The page has been translated by Gen AI.

Overview

Service Overview

The Private Zone service is a service that builds a dedicated cloud infrastructure for the customer at the customer’s own facilities, using cloud services provided by Samsung Cloud Platform. This service is provided to customers who require security controls and regulatory compliance for user resources and data, as the customer resource domain is configured exclusively for the customer.

Notice

The cloud management area, which includes the cloud portal, console, and common services, can be used by leveraging the regions of the Samsung Cloud Platform.
- However, a dedicated line for connecting the Samsung Cloud Platform region and the customer’s (Private Zone installation location) requires additional configuration and incurs separate charges.
The Private Zone service builds the infrastructure directly in SDS, so it cannot be configured on customer equipment.
Cloud Management and Maintenance: Because the Samsung Cloud Platform continuously upgrades its services and features, maintaining the service requires that the regulations and requirements for platform deployment and service maintenance be met.

Features

Customer Dedicated Cloud Environment Setup: We provide a service that enables customers to create and manage their resources and data in the facilities (on-premises) designated by the customer. * The customer provides the floor space, power, and network connectivity required for cloud infrastructure setup at the designated facility, and SDS builds the cloud infrastructure, including hardware and software, to deliver a fully managed service.
External Connection Option: Resources are installed on-premises exclusively for the customer, and are configured to be connected via a dedicated line to the Samsung Cloud Platform for cloud service maintenance and management. The Samsung Cloud Platform provides fully managed services such as service maintenance and upgrades, incident handling, and technical support.
Minimum Configuration Unit: A minimum of 5 rack spaces is required, and if additional services such as GPU and high‑performance storage are needed beyond the basic service, the configuration can be expanded using additional racks (however, the infrastructure for rack installation, power, and customer network connectivity must be provided separately by the customer).
Efficient Cost Management: The area that manages the cloud uses the Samsung Cloud Platform configured in the public, and the area where customer resources are deployed is set up entirely on‑premises, allowing cost‑effective use of cloud services.
Platform Update and Upgrade: Software upgrades for the Private Zone service include device drivers, firmware, operating systems, platform software, cloud service additions, and feature upgrades for the infrastructure configured at the customer site.
- Providing added services and features may require additional H/W and S/W beyond the existing installed infrastructure, which could incur extra costs.
- Upgrades and patches for the Samsung Cloud Platform are a shared responsibility between cloud service operators and users.

Service diagram

Provided Functions

The Private Zone service provides the following features.

Resource provisioning and management: Provides creation, modification, deletion, and retrieval (CRUD) of cloud resources such as virtual servers, storage, and networks via API or console.
Resource Central Management: virtual instances (Virtual Server), virtual networks (VPC), databases, storage (Block Storage, Object Storage, etc.) manage the deployment and configuration of infrastructure resources centrally.
User Authentication, Authorization Management: Provides authentication (Authentication), authorization (Authorization), and access control (Access Control) functions for users and services.
Centralized Security Policy Management: Manages security-related policies such as network security, data encryption, and vulnerability management centrally.
Automation and Orchestration: Provides users with automation of complex tasks such as resource deployment, scaling, shrinking, and updating.
- Supports infrastructure and cloud service lifecycle management and workflow orchestration.
- Provides automation and management functions for IaaS services and PaaS services (DB, Container, security, etc.) and platform common services.
Monitoring and Performance Management: Collects cloud resource status, performance, logs, usage, etc. in real time for monitoring and provides alerts to users. * Provides operational visibility such as event management and operational status dashboards.
Policy and Governance: Provides cost management, tagging, alerts, usage tracking, and other cost and resource governance features. * You can manage users by organization and centrally set and apply security, compliance, and risk management policies in bulk.
Providing user and service interfaces: Supports users in directly managing cloud resources through various interfaces such as self-service portal, API, CLI, etc.

Component

The Private Zone service can be configured exclusively for a client, setting up the customer’s resource area (Data Plane) and connecting it to a region of the Samsung Cloud Platform. Customers can use both the public region of the Samsung Cloud Platform and a private zone located at the client’s site, and if desired, they can configure the system as a hybrid.

Cloud Management Plane (Control Plane)

It is a core area responsible for centralized management and control of cloud infrastructure and services, handling virtual resource provisioning and automation, user authentication and authorization, monitoring, and policy configuration. The cloud management domain is physically separated from the customer resource domain and operates independently.

