Skip to main content

Overview

Control Plane is a hybrid platform that enables cloud architects to combine the services, regions, and compute capacity of Amazon Web Services (AWS), Google Cloud (GCP), Microsoft Azure, and other public or private clouds. The result is a flexible, resilient global environment for building backend apps and services. On Control Plane, microservices can run simultaneously across any combination of cloud infrastructure and connect to any combination of cloud services without embedded credentials. The platform handles identity propagation and authorization uniformly, using best practices and least-privilege principles consistently across environments.

Based on Kubernetes

While Kubernetes orchestrates workloads within a single cluster, Control Plane orchestrates an unlimited number of hardened, security-isolated Kubernetes clusters across all regions in major cloud providers. You can also add Kubernetes clusters from any cloud as custom CPLN Platform regions. You can use Control Plane without in-depth knowledge of Kubernetes, but if you already deploy your own clusters, the platform augments and extends your current Kubernetes infrastructure.

Why run on Control Plane?

Rather than restricting architects to a single cloud, Control Plane enables them to build a resilient, unified multi-cloud environment. Some of the attributes that set Control Plane apart include:
  • Multi-Region and Multicloud Compute: With Control Plane, your workloads run across any combination of geographic regions and cloud providers, including AWS, Azure, GCP, and other public or private clouds. Kubernetes clusters hosted anywhere can be added to Control Plane, enabling you to switch or add cloud providers with a few clicks.
  • Any Cloud Backing Service: Microservices running on Control Plane have native access to services across clouds, such as BigQuery on GCP, Microsoft Entra ID on Azure, and SQS on AWS, without embedding credentials by using Universal Cloud Identity. This enables you to mix and match services from multiple clouds by unifying networking, identity, and authorization policies across supported clouds. Control Plane’s Cloud Wormhole functionality enables your microservices to access native AWS, Azure, and GCP services within and across VPCs. Using Cloud Wormhole, workloads can also access endpoints behind firewalls on-premises and on a developer’s laptop during development.
  • Best-of-Breed DevOps Stack: Control Plane integrates the best of the cloud-native operations stack for metrics, logging, secrets management, software-defined VPN, geo-intelligent DNS, and more. You can also easily integrate the tools of your choice.
  • Uniform Access Control: Control Plane provides consistent, fine-grained authorization controls. These controls are identical whether administering Control Plane itself or your custom workloads. Your workloads get an out-of-the-box fine-grained authorization “dial tone” that handles both simple and complex access patterns uniformly.
  • Built-In Audit Trail: Control Plane provides a tamper-proof audit trail facility for both platform actions and custom workloads. Your code writes to a configured localhost port, and audit events are captured and secured automatically. Audit data is indexed and can be efficiently searched programmatically or via the user interface.
  • Efficient Cloud Cost Optimization: Cloud consumption is optimized on Control Plane to use only the resources required, enabling serverless-like benefits without rearchitecting your microservices. Whether your app has a Dockerfile or was originally designed for serverless, the platform runs your microservice with elastic scalability, from zero to any scale you specify.
  • Unified Interface: Cloud platforms differ significantly in their APIs, CLIs, and UIs. Each has a specialized, often convoluted interface, with its unique and steep learning curve. Control Plane provides a symmetrical UI, API, and CLI that enables developers to deploy and run workloads in any cloud. It allows developers to deploy and manage workloads uniformly across multiple clouds simultaneously, from a single, consistent interface, making workload deployment and day-2 operations easy to manage.
The result: enhanced performance for the end user. Control Plane uses advanced, redundant health monitoring and geographically distributed DNS infrastructure. The platform automatically reroutes traffic to healthy regions and clusters. It removes unhealthy and unreachable nodes from rotation, improving availability and reducing latency for end users. A user from one part of the world experiences ultra-low-latency responses, while a user on the other side of the planet experiences similar 20-30 ms latency. Control Plane enables you to use the full range of services and the computing power your application requires across multiple clouds while delivering uniform and predictable performance to your users.