Containerized software runs in a Cloud Container Engine (CCE) cluster consisting of Elastic Cloud Server (ECS).

NAT Gateway is configured so that the nodes can access the external network. Security groups or other stricter policies can also be configured to control access based on security requirements.

Anti-DDoS Service (AAD) protects the traffic destined for the EIPs in real time, detects abnormal DDoS attack traffic in a timely manner, cleans traffic based on custom protection policies, and generates reports to clearly display the security status of network traffic.s

Elastic Load Balance (ELB) distributes incoming traffic to containers in the CCE cluster, which expands the service capabilities of the system.

An Elastic IP (EIP) is bound to each Elastic Load Balance (ELB) load balancer and the NAT Gateway so that the resources associated with the load balancers and NAT gateway can provide services accessible from the Internet.

Host Security Service (HSS) protects the servers where workloads are running in a hybrid cloud or multi-cloud environment.

Elastic Volume Service (EVS) provides scalable block storage services with high reliability, high performance, and a wide range of specifications to choose from. EVS disks can be attached to pods for local storage.

Cloud Search Service (CSS) is used to provide ELK services.