) so that charging is processed with UTC. For Japan, backup process that takes a maximum of 9 hours is charged as the process for the previous day. If the OS management service is used, you cannot use the Image Backup service. Customer will not be charged in the event a backup or restore fails. Customer will be billed based on the total logical disk size. This takes into account the amount of data that is contracted, not the actual amount of data that is being written to disk within the Enterprise Cloud Storage array. For example, if Customer selects 5 day retention period with 10GB logical disk size for a VM, Customer will be charged for 50GB of disk space for the 5 day period. In the event the VM disk size is changed once a backup rule is implemented, Customer will be billed based on the revised VM disk size on the following backup. Customer will be billed monthly for the sum of all successful backups that occur within that billing cycle. For example, if they select multiple backup rules for a VM, they shall be billed for all successful backups within the billing cycle File Backup Overview File Backup is a service that provides features to restore file or folders on the data disk of the Virtual Server (called Backup file below.) 40

41 Japan North America Europe APAC JP US UK DE SIN HK MY TH AU Menu Yokohama No.1 Kansai1 Saitama No.1 San Jose Lundy Virginia Sterling Hemel Hempstead 2 Frankfurt 2 Singapore Serangoon Hong Kong Tai Po Malaysia Cyberjaya3 Thailand Bangna Australia Sydney1 File Backup Yes N/A Yes N/A N/A N/A N/A N/A N/A N/A N/A N/A Table 12: File Backup availability Features Function Outline Operation Backup File Storage A feature for acquiring backup files from and storing backup files in the storage device (called storage for backup ) provided by NTT Communciations. Customer Portal Backup File Restore A feature for restoring the backup file.*this feature is available from the dedicated application, NetBackup Agent (called NBU Agent below), which is installed in the Virtual Server. Dedicated Application (Use Remote Control or RDP and SSH) Backup and Restore Management A feature that manages backup. A feature for realizing management of files and folders targeted for backup, schedule management and history management. Customer Portal Backup File Storage Backup files are restored in backup storage at the time of start time. Backup file is stored in the storage for backup during the retention period specified by customer and the file is automatically deleted when the retention period expires. - Specifying Backup File When specifying the backup file, Virtual Server needs to be selected and the path of the file or folder targeted for backup needs to be entered when configuring the backup job in the Customer Portal. - Encrypting Backup File 41

42 The backup file is automatically encrypted by using NBU Agent and the file is stored in the storage for backup. The encryption key needs to be generated again when restoring the backup file. In this case, the encryption key needs to be generated by using the same pass phrase as that of the original encryption key Backup File Restore Backup file can be restored on the Virtual Server from which backup is acquired. 1. This function cannot be operated from the Customer Portal. This process can be executed from the NBU Agent installed on the Virtual Server. 2. Restore can be done on the Virtual Server from which backup is acquired. Be careful that no file can be restored if the target Virtual Server is deleted. 3. Restore can be done either on the same file (or folder) by overwriting or saving on a newly created file. However, overwriting is recommended in this service. If overwriting is selected, same amount of blank disk is needed to restore Backup and Restore Management A feature for managing the schedule and job history relevant to file backup and restore and a feature for managing backup file are provided. After backup job is finished, result will be delivered. - Schedule Management Function - Virtual Server Management Function - Backup History - Restore management Restrictions - About Applications for this Service To use this service, you must provide information about ID/password with administrator right or root right for the Virtual Server containing file and folder targeted for file backup to NTT Communications. NTT Commynications use this information for installing and configuring NBU Agent. Be sure to delete ID or change password immediately after NBU Agent becomes available. - Recommended Environment File backup supports following Guest OS license Virtual Server Templates provided by NTT Communications. Windows Server 2008 R2 Enterprise Windows Server 2012 Standard Red Hat Enterprise Linux Server 5.8/6.2 NTT Communications does not support the Guest OS described below. 42

