VergeOS Virtual Data Centers: The Data Center as a Portable Object
A virtual machine packages one workload. A Virtual Data Center (VDC) packages an entire data center: VMs, storage, networking, IP addressing, security policies and permissions. VergeOS creates, clones, snapshots, replicates and recovers that environment as one object, and VDCs are included in VergeOS at no extra cost.
Virtualize the Data Center, Not Just the Server
Most virtualization platforms stop at the server. VergeOS extends virtualization to the data center. Inside a VDC, VergeOS packages the VMs, storage resources, network configuration, IP addressing, security policies, user permissions and operational settings for an environment.
That whole environment becomes one logical object. Create it, clone it, move it, snapshot it, replicate it, recover it or delete it without touching any other environment running on the same physical servers.
- Complete isolation. Each VDC runs independently, with no visibility into the resources, workloads or configuration of any other VDC.
- Nested multi-tenancy. Isolate workloads, customers or environments, each with dedicated compute, storage and networking resources.
- One platform. Tenant isolation is part of the VergeOS core, not assembled from separate networking, storage and management products.
The whole environment moves, copies and recovers as a unit.
Isolation Built Into the Platform
A VLAN separates traffic at layer 2. Traditional multi-tenancy adds licensing, shared-resource risk and management overhead. A VDC isolates the entire environment at the infrastructure level.
| Capability | VLAN Segmentation | Traditional Multi-Tenancy | VergeOS VDC |
|---|---|---|---|
| What is isolated | Network traffic only | Pieces assembled across products | Compute, storage, networking, policies and users |
| How isolation is enforced | Switch configuration | Firewall rules across products | Platform default behavior |
| License cost | n/a | Added products and fees | Included with VergeOS |
| Snapshot scope | n/a | Per VM, per product | The entire VDC, in one snapshot |
| Disaster recovery unit | n/a | Rebuilt component by component | The VDC, replicated as one object |
| Tenant self-management | ✕ | Limited, varies by product | ✓ Each tenant manages its own VDC |
Who Uses Virtual Data Centers and How
Removing the cost and complexity of multi-tenancy opens VDCs to every organization, not just service providers.
Customer Multi-Tenancy
Customer A runs in VDC A, Customer B in VDC B. Each operates an independent environment, with hosting that scales and stays individually compliant.
Application Isolation
Separate mission-critical, business-critical, end-user and departmental workloads on shared infrastructure, with central administration.
Dev, Test and Patch Testing
Clone production into an isolated VDC and test updates against real configurations without risk to the operational environment.
Ransomware Containment
An attack that reaches one VDC stays in that VDC. Other VDCs keep running, and the affected one rolls back to a clean snapshot.
Disaster Recovery
Replicate a VDC to a second site with its full operational context and recover it in three clicks, even on different hardware.
Education and Government
Give schools, agencies and departments their own isolated environments from one shared infrastructure and one budget.
The VDC Is the Unit of Containment
Each VDC has its own networking, its own storage volumes and its own access controls. Ransomware that enters a VDC stays in that VDC. The isolation does not depend on firewall rules between products that may or may not survive the next upgrade.
ioFortify watches the VergeOS deduplication trend. Encrypted blocks are unique, so an attack produces an immediate drop in deduplication efficiency, and ioFortify alerts within 10 to 15 minutes of an encryption event starting.
An attack inside one VDC does not reach the others.
Recover by Snapshot Promotion, Not Restore
Quarantine
Mount a 15-minute-old IOclone snapshot of the VDC in a quarantined state.
Inspect
Scan the snapshot for the malware payload.
Remove
Remove the payload if it is present.
Go Live
Promote the clean snapshot to primary and tear down the infected copy. No restore, no per-VM rebuild.
Replicate the Whole Environment as One Object
A VDC snapshot captures VM state, network configuration, IP assignments, storage settings, security configuration and application data together. ioReplicate sends that snapshot to a second VergeOS instance as one synchronized object.
- WAN-efficient. Global inline deduplication runs across the WAN, so only unique blocks travel between sites.
- Many-to-one. Replicate dozens of edge or branch VDCs to one DR site without high-speed links.
- Any hardware. The VDC brings its networking and storage configuration, so it runs correctly on whatever servers the DR site has.
- Test often. Recovery is a three-click VDC operation, and the average DR test takes less than an hour.
Many sites, one DR target, whole environments.
See How VDCs Fit Your Data Center
Tell us about your environment and its workloads, and VergeIO will put together a custom solution diagram showing how Virtual Data Centers map to your customers, departments, applications and DR plan.
- Which workloads to isolate and how
- Where VDCs replace separate networking and storage products
- How replication and recovery work across your sites
Request a Custom VDC Diagram
Frequently Asked Questions About Virtual Data Centers
What is a VergeOS Virtual Data Center?
A Virtual Data Center (VDC) is an isolated environment inside a VergeOS instance that packages VMs, storage, networking, IP addressing, security policies and user permissions into one object. It is the unit of multi-tenancy and the unit of recovery, and it is included in VergeOS at no extra cost.
How is a VDC different from a virtual machine?
A virtual machine packages the resources for a single workload. A VDC packages the resources for an entire data center. VergeOS creates, clones, moves, snapshots, replicates and recovers that environment as one object.
How does a VDC differ from a VLAN?
A VLAN separates network traffic at layer 2 and nothing else. A VDC isolates compute, storage, networking, policies and users at the infrastructure level, and each tenant manages its own environment.
What problems does traditional multi-tenancy create?
Traditional multi-tenancy brings added licensing costs, security exposure from shared resources, resource contention between tenants, management complexity and limits on how far tenants can tailor their resources. VDCs build isolation into the platform and remove the added license cost.
Who uses Virtual Data Centers?
Service providers use VDCs to host each customer in its own environment. Enterprises, educational institutions, government agencies and smaller data centers use them to isolate applications, departments, test environments and DR copies on shared infrastructure.
How do VDCs protect against ransomware?
Each VDC has its own networks, storage volumes and access controls, so an attack that enters one VDC stays there. ioFortify alerts within 10 to 15 minutes of an encryption event, and the VDC recovers by promoting a clean IOclone snapshot instead of restoring from backup.
Can VDCs be used for disaster recovery?
Yes. ioReplicate sends a VDC to a second VergeOS site with its VMs, networking, IP addressing, storage settings and policies as one synchronized object. Recovery is a three-click operation and runs on whatever hardware the DR site has.
Why are VDCs useful for patch testing?
A VDC can be cloned into an isolated copy of production. Teams deploy and test updates against real configurations without risk to the operational environment, then apply them once testing passes.
Do VDCs cost extra?
No. Virtual Data Centers are part of VergeOS and ship in every license. VergeOS is licensed per physical server, with snapshots, replication and ransomware detection included.
Can a VDC run inside another VDC?
Yes. VergeOS supports nested multi-tenancy, so a service provider or enterprise can isolate customers, departments or environments within a tenant, each with dedicated compute, storage and networking resources.
Manage Environments, Not Components
Package each customer, department or application into its own Virtual Data Center, protect it as one object and recover it in three clicks.