Advantages
CSS has the following features and advantages.
Efficient and Ease of Use
You can get insights from terabyte-scale data in milliseconds. In addition, you can use the visualized platform for data display and analysis.
Flexible and Scalable
You can request resources as needed and perform capacity expansion online with zero service interruption.
Easy O&M
CSS is a fully-managed, out-of-the-box service. You can start using it with several clicks, instead of managing clusters.
Kernel Enhancement
Speed up data import, decouple storage and computing resources, isolate read and write requests, and take advantage of our high-performance vector search engine – all these at an affordable price.
High Reliability
You can choose to trigger snapshots manually or on a periodic basis for backup and restore snapshots to the current or other clusters. Snapshots of a cluster can be restored to another cluster to implement cluster data migration.
- Automatic backup using snapshots
CSS provides the backup function. You can enable the automatic backup function on the CSS management console and set the backup period based on the actual requirements.
Automatic backup is to back up the index data of a cluster. Index backup is implemented by creating cluster snapshots. For backup of the first time, you are advised to back up all index data.
CSS allows you to store the snapshot data of Elasticsearch instances to OBS, thereby achieving cross-region backup with the cross-region replication function of OBS.
High Security
CSS ensures secure running of data and services from the following aspects:
- Network isolation
The network is divided into two planes, service plane and management plane. The two planes are deployed and isolated physically to ensure the security of the service and management networks.
- Service plane: refers to the network plane of the cluster. It provides service channels for users and delivers data definition, index, and search capabilities.
- Management plane: refers to the management console. It is used to manage CSS.
- VPC security groups or isolated networks ensure the security of hosts.
- Access control
- Using the network access control list (ACL), you can permit or deny the network traffic entering and exiting the subnets.
- Internal security infrastructure (including the network firewall, intrusion detection system, and protection system) can monitor all network traffic that enters or exits the VPC through the IPsec VPN.
- User authentication and index-level authentication are supported. CSS also supports interconnection with third-party user management systems.
- Data security
- In CSS, the multi-replica mechanism is used to ensure user data security.
- Communication between the client and server can be encrypted using SSL.
- Operation audit
Cloud Trace Service (CTS) can be used to perform auditing on key logs and operations.
High Availability
To prevent data loss and minimize the cluster downtime in case of service interruption, CSS supports cross-AZ cluster deployment. When creating a cluster, you can select two or three AZs in the same region. The system will automatically allocate nodes to these AZs. If an AZ is faulty, the remaining AZs can still run properly, significantly enhancing cluster availability and improving service stability.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot