1 of 100

HI GIO User Guide EN

HI GIO Cloud Help Center

From February 12, 2025, HI GIO Cloud powered by FPT & IIIJ has changed the user guide UI platform. The content remains unchanged and continues to be updated in the new UI.

Welcome!

The User Manual contains all the essential information for using the HI GIO Cloud's system. Use graphics where possible in this manual. The manual format may be altered if another format is more suitable for the project.

Purpose and Scope

This manual includes a description of the system functions and capabilities, contingencies and alternate modes of operation, and step-by-step procedures for system access and use.

Search our essential information.

Organization

FPT Telecom International Co., Ltd
IIJ Global Solutions Vietnam Co., Ltd

Points of Contact

Help desk:
Telephone assistance: 1900 6973

COMPUTE

Introduction

This technical manual provides a comprehensive guide to understanding and handling COMPUTE. It includes detailed descriptions, step-by-step instructions, and necessary resources for effective utilization. Please follow the procedures and recommendations outlined in this manual to ensure the smooth functioning of IT infrastructure.

Overview

HI GIO CLOUD is the first full-scale public cloud service in Vietnam and the unique product of a powerful collaboration between two leading technology companies, FPT Telecom and Internet Initiative Japan (IIJ). This platform offers high-performance computing resources, enabling businesses to seamlessly deploy, manage, and scale applications.

Guideline

1. Working with VM

Overview

A Virtual Machine (VM) is a software computer that, like a physical computer, runs an operating system and applications. The virtual machine consists of a set of specification and configuration files and is backed by the physical resources of a host. Every virtual machine has devices that provide the same functionality as physical hardware but are more portable, secure, and easier to manage.

Please refer to the VM usage guide in the list below.

Create a New Virtual Machine from ISO

Overview

As well as deploying pre-built VMs from a template, you can build your VMs from scratch, as you would do on a physical machine, using an ISO image instead of a physical CD or DVD.

Procedure

Create a Virtual Machine from a Template

Overview

To simplify creating a virtual machine (VM), you can use a pre-built VM template from a catalog.

Procedure

Performing Power Operations on Virtual Machines

Overview

You can perform power operations on virtual machines, such as powering on or off a virtual machine, suspending or resetting a virtual machine, or shutting down the guest operating system of a virtual machine.

Force change root/administrator's password

Overview

You can reset the root/administrator’s account password via Guest OS Customization in the vCD portal.
This password is used for root (Linux) or Administrator (Windows).

Safely remove Disk in Windows OS

Overview

Bring disk to Offline in Windows OS.
Confirm that the disk’s status = is offline in Windows OS and provide disk information to the support team (they will support the infrastructure side).

2. Working with vAPP

Overview

vApp consists of one or more virtual machines communicating over a network and using resources and services in a deployed environment. vApp can contain multiple virtual machines.

Please refer to the vAPP usage guide in the list below.

Create a vAPP

Overview

vApp consists of one or more virtual machines communicating over a network and using resources and services in a deployed environment. vApp can contain multiple virtual machines.

Start and Stop Order of Virtual Machines in a vApp

Overview

You can configure virtual machines' start and stop orders within your vApp. Configure the start and stop order if you have applications installed in the virtual machines that must start and stop in a particular order.

4. HI GIO API

Overview

This guide is designed to help developers and technical users integrate and interact with the HI GIO Cloud services through our powerful API.

This manual provides detailed information on authenticating, making API calls, and handling responses effectively. It also covers best practices, code examples, and troubleshooting tips to ensure a smooth integration process.

Please refer to the VM usage guide in the list below.

API reconfigures VM's Disk

Overview

In this manual, you will find detailed information on how to prepare information, get the VM’s disk information, and reconfigure the VM’s disk.

Procedure

API token login

Overview

In this manual, you will find detailed information on preparing information, creating a Token on the vCD portal, and creating a Bearer token.

Procedure

API power on/off VM

Overview

In this manual, you will find detailed information on how to prepare information, get VM status, and change status VM.

Procedure

5. HI GIO KMS Service

Overview

HI GIO KMS is powered by the HashiCorp Vault solution, which is fully managed by HI GIO teams. Thus, the customer can focus on key management itself.

HashiCorp Vault is an identity-based secrets and encryption management system. A secret is anything you want to control access to tightly, such as API encryption keys, passwords, and certificates. Vault provides encryption services that are gated by authentication and authorization methods. Access to secrets and other sensitive data can be securely stored and managed, tightly controlled (restricted), and auditable using Vault's UI, CLI, or HTTP API.

HI GIO KMS has two kinds of deployment models.