43 - Backup File Storage The backup image storage capacity is the size of the file targeted for backup. It is different from the data capacity written into the backup storage. When backup is acquired periodically, there might be a time period without the backup file due to the gap between the start time of next backup and retention period. In order to avoid this situation, one additional day will be added to the retention period with no charge. - Backup of Compute Resource (Dedicated Device) Be careful with the following points when performing the file backup for the Virtual Server used by Compute Resource. During the Backup, the performance of the Disk I/O of the Storage Device that is used by Compute Resource (Dedicated Device) may decrease temporarily. Backup of Compute Resource (Dedicated Device) may not be supported depending on usage of disk I/O. In this case, please contact our Support. - Difference between the Setting Time and Chargeable Duration Duration due to Difference of Time Zone.- Configurable date and time slot are set on the Portal window according to the local time (configured time zone). However, fee is charged based on the universal time coordinated (UTC) in consideration of specifications of the service. For Japan, backup process that takes a maximum of 9 hours is charged as the process for the previous day due to a time difference. Network Network options are available to allow Customer to take advantage of Enterprise Cloud global network coverage. This includes the following services. 2.7 Network Internet Connectivity Overview By using Internet Connectivity, Customer is able to connect Enterprise Cloud to Internet Transit. The Internet Gateway provides a redundant Internet Connectivity by use of multi-link or multi home configuration and supports the Internet Protocol IPv4. Japan North America Europe APAC JP US UK DE FR SIN HK MY TH AU Menu Yokohama No.1 Kansai1 Saitama No.1 San Jose Lundy Virginia Sterling Hemel Hempstead 2 Frankfurt 2 Paris 2 Singapore Serangoon Hong Kong Tai Po Malaysia Cyberjaya3 Thailand Bangna Australia Sydney1 10Mbps Yes Yes Yes Yes Yes Yes Yes Yes Yes N/A Yes Yes Yes Best Effort 100Mbps Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes 1Gbps Yes Yes Yes Yes Yes Yes N/A N/A Yes N/A N/A N/A N/A Internet Connectivity 1Mbps~100Mbps Yes Yes Yes Only 10Mbps/ 100Mbps Only 10Mbps / 100Mbp Only 10Mbps/ 100Mbps Only 10Mbps/ 101Mbps Only 10Mbps/ 101Mbps Only 10Mbps/ 100Mbps N/A Only 10Mbps/ 100Mbps Only Only 10Mbps/ 10Mbps/ 101Mbps 102Mbps Guaranteed 200Mbps~1Gbps Yes Yes Yes Yes Yes Yes N/A N/A Yes N/A N/A N/A N/A Global IP Address Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Table 13: Internet Connectivity Availability 43

44 Features Best Effort A plan that the maximum value of available bandwidth for Customer is fixed. Best Effort 10Mbps: Bandwidth burstable up to 10Mbps (both upstream and downstream) Best Effort 100Mbps: Bandwidth burstable up to 100Mbps (both upstream and downstream) Best Effort 1Gbps: Bandwidth burstable up to 1Gbps (both upstream and downstream) Transmission speed is not Guaranteed; the availability of bandwidth communication can change according to congestion of the lines Guaranteed A plan that is designed to Guarantee the usable bandwidth for Customer. Transmission speed is Guaranteed. The Guaranteed type only guarantees the communication bandwidths that pass through the Internet GW. In order to guarantee the communication bandwidth that the vfirewall and vload Balancer pass through, it is necessary to have separate contracts for a suitable number of firewall resources and load balancer resources. *Please contact individually for the Guaranteed type higher than 100Mbps. Guaranteed 1Mbps~9Mbps: The speed is incremented by 1Mbps Guaranteed 10Mbps~30Mbps: The speed is incremented by 5Mbps Guaranteed 40Mbps~100Mbps: The speed is incremented by 10Mbps Guaranteed 200Mbps/300Mbps/500Mbps/700Mbps/1Gbps For US/UK/DE/SG/TH/and AU (provided menu is different) Guaranteed 10Mbps Guaranteed 100Mbps Guaranteed 200Mbps/300Mbps/500Mbps/700Mbps/1Gbps Global IP Address Global IP Address is provided to customer differently whether they select vfirewall or Integrated Network Appliances. Global IP Address cannot be assigned by the customer nor can be changed. Global IP Address will be assigned according to NTTCom s Global IP Address Block. For vfirewall Customer, If the Customer is using vfirewall, Global IP would be provided as follows. The distributed Global IP Address can be set as the IP address for NAT/NAPT rule in the vfirewall. Minimum Maximum Increment Global IP Address

