Infrastructure Specifications

Comprehensive technical details covering compute, storage, network, databases, security, and service level agreements. All metrics reflect production environments.

v3.2.1 | Last Updated: Oct 24, 2025 | Region-agnostic baseline

🖥️ Virtual & Bare Metal Compute

Bare-metal and virtualized instances powered by AMD EPYC™ 9004 and Intel® Xeon® Scalable processors. All VMs use KVM with virtio drivers and NVMe-backed ephemeral storage.

Max vCPUs per Node
128 vCPU
Burstable up to 256 with hyperthreading
Network Throughput
100 Gbps
Anycast routed, non-burstable
Avg. Latency
2.4 ms
Cross-DC interconnect (RDMA enabled)
Provision Time
~12 sec
From API request to SSH ready
Tier vCPU / Core RAM Block Storage (NVMe) Network Use Case
Cloud Compute 1–8 vCPU 2–32 GB 40–240 GB 1 Gbps (shared) Dev, Testing, Microservices
Performance 8–32 vCPU 32–128 GB 240–960 GB 10 Gbps (dedicated) Production Apps, CI/CD, ML Inference
Enterprise 32–128 vCPU 128–512 GB 1–4 TB 25/100 Gbps High-Throughput, Data Pipelines, HPC
Bare Metal 64–128 Physical 512–2048 GB Custom RAID/NVMe 100 Gbps (guaranteed) Compliance, GPU Clusters, Legacy Apps
curl -X POST https://api.cloudnexus.io/v3/instances \
  -H "Authorization: Bearer $CN_TOKEN" \
  -d '{
    "region": "us-east-1",
    "type": "cn-pro-8",
    "image": "ubuntu-22.04-lts",
    "ssh_keys": ["cn-deploy-key-01"]
  }'

💾 Block, Object & Backup Storage

High-IOPS block storage for VMs, S3-compatible object storage for unstructured data, and automated tiered backups with point-in-time recovery.

Storage Type Max IOPS Throughput Latency (avg) Durability Encryption
Block (NVMe Gen4) 250,000 3,500 MB/s 0.8 ms 99.999% AES-256-GCM
Object (S3-Compatible) Unlimited (partitioned) 50,000 req/s per bucket 22 ms 99.999999999% SSE-S3 / SSE-KMS
Backup / Glacier 50,000 1,000 MB/s 45 ms 99.999999999% Envelope Encryption
  • Snapshot consistency across multi-attach volumes
  • Automatic tiering to cold storage after 90 days
  • RPO: 5 minutes | RTO: <2 minutes for block volumes
  • CLI compatible with `aws s3`, `mc`, and `rclone`
  • Immutable object locks (WORM) for compliance

🌐 Network Infrastructure & CDN

100 Gbps backbone with BGP peering, anycast routing, and edge caching across 320+ PoPs. Enterprise-grade DDoS mitigation and global load balancing.

Edge Locations
320+ PoPs
Across 6 continents, 48 countries
Backbone Capacity
100 Gbps
Fiber-optic, multi-homed routing
DDoS Mitigation
3 Tbps
L3/L4/L7 scrubbing, always-on
BGP Peers
14,000+
Public & private IX, transit providers
Feature Specification
IPv4 / IPv6Full dual-stack support, /29 IPv4 per VM, /64 IPv6 native
Anycast NetworkSingle IP, global anycast, automatic failover <500ms
Load BalancerLayer 4 (TCP/UDP) & Layer 7 (HTTP/HTTPS), health checks, WAF integration
CDN CachingEdge TTL control, cache purging (<5s propagation), websockets & gRPC support
Private NetworkOverlay VPC, 10 Gbps inter-VM, zero egress cost within region

🗄️ Managed Databases

Fully managed MySQL, PostgreSQL, Redis, and MongoDB. Automated backups, read replicas, and enterprise-grade HA with zero-downtime upgrades.

Engine Max Storage Replicas Failover Time Max Connections Backup Frequency
PostgreSQL 15/1610 TBUp to 10 read< 30 sec5,000+ (tunable)Continuous (PITR)
MySQL 8.08 TBUp to 8 read< 35 sec3,000+ (tunable)Hourly + Binlog
Redis 7 (Cluster)4 TBMulti-AZ active/active< 15 sec100,000+RDB + AOF hybrid
MongoDB 7.012 TBUp to 6 read< 25 sec50,000+ (pooled)Continuous (Oplog)
  • Automatic minor version patching with rolling restarts
  • Private endpoints only (no public internet exposure)
  • Encryption at rest (AES-256) & in transit (TLS 1.3)
  • Integration with CloudNexus IAM for granular access control
  • Query analytics & slow-log dashboard included

🔒 Security & Compliance

Zero-trust architecture, hardware security modules (HSM), and comprehensive compliance certifications. Security is baked into every layer.

Encryption Standard
AES-256-GCM
At rest & in transit, HSM-backed keys
WAF Rules
OWASP Top 10
Custom rules, bot management, rate limiting
Audit Logging
CloudTrail+
Immutable, tamper-proof, 365-day retention
Compliance
SOC 2 Type II
ISO 27001, GDPR, HIPAA, PCI-DSS v4.0
  • VPC isolation with custom CIDR ranges & subnet routing
  • Network policies (micro-segmentation) between workloads
  • SSH key rotation & certificate-based authentication
  • Secrets management with automatic expiry & audit trails
  • Penetration testing reports available upon request

📊 Service Level Agreements (SLA)

Financial guarantees for uptime, performance, and support response. Credits issued automatically if thresholds are breached.

Service Uptime Guarantee Monthly Downtime Allowance Breach Credit Support Response (P1)
Compute / VM99.99%4 min 22 sec10x monthly fee< 15 minutes
Managed Databases99.995%2 min 11 sec20x monthly fee< 10 minutes
Object Storage99.999%26 sec50x monthly fee< 15 minutes
CDN / Edge Network99.999%26 sec25x monthly fee< 15 minutes
Bare Metal99.95%21 min 54 sec5x monthly fee< 30 minutes
# Automated SLA verification endpoint
GET /v3/sla/report?period=monthly&service=compute
# Returns JSON with actual uptime, breach status, and credit eligibility
  • Excludes scheduled maintenance (max 4h/month, 72h notice)
  • Automated incident detection & credit issuance via API
  • Dedicated account engineers for Enterprise tiers
  • Custom SLA contracts available for 99.999% uptime needs