Internet mode
Private mode (Only can access from customer’s HI GIO VPC system)

Reference:

6. Encryption Management Service

Overview

VMware Cloud Director Encryption Management is a solution that grants in-transit encryption for disk I/O and vMotion for a customer's Virtual Machine using vTPM and VM Encryption technology.

Please refer to the Encryption Management service usage guide below.

HI GIO S3 STORAGE

Information

This short manual guide is designed to help HI GIO users navigate the features and functionalities of our cloud storage service. Whether you need to store large files, collaborate with team members, or ensure data redundancy, HI GIO Cloud S3 Storage provides a seamless experience tailored to your needs.

Login to HI GIO S3 Storage Portal

Overview

Refer to this to learn how to activate your account via Email. After successfully activating your account, you can log in to the HI GIO S3 Portal.

How to get the S3 Key

Procedure

Step 1: Log in to HI GIO S3 Portal

Mount HI GIO S3 Storage into Windows

Overview

Mounting a bucket to a local drive enables the creation of a virtual drive directly on the computer, allowing users to manage their cloud storage data seamlessly without needing additional tools or portal access.

Bucket Management

Overview

The Bucket Management page displays information about your Buckets, including name, size, public and private modes, and operations of that Bucket.

Rules Bucket names must follow domain name constraints.

How to create the new Bucket

Overview

As well as using pre-configured storage classes, you can set up your own S3 Buckets from scratch, configuring access policies, versioning, and lifecycle rules to suit your specific storage needs.

Setup Public or Private ACL for Bucket

Overview

ACL (Access Control List) is a mechanism that determines who has access to your buckets and objects (files/folders). To set up a Public ACL, right-click on the Bucket and select "Public" or select "Share Link" to set it up.

Procedure

Step 1: Right-click on the Bucket and choose “Public“

Step 2: Once you have set up Public for a Bucket, the screen will display as “Public” when accessing the link of that Bucket.

Versioning

Overview

S3 Versioning allows you to keep multiple versions of an object in the same bucket, protecting against accidental deletions and enabling easy recovery of previous file versions when needed.

Procedure

Step 1: Right-click to Bucket, choose “Versions” to enable file versioning for a Bucket, and view all versions of files in that Bucket.

Step 2: previous versions of files, ensuring data recovery and protection from accidental deletions or overwrites.

Lifecycle Rule

Overview

Lifecycle rules for files/folders (Objects) must be clearly defined according to usage needs.

For example:

You need to upload a large amount of data and want these files to only exist for 90 days.

Bucket Policy

Overview

An HI GIO S3 Bucket Policy is a JSON-based resource policy that manages access permissions to S3 buckets. It specifies who can access the bucket, the actions allowed, and the conditions for access.

You can prefer the example S3 bucket policy in “HERE.”

Procedure

Step 1: Right-click on the Bucket and select 'Bucket Policy.' Customize the Bucket Policy by Amazon S3 standards. For additional examples and further guidance, refer to the official documentation.

Step 2: You can modify the Bucket Policy as needed in this popup. Once you have made the necessary changes, click "Update Policy" to apply the updates.

Management File, Folder

Overview

HI GIO S3 provides flexible file and folder management, allowing you to organize data hierarchically. You can upload, move, rename, or delete files and folders while applying access controls and lifecycle rules.

Guidelines

Create the Folder

Overview

Creating a folder in S3 helps organize your data. Specify a folder name during file upload or manually create a new folder to group and manage related objects efficiently.

Procedure

Upload Folder/File

Overview

Uploading files or folders to S3 is simple. You can drag and drop or select items to upload, organizing them into folders while maintaining scalable, secure storage in the cloud.

Procedure

Download Folder/Files

Overview

Downloading files or folders from S3 is straightforward. Select the desired objects, and with a click, they will be transferred to your local storage securely and efficiently.

Procedure

Get the link Download of Files

Overview

To download files from HI GIO S3, generate a pre-signed URL. This link provides temporary access, allowing users to download files securely without HI GIO S3 credentials.

Procedure

Step 1: Right-click on the File you need to get a link and choose “Public Sharing.”

Step 2: In HI GIO S3, you can set the sharing mode of your objects to either Private or Public.

Connect S3 Services with Veeam Backup

Overview

Integrating S3 with Veeam Backup allows seamless data backup and recovery in S3 buckets, ensuring data protection, compliance, and efficient cloud storage management.

Backup DATA from NAS to HI GIO S3 Service

Overview

Backing data from NAS to HI GIO S3 Service using NAS ensures secure, scalable cloud storage. Integrating NAS with HI GIO S3 allows you to automate backups, protect files, and enable quick recovery while managing data efficiently through an easy-to-use interface. We support Synology, Qnap, and other NAS brands that can support S3-compatible.

