UKCloud for Microsoft Azure FAQs
What is UKCloud for Microsoft Azure?
UKCloud for Microsoft Azure is an extension of Microsoft's own Azure Public Cloud platform, delivered as a service by UKCloud from our assured sovereign data centres. Using UKCloud for Microsoft Azure, developers can build applications using a consistent set of processes and tools that best meets their organisational, technical, and regulatory requirements. Developers can speed up new cloud application development by building on application components from the Azure Marketplace, including open-source tools and technologies.
With our Azure solution, we can provide an additional multi-cloud platform option to customers, which reinforces our strategy that one platform does not fit all, while maintaining our UK sovereignty with secure multiple data centres.
Why has UKCloud launched UKCloud for Microsoft Azure?
UKCloud's strategy is to provide a multi-cloud platform and UKCloud for Microsoft Azure is now available for you to consume as either a secure, UK sovereign implementation of Azure Public Cloud, or as a complimentary platform to work alongside other UKCloud platforms. This allows you to have workloads utilising one or more technology clouds such as Azure, VMware, Oracle and OpenStack on the same trusted infrastructure.
What is provided in this service?
The first release of UKCloud for Microsoft Azure IaaS provides:
Virtual machines (VMs), comprised of CPU, memory and storage, provide the basic compute building blocks in Azure Stack. Initial machine types supported are:
General purpose: Basic A series, Standard A & D Series
Memory enhanced: DS Series
Compute optimised: F Series
Azure Blob Storage (page): Used to support virtual machine disks. Good for randomly accessed large files.
Azure Blob Storage (block): Object storage. Good for storing documents, videos and images for example.
Azure Blob Storage (append): Good for log files.
Azure Queue Storage: Message queue as a service. Good for asynchronous scale out micro-services.
Azure Table Storage: NoSQL database service. Good for highly scalable, eventually consistent database support
Virtual networks - Configure virtual private clouds and create and manage your private address space within Azure. This can be configured via the UI, API and other tooling.
Load balancers (IPv4 only) - Deploy basic load balancers.
VPN gateway - Use the Azure Stack VPN gateway to create site-to-site VPNs to remote infrastructure.
Routing - Configure basic custom defined routing on virtual networks.
What technology is UKCloud for Microsoft Azure based on?
UKCloud for Microsoft Azure is based on a CISCO implementation of Microsoft's Azure Stack.
Are there any differences between Azure and UKCloud for Microsoft Azure?
While UKCloud for Microsoft Azure is developed by Microsoft, some services will take longer to become available. Check the service scope for full details. Initial differences are captured in Understanding UKCloud for Microsoft Azure.
Does UKCloud offer an SLA for this service?
The SLA for this service is 99.95%. For further details, review the UKCloud for Microsoft Azure Service Definition.
How many IP addresses do I get?
You're initially allocated three external IP addresses with a new compute service.
Do you offer dynamic or static IP addresses?
Dynamic internet IP addresses are selected from a pre-defined shared pool.
What firewall services are available?
Firewall services are provided by Azure Security Groups. More information is available here.
How does UKCloud provide urgent maintenance notifications and incident reports?
All production services are reported through the UKCloud service status page where you can subscribe to RSS feeds and updates.
Are external Domain Name System (DNS) services available?
Yes. A similar service to Azure DNS is available. There are some limitations such as no AAAA support.
Do you offer load balancing?
Yes. This will be offered as an option. You can also deploy your own load balancer.
How much storage do I get?
You'll get 4TiB, which will be shared between blob, page blob, table and queue storage.
Is storage persistent?
Storage is persistent unless it is virtual machine temporary storage.
How do I access my UKCloud for Microsoft Azure solution?
Access to the UKCloud for Microsoft Azure portal is available via the UKCloud Portal. You'll be provided with login details once your account is provisioned.
Which ports need to be open to access my UKCloud for Microsoft Azure solution?
The UKCloud for Microsoft Azure portal requires port 80 (HTTP) and port 443 (HTTPS) to be open.
How do I access my solutions via government networks?
UKCloud for Microsoft Azure will be available on the internet, HSCN, Janet, RLI and PSN networks. Initial access will be from the appropriate UKCloud Portal.
What reports can I get about my UKCloud for Microsoft Azure solution?
All reporting is via the UKCloud for Microsoft Azure management portal, which provides a variety of reports on the dashboard.
You can also interact with the API to pull data into your own reporting solutions.
Is this a managed service?
