IBM Cloud Virtual Servers for VPC features

For single-tenant virtual compute capacity free from users outside of your organization, you can create one or more dedicated hosts and associated dedicated host groups.

Use the IBM Cloud console, CLI or API with Terraform and SDK support. Everything is fully integrated into your IBM Cloud VPC environment.

Assign specific resources and policies to specific users based on required roles.

Create dedicated host groups for distinct functions. This is ideal if you have multiple business units and want to separate the physical compute infrastructure used by each unit.

A hypervisor-mounted, high-performance block storage volume is automatically created as a primary boot volume. You get 100 GB general-purpose input/output operations per second (IOPS) or 3 IOPS per gigabyte.

When you provision block storage for secondary volumes, you can quickly choose from predefined lOPS tiers or customize and define your own volume capacity and IOPS level.

Your block storage is stored redundantly across multiple, physical disks in an availability zone to prevent data loss due to failure of any singe component.

You can choose how to protect your data — either by using your own root keys or IBM-managed encryption.

NFS-based file storage for your virtual servers on IBM Cloud VPC is available for preview access in the Washington, Dallas, Frankfurt and London regions to select clients. Chat now or contact an IBM Sales representative for more information.

Quickly choose from predefined lOPS tiers, or customize and define your own capacity and IOPS level.

File shares are created in an availability zone within a region and can be shared with multiple virtual server instances within the same zone across multiple VPCs.

By default, fire share data are encrypted at rest with IBM-managed encryption.

Provision low-latency, high-throughput connections between your IBM Cloud VPC network and your service provider-managed WAN, or a client-managed backbone.

Securely connect your IBM Cloud VPC network to another private network with an IPsec site-to-site tunnel.

With IBM Cloud load balancers, you can distribute incoming traffic and provide protection against failure of an individual application server or public network.

Get private interconnectivity between global IBM Cloud data centers with single or multiple central hubs for easy provisioning and management.

Provides an open-source compatible client-to-site VPN solution that allows users to connect to IBM Cloud resources through secure, encrypted connections.

Enable a subnet and all attached virtual server instances to connect to the internet.

Reserve an IP address from a pool provided by IBM Cloud and associate it with your network interface.

Your subnets are contained within a single zone and do not span multiple zones. This helps improve your security, reduces latency and enables higher availability.

IBM Cloud takes the need for security seriously and understands the importance of being able to encrypt the data surrounding your virtual servers to keep it safe.

Protect your block storage data by bringing and using your own root keys when you create a standalone or virtual server instance data volume.

All storage options for your virtual server environments on IBM Cloud VPC have default IBM-managed encryption.

The physical disks used for your default virtual server instance storage are automatically self-encrypting with the strong AES-256 encryption standard.

Intel® Software Guard Extensions (SGX) ® built on 4th Gen Intel® Xeon® processors helps protects your data through hardware-based server security by using isolated memory regions known as encrypted enclaves. This hardware-based computation helps protect your data from disclosure or modification. Which means that your sensitive data is encrypted while it’s in virtual server instance memory by allowing applications to run in private memory space. Intel® SGX® is available on compute and balanced profiles in select regions. 

Intel® Trust Domain Extensions (TDX) on 4th Gen Intel Xeon-based IBM Cloud Virtual Servers for VPC are designed to help keep data secure and tamper-resistant from both internal and external forces at all data stages. Intel® TDX is available on compute and balanced profiles in select regions.