Highly flexible, scalable & accessible Cloud and laas solutions

ESDS Cloud infrastructure comes with the 7 Layers of Security

1. We provide Layer 4 & 7 Firewalls that filter traffic based on IP addresses and ports while enhancing security through application-level inspection. Managed network firewall with integrated intrusion detection and prevention, TLS/SSL interception and decryption, and advanced threat protection, providing high-throughput performance suitable for enterprise workloads.
2. Our Layer 4 & 7 Load Balancers ensure efficient distribution of network traffic, optimizing application performance at both network and application layers.
3. Utilizing HIDS/NIDS, we monitor individual system activities and network traffic, detecting and preventing security threats in real-time.
4. Rights Management is implemented to control user access, ensuring proper authorization and preventing unauthorized actions on our systems.
5. For data protection, we implement Data Privacy measures to safeguard sensitive information and employ Data Encryption to secure data during transmission and storage. Provision of managed services to identify vulnerabilities in compute instances and container images.
6. Our commitment to industry standards and regulations is demonstrated through Certifications & Compliance, showcasing our adherence to best practices and security requirements.
7. Authentication & Authorization processes verify user identities and grant access based on authenticated roles, ensuring secure system interactions.
8. To maintain transparency and accountability, our systems undergo Auditing & Accounting, providing a comprehensive audit trail for analysis and compliance verification.

The ESDS eNlight cloud is based on three essential security architecture components

Confidentially - Prevent unauthorized access to data to protect and safeguard it.

Integrity - Prevent unauthorized alterations to ensure data integrity and correctness.

Availability - Make sure authorized users can access the data by using redundancy and resilience.

Although security is required, advanced security is voluntary. In order to earn your complete trust, we have implemented advanced and managed security through a multi-layered security environment that is entirely managed and maintained in our datacenter.

eNlight 360°, the Data Center Infrastructure Management (DCIM) tool by ESDS, provides a single sign-on module as IAM, which takes care of Identity and Access Management, User management and encryption keys, and session sharing with add-on token-based security.

Web Application Firewall and DDoS Prevention

• The ESDS enterprise-class DDoS defense network assures maximum website security. ESDS eNlight WAF is a sophisticated Cloud Hosted Web Application Firewall that allows you to filter incoming and outgoing web traffic and block OWASP Top10 threats, including injection and cross-site scripting.
• The eNlight WAF solution enables users to design unique rules to prevent web attacks. When the anomaly threshold is reached, the eNlight WAF automatically blocks unauthorized traffic and notifies the attacker with a customized response.
• The ESDS eNlight WAF includes intrusion detection algorithms that let the administrator identify risky behavior and create effective filtering rules. Along with offering protection from dangerous domains, malware-hosting domains, domains that appear legitimate but are actually corrupted and may host botnets, etc., it also provides help for intrusion prevention.

Automated Patch Management and Cyber threat Prevention

• ESDS goes beyond patch deployment with enhanced remediation capabilities. It offers repair asset misconfigurations, patch operating systems and third-party apps, and deploy bespoke software to reduce attack risk and achieve compliance. This comprehensive, all-inclusive technique reduces the cost and complexity of patching vulnerabilities. ESDS' Automated Patch Management automatically updates laptops, desktops, servers, and remote devices. It performs admirably and is simple to use.
• Our cyber security experts at ESDS deal with several cyber threats. The Cyber Security Team actively acquires threat intelligence data 24 hours a day, seven days a week. In addition, we use cutting-edge techniques to respond to incidents faster.
• Machine Learning and behavior analysis are used to provide alerts to mitigate hazards. ESDS Cyber Security Champions are committed to cyber security by offering indigenous solutions supported by over 19 years of experience. Complete data security is provided by securely hosting data in Indian data centers.
• You get the highest level of security with the ESDS enterprise-class DDoS protection network.

VTMScan - A complete web-application scanning tool

• All online threats and cyberattacks, including the OWASP Top-10 Vulnerabilities, SQL Injections, and Cross-Site Scripting, are scanned for and detected by VTMScan. Through a thorough evaluation of website security, VTMScan users receive total protection for their web assets. Additionally, when a threat is imminent, VTMScan provides a comprehensive scanning solution with immediate alerts.
• You can guarantee the highest level of security with the ESDS enterprise-class DDoS protection network.

