Table of Contents:

• SpeedCloud 2.0 Overview and Operation Flow Chart

Onboarding:

• Creation of the Customer in the Partner Account
• Creating projects in customer accounts

Virtual Machines:

• Creation of a Virtual machine
• Accessing the Virtual Machines
• Changing OS of a Virtual Machine
• Upgrading the compute resources for a Virtual Machine
• Firewall management of a Virtual Machine

Load Balancers:

• Creation of Load Balancer
• Load Balancing Algorithms
• Attaching and detaching of VM to the Load Balancer
• Managing the Load Balancer

Block Storage Devices:

• Creation of Block storage devices
• Resizing block storage devices
• Working with snapshots
• Detaching block storage device from a VM
• Attaching block storage device to a VM
• Deletion of block storage devices

Network Management:

• Creation of the VPC Network
• Creation of the Elastic Network
• Firewall management

Billing:

• Billing Summary
• Invoices in billing summary

FAQs

SpeedCloud Overview and Operation Flow Chart

Enterprises and organizations must deliver modern applications and services leveraging cloud native technologies and adopt true multi-cloud approach for increasingly diverse application architecture. These technologies offer efficient and effective IT services, but it can be challenging for organizations to realize these benefits without proper technological solutions and platform. Building innovative cloud native applications requires cloud-native ready infrastructure with specific feature-sets to deliver expected results with robustness and stability without compromising on performance.

NxtGen SpeedCloud™ offers unified infrastructure platform to streamline application development efforts across their heterogeneous IT environments. SpeedCloud platform empowers organizations to deliver distinctive application deployment model by providing both Virtual Machines and Container management platform under single manageability control pane thus reducing the friction of maintaining siloed infrastructure environments. These organizations thus gain additional value for their DevOps and Development teams by generating more revenue and making their application development efforts more friction less and cost effective.

The SpeedCloud Portal is accessible over https://cmp.speedcloud.co.in. SpeedCloud 2.0 offers a unified view under a single portal (for Partner and Customers) for managing various resources and enables deployment over multiple compute zones. SpeedCloud 2.0 also offers additional services in addition to the IaaS services. SpeedCloud 2.0 brings self-service network models with built-in security features and other various networking features.

Portal URI: https://cmp.speedcloud.co.in

Onboarding

Below is the overview of the flow of onboarding of partners and the customers.

Creation of customer in the Partner Account:

Once you’re successfully onboarded as a partner on SpeedCloud, you may go ahead with the addition of your end-customer. Please login to https://cmp.speedcloud.co.in with the provided credentials from your Account Manager or SpeedCloud Sales Representative.

Assuming you’ve the partner access with you, please perform the below steps to onboard any customers on the portal:

1. Login as a partner at https://cmp.speedcloud.co.in/
2. Click on “Create a New Customer” (or) Navigate to “Customers” on the navigation pane and click “Onboard Customer”.
3. Please submit all the mandatory details of the customer account.
4. Important note on “Send Credentials Email to Customer”: Check the box only if the partner is willing to share the credentials to the customer. If this is checked, the credentials to the customer account will be sent over an email. The customer will be able to login on the same portal and manages resources.
5. Click “Save” to proceed with the account creation.
6. A list of customers can be found under “Customers” tab in the navigation pane.
7. Now that the customer account has been created, the partner can now login to the customer account using any of the methods defined below.
   i. Go to “Customers” tab from the navigation pane, click on the customer’s name and click “Login as Customer”
   ii. Or as an easier option, choose the customer from the drop-down menu.
8. The partner should now be able to perform operations in the customer account.

Creating Projects in customer accounts:

A project is a logical container for various resources. Resources can be logically grouped under projects for better management. For example, you can have projects for “development” and “production” projects.

Below is the procedure to the followed for creating projects:

1. Login to a customer account from any of the methods described in the previous sections. To create a project, select “Create a New Project”.
2. Please fill the mandatory details and click on “Create Project”.

On the successful creation of a project, the project will start appearing on the dashboard.

Virtual Machines

Virtual Machines are the compute instances with your preferred Operating Systems. SpeedCloud 2.0 Offers various Operating Systems for Linux-based and Windows. Virtual Machines come under the IaaS model. Flexibility to choose among plans is offered.