Backup Data from Synology NAS with ClouSync

Overview

Backing data from Synology NAS to HI GIO S3 using CloudSync ensures secure, automated synchronization between your local NAS and S3 cloud storage. It enables continuous data protection, easy file recovery, and efficient storage management.

Procedure

Step1: Connect to your NAS via Web Browser and install CloudSync

Step 2: Access the “Package Center” and then install “CloudSync”

BACK-UP AS A SERVICE

Introduction

This short manual guide is designed to help HI GIO users understand the features and benefits of our Backup as a Service and provide step-by-step instructions for setting up and managing your backups. Whether a small business or a large enterprise, our BaaS solution is tailored to meet your unique needs, ensuring your data is protected against loss, corruption, or unforeseen disasters.

Create backup job on Linux OS via Veeam agent console

Overview

This is a document on how to Create a backup job on Linux.

Procedure

Step 1: Start Veeam Backup Agent

Using this command “veeam” to start service Veeam

Step 2: Create a Back Job

Press “c” and input Job name

How to configure receive Alarm from BaaS

Overview

This is a document for how to configure receive Alarm from BaaS

Procedure

Step 1: Access by URL:

HN site:
HCM site:

Step 2: Choose Templates > Predefined Alarms and then choose the alarm that wants to notification to set up the parameter:

Attention: The details of all the alarms in the Veeam document are as follows.

Alarms - Use the Veeam Service Provider Console Guide, or you can read the Knowledge Base option in Edit Alarm.

Step 3: Choose specific rule by Tick a rule > Edit to define Rules to get the notification or Add more parameters:

Step 4: Define Actions to Receive the notification. We have 2 methods and can Add more parameters, too:

Send email notification: Input the email for the received notification (separate by commas).
Execute script: execute a custom script that you want.

Then, choose the condition to trigger the actions.

Step 5: Click Finish to save Alarm Settings:

Step 6: Enable it to use the Alarm:

Workaround

Procedure

Please refer to the other guides in the list below.

Veeam Agent Installation for CentOS 9 Stream

HI GIO DRaaS

Information

This short manual guide is intended to assist HI GIO users in understanding the features and benefits of our DRaaS offering. In this guide, you will find step-by-step instructions for setting up your disaster recovery environment, best practices for maintaining your recovery plans, and tips for testing and optimizing your DRaaS strategy.

Overview

We provide HI GIO DRaaS for all enterprises who need to initiate secure data replication to another region, such as on-premises to HI GIO Cloud, HI GIO Cloud Ho Chi Minh to HI GIO Cloud Hanoi, or vice versa by setting up HI GIO DRaaS on their resource servers. Furthermore, the RPO has a minimum value of 5 minutes, which suits their critical system.

Guideline

Stretching layer 2 networks for HI GIO's DRaaS

Overview

During on-premises to the cloud migrations, stretch the on-premises networks across the HI GIO cloud site to allow network connectivity between already migrated and not yet migrated virtual machines in the same network segment.

Layer 2 VPN (L2 VPN) stretches the L2 networks across the sites.

Register & configure the Networks of the NSX Autonomous Edge On-Premises

Overview

Once the NSX Autonomous Edge appliance is deployed in the on-premises site, the On-Premises to Cloud Director Replication Appliance starts managing the NSX Autonomous Edge after you register it on-premises.

To complete the L2 stretch configuration entirely by using the management interface of the On-Premises to , after deploying the NSX Autonomous Edge in the on-premises site, you register it by using the On-Premises to Cloud Director Replication Appliance.

Create a L2 VPN server session (HI GIO site).

Overview

By using the management interface in the HI GIO cloud site, organization administrators create the server side of the L2 VPN session, enabling the L2 stretch of one or more networks across the on-premises site.

Procedure

Step 1: Log in to HI GIO Portal

Select Network > Edge Gateways > VPC name

Step 2: Under Services, click L2 VPN > NEW to open L2 VPN Tunnel window.

FAILOVER SCENARIO

Partial Failover

Partial failover is necessary when your DC (on-premises site) is still up and running but only one (or a subset) of your servers, applications, or virtual machines (VMs) is experiencing problems.

FAILOVER

Guideline

Step 2: Configure the Network Settings for On-Premises to Cloud Replications

Overview

Before running the replicated VM's Recovery, we must configure a Failover Network on APP1.

Procedure

Step 4: Reverse replication of the VM from HI GIO Cloud to On-Premises

Overview

After the on-premises site has recovered from the issue and is available, we can migrate the workload (APP1, DB1) from the HI GIO cloud back to on-premises by reversing the replication.

Procedure

Step 1: Log on to the HI GIO portal.

Step 2: Expand More > Click on Availability ()

Step 3:

Step 5: Migrate the VMs back from HI GIO Cloud to On-Premises

Overview

Since the VM is successfully replicated from Cloud to On-Prem, we will migrate the VM APP1, DB1 from HI GIO Cloud back to On-Prem.