CAPACITIES AND FEATURES

• IT Security Services
• Web services signatures
• Malware detection
• Protocol validation
• Brute-force protection
• Cookie signing and encryption
• Threat scoring and weighting
• Syntax-based SQLi detection
• HTTP header security

Application Delivery

• Optional CDN
• URL rewriting
• Content routing
• HTTPS/SSL offloading
• HTTP compression
• Caching

Authentication

• Active and passive authentication
• Site publishing and SSO
• LDAP, RADIUS, and SAML support
• SSL/TLS client certificate support
• Multi- factor-based authentication e.g. email, SMS, etc.
• CAPTCHA and Real Browser Enforcement (RBE)

Management and Reporting

• Web user interface
• Graphical analysis and reporting tools
• Centralized logging and reporting
• User/device tracking
• Real-time dashboards
• Bot dashboard
• OWASP Top 10 attack categorization
• Geo IP analytics

All types of online threats and cyberattacks, including the OWASP Top-10 Vulnerabilities, SQL Injections, and Cross-Site Scripting, are scanned for and detected by VTMScan. Through a thorough evaluation of the website security, VTMScan users receive total protection for their web assets. When a threat is imminent, VTMScan provides a comprehensive scanning solution with immediate alerts.

CSP must provide native service for security like Identity & access management, manage user access and encryption keys, Single sign on service for cloud and a Centralize Governance and Compliance Management

We provide detailed logs of all user activity within a CSP account, including API caller identity, timestamps, source IP addresses, request parameters, and response elements, to support security analysis, resource change tracking, and compliance auditing.

Our fully managed service in India helps identify potentially fraudulent online activities, such as online payment fraud and the creation of fake accounts, ensuring robust protection for your business.

HSM as a service are being provided as managed shared infrastructure-based or dedicated infrastructure-based model, ensuring that dedicated HSM is exclusively for each subscription where Data encryption is default, with flexible options for managing encryption keys and data access. VM’s are also provided that ensure encryption of data in transit, at rest (using CMEK and CSEK), and while in use.

1. Customers can use eNlight Cloud to develop templates of their necessary configuration. The Add Template option allows users to add templates. User-specific templates are only visible to that user or administrator. Users can upload a template that meets their needs and use it to generate VMs. Additionally, ESDS integrates Infrastructure-as-Code solutions such as Terraform, enabling automated provisioning and management of cloud resources through declarative configuration files, allowing customers to efficiently deploy and manage infrastructure at scale. A Command Line Interface (CLI) helps certain operations, providing an alternative method for managing and interacting with cloud resources.
2. A project is given to each user. Both of the projects include a variety of eNlight 360° devices. Users can assign their projects to different groups and execute CRUD actions. This includes mass deleting/enabling/disabling project activities, adding or removing members from projects with various roles, etc.
3. eNlight 360° keeps track of a device's entire resource usage, including RAM, CPU, and other components. The user can add a custom threshold for each of the many Health check metrics, such as RAM and CPU. As a result, the user is informed of future actions if the parameter's usage in the system exceeds the predetermined threshold, ensuring scalable and responsive operations tailored to workload demands.
4. eNlight cloud Inventory provides visibility into your eNlight 360° computing environment. eNlight 360° offers an easy way for customers to track their resources and the associated configurations.
5. Customers can monitor various resources through eNlight Cloud. The monitoring module shows server, network, and administration dashboards. Each box is shown as a separate device with its Name and IP in a server dashboard, which is a graphical representation of the Server, VM, and Storage Heat Map. The alert's severity is shown by the heat map box's colour based on the monitoring parameter for that particular device. The Router, Switch, and Firewall Heat Map is depicted graphically on a network dashboard, and each box is represented as a distinct device with its Name and IP. The alert's severity is shown by the heat map box's colour based on the monitoring parameter for that particular device. The hardware, deployment type, and device count are all graphically represented on the management dashboard.
6. Customers can build a virtual machine with the configuration they need using eNlight Cloud. The VM Add option allows users to add a VM. Instead of using a template created by CSP, this capability enables customers to create VMs as needed. Customers of eNlight can use this to pinpoint resources and cut costs. Customers can create virtual machines using as few or as many resources as they need with eNlight, depending on the type of hypervisor they use, such as VMware, XEN, Hyper-V, or Nutanix.
7. In eNlight 360°, the user can select the modules he wants to enable/disable the notifications. In addition, it will notify the user which modules are under maintenance mode. This functionality eNlight 360° provides an easy way to monitor various resources; a server dashboard is the graphical representation of the Server, VM, and Storage Heat Map. Each box is represented as a single device with its Name and IP. The heat map box's color represents the alert's severity according to its monitoring parameter for that specific device. A network dashboard is the graphical representation of the Router, Switch, and Firewall Heat Map, and each box is represented as a single device with its Name and IP. The heat map box's color represents the alert's severity according to its monitoring parameter for that specific device. Finally, the management dashboard is the graphical representation of Device count, Deployment Type, and Hardware.
8. eNlight monitoring provides details of cloud resources and the applications running on the cloud, It collects and track metrics, collects and monitor log files, and set alarms. and also provides SQL based reporting.
9. eNlight is capable of providing the guidelines for provisioning, configuring, and continuously monitoring the complete cloud infrastructure.
10. A centralized and independent infrastructure  (Client wise) patch management system is part of the eNlight cloud management platform and has features like patch test, live patch, schedule and concurrent patching.
11. In eNlight 360°, a cloud advisor acts like your customized cloud expert and recommends improving system performance and saving money.
12. eNlight monitoring allows to enable auditing, security monitoring,  and  operational  troubleshooting  by tracking user activity and API usage.
13. eNlight cloud allows to enforce client organization level security compliacnes and governance. In case of non conformance the system trigger events and alerts as defined by the organization.
14. eNlight cloud provides template,JSON-format,text-based file describing the resources required by the client application.