Creation of Virtual Machines:

1. Login as partner at https://cmp.speedcloud.co.in
2. In the quick navigation icon, select “Compute”.
3. Choose the name of the project where this Virtual Machine must be created. You can also change the project if we’re working on projects from the drop-down menu. Click on “Create New Instance” and a new instance creation wizard appears.
4. In the “Create New Instance” wizard, please choose the compute infrastructure (a Data Centre) where the instance has to be created. Please choose “Bengaluru” for creating the instance at NxtGen’s Bangalore Data Centre.
5. Choose your preferred network model and the description is as below.

SpeedCloud 2.0 offers flexible networks and network tiers under different models. There is no limit on the number of networks created. All the created Software-defined networks are very flexible and are feature-rich. The networks are behind a NAT router, and offers Private IPv4 Addresses to all your Virtual Machines. Public IP addresses are handled transparently by a device known as NAT router. By default, the instance network performance has a hard limit of 5 Gbps on the private network; i.e., communication over the private network between or among the Virtual Machines is achievable up to 5 Gbps. Please also note that the networks are automatically created without any further configuration during the instance creation. For any of the network models, you may or may not choose to get a Public IP, depending on your requirement.

• Elastic Networks – Elastic Network offers a flexible Virtual Network and has a simplified network operation. It offers basic functionalities like Firewall, Egress Firewall functionality, Load Balancer and Remote Access VPN. This is the recommended network model for most cases.

• VPC Networks – VPC Networks offer network tiering, wherein there can be many networks and “routing” can be achieved across. VPC networks are same as Elastic Networks and have same features the Elastic Network has, but offer additional features like “Site to Site VPN”, fine-grained “Network Access Control Lists”.

Notes: The first VPC network will be automatically created, whereas on the subsequent VM creations, we’re supposed to pick the VPC and the VPC Network.
For any of the network models, you may or may not choose to get a Public IP, depending on your requirement.

6. You may also choose to create the “Elastic Network”, or select already existing elastic networks.

7. Choose among various Operating Systems.

8. Choose the size of the Virtual Machine in-terms of vCPUs, vRAM and Storage. The sizing can be customized by choosing the custom plan or picking from already provided packages.

9. There are a variety of addons offered on SpeedCloud 2.0 and are defined below
   a. Antivirus
   b. Backup2Cloud
   c. Managed Services
   d. Database Managed Services
   e. RDP & VPN
   f. Firewall
   g. Additional Data Transfer

10. Optional: Personalize the Virtual Machine by running a startup script on only instance creation and during the instance change.

A start-up script is known as “userdata”, and this is only supported for Linux Guests. The “userdata” is executed on only first boot. For example, if you want the “apache2” package installed on your Virtual Machine, you can do so here.

12. Select SSH Keypair to be associated with VM.

Users can bring their own SSH Public Key or create a keypair from the portal itself.

13. Enter the hostnames and the description for your Virtual Machine.
14. Select the server quantity and billing method as Monthly / Quarterly / Semi-Annually / Yearly from the dropdown so that billing is generated according to the selected billing method.
15. And click on review and deploy so that VM/instance is created successfully.

Accessing the Virtual Machines:

Accessing the Windows Virtual Machines over RDP:

1. All Windows Virtual Machines can be accessed over the “Remote Desktop Protocol” Client. Native Clients can be found on Windows and Linux has a wide variety of clients like “Remmina”.

Accessing the Linux-based VM using SSH Client:

There are a wide range of SSH Clients found in the Linux-based distributions and Windows as well. You may use these utilities to perform SSH login. Linux -based Virtual Machines on SpeedCloud will by default come without a password set, and the access is allowed only when the Private Key is submitted. The private key will only be obtained once during the VM creation. You may also go with your Public Key during the VM creation, provided you’ve access to your private key.

a. Download the SSH Private Key file on to your computer.
b. On Windows, open any SSH Client, the Command Prompt also contains SSH Client. Please use the below command to connect.

ssh -i </path/to/keyfile> username@<IP>

For example: If the downloaded file name is MyKey-new-166456321.txt and is found at the Downloads folder

ssh -i "Downloads\john-doe-bangalore-166456321.txt" centos@103.177.224.129

Accept the fingerprint, and it should land in the Virtual Machine.