No. UKCloud maintains and manages the underlying infrastructure that your solution is based on, but we do not manage your UKCloud for Microsoft Azure solution.
How do I manage my services?
This service is designed to be managed using the UKCloud for Microsoft Azure portal. You can also manage it through a command line using the UKCloud for Microsoft Azure API.
What tools can I use to manage my service?
You can use many common DevOps tools, such as ARM, Ansible, Terraform and PowerShell, to interface with UKCloud for Microsoft Azure. UKCloud for Microsoft Azure also provides a User Interface (UI) to manage the infrastructure via a browser with the same experience as Azure Public Cloud.
How long will it take to provision the service?
The current provisioning time for a new service is 4 hours from service request submission (during office hours).
How quickly can I scale my service up or down?
You can scale your UKCloud for Microsoft Azure services either via the UKCloud for Microsoft Azure portal or using the Azure API. This will typically take a few minutes to action. However, if you are likely to increase your requirements significantly, you are advised to plan this with your allocated Technical Account Manager.
How do I raise a support ticket?
The secure online UKCloud Portal provides most common service management functionality. Alternatively, you can contact support by phone or email.
What are your service maintenance windows?
As far as possible, planned maintenance of UKCloud's infrastructure takes place between the hours of 00:00 and 06:00 (UK local time) Monday to Sunday, or between the hours of 08:00 and 12:00 (UK local time) on a Saturday or Sunday. We provide customers with at least 14 days' advance notice of planned maintenance.
As far as possible, emergency maintenance of UKCloud's infrastructure takes place between the hours of 00:00 and 06:00 (UK local time) Monday to Sunday, or between the hours of 08:00 and 12:00 (UK local time) on Saturday or Sunday, unless there is an identified and demonstrable immediate risk to a customer's environment. Whenever possible, we provide customers with at least six hours' advance notice of emergency maintenance.
Can I configure email alerts from the portal?
Yes. You can receive portal notifications to the email address associated with your UKCloud Portal login. Notifications provide information about updates to UKCloud services, in addition to maintenance and incident notifications. This feature is currently not available in the Elevated Portal.
How can I get started with the service?
Once you have requested a UKCloud for Microsoft Azure environment, your Customer Success Manager (CSM) will introduce you to the platform and relevant supporting documentation.
Is there a free trial?
Yes, we offer a 30-day trial for this service.
How do I request a trial?
This can be requested via the UKCloud website trial page or via your Technical Account Manager if you an existing customer.
What do I do when my trial comes to an end?
During your 30 day trial period, you will be contacted regularly by your Customer Success Manager who will be on hand to assist you with using the service. When your trial is nearing the 30 day limit, your Account Manager will contact you to discuss the outcome of the trial. If you wish to cancel the service, this will be done for you, and any data will be deleted and the service will be decommissioned. If you wish to commit to using the service, your trial will convert to a full paid service, and you will then be billed according to the Service Definition.
Billing and legal
How will I be billed for this service?
You'll be billed monthly by UKCloud for the previous month's usage.
What is the smallest unit of time I will be billed for?
For infrastructure solutions, you'll be billed by the smallest unit of time which is one hour for compute, and one month per GiB for Storage.
How can I pay for the services?
UKCloud will issue invoices as follows:
At point of order for upfront fees and service options
Annually in advance for pre-payment fees
Monthly in arrears for monthly fees
Payment can be made by direct bank transfer (BACS/CHAPS).
Are there any termination fees?
There are no termination costs for this service. You are responsible for extracting your data from the UKCloud for Microsoft Azure service if required.
UKCloud may make an additional charge for transferring data out of the service.
What data is suitable for the UKCloud assured cloud platform?
The service is hosted in the UK and operated by UK government security-cleared staff. It has extensive independent validation (including NCSC design reviews) that it is fully aligned with the 14 NCSC Cloud Security Principles, and is therefore ideal for all data classified at OFFICIAL (including OFFICIAL SENSITIVE).
Can systems on different UKCloud security domains communicate with one another?
UKCloud's Cross Domain Security Zone enables you to use the UKCloud-defined and managed UKCloud Guard, or a customer-designed and managed Walled Garden to enable communication between platforms.
For more information, see our Cross Domain Security Zone documentation.
Is there a protective monitoring service?
Protective monitoring is included for our all our services and follows GPG 13.
For more information about this service, see our Protective Monitoring FAQs.
If you have any comments on this document or any other aspect of your UKCloud experience, send them to email@example.com.