To automatically build, test, distribute, deploy, and monitor applications on any operating system, you can utilize a combination of various Devops tools and practices. Largely, this involves:

• Developers work on codebase and use a version control system like Git to manage the code.
• They push their changes to a repository, hosted on platforms like GitHub, GitLab, or Bitbucket.

• Build automation tool like Apache Maven, Gradle, or Jenkins define and manage the build process.
• Create build scripts to specify how your application should be built, including compiling source code, resolving dependencies, and generating executable artifacts.

• Utilize a testing framework like JUnit, or Selenium for automated unit testing, integration testing, and functional testing.
• Write test cases to cover different aspects of your application's functionality.

• Create distribution packages or artifacts for your application, such as JAR files or container images.
• Continuous delivery tools like GitLab CI/CD, Jenkins, or Github Actions to automate the distribution process.

• Use infrastructure as code (IaC) tools like Terraform or AWS CloudFormation to define and manage your infrastructure.
• Create deployment scripts and deployment automation tool like Ansible, Chef, or Puppet to automate the deployment process across different operating systems.

• Prepare your application with monitoring tools like Prometheus, Grafana to collect metrics and monitor its health and generate alerts
• Set up log aggregation and analysis tools like ELK Stack (Elasticsearch, Logstash, Kibana) or Splunk to centralize and analyze log data.

• Use the feedback from the CI/CD pipeline, including test results, monitoring data, and user feedback, to identify areas for improvement.
• Iterate on the process, make adjustments, and refine the pipeline based on lessons learned and evolving requirements.

1. Early detection of integration issues: Regularly merging code changes helps identify integration conflicts early, minimizing conflicts between developers' changes.
2. Faster feedback loop: Automated builds and tests provide quick feedback to developers, enabling them to address issues immediately.
3. Code quality assurance: Automated testing ensures that the codebase meets the defined quality standards.
4. Confidence in the codebase: Successful builds and passing tests build confidence in the stability and reliability of the code.
5. Collaboration: Development teams can collaborate effectively, identify and resolve issues early, and maintain a high level of code quality throughout the development cycle.

1. Supports Windows and Linux containers in a Kubernetes Cluster.
2. Supports accurately assess kubernetes Cluster control plane logging, security and policies.
3. Updates running Kubernetes Cluster with new version in- place upgrade without customer managing the update process.

• Provide support for monitoring and logging services that allow you to collect and analyze various metrics, logs, and traces from your applications.
• These services aggregate and visualize data related to resource utilization, performance, errors, and other relevant information.
• Tools like Prometheus, Grafana, ELK, Fluentd can serve the purpose

• Enable you to gain insights into your application's performance and identify bottlenecks
• Tools like Prometheus, Grafana, ELK, Fluentd can serve the purpose.

• Provide services that help identify and resolve issues within your applications.
• Tools like Valgrind, Strace, Linux perf can be helpful.

• Diagnostic and troubleshooting services help identify and resolve issues with your applications.
• These services often include features like log analysis, error tracking, and incident management.

• These services provide expert guidance, best practices, and assistance in identifying and resolving complex issues.

Cloud-based Integrated Development Environment (IDE) services that enable developers to collaborate in real-time. These cloud IDE services provide a web-based development environment accessible from anywhere, facilitating collaboration and streamlining the software development process. It comes with features like:

• A web-based IDE that allows developers to write, edit, and manage code directly in the browser.
• Includes features like code editing, code completion, and version control integration.

• It enables multiple developers to work on the same codebase simultaneously.
• Collaborative features may include real-time editing, shared code reviews, instant messaging, and audio/video communication.

• Developers can create and organize projects, set up different environments (e.g., development, staging, production), and manage dependencies.