Below are the default usernames for Virtual Machines (These can be found on the portal)

• For Ubuntu Operating Systems, the username is "ubuntu"
• For CentOS Operating Systems, the username is "centos"
• For Debian Operating Systems, the username is "debian"
• For openSUSE Operating Systems, the username is "opensuse"

c. You may switch to the root user by specifying the command “sudo -i”

Changing the OS of the Virtual Machine:

Considerations: Please note that the OS change cannot happen between hetrogenous Operating Systems. To be specific, please note that the Linux-based Virtual Machines cannot be changed to Windows and vice-versa. Only homogenous changes are permitted. For example, the Linux-based distribution "Ubuntu 20.04" can be changed to "CentOS 8 - Stream"; Windows Operating System "Windows Server 2019" can be upgraded to other Windows only, like "Windows Server 2016". Proceed with utmost caution, as this will erase all the data on the OS disk. Any additional block storage devices will remain unaffected.

• To change the Operating System of the Virtual Machine, please click on the Virtual Machine and navigate to Settings
• If your current Virtual Machine is "CentOS 7.9", let us try to change it to "Ubuntu 20.04 LTS".
  
• Choose the desired Operating System under "Change Operating System" section.
  
• Apply the changes.
• If your Operating System is Windows, similar fashion can be applied for Windows as well. Please choose the desired Operating System which are Windows.

Upgrading the compute resources for a Virtual Machine:

Considerations: Please note that the VM will be automatically restarted on the Change Plan.

• To change the resources "Change Plan" in the VM "Settings".
• Select the "Change Plan", by reading the notice. Please enter the values for CPU, Memory and Storage (ROOT DISK)
  

Load Balancers

The platform also offers a Layer-4 Load Balancer (a “Network Load Balancer”) with basic Load Balancing functionalities. The Load Balancer also offers active L4 health checks, and ensures traffic reaches to only healthy backend servers.

Creation of a Load Balancer:

1. In the quick navigation icon, select Load Balancer option.
2. Click on the “Create” button and select the zone “Bengaluru”.
3. Choose the project where the LB has to be placed.
4. Choose the existing networks.
5. Choose the existing Virtual Machine or create a new Virtual Machine to be added behind the Load Balancer.
6. Set forwarding rules – Create the forwarding rules so that the traffic proxied through the Load Balancer. Please also note that SSL is by default passed-through to your Backend Servers.

At least one rule to be configured is mandatory, though you can add and set multiple rules.

7. In Advanced settings select the protocol from the dropdown as TCP/UDP/TCP Proxy and Algorithm as either one among Round Robin/Least Connections/Source.
8. Name of the “Load Balancer” must be unique and contain alphanumeric characters, dashes, and periods only.
9. Select the billing method as Monthly / Quarterly / Semi-Annually / Yearly from the dropdown so that billing is generated according to the selected billing method.
10. The Load Balancer will be created once the “Create Load Balancer” is clicked.

Load Balancing Algorithms:

A Network Load Balancer balances the "connections" among backend servers. There are 3 industry-standard algorithms available to choose one among them. The choice depends on your backend applications and how well the load has ro be balanced.

Round-Robin: The round‑robin load balancer forwards a client request to each server in turn. When it reaches the end of the list, the load balancer loops back and goes down the list again (sends the next request to the first listed server, the one after that to the second server, and so on).

Least-Connections: The least connections load balancing technique takes into account the current number of active connections on each server. The load balancer forwards the new request to the server that is currently serving the lowest number of active connections.

Source-based Balancing: Source IP Hash load balancing uses an algorithm that takes the source and destination IP address of the client and server to generate a unique hash key. This key is used to allocate the client to a particular server. We can consider this to the "server affinity".

Attaching and detaching of VM to the Load Balancer:

1. Please navigate to the "Network" icon on the navigation pane, and choose “Load Balancer” and click “Manage”.
2. Choose the name of the “Load Balancer”, and click on “Attach Instance”.
3. On pressing “Save”, the instance should be added behind the Load Balancer.
4. To detach, select the created load balancer where you wanted to detach the VM from, on the Overview Tab, click the icon and “confirm detach”.

