Compute Specifications
All CloudNexus compute instances utilize KVM-based virtualization with hardware-assisted VT-x/AMD-V acceleration. CPU pinning and dedicated memory allocation are enabled by default.
| Specification | Standard Tier | Compute-Optimized | Memory-Optimized |
|---|---|---|---|
| CPU Architecture | x86_64 (Intel/AMD EPYC) | Intel Xeon Gold / AMD EPYC 9004 | AMD EPYC Genoa / Intel Ice Lake |
| vCPU Ratio | 1:1 Dedicated | 1:1 Dedicated + Turbo Boost | 1:1 Dedicated |
| RAM Allocation | 4GB – 128GB | 8GB – 256GB | 64GB – 2TB |
| Network I/O | Up to 10 Gbps | Up to 25 Gbps | Up to 40 Gbps |
| Instance Isolation | Single-tenant VM | Single-tenant + NUMA aware | Single-tenant + hugepages |
ℹ️
All instances support live migration, hot-add vCPU/RAM, and NVMe-backed ephemeral storage. Bare metal alternatives available under enterprise contracts.
Storage & Network Architecture
Block Storage (NVMe)
| Parameter | Specification |
|---|---|
| Interface | virtio-blk / NVMe-oF over RDMA |
| Max Volume Size | 32 TiB per volume |
| IOPS Burst | Up to 40,000 IOPS (provisioned) |
| Throughput | Up to 2.5 GB/s sustained |
| Encryption | AES-256 at rest (customer-managed keys optional) |
Object Storage (S3-Compatible)
- API Compatibility: AWS S3 v2/v4 signatures
- Durability: 99.999999999% (11 nines) via ECRA
- Max Object Size: 5 TB per object (multipart upload)
- Lifecycle Policies: Automatic tiering to cold/archive storage
Network Topology
- Anycast Global Edge with BGP peering (AS40038)
- Private VPC networking with /8 IPv4 CIDR support
- IPv6 native (/64 per instance, /48 per VPC)
- Load Balancers: L4/L7 with WebSocket, gRPC, and HTTP/3 support
Supported Operating Systems
CloudNexus provides optimized cloud-init templates for all major distributions. Custom images may be imported via QCOW2, RAW, or OVF formats.
| OS Family | Supported Versions | Status |
|---|---|---|
| Ubuntu | 20.04 LTS, 22.04 LTS, 24.04 LTS | Stable |
| Debian | 11, 12 | Stable |
| RHEL / AlmaLinux / Rocky | 8.x, 9.x | Stable |
| CentOS Stream | 8, 9 | Stable |
| Fedora | 38, 39, 40 | Beta |
| Windows Server | 2019, 2022, 2025 | Stable |
| Container Runtimes | Docker 24+, containerd 1.7+, Podman 4.6+ | Stable |
Client & Device Requirements
Web Management Console
CLI & SDKs
cloudnexus-cli
# Installation
# macOS / Linux
curl -fsSL https://install.cloudnexus.io/cli | sh
# Windows (PowerShell)
irm https://install.cloudnexus.io/cli.ps1 | iex
# Minimum Requirements
# - glibc 2.31+ (Linux)
# - Xcode 14+ (macOS)
# - PowerShell 7.2+ or CMD (Windows)
# - 100MB disk space for binary + cache
✅
SDKs available for Python (3.9+), Go (1.21+), Node.js (18+), and Java (17+). All include automatic retry logic and circuit breakers.
API & Integration Specs
CloudNexus exposes a RESTful JSON API with GraphQL federation for complex queries. Rate limits: 1,200 req/min (standard), 5,000 req/min (enterprise).
| Resource | Base Endpoint | Authentication |
|---|---|---|
| Compute | /v2/instances | OAuth 2.0 / API Keys |
| Storage | /v2/volumes / /v2/objects | Signature V4 / IAM Roles |
| Network | /v2/networks / /v2/firewalls | OAuth 2.0 |
| Monitoring | /v2/telemetry / /v2/logs | Bearer Token (Scoped) |
| Billing | /v1/billing | API Keys + HMAC |
Example: Create Instance (cURL)
curl -X POST https://api.cloudnexus.io/v2/instances \\n--header "Authorization: Bearer $CN_TOKEN" \\n--header "Content-Type: application/json" \\n--data '{
"name": "prod-web-01",
"plan": "compute-8x32",
"image": "ubuntu-22.04-lts",
"region": "us-east-1",
"networks": ["default-vpc"],
"firewall_rules": [{"proto": "tcp", "port": 443, "src": "0.0.0.0/0"}],
"auto_scale": true
}'Security & Compliance Standards
CloudNexus infrastructure is built on zero-trust principles with defense-in-depth architecture.
| Category | Implementation |
|---|---|
| Encryption in Transit | TLS 1.3 (AES-256-GCM, ChaCha20-Poly1305) |
| Encryption at Rest | AES-256-XTS (LUKS/dm-crypt), FIPS 140-2 validated |
| Key Management | HSM-backed KMS (AWS CloudHSM / Thales Luna), BYOK/SYOK support |
| Network Isolation | VPC peering, private gateways, MACsec, DPDK acceleration |
| Compliance | SOC 2 Type II, ISO 27001, ISO 27017, GDPR, HIPAA, PCI DSS v4.0 |
| Penetration Testing | Continuous automated scanning + annual third-party audits |
⚠️
Root access is restricted via sudo policies. All admin actions require MFA. Audit logs are immutable and retained for 7 years by default.