• Services are scalable allowing developers to work on projects of any size.
• underlying resources are optimized to provide smooth development experience.

• security measures to protect code and data within the cloud IDE.
• Access controls, authentication mechanisms, and encryption are implemented

The architecture of Docker consists of several key components working together:

1. Docker Engine: The Docker Engine is the core runtime that runs and manages containers. It consists of the Docker daemon (dockerd) and the Docker client (docker).
2. Docker Images: Docker images are read-only templates that contain everything needed to run an application, including the code, runtime, libraries, and system tools.
3. Containers: Containers are lightweight and isolated runtime environments created from Docker images. Each container runs as a separate process on the host machine and has its own isolated filesystem, network interface, and process space.
4. Docker Registry: Docker Registry is a repository that stores Docker images. The default public registry is Docker Hub
5. Docker Compose: Docker Compose is a tool for defining and running multi-container Docker applications. It allows developers to define a multi-service application in a declarative YAML file, specifying the services, their configurations, and dependencies.
6. Docker Networking: Docker provides a networking subsystem that allows containers to communicate with each other and with the outside world. By default, each container gets its own unique IP address within a private network created by Docker.
7. Docker Volumes: Docker volumes are used to persist and share data between containers and the host machine. Volumes are directories stored outside the container's filesystem, allowing data to persist even if the container is removed.

The working of Kubernetes can be understood through the following key steps:

1. Defining the desired state: You define the desired state of your application or services using Kubernetes manifests or configuration files.
2. Creating Pods: A pod is a logical group of one or more containers that are scheduled together on the same host, and created based on manifest of pod.
3. Scheduling Pods: The Kubernetes scheduler assigns pods to appropriate nodes in the cluster based on resource requirements, constraints, and availability.
4. Managing Replicas: Kubernetes provides the ability to scale applications by managing replicas.
5. Service Discovery and Load Balancing: Kubernetes provides a built-in service discovery mechanism. It assigns a unique IP address and DNS name to each set of pods behind a service. Also automatically load balances the traffic across the pods associated with a service.
6. Health Monitoring and Self-healing: Kubernetes continuously monitors the health and status of the pods. If a pod becomes unhealthy or fails, Kubernetes takes corrective actions to maintain the desired state.
7. Updating and Rolling Deployments: Kubernetes supports rolling updates, allowing you to deploy new versions of your application without downtime.
8. Managing Persistent Storage: Kubernetes provides mechanisms to manage persistent storage for applications. It supports various storage options Persistent Volumes (PV) and Persistent Volume Claims (PVC) are used to abstract the underlying storage infrastructure.
9. Cluster Scaling and High Availability: Kubernetes supports scaling the cluster itself by adding or removing nodes. This helps in dynamically adjusting the cluster's capacity to handle increased or decreased workload. Kubernetes service supports running Windows and Linux containers within the cluster, while also ensuring comprehensive cluster management—including provisioning, security configurations, control plane logging, and seamless in-place upgrades.
10. Monitoring, Logging, and Observability: Kubernetes ecosystem offers various tools and integrations for monitoring and logging the cluster and application metrics.