Managing the Load Balancer:

The load balancer can also be edited or managed once created. The mentioned below steps are to be followed to manage the load balancer.

1. In the left Navigation Pane, click on networking, select “Load Balancer” and click “Manage”.
2. Select the “Load Balancer Name” and click on the “configuration” tab.
3. You may perform changes to “labels”, “algorithm” and the “protocol”.
4. Choose “Forwarding Rules” to add or modify forwarding rules.
5. You may also delete the “forwarding rules” by clicking on “delete” icon.

Block Storage Devices

Block Storage are the additional block volumes or mainly “data volumes” which can be provisioned and attached to the Virtual Machines. These can be attached to the Virtual Machines and manually formatted.

Creation of Block storage devices:

1. From the quick navigation icon, please choose the “Block Storage” icon.
2. To create a block storage device, please click on “create”, choose a project, “select an instance to be attached to” and “name the volume”.
3. Select the “size” under the “volume”.
4. Under configuration choose the default option “manually mount and format”.
5. Select the billing method as Monthly / Quarterly / Semi-Annually / Yearly from the dropdown so that billing is generated according to the selected billing method and choose to create the block storage.
6. Once the request has been created, please wait for the storage device to get created and appear on the portal. Please also remember that it attaches to the Virtual Machine as well.

Resizing block storage devices:

Note: Shrinking of block storage devices are unsupported! This is a safety mechanism because the content managed by the filesystem may be scattered in the end-blocks, thus if allowed, causing the shrinking to lead permanent data loss!

1. Please navigate to the “Block Storage” icon and select “manage”.
2. Please choose the block storage device and select the “Resize Block Storage” and choose the “size”.
3. Please review the billing and click "Resize Volume".

Creation of disk snapshots:

Snapshots are the point-in-time copy of the state of the disk. SpeedCloud 2.0 currently only Disk-level snapshots and are full-snapshots. Incremental snapshots are not supported. The snapshot captured will only belong to a particular VM, and no other functionalities can be done. For example, it won't be possible to convert it to an OS template, or convert it as a disk and attach it to other Virtual Machine as a secondary disk.

1. In the navigate pane on the left, please choose the "Storage" icon, and “Manage” the “Snapshots”.
2. Please click on “take snapshot” button and give it a “name”.
3. Please wait for the snapshot to be created. You may also go ahead with the restoration of the snapshots by navigating to “Snapshots” and “Manage” buttons. The “restore snapshot” can be made use to restore to the state in the snapshot. Please proceed with caution!

Detaching block storage device from a VM:

1. On the navigation pane to the left, please choose "Storage" icon, select “Block Storage” and choose “manage”.
2. Please select the volume and click on “Detach Instance”.
3. Please note that this operation results in forceful removal of the block device from the VM. Please ensure the volume is unmounted from the Operating System for clean removal.

Attaching block storage device to a VM:

1. On the navigation pane to the left, please choose "Storage" icon, select “Block Storage” and choose “manage”.
2. Please select the block storage device and click on “Attach to Instance”.
3. Please choose the Virtual Machine where this device must be attached.

Deletion of block storage devices:

1. On the navigation pane to the left, please choose the "Storage" icon, select “Block Storage” and choose “manage”.
2. Please select “delete” button on the block storage you’d wish to delete.
3. Please proceed with caution during the deletion of the Block Storage device.

Network Management

Below are the network models supported on SpeedCloud 2.0:

• Elastic Networks – Elastic Network offers a flexible Virtual Network and has a simplified network operation. It offers basic functionalities like Firewall, Egress Functionality, Load Balancer and Remote Access VPN. This is the recommended model for most use-cases.

• VPC Networks – VPC Networks offer network tiering, wherein there can be many networks and “routing” can be achieved across. VPC networks are same as Elastic Networks and have same features the Elastic Network has, but offer additional features like “Site to Site VPN”, fine-grained “Network Access Control Lists”. VPC networks are chargeable at additional rates.

Please choose one between the models for the creation of the networks.

