DocsICP FilingConsole
Documentation
Home Page Scalable Open Financial Architecture User Guide Global Settings Workspaces Manage workspaces

Manage workspaces

Updated at:
Copy as MD
Product
My Favorites

In Global Settings, you can manage all workspaces for the current tenant. You can create, view, edit, and delete workspaces.

Workspaces are divided into two types:

  • Standard workspace

A standard workspace is an organizational tool in SOFAStack that groups and isolates resources for different purposes or stages. You can assign a workspace to each stage of your development and operations and maintenance (O&M) process. For example, you can create a development workspace in a single data center (a single zone) and a production workspace in dual data centers (two zones).

  • Cell-based workspace

A cell-based workspace extends a standard workspace with cell-based capabilities. It supports active-active and disaster recovery scenarios within the same city or across different regions. A cell-based workspace is a collection of standard workspaces. You can use cell-based workspace groups to isolate user resources. Clusters in different workspace groups are isolated from each other.

Create a workspace

Note

This section describes how to create a standard workspace. For more information about how to create a cell-based workspace, see Create a cell-based workspace.

  1. Log on to the SOFAStack console. In the navigation pane on the left, click Global Settings to open the workspace page.

  2. Click Create Workspace, select Standard Workspace, and then click Create.

  3. On the Create Workspace page, configure the following basic information.

    Configuration item

    Description

    Workspace ID

    2 to 45 characters. The unique English identifier for the workspace. It cannot be changed after creation. Examples: dev, test, prod.

    Workspace Name

    The display name of the workspace. Examples: Development Workspace, Test Workspace, Production Workspace.

    Region

    The region where the workspace is located. A workspace must belong to a region.

    Network Type

    The network type of the current workspace. Only virtual private cloud (VPC) is supported.

    Import VPC

    Disabled by default. If you enable this option, you can reuse an existing VPC and attach it to the workspace.

    Zone

    The zones configured for the workspace. You can select up to two zones. The workspace can only import resources from the configured zones. Other products, such as Classic Application Service and Disaster Recovery, use the workspace zones for grouped releases and disaster recovery switchovers. We recommend that you configure two zones to prepare for architectures such as dual-data-center high availability (HA).

  4. Click Next to go to the Create VPC page.

    • If you enabled Import VPC in the previous step, you do not need to create a new VPC. This page displays information about the VPC that will be imported.

    • If you did not enable Import VPC in the previous step, create a VPC and specify the following information:

      Configuration item

      Description

      VPC Name

      2 to 128 English or Chinese characters. Must start with a letter or a Chinese character. Can contain numbers, underscores (_), or hyphens (-). Cannot start with http:// or https://. We recommend that you use the same name as the workspace.

      VPC CIDR Block

      The CIDR block for the VPC. This cannot be changed after creation. The private IP addresses of all resources within the VPC, such as Elastic Compute Service (ECS), RDS, and Server Load Balancer (SLB) instances, are allocated from this CIDR block. The following CIDR blocks are available:

      • 10.0.0.0/9

      • 172.16.0.0/12

      • 192.168.0.0/16

      vSwitch

      Create a vSwitch for each zone. vSwitches in the same VPC can communicate with each other over the private network. Click Add vSwitch and specify the following information:

      • Name: Enter the vSwitch name.

      • Zone: Select the zone for the vSwitch. vSwitches in different zones within the same VPC can communicate over the private network. We recommend that you deploy vSwitches in different zones to enable cross-zone disaster recovery.

      • Custom CIDR Block: Disabled by default. If enabled, enter the CIDR block. The CIDR block of the vSwitch can be the same as or a subnet of the VPC CIDR block.

      • Subnet Mask: If Custom CIDR Block is disabled, select a subnet mask and a CIDR block. The default subnet mask for a VPC is 16 bits, such as 172.31.0.0/16, which provides up to 65,536 private IP addresses. The value can range from 16 to 29, which provides 4 to 65,532 addresses.

      • Description: Optional. Enter a description for the vSwitch.

  5. Click Next to go to the Create Security Group page.

  6. Click Add Security Group and specify the following information:

    • Security Group Name: Required. Enter a name for the security group. The name must be 2 to 128 characters in length and start with a letter. It can contain letters, digits, hyphens (-), and periods (.).

    • Description: Optional. Enter a description that is 2 to 256 characters in length. The description cannot start with http:// or https://.

    • Rule: You can keep the default settings to allow all inbound and outbound traffic. You can also modify the configuration as needed:

      Configuration item

      Description

      NIC Type

      For security groups in a VPC, only private network interface controllers (NICs) are supported.

      Rule Direction

      Select Inbound or Outbound.

      Note

      • Outbound: An ECS instance accesses other ECS instances in the private network or resources on the public network.

      • Inbound: Other ECS instances in the private network or resources on the public network access an ECS instance.

      Protocol Type

      The following protocol types are supported:

      • ALL: Supports all protocol types.

      • ICMP: Supports the ICMP protocol.

      • GRE: Supports the GRE protocol.

      • TCP: Supports the TCP protocol.

      • UDP: Supports the UDP protocol.

      Port Range

      The port range for access. The value can range from 1 to 65535.

      Note

      "-1/-1" cannot be set alone and indicates that the port is not restricted.

      Access Permissions

      Select Accept or Deny.

      Priority

      The higher the value, the higher the priority. The value can range from 1 to 100.

      Source IP Address

      The source IP address range. The default value is 0.0.0.0/0.

      Note

      Currently, only IP address ranges in IPv4 format are supported.

      Destination IP Address

      The destination IP address range. The default value is 0.0.0.0/0.

      Note

      Currently, only IP address ranges in IPv4 format are supported.

      Rule Description

      A description of the security group rule.

  7. In the lower-right corner, click OK.

  8. Click Submit to create the workspace.

View workspace details

After you create a workspace, you can view its details.

  1. On the workspace page, click the target workspace card to open the Workspace Details page.

  2. On the Workspace Details page, view the following information:

    • Basic Information: Displays basic information about the workspace, such as Workspace ID, Workspace Name, Network Type, Region, Zone, and Creation Time.

    • Resources:

      • Virtual Private Cloud (VPC): Displays basic information about the VPC, such as the VPC name and VPC ID. You can click Delete to delete the configured VPC resource.

        • Click the vSwitch tab to view the configured vSwitch information.

        • Click the Route Entry tab to view route entry information, such as destination CIDR block, next hop type, and next hop instance.

      • Security Group: Displays the inbound and outbound rules for the private network.

      • Elastic Compute Service (ECS): Displays basic, instance, and network information for ECS instances.

      • Server Load Balancer (SLB): Displays basic instance information, network information, listener information, and backend server group information for SLB instances.

      • Disks: Displays information about existing system disks or data disks.

      • Certificates: Displays basic information about the certificate, such as its name and fingerprint.

      • Task Records: Displays task logs for various operations.

    • Deployment Unit: Displays the deployment unit architecture topology of the current workspace.

Delete a workspace

  1. On the workspace page, select the workspace that you want to delete and click Delete.

  2. In the dialog box that appears, click OK.

Previous：Workspace overviewNext：Resource list