45 An address block, which is randomly selected from Global IPv4 Address blocks owned by NTT Com Group, is distributed as Global IPv4 Address. Please note however due the method of distribution we are unable to provide continuous address blocks if you apply for more than 8 GIPs. NTT Com Group plan to upgrade the platform to IPv6 as soon as this is supported by all the necessary hardware and software vendors. Customer can order blocks of addresses from 1 to 64 blocks by pack of 4 increments per Virtual Room. If Customer requires more than 65 GIPs, please ask for consultation separately. For Integrated Network Appliance Customer, If the Customer is using the Integrated Network Appliance, Global IP can be purchased according to the following subnet units. The Global IPs will be assigned to the Internet Transit and will be used for transmission between each devices connected to the Internet Transit. Also, Global IPs can be utilized for the NAT, Load Balancing, and IP sec termination rules. Subnet Available number of rules set for NAT/NAPT, LoadBalancing, and IPsec termination Global IP Address /29 3 /28 11 /27 27 A single subnet contract can be made for a single Internet Connectivity contract. Customer can assign either one of the subnet when making a contract. The Global IP subnet cannot be changed after the Internet Connectivity installation VPN Connectivity Overview NTT Com Group can provide a secure VPN Connectivity onto a global network backbone called Arcstar Universal One. The VPN Connectivity GW is a gateway that connects Arcstar Universal One to vfirewall or Integrated Network Appliance.This low latency network provides a service level agreement backed network service. The function of plan change and routing setting and Ping is available with the VPN Connectivity Service supported on the Customer Portal which is available in JP(Yokohama) Japan North America Europe APAC JP US UK DE FR SIN HK MY TH AU Menu Yokohama No.1 Kansai1 Saitama No.1 San Jose Lundy Virginia Sterling Hemel Hempstead 2 Frankfurt 2 Paris 2 Singapore Serangoon Hong Kong Tai Po Malaysia Cyberjaya3 Thailand Bangna Australia Sydney1 Best Effort 100Mbps Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes VPN Connectivity 100Mbps Yes Yes Yes N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Guaranteed 200Mbps Yes Yes Yes N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A 1Gbps Yes Yes Yes N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Table 14 : VPN Connectivity Availability 45

46 Features Best Effort: A plan that the maximum value of available bandwidth for Customer is fixed. The actual bandwidth that is available for Customer is depending on the usage of the other Customers, the circumstances of infrastructure, and so on. Best Effort 100Mbps: allows a maximum bandwidth upstream and downstream burstableup to 100Mbps Guaranteed A plan that is designed to Guarantee the usable bandwidth for Customer. Transmission speed is Guaranteed. The Guaranteed type only guarantees the communication bands that pass through the VPN Gateway. In order to guarantee the communication bandwidth that the vfirewall and vload Balancer pass through, it is necessary to have separate contracts for suitable number of firewall resources and load balancer resources. Guaranteed 100Mbps/200Mbps/1Gbps Restrictions The Guaranteed type only guaranteed the communication bandwidth that pass through the VPN Gateway. In order to guarantee the communication bandwidth that the vfirewall and vload Balancer pass through, it is necessary to have separate contracts for a suitable number of fireall resources and load balancer resources. NTT Communcations may change VPN settings for maintenance and monitoring. You cannot change or delete the settings that are set bu NTT Communications. Communication interruptions might occur when VPN Connectivity settings are changed, If you use the Internet Connectivity and VPN Connectivity in combincation, direct back and forth communication between Internet and VPN via vfirewall or Integrated Network Appliance will not be possible. APGW Connectivity segment setting is not necessary in Customer Portal supported VPN Connectivity(only available in Yokohama DC). And 1Gbps Guaranteed plan is not available Server Segment Overview Server Segment is a L2 segment which interconnects multiple network objects that constitute Enterprise Cloud. One Server Segment will be provided as a standard menu. Server Segments are used to connect VMs, vfirewall, vload Balancer and Service Interconnectivity to architect a system with complex network configuration. Japan North America Europe APAC JP US UK DE FR SIN HK MY TH AU Menu Yokohama No.1 Kansai1 Saitama No.1 San Jose Lundy Virginia Sterling Hemel Hempstead 2 Frankfurt 2 Paris 2 Singapore Serangoon Hong Kong Tai Po Malaysia Cyberjaya3 Thailand Bangna Australia Sydney1 Server Segment Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes 46