1. eNlight Cloud enables customers to create a virtual machine of their required configuration. Users can add a VM using the VM Add option. This feature allows customers to create a VM as required instead of a template defined by CSP. This helps eNlight customers to define precise resources and save cost. eNlight enables customers to create VM of minimum possible or maximum possible resources based on the type of hypervisors like VMware, XEN, Hyper – V, KVM and Nutanix. Before proceeding with VM creation, it should be ensured that the required quota of resources is available for the respective group. The Compute layer in eNlight cloud consists of latest Intel® Xeon® Scalable Processors with built-in accelerators and advanced security technologies for the most in-demand workload requirements.
2. Horizontal scaling is the conventional scaling methodology that is based on load balancing. eNlight 360° also provides horizontal Scaling based on software-defined load balancing, with which virtual machines automatically scale out or scale in depending upon workloads.
3. Vertical Auto- scaling is a patented (US 9176788) and unique eNlight Cloud orchestration software feature. eNlight automatically scales virtual machine resources on the fly. The resources of a virtual machine are scaled between the minimum and maximum resources assigned to it in proportion to the load over it. This is done by an intelligent algorithm that monitors its resources and scales them up or down accordingly. This helps in cutting down the cloud expenses while providing consistent performance to users. This makes eNlight a cost-effective and one of its kind Cloud Orchestration software.
4. Storage services are Virtual representations of Physical Storage for flexibility of customized allocation/deallocation of storage capacity to VMs. eNlight provides the tools and technologies to abstract the underlying Storage infrastructure in an easy and standardized consumption model. eNlight 360° is a scalable, high-speed, web–based cloud storage service that allows your on-premises applications to use eNlight 360° cloud storage seamlessly.
5. eNlight 360° monitoring allows you to track cloud resources' health, performance, uptime, and downtime. eNlight 360° server dashboard helps to identify, collect and display the resource utilization such as VM, Disk, server, etc.
6. Our physical core-to-vCPU ratio is 1:2 for all Virtual Machines. This is the standard practice we follow for all hypervisors.
7. eNlight 30° provides a free trial of 30 days to the users so that they can access the application for the respective time period. However, once the trial period is over, access for all the modules will be disabled; the user needs to enter the license key in order to access desired modules.
8. Customers can create new VMs using eNlight 360° through its UI interface or the CLI, enabling them to create a virtual machine of their required configuration.
9. Over the years, Cloud computing has become more of an ingenious business model that provides organizations with agility and efficiency as a significant part of this digital transformation era. Digitization has undoubtedly transformed the Indian economy, and many industries have jumped onto this trend to grow their business; embracing the cloud is only a smart move. The cloud offers flexibility and a pay-as-you-go service model, which received wide traction during the peak COVID period when the demand was highest, and the cloud was able to help businesses in distress. Amongst other services, security services offered by the cloud are another factor for businesses to consider since cyber security is one of the grave concerns faced worldwide.
10. Operating systems with Virtual Machines are offered supporting both BYOL (Bring Your Own License) and PAYG (Pay As You Go) models, including continuous updates and upgrades for the entire contract duration.
11. Cloud services feature simple pay-as-you-go pricing, allowing customers to pay for compute capacity by the hour without any long-term commitments.
12. Virtual Machines with flexible storage size are provided to meet your extensive storage and computing needs enabled with backups, scalable compute resources, and high availability.
13. Virtual Machines should not have console access.
14. Providing consolidated view of the availability, integrity and consistency of the Web/App/DB tiers.
15. The CSP provides dedicated hosts for virtual machine instances.
16. ESDS offers GPU as a Service, including options like H100, H200, LS40, and more, with the flexibility to provide any variant based on customer demand.

Disk IOPS can be applied to new or existing virtual machines with eNlight 360°. Disk IOPS manages storage performance efficiency. In addition, it improves service quality and handles disk I/O, preventing VMs from using too many disk operations and creating I/O bottlenecks. eNlight 360° currently offers Disk IOPS in three levels: Gold, Platinum, and Silver

Our block storage service enables the creation and management of storage volumes that can be attached to virtual machines, providing high-performance, low-latency storage suitable for transactional and database workloads.

• Volume Provisioning & Data Access – Users can provision storage volumes quickly and efficiently, with the ability to load, store, and retrieve data reliably. Each volume acts like a dedicated disk, giving applications consistent performance and direct access to the stored data.
• Access Management – Fine-grained permissions and access controls ensure that only authorized users and systems can read, write, or modify the volumes, maintaining data security and operational control.
• Resilience – Redundancy and failover mechanisms are implemented to ensure continuous availability. In the event of hardware or system failures, data integrity is preserved and operations continue without disruption.

• ESDS Storage provides the protects against unauthorized access to lost, stolen, or failed drives by ensuring all sensitive user data on the system is encrypted as it is written to disk. It does this through hardware-based encryption modules located in the SAS controllers and SAS IO modules which encrypt data as it is written to the backend drives, and decrypt data as it is retrieved from these
drives.
• Additionally, controller-based method has minimal performance impact for typical mixed workloads, and no impact to other storage service services due to the level at which the encryption is performed.
• For key generation and management, ESDS Storage by default uses an internal, fully-automated key manager. This key manager has several responsibilities including generating keys using AES-256, storing keys in a secure key-store, monitoring drive status changes that result in key creating/deletion, and encryption of all data encryption keys prior to moving them within the array for all encryption operations.
• ESDS Stored data security is achieved through the combined use of several encryption keys, which together ensure that neither the drives themselves, nor the keys which encrypt these drives, can be read by unauthorized parties finding themselves in possession of drives that have been removed from the storage system.

• For in transit data encryption, IPSEC VPN can be utilized between Ports to client and cloud services.

ESDS Storage supports SSD-backed volumes that provide low-latency performance suitable for workloads requiring quick access, while maintaining redundancy and reliability. These volumes are designed to deliver consistent performance without relying on disk striping, offering high durability and supporting annual failure rates of less than 0.01%.

Storage allows flexible volume size increases in small increments, supports high random read operations, and provides secure data controls within the Storage Area Network to restrict client access to allocated storage.

