CSS has the following features and advantages.
Efficient and Ease of Use¶
You can get insights from terabyte-scale data in milliseconds. In addition, you can use the visualized platform for data display and analysis.
Flexible and Scalable¶
You can request resources as needed and perform capacity expansion online with zero service interruption.
CSS is a fully-managed, out-of-the-box service. You can start using it with several clicks, instead of managing clusters.
Speed up data import, decouple storage and computing resources, isolate read and write requests, and take advantage of our high-performance vector search engine - all these at an affordable price.
You can choose to trigger snapshots manually or on a periodic basis for backup and restore snapshots to the current or other clusters. Snapshots of a cluster can be restored to another cluster to implement cluster data migration.
Automatic backup using snapshots
CSS provides the backup function. You can enable the automatic backup function on the CSS management console and set the backup period based on the actual requirements.
Automatic backup is to back up the index data of a cluster. Index backup is implemented by creating cluster snapshots. For backup of the first time, you are advised to back up all index data.
CSS allows you to store the snapshot data of Elasticsearch instances to OBS, thereby achieving cross-region backup with the cross-region replication function of OBS.
Restoring data using snapshots
If data loss occurs or you want to retrieve data of a certain period, click Restore in the Operation column in the Snapshots area to restore the backup index data to the specified cluster by using existing snapshots.
CSS ensures secure running of data and services from the following aspects:
The network is divided into two planes, service plane and management plane. The two planes are deployed and isolated physically to ensure the security of the service and management networks.
Service plane: refers to the network plane of the cluster. It provides service channels for users and delivers data definition, index, and search capabilities.
Management plane: refers to the management console. It is used to manage CSS.
VPC security groups or isolated networks ensure the security of hosts.
Using the network access control list (ACL), you can permit or deny the network traffic entering and exiting the subnets.
Internal security infrastructure (including the network firewall, intrusion detection system, and protection system) can monitor all network traffic that enters or exits the VPC through the IPsec VPN.
User authentication and index-level authentication are supported. CSS also supports interconnection with third-party user management systems.
In CSS, the multi-replica mechanism is used to ensure user data security.
Communication between the client and server can be encrypted using SSL.
Cloud Trace Service (CTS) can be used to perform auditing on key logs and operations.
To prevent data loss and minimize the cluster downtime in case of service interruption, CSS supports cross-AZ cluster deployment. When creating a cluster, you can select two or three AZs in the same region. The system will automatically allocate nodes to these AZs. If an AZ is faulty, the remaining AZs can still run properly, significantly enhancing cluster availability and improving service stability.