47 Table 15: Server Segment Availability Feature One Server Segment is provided as a standard at each Virtual Room at the beginning, which is free of charge (It is free up to two Server Segments.). According to orders by Customer, the number of Server Segments can be changed within the limits from 1 at minimum to 24 at maximum per Virtual Room. Any modification or additional Server Segment is subject to additional Charges Server Segment Minimum Maximum Increment When using vfirewall When using Integrated Network Appliance 1 24* 1 *Maximum Server Segments which can connect to INA are up to 7. For IP allocation, the following IPv4 segments are available to assign to Server Segments /24, /25, /26, /27,/28, and /29. Diagram 04: Server Segment Restrictions Customer may not use the following IP ranges for IPs assigned to Server Segments. 47

48 Japan North America Europe APAC JP US UK DE FR SIN HK MY TH AU Yokohama No.1 Kansai1 Saitama No.1 San Jose Lundy Virginia Sterling Hemel Hempstead 2 Frankfurt 2 Paris 2 Singapore Serangoon Hong Kong Tai Po Malaysia Cyberjaya3 Thailand Bangna Australia Sydney / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / /17 Table 16: IP Address restrictions IP Address Setting for DNS Server(Primary/Secondary),Default Gateway, and DNS Suffix. The parameter setting for each address differs depending on whether customer uses vfirewall or Integrated Network Appliance. vfirewall Integrated Network Appliance IP Address for DNS Server(Primary/Secondary) IP address specified by Customer or NTT Comunications. IP Address for Default Gatway Customer can assign the IP Address when creating Server Segment (Cannot be changed after use.) If it was not specified, vfirewall Active IP address is assigned. NTTCom will assign the IP Address. When the segment is connected to INA, Active IP address is assigned. It cannot be changed. When the segment is not connected to INA, Customer can specify the IP Address. It cannot be changed. When the IP Address is not specified, NTT Communacitions will assign. DNS Suffix IP address specified by Customer or no value. To add, delete, or set a Server Segment, you must submit an application form in Germany Frankfurt 2. One Server Segment which is provided as a standard menu when Customer start using the is always connected to vfirewall or Integrated Network Appliance. Server Segment cannot be deleted as long as the template exist on Private Catalog, when Virtual Machine which vnic connecting the Server Segment is converted. Customer s carried-in Global IP Address can be assigned to Server Segment. However, please not that there are following restrictions. - Please apply via Service Order Form when adding Server Segment with Customer s carried-in Global IP Address. 48

49 - The direct Internet transmission is not possible via vfirewall nor Integrated Network Appliance when using the Customer carried-in Global IP Address. NAT setting is necessary for the Global IP Address provided by NTT Communications. - If the registered name for IP Address under NIC organization and the representative contractor name of Enterprise Cloud Service does not match, the carriedin IP address would be considered as illegal Global IP Address and it cannot be supported. Also, we cannot guarantee the sustainability Service Interconnectivity Overview With Service Interconnect Gateway, Customer can connect Customer existing networks to the Enterprise Cloud without compromising on security. Japan North America Europe APAC JP US UK DE FR SIN HK MY TH AU Menu Yokohama No.1 Kansai1 Saitama No.1 San Jose Lundy Virginia Sterling Hemel Hempstead 2 Frankfurt 2 Paris 2 data Singapore Serangoon Hong Kong Tai Po Malaysia Cyberjaya3 Thailand Bangna Australia Sydney1 Service Interconnectivity Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Table 17: Service Interconnectivity Availability Features Diagram 05: Service Interconnectivity logical network diagram 49

50 2.7.5 Colocation Interconnectivity (CIC) Overview Colocation Interconnectivity is a service that provides a secure L2 connection between the Server Segment that NTT Communications provides and your system environment inside our colocation via our inter- network. Japan North America Europe APAC Menu Yokohama No.1 JP Kansai1 Saitama No.1 San Jose Lundy US Virginia Sterling UK DE FR SIN HK MY TH AU Hemel Frankfurt 2 Hempstead 2 Paris 2 Singapore Serangoon Hong Kong Tai Po Malaysia Cyberjaya3 Thailand Bangna Australia Sydney1 Colocation Interconnectivity Yes Yes Yes N/A N/A Yes N/A N/A N/A N/A N/A N/A N/A Table 18: Colocation Interconnectivity Availability Features You can use the following featuers in Colocation Interconnectivity. Feature Layer 2 (L2) Connection Overview A feature that connects the Server Segment NTT Communications provides and your system environment inside our colocation using the same Server Segment. 50