Creation of the VPC Network:

1. In the quick navigation icon, please choose the “VPC” button.
2. Choose “Create VPC Network”.
3. Select the “Zone” and the “Project”.
4. Please choose your own network ranges as per RFC 1918 or let the platform generate it for you.
5. Please add further details and click on “Create VPC”.

Creation of the Elastic Network:

1. In the left navigation pane, please choose "Network icon" and choose “Network”. Please choose “Elastic” in this case.
2. Please select the zone.
   
3. Please select the “project”, “name” and the “description”.
4. Please enter any additional details. You may also choose any RFC 1918 private IP address ranges.
5. The elastic network would be successfully created on clicking “Create Network”.

Firewall Management:

SpeedCloud 2.0 offers rules for inbound firewall management. Below are the operations to be performed for Elastic and VPC Networks for managing the traffic destined towards the Virtual Machines.

The below steps are only applicable “for Elastic Networks” as the “Firewall” functionality is available only on “Elastic Networks”.

1. Please navigate to any of the VMs, then Settings and choose the “Firewall” option. Please enter the needed firewall rules.
2. And click on “Add Firewall Rule”.

The below steps are only applicable “for VPC Networks” as the “ACL” functionality is available only on “VPC Networks”.

1. In the Navigation pane, choose “Network” and select “Manage”.
2. Choose the name of the VPC network and choose “Network ACL Lists” and click on “Add Network ACL List”.
3. Please give it a name.
4. Select the created ACL list name and choose “Add ACL Rule”.
5. Choose some example rules as per the screenshot below.
6. We can also add the range of ports.
7. And Select Attach network for the ACL list created.
8. Now under Choose VPC Subnet select the required network and click on Attach. The rule will be implemented successfully.

Billing

Billing on Speed Cloud 2.0 works in a subscription fashion. In-line with modern-day apps and services, subscription-based billing models are an efficient way to deliver service value. This not only eliminates heavy upfront costs for any service purchase, but also gives you the flexibility to cancel any time and pay for only the amount or duration of use.

Billing Summary:

Below is the list of availability in the billing section:

• Current Usage
• All time consumption
• Summary

1. Current Usage: The services billed hourly, monthly, and annually will be displayed.
   
2. All-time Consumption: This is the all-time charges for your all billing period.
   
3. Summary: The section consists of information such as customer details, service, Description, created at, Billing cycle, Price, Service period, Total usage, Status, Last invoice date and next renewal date details.
   

Invoices in Billing Summary:

To check the invoice details, follow the steps below:

1. To navigate to billing section, choose the Billing icon on the left-hand side > Under Billing Summary > Go to Description > Tap on the service of invoice required > Click on the dropdown icon for the detailed information.

FAQs

1. Can I take full VM Backup on SpeedCloud?
   Ans: Backups are enabled by Veeam. SpeedCloud also offers disk-level snapshots.

2. Can I connect to my Virtual Machines remotely using VPN?
   Ans: Yes, the platform offers native support to create Remote Access VPN. Native windows clients can be made use of.

3. How many numbers of users can be added to Remote access VPN?
   Ans: There can be any number of Remote Access VPN Users.

4. Will change in OS template cause for the additional charges in billing?
   Ans: No, there are no additional charges.

5. Can I establish Site to Site VPN connection?
   Ans: Yes. Platform offers Site to Site VPN connectivity but only with VPC Networks.

6. What is the maximum storage limitation available for Block storage?
   Ans: You can scale from 1GB up to 16TB.

7. What would be the billing price of the Snapshots?
   Ans: Please connect with your Account Manager to know the updated prices.

Enabling / Disabling the feature:

1. Please navigate to Network -> Settings -> Remote Access VPN and toggle the enable / disable button.
2. Once the feature is enabled, you may go ahead with the addition of new users.

There are a two parameters to consider and those are

VPN Gateway Address: It is the Public IP Address and available on the portal

IPSec Pre-Shared Key: It is the shared key where Server and Client are supposed to know. This is available on the portal as well.

Below is the procedure to connect to your Virtual Networks over a Secure Tunnel.

Windows Clients:

Windows offers native VPN Clients for this purpose.

1. Go to Control Panel and navigate to the settings described

2. Configure the VPN

3. Initiate the VPN connection

Once the above procedure is followed, the clients should be able to connect to the remote networks i.e., running on the cloud.