Archival storage is designed to retain data securely and cost-effectively over long periods of time, especially for information that is infrequently accessed but must be preserved for compliance, reference, or historical needs. As a Cloud Service Provider (CSP), we offer archival storage that ensures:

• Cost Efficiency – Optimized for long-term retention at lower cost compared to primary storage.
• Data Security – All archived data is protected with encryption both at-rest and in-transit.
• Durability – Data is stored in a manner that safeguards against corruption or loss.
• Flexible Access – Archived information can be retrieved when required, ensuring availability while keeping costs low.

This service is particularly suited for organizations that need to store regulatory records, audit logs, legal documents, backup copies, or historical datasets for extended periods without incurring high storage costs.

managed secure cloud file storage service. In eNlight 360°, while adding a master compute, the user needs to enter the URL, username, and password. Then, the system will verify those credentials and proceed further.

ESDS Storage provides the protects against unauthorized access to lost, stolen, or failed drives by ensuring all sensitive user data on the system is encrypted as it is written to disk. It does this through hardware-based encryption modules located in the SAS controllers and SAS IO modules which encrypt data as it is written to the backend drives, and decrypt data as it is retrieved from these drives.

Additionally, controller-based method has minimal performance impact for typical mixed workloads, and no impact to other storage service services due to the level at which the encryption is performed.

For key generation and management, ESDS Storage by default uses an internal, fully-automated key manager. This key manager has several responsibilities including generating keys using AES-256 ,storing keys in a secure key-store, monitoring drive status changes that result in key creating/deletion, and encryption of all data encryption keys prior to moving them within the array for all encryption operations.

ESDS Stored data security is achieved through the combined use of several encryption keys, which together ensure that neither the drives themselves, nor the keys which encrypt these drives, can be read by unauthorized parties finding themselves in possession of drives that have been removed from the storage system.

For in transit data encryption, IPSEC VPN can be utilized between Ports to client and cloud services. Enterprise cloud storage allows to scalibility to Petabyte which can be accessed by thousands of concurrent NFS users. Depending on the selection of the storage categories and IOPs latency varies from 2 milli seconds to 15 milliseconds.

All ESDS data centers are connected with multi Gbps fiber connectivity which allows seamless replication and data redundancy for the client at enterprise cloud storage layer.

eNlight enterprise cloud storage provides read after write consistency where each read-and-write operation is guaranteed to return the most recent version of the data.

Object storage (object-based storage) is a type of storage in which we organize and work with units of storage, called objects. Every object contains three things:

• The data: The data can be anything you want to store, from a simple photo to 500,000 video clips.
• An expandable amount of metadata: The metadata is defined by whoever creates the object storage; it contains contextual information about what the data is, what it should be used for, its confidentiality, or anything else that is relevant to the way in which the data is used.
• A globally unique identifier: The identifier is an address given to the object in order for the object to be found over a distributed system. This way, it’s possible to find the data without having to know the physical location of the data (which could exist within different parts of a data center or different parts of the world).

eCOS is eNlight Cloud Object Storage which enables infinite vertical and horizontal auto-scale for your enterprise objects. With eCOS, users can customize Meta data to search and fetch data in a few clicks, replicate data across platforms/regions, manage terabytes of data systematically in a secure cloud environment. With eCOS, enterprises reduce the TCO of storage infrastructure with eNlight’s pay-per-use model.

eCOS is provided as an Add-on service with which users can avail the service using a self-service portal.

Architecture

eCOS object storage servers are configured in cluster fashion across multiple datacenters in India. Data is synchronized in the background across all clustered nodes for data redundancy.

Initial setup, Configuration & Working

1. User signup: Every eCOS customer gets account details such as User name, Password (API Key), Tenant Name, Authentication Service.

2. Install Agent/Custom App (via API calls): eCOS customer has an option to install Windows/Linux based client application or developer your own mobile/desktop app using REST API available for eCOS service.

3. Configure Backup and Restore task : A simple or complex backup task can be configured using our desktop based client application. Any file or folder backup and restore task can be done manually or automated using the same client

1.1 Features

1.2 Benefits

Fig 2. Datalake Architecture Design

The Datalake Architecture Design illustrates the architecture we are following to build our datalake in a very cost effective manner using open-source technologies.

• Parallel mechanism to distribute huge data into chunks and store them into different nodes
• Replication factor
• Can store data of any format
• High Availability Architecture
• Fault Tolerance
• Low Cost

Below is the High Level Architectural Diagram of the HDFS system in our Datalake.