51 Layer 2 (L2) Connection For one colocation connection, you can have L2 connections with Server Segments (a maximum of 24 Server Segments) using tagging VLAN. The colocation connection is contructed of redundant physical devices (equipment and lines). The maximum bandwidth that can be used by one colocation is 1Gbps. After starting use, you can start/stop using the service by changing the communication bandwidth settings (1000Mbps/0Mbps), and add/delete VLAN from the Customer Portal. Connectable Colocations The colocations that can be connected differ according to Enterprise Cloud Service. The following are the colocations that can be connected. Enterprise Cloud Service Yokohama No.1 Kansai 1 Saitama No.1 Destination Colocation Yokohama No.1, Yokto No.2 and Tokyo No.3, Tokyo No.5, Tokyo No.6, and Saitama No.1 Kansai 1, Osaka (Dojima), Kyoto No.2 Yokohama No.1, Tokyo No.2, Tokyo No.3, Tokyo No.5, Tokyo No.6 and Saitama No.1 Hemel Hempstead 2 Hemel Hempstead 2 You can connect to multiple colocations at each Enterprise Cloud Service Restrictions Please set active and standby redundant configuration in Customer L2 switch interface. Communication cutting by operation of a Customer s redundant control becomes the outside of SLA. If a failure occurs on the communication path is automatically switched to another route and communications are restored in approximately 30 seconds. Within the Customer system environment that is connected by colocation interconnectivity, one MAC address can be used for 1 IP Address. Multiple Links (two or more contracts) can be increased connection bandwidth between Enterprise Cloud and Colocation. But one Server Segment can be connected to one link. 51

52 2.7.6 On-Premises Interconnectivity (OPIC) Overview On-Premises Interconnectivity (OPIC) enables Customer to connect Customer's onpremises systems with Enterprise Cloud via the Internet using SDN technology. Customers can continue to use the existing IP Addresses of their on-premises systems. Japan North America Europe APAC JP US UK DE FR SIN HK MY TH AU Menu Yokohama No.1 Kansai1 San Saitama Virginia Jose Hemel No,1 Sterling Frankfurt 2 Lundy Hempstead 2 Paris 2 Singapore Serangoon Hong Malaysia Thailand Australia Kong Cyberjaya3 Bangna Sydney1 Tai Po On-Premises Interconnectivity Yes N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Table 19: On-Premises Interconnectivity Availability vfirewall (Hardware Type) Overview NTT Com Group offers a vfirewall which can be configured and managed from Customer Portal. Firewall employs mainstream security technology that has been optimized for virtual environments. The following diagram explains the security zone policies deployed within the virtualized environment to ensure security. Japan North America Europe APAC JP US UK DE FR SIN HK MY TH AU Menu Yokohama No.1 Kansai1 San Saitama Virginia Jose Hemel No,1 Sterling Frankfurt 2 Paris 2 Lundy Hempstead 2 Singapore Serangoon Hong Malaysia Thailand Australia Kong Cyberjaya3 Bangna Sydney1 Tai Po vfirewall (Hardware Type) Yes Yes Yes Yes Yes Yes N/A N/A Yes Yes Yes Yes Yes Table 20: vfirewall Availability Features The following actions can be completed within Customer Portal for vfirewall: Set Filter Rules Set NAT/NAPT Rules Set Routes Set Services Set Addresses Set Resources View Performance View Alerts 52

53 NTT Com Group currently provides vfirewall in packages of resources. Table 20: vfirewall package of Resources vfirewall is mandatory for every Virtual Room and subject to Charge. o o o o 1 vfirewall is available per Virtual Room; Minimum value: Resource Level 1 per vfirewall; Maximum value: Resource Level 50 per vfirewall; * You can change the number of vfws from Customer Portal up to 10. If the number of vfw that customer requires is above 11, please contact NTTCom separately. In increments of 1 Resource Level; Internet Transit Connection If Customer are using Internet Connectivity at the same vfirewall will establish a connection with Internet Transit. The unique IP address block provided by NTT Com Group is then allocated to the Internet Transit and IP connectivity to the Internet Gateway is provided VPN Transit Connection For Customer using VPN Connectivity to connect to Arcstar Universal One, vfirewall will establish a connection with the VPN Transit. The IP address block for the VPN Transit is borrowed from the Customer VPN and allocated to VPN Transit. Once this is authorised the IP connectivity to VPN Gateway is then provided. As for the IP addresses allocated to the vfirewall, 2 arbitrary IP addresses are selected from the IP address block for VPN Transit and these addresses are configured as active or standby, respectively Packet Filtering Settings NTT Com Group will provide the function for setting the policy of packet filtering through 53