Common Issues:

Loss of Internet Connectivity:

You may start to experience the loss of Internet connectivity after connecting to the VPN. This is because the default gateway of your machine will be set to the VPN's IP Address. Since, the SNAT is not enabled at the Remote Access VPN Gateway, the access to the Internet will be lost. The below procedure can be used on Windows 8, Windows Server 2016 and above. This has to be executed in PowerShell.

1. Disable the "Default Gateway" feature in the created VPN Settings.

2.   Enable "split-tunneling"

PS > Set-VPNConnection -Name "VPN01" -SplitTunneling $True

Assuming the VPN connection is created, and the name of the VPN is "VPN01", we'll execute the below.

PS > Add-VpnConnectionRoute -ConnectionName "VPN01" -DestinationPrefix "192.168.215.0/24" -RouteMetric 1

Whereas "192.168.215.0/24" is your Virtual Network running on SpeedCloud. Please replace this if the Virtual Network Address is different.

3.   On reconnecting to the VPN, we should see no disruption to the Internet and VM connectivity.

Contents:

1. Overview
2. SSH Authentication
3. Choosing your SSH Clients
4. Logging in to your system using the provided private key
5. Things to do after login
6. Common issues

Overview

So, you've purchased the resources on SpeedCloud and you're perhaps wondering what you'd do with something known as the "SSH Private Key" or troubleshooting the issues with your credentials, then you're at the right place.

SSH Authentication

SSH Server and Clients support a huge range of authentication mechanisms wherein "password" and "publickey" authentication methods are the most common ones. The classic ones are "passwords" and one of the modern ones are the "key-based" authentications.

SpeedCloud offers "SSH Public Key Authentication" out-of-the-box, so eliminating any weak bootstrap passwords. You may use your own keys, or generate new ones or replace existing ones at your will.

Choosing your SSH Clients

There are a wide range of SSH Clients in the market. Some of the popular ones are

1. Windows built-in SSH Client

2. SSH client from the ssh packages on your Linux-based distribution

3. External clients like puTTY, Termius etc.,

Logging in to your system using the provided private key

You would have received your key in various modes of the communication from SpeedCloud Sales and on the SpeedCloud Cloud Management Portal. Download and place the Key file on your local system.

Common usernames:

For Ubuntu Operating Systems, the username is "ubuntu"

For CentOS Operating Systems, the username is "centos"

For Debian Operating Systems, the username is "debian"

For openSUSE Operating Systems, the username is "opensuse"

Using Command Prompt or the Linux Terminal

Windows:

Let's say your file is at the location "C:\Users\<your_uname>\Downloads\mykey.txt"

Refer the common usernames section, and on the command prompt

ssh -i "C:\Users\<your_uname>\Downloads\mykey.txt" centos@103.177.224.11

This should land you on the Operating System.

Linux-based:

Let's say your file is at the location "/home/<your_name>/Downloads/mykey.txt"

Refer the common usernames section, and on the command prompt

ssh -i "/home/<your_name>/Downloads/mykey.txt" centos@103.177.224.11

This should land you on the Operating System.

Yes, power users also can put their private keys on the .ssh  directory as .id_rsa and login without specifying the key.

Using puTTY

Open puTTY, input your username, additionally navigate to "Auth", and browse your private Key. This should get you in.

Using Termius

Please refer to the documentation of Termius.

Things to do after login

1. SpeedCloud Linux-based instances do not come with the passwords by default. Setting the password is very essential.
2. Let's say your SSH daemon crashed after performing some changes and you're unable to obtain the Shell over the network. In this case, you may navigate to the Web Console of the VM and login.
3. Setting the password won't allow Password Authentication over the network, so we're safe.

Common Issues

Though in all the scenarios you should be able to login, you may end up in seeing some of the below ones.

1. Bad key permissions

Make sure your key is only readable by you. At your local computer do,

chmod 400 </path/to/key>

2. Remote Machine Identification has been changed.

You would have reinstalled the Operating System which might have caused this.

ssh-keygen -R <IP_Address>

3. Unable to login

Ensure you're supplying the right key and ensure you're using the correct usernames.