Fig 3. HDFS HA Architecture

We are planning to develop a SSP Portal for the users as a deliverable to connect to the datalake services. This is will be primary POV for the users to access the datalake.

1.4 Data Flow in the DataLake

The below Data Flow diagram shows the flow of data into the datalake. The data from different data sources like Object Storage, Web API’s, SFTP, Kafka are ingested to the HDFS storage using the Nifi Templates. Standard Nifi templates are created for storing the data from multiple data sources into our Datalake storage system. The user will access the SSP portal to Insert/Get data in/from different data Sources. This data will then be ingested to the datalake storage via SSP portal standard Data Ingestion phase. The Ingestion phase of the SSP portal will create a bucket, process within the NiFi-registry, NiFi for a particular flow by a user. The stored data within the datalake can be accessed through the HDFS File browser(HUE) system.

Fig 4. Data Flow Diagram

Fig 5. User POV

Fig 6. Entity Sequence Diagram

The Entity Sequence Diagram illustrates the ELT procedure within the datalake.

• Step 1: - User will login into SSP Portal
• Step 2: - User will get the data from the list of data sources. If necessary will insert the data into the data sources like into MinIo, SFTP Server etc.
• Step 3: - The Data ingestion technique of SSP will Instantiate a bucket, process and the standard data source template in the process group within the NiFi system. The PUTHDFS processor within the template will Ingest the data from the data source to the HDFS storage.
• Step 4: - The User can then access this data from HUE system built over the HDFS Storage.

1.6 Cluster Architecture

Fig 7. High Level Node Architecture.

Designed a simple network where both the master and worker clusters will be attached to the same VLAN and network for faster processing. All machines will be attached to a single network that is Kubernetes Cluster data network which will be connected to the Local network system as per company standards.

Fig 8. Network Architecture

The prototype is discussed with the figures below.

Fig 9. Login Page

Fig 10. Home Page SSP

Fig 11. Dashboard of Services

Fig 12. Data Sources

Fig 13. Data Ingestion SSP API

Fig 14. Monitoring Page of Datalake Services.

No Code/Less Code End to End Data Science Platform

ESDS Rubiscape is a pioneering Data Platform that makes Data Science possible and enjoyable for everyone.

With a motto of Data ‘decoded’, Future ‘decided’, ESDS Rubiscape brings a paradigm shift in end-to-end data-driven solutions that seamlessly harmonize open source, algorithms, computation, and people, through a process of co-creation and continuous innovation in-sync with evolving needs.

Machine Learning Simplified!

Rich library of 100+ pre-built ML Algorithms and Functions to build the best models for Statistical Analysis, Accelerate Machine Learning (Supervised, Unsupervised), Natural Language Processing

ESDS RubiWise

ESDS Rubiscape has applied design thinking principals in crafting RubiWise that aims to Simplify Data Science through effective strategies - Datasets (diverse sources and infrastructures), Skillsets (talents and creativity), Toolsets (ESDS Rubiscape and opensource), Mindset (principles and ethos) to innovate and deliver a value.

Simple, Agile, Secure!

ESDS Rubiscape is designed to provide agility by seamlessly integrating Plug & Play components that are further customizable based on industry-specific needs & evolving expectations.

For Business People

Model creation and collaboration is made easy than ever before. Anyone with basic knowledge of Stats can use ESDS Rubiscape. No need to learn any programming.

Best In class TCO

Highly affordable as it is built with leading edge Opensource technologies and offered on Cloud as SaaS model as against existing proprietary on-premises products.

ESDS Rubiscape Platform Stack RubiStudio :- Effortlessly build Analytical Models with a Visual Designer

ESDS Rubiscape Designer or a Model Studio is a visual model builder (no-code or low- code, drag and drop) for data scientists to build models, train-test-deploy and publish the selected model. You can reuse models whenever required. You can also integrate Python and R based models and custom coding.

RubiFlow :- Orchestrate Data and Workflows for a seamless Collaboration

RubiFlow is an integrated Process Designer to help users build and manage data flows with a visual, end-to-end event-based Orchestrator. Data access engines of RubiFlow provides a powerful, easy-to-use user interface that supports collaboration, reuse of processes and common metadata.

RubiML :- Boosting Analytical Productivity

With RubiML for Predictive Analytics, you can create, test, deploy, and maintain your Predictive Models easily and instantly. RubiML offers interactive data exploration and makes it easy to build and adjust predictive models without any knowledge of coding for boosting your analytical productivity

Rubicast :- Efficiently Generate Scientific Forecasts

Rubicast is a Forecasting Module to streamline and automate your forecasting process. With RubiCast, you don’t need to manually code your models for exploring and analyzing large volumes of time series data. RubiCast can generate easily and efficiently any number of statistically based trustworthy forecasts.