Notice

The cloud infrastructure of the Private Zone is installed separately at the client site, but it is connected to the SDS Center via a dedicated line for common service maintenance and integrated management.
Users can deploy resources to the customer resource domain and store user data by using the various services and features provided by the Samsung Cloud Platform through the Console.
Even if an issue occurs in the cloud management domain, resources and data deployed in the customer resource domain are not affected; however, constraints may arise for certain services provided in the cloud management domain.

Customer Resource Area (Data Plane)

This is the area where virtual resources (virtual servers, virtual networks, storage, databases, etc.) required to configure the customer’s system are created and where customer data is stored.

Compute: Virtual Server, Bare Metal Server(option), GPU Server(option) etc
Storage: Block Storage, File Storage, Object Storage, Backup, etc.
Network: VPC, Security Group, Load Balancer, Firewall, etc.
Database: PostgreSQL, MySQL, MariaDB, EPAS, etc.

Notice

By default, this is the area where IaaS and PaaS services are created and deployed, and to use certain specialized services (GPU Server, Multi-node GPU Cluster, high‑performance File Storage, etc.), you must select the extension option.
In the public version, some Network services may not be available.

Rack configuration

The Private Zone service is configured within the customer’s resource area inside the client’s premises and is built with dedicated equipment in a dedicated rack.

Category	Rack configuration	Power capacity per rack
Customer Resource Area	5 Basic configuration: Network 2, Compute 2, Storage 1 Additional configuration: CPU, GPU, high‑performance storage, etc. can be added	Maximum 7.9 kWh

Provided specifications

During the consultation process for introducing a Private Zone, resources can be configured according to the customer’s desired setup, and the default specifications are listed below (additional configuration options require discussion).

Category	Basic specifications	Explanation
Computing Host	CPU 300 vCore Memory 3.2 TB	The default server type provided is the Standard type, and if a large‑capacity server is needed, additional servers or specification changes are required Standard type: a standard configuration (vCPU, Memory) commonly used (Server Type Link) In the default configuration, two Hosts are provided, and additional Hosts can be added one at a time (each Host provides 300 vCore of virtual servers) All services delivered on that Host, such as Virtual Server, Database, and Kubernetes Worker Node, are provided based on virtual servers
Bare Metal Server	Additional configuration	Configure the Bare Metal Server by selecting the required detailed specifications and quantity according to the customer’s requirements.
GPU Server	Additional configuration	GPU Server is configured by selecting the GPU specification (A100/H100) and the number of servers according to the customer’s requirements additional rack required
Block Storage	120 TB	High-performance (Full SSD) storage is provided, and capacity can be expanded in 20 TB increments.
File Storage	90 TB	Provided as HDD type, capacity can be expanded in 15 TB increments SSD can be provided if needed
Object Storage(SSD)	70 TB	Provided as SSD type and capacity can be expanded in 40 TB increments SSD can be provided if needed
Network	Standard 25 G	High performance (100 G) and Public Nework (CC-certified equipment, 25 G) options can be selected Performance is based on the server (Host) NW interface (NIC)

Table. Private Zone specifications

Provision status by region

The Private Zone service is available in the environments below.

Region	Provision status
Korea West (kr-west1)	Provide
Korea East (kr-east1)	Provide
South Korea South 1 (kr-south1)	Not provided
South Korea South 2 (kr-south2)	Not provided
South Korea 3 (kr-south3)	Not provided

Table. Private Zone availability status by region

Constraints

Since the Samsung Cloud Platform continuously upgrades its services and features, the regulations and requirements for deployment and service maintenance of the platform must be met to keep the service running smoothly.

The infrastructure for installing a Private Zone, including floor space, power and HVAC, and the infrastructure for connecting the customer’s network, must be provided by the customer according to the specified specifications.
Platform updates and upgrades
- Software upgrades for the Private Zone service encompass the entire stack, including related device drivers, firmware, operating system, platform software, cloud service additions, and feature upgrades.
- To use the added services and features, additional hardware and software may be required beyond the existing installed infrastructure, and additional costs may be incurred at that time.
- Upgrades and patches for the Samsung Cloud Platform are a shared responsibility between cloud service operators and users.
- Dedicated resources configured for the client must be connected to the SDS Center via a dedicated line for service delivery and operational management (the dedicated line cost is billed separately).

Preceding Service

There are no services that need to be pre-configured before creating this service.

Release Note

How-to guides