54 vfirewall. The following settings can be specified /amended from within Customer Portal for filtering IP packets. The network interface for vfirewall on which packet filtering is performed can be selected from Internet Transit, VPN Transit and Server Segment The IP address or IP address group can be configured for the source IP address The type of service group of TCP/ UDP ports and ICMP can be configured for the source service. The IP address or IP address group can be specified for the destination IP address. Type or service group of TCP/ UDP ports and ICMP can be configured for the destination service. A permission or rejection can be specified for action. Please note that Packet filtering is not set when starting to use this service. If packet filtering is not set, all communications will be rejected. Customer Portal also includes a packet inspection function, blocking illegal access by reading packet data which pass through the vfirewall and dynamically open and close the port according to contents NAT/NAPT settings On vfirewall, the NAT/NAPT setting function for configuring address conversion and address port conversion between the Internet Transit and the VPN Transit, and Server Segments is provided. An IP address can be configured for NAT/NAPT but varies depending on the network on which NAT/NAPT is performed. For the Internet Transit, a Global IPv4 Address used in the Internet Connectivity can be configured. For the VPN Transit, an IPv4 address allocated to VPN Transit can be configured in the VPN Connectivity. For the Server Segment, any IP address can be configured. Please note that the maximum number of NAT/NAPT setting rules that can be configured for one vfirewall is Other Settings The following settings can also be configured within Enterprise Cloud Customer Portal Routing: This allows configuration of the static routing Address group setting: This allows for grouping IP addresses in order to enhance the convenience of setting on Customer Portal. These can then be used in the packet filtering and NAT/NAPT, and routing settings. Service group setting: This allows Customer to define and group types of TCP/UDP ports and ICMP which can then be used in the packet filtering setting. 54

55 Adding additional resources If Customer would like to upgrade/downgrade their vfirewall resource as per the table above, they are able to complete this using Customer Portal. Once a Customer has selected which resource they require this will be changed immediately vload Balancer (Hardware Type) Overview Within the Customer Portal Customer can easily configure and manage their load balancing rules. Japan North America Europe APAC JP US UK DE FR SIN HK MY TH AU Menu Yokohama No.1 Kansai1 Saitama No,1 San Jose Lundy Virginia Sterling Hemel Frankfurt 2 Paris 2 Hempstead 2 Singapore Serangoon Hong Kong Tai Po Malaysia Cyberjaya3 Thailand Bangna Australia Sydney1 vload Balancer (Hardware Type) Yes Yes Yes Yes Yes Yes N/A N/A Yes Yes Yes Yes Yes Table 21: vload Balancer Availability Features The following actions can be completed within Customer Portal for vload Balancer: Set Virtual IP and Balance Rules Set Server Groups Set Real Servers Set Health Checks Set Routes Set Resources View Performance View Alerts vload Balancer offers three types of load balancing algorithms, round robin, Source IP Hash and Least Connection. Server persistency is also available using Source IP and Cookie Insert. Please note however that cookie insert is only available for balancing HTTP traffic. NTT Com Group currently sells vload Balancer in packages of resources. The below table illustrates the different resources that are available. 55

56 Table 22: vload Balancer resource level vload Balancer is Optional and subject to Charge. o 1 vload Balancer is available per Server Segment; o Minimum value: Resource Level 1 per vload Balancer; o Maximum value: Resource Level 10 per vload Balancer; o In increments of 1 Resource Level; Restrictions When purchasing vload Balancer, multiple IP addresses for Server Segment would be used. Additional IPs would be required when increasing the resource level of vload Balancer. IP addresses required: 1 to 2 Resources: 4 3 to 4 Resources: 5 5 to 6 Resources: 6 7 to 8 Resources: 7 9 to 10 Resources: 8 (Of the IPs, 3 IPs would be used to have a redundant connection between vload Balancer and Server Segment using methods such as VRRP. Additional IPs are used to successfully deliver traffic as a vload Balancer, which differ per vload Balancer.) Integrated Network Appliance Overview Integrated Network Appliance is a service which provides the virtual network appliance which has following functions as a default. 56