RubiText :- Easily Extract Deeper Insights from Textual Data

RubiText simplifies Text Analytics with a set of Linguistic, Statistical, and ML techniques for Word Frequency Analysis, Pattern Recognition, Tagging/Annotation, Information Extraction, Link & Association Analysis and Predictions.

RubiSight

Rapidly Create Visual Data Stories
Rubisight tells the Data Story visually. With RubiSight, users can achieve faster dashboard turnaround, flexibility for any subject area, consistent user experience, and effective collaboration across the decision-making process. RubiSight makes the visual Data Discovery easier with Box plot, Heat map, Network diagram, Correlation matrix, Forecasting, Decision tree, Time Zone, Geo Maps, Text objects and many features.

RubiThings

Smartly Maximize your Business Value with Connected Intelligence
RubiThings enriches the data experience by the inter-networking of Physical Devices, Vehicles, Buildings, Machines, Electronics, Software, Sensors with IoT and M2M applications.

The Platform Architecture

Connecting from different sources of Input data and processing the data through various stages such as Data Integration, Data Science and Data Visualisation. The entire technology stack is inbuilt in a single platform which ultimately helps the end user to perform different tasks without switching to different platforms.

ESDS Rubiscape Dataset Connection

The dataset source in ESDS Rubiscape contains various Social Media Platforms from which the data can be extracted such as

• 1. Social Media Platforms
  • a. Twitter (# tags and keywords based)
  • b. RSS (URL)
  • c. Facebook (@Facebook Page Name) – If permission enabled
• 2. API Connections
  • a. Google news
  • b. News Website (API Access required)
  • c. Blogs (API Access required)

This data connections will enable the user to extract the data from the various Social Media Platforms and APIs on a real-time.

2. RubiML and RubiText

is an inbuilt toolset of ESDS Rubiscape that encompasses AI, Machine Learning and Natural Language Processing algorithms to automate and enrich the data to derive measurable benefits in terms of intelligence that can be used in the aligned Decision Support Systems.

Integration of AI/ML services :

Our cloud infrastructure is capable of integrating third-party and open-source tools to provision AI services, including multi-language text and data extraction from scanned documents, real-time language translation, image detection and analysis, deep learning-based models, anomaly detection and related operational services, tailored as per specific requirements.

eNlight Media services in the cloud offer a range of benefits and features that cater to the specific requirements of managing, processing, delivering, and analyzing media content. Here are some key benefits and features of eNlightcloud media services:

• 1. Scalability: It allow to scale resources up or down based on demand. This is crucial for handling traffic spikes during events or viral content sharing.
• 2. Cost-Efficiency: Cloud-based services eliminate the need for large upfront investments in hardware and infrastructure. You pay for what you use, making it more cost-effective.
• 3. Global Reach: Content can be delivered to users around the world using content delivery networks (CDNs), ensuring low latency and optimal performance for a global audience.
• 4. Flexibility: Offer a range of tools and services that can be tailored to your specific needs, from video encoding to live streaming and analytics.
• 5. Security: Robust security features, including encryption, access controls to protect media content from unauthorized access.

• 1. Media Processing and Transcoding: Services for encoding, transcoding, and converting media files to various formats, resolutions, and bit rates, enabling compatibility across devices.
• 2. Live Streaming: Tools for broadcasting live events or streams to a global audience with adaptive bitrate streaming for optimal playback quality.
• 3. Video Conferencing: Allows you to host and participate in online meetings, webinars, and video conferences.
• 4. Video Analytics: Analytics services that provide insights into viewer engagement, watch time, geographic distribution, and other metrics to optimize content strategy.
• 5. Content Delivery Networks (CDNs): CDNs distribute media content across multiple servers and data centers, reducing latency and ensuring fast and reliable delivery.
• 6. Content Management: Systems for organizing, categorizing, and managing media assets efficiently, often with metadata and search capabilities.
• 7. Video Editing and Production: Platforms or tools for editing and producing media content directly in the cloud, enabling collaborative workflows.
• 8. Image and Video Analysis: AI-driven analysis of media files, including facial recognition, content moderation, and object detection.
• 9. Integration: APIs and integration options that allow seamless integration with existing systems, applications, and workflows.

ESDS's SAP DB Management Offers

• Monitoring using ENlight 360
• Designing for high Uptimes and Performance
• Support for HANA, Sybase, MaxDB, DB2, Oracle databases
• Certified Linux & SAP-certified engineers
• Backup Management
• SAP-complaint Management of updates and upgrades
• High Availability Management
• Disaster Recovery planning and implementation