Procedure

Step 1: Log on to the HI GIO portal.

Step 2: Expand More > Click on Availability ()

Step 3:

FAQs

You can find the protected jobs on the jobs on-premises site.

After creating the protection job\reverse job on HI GIO cloud (by provider account), you cannot see these jobs on-premises site.

Solution: Change the owner of these jobs to a tenant organization

1. Working with Network

Overview

HI GIO uses a layered networking architecture with four categories of networks to provide a highly flexible and secure network infrastructure in a multipurpose cloud environment. The categories are external networks, organization virtual data center (VDC) networks, data center group networks, and vApp networks. Most types of networks require additional infrastructure objects, such as edge gateways and network pools.

2. VPN

Guideline

Please refer to the VPN usage guide in the list below.

IPSec parameters

To create distributed firewall rules and add them to a data center group, you need to define some things:

Name: Name for the rule.

Source: IP Sets\Dynamic Groups\Static Group (1.1, 1.2, 1.3, 1.4)

Destination: IP Sets\Dynamic Groups\Static Group (1.1, 1.2, 1.3, 1.4)

Application: Select applications with port to apply rule (1.5)

Action: Allow\Reject\Drop

IP Protocol: IPv4/IPv6 or both

Add an IP Set to the Data Center Group:

IP sets are groups of IP addresses and networks to which the distributed firewall rules apply (as Source and Destination). Combining multiple objects into IP sets helps you reduce the total number of distributed firewall rules to be created

Step 1: In the top navigation bar, click Networking and then click the Data Center Groups tab

Step 2: Click the data center group name

Step 3: Under Security, click IP Sets

Step 4: Click New.

Step 5: Enter a meaningful Name, a Description for IP Sets

Step 6: Enter an IPv4 address, IPv6 address, or an address range in a CIDR format, and click Add.

Step 7: To modify an existing IP address or range, click Modify and edit the value.

Step 8: To confirm, click Save.

Create a Static Security Group:

Static security groups are data center group networks to which distributed firewall rules apply (as Source and Destination). Grouping networks helps you reduce the total number of distributed firewall rules that need to be created.

Step 1: In the top navigation bar, click Networking and then click the Data Center Groups tab

Step 2: Click the data center group name

Step 3: Under Security, click Static Groups.

Step 4: Click New.

Step 5: Enter a Name, a Description for the static group, and click Save.

The static security group will appear in the list.

Step 6: Select the newly created static security group and click Manage Members.

Step 7: Select the data center group networks that you want to add to the static security group >> Save

Assign Security Tags to VM:

Security tags you create and assign to virtual machines help you define edge gateway and distributed firewall rules.

Step 1: In the top navigation bar, click Networking.

Step 2: Click Security Tags.

Step 3: Click Add Tag.

Step 4: Enter a tag name.

Step 5: From the list of virtual machines in the organization, select the ones to assign the newly created tag.

Step 6: Click Save.

Create a Dynamic Security Group:

You can define dynamic security groups of virtual machines based on specific criteria (VM Name or Tag Name) to which to apply distributed firewall rules.

Step 1: In the top navigation bar, click Networking and then click the Data Center Groups tab

Step 2: Click the data center group name

Step 3: Under Security, click Dynamic Groups.

Step 4: Click New.

Step 5: Enter a Name and a Description for the dynamic security group.

Step 6: To create a Criterion for inclusion in the group, add up to four rules that apply to a VM Name or a VM security tag.

VM Name: a rule that applies to VM names containing or starting with a term you specify.
VM tag: a rule that applies to VM tags that equal, contain, start with, or end with a term you specify.

As figured out, I created 02 rules

VM Name: Start With “demo”
VM Tag: Equals “non-prd” (That you created in 1.3)

Step 7: Click Save.

Add a Custom Application Port Profile:

You can use preconfigured and custom application port profiles to create distributed firewall rules.

Application port profiles include a combination of a protocol and a port or a group of ports, used for firewall services.

Step 1: In the top navigation bar, click Networking and then click the Data Center Groups tab

Step 2: Click the data center group name

Step 3: Under Security, click Application Port Profiles

Step 4: In the Custom Applications pane, click New.

Step 5: Enter a Name and, a Description for the application port profile.

Step 6: From the Protocol drop-down menu, select the protocol: TCP, UDP, ICMPv4, ICMPv6

Step 7: Enter a port, or a range of ports, separated by a comma, and click Save.

We have predefined Objects in the previous. We will create the distributed firewall rules as below:

In the top navigation bar, click Networking and then click the Data Center Groups tab
Click the data center group name

3. Click the Distributed Firewall tab on the left.

4. Click Edit Rules.