Only this pageAll pages
Couldn't generate the PDF for 892 pages, generation stopped at 100.
Extend with 50 more pages.
1 of 100

Products

Loading...

Loading...

Release Notes

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Set up IONOS Cloud

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

AI

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

2025 Releases

2025 Releases

The following is a list of releases in 2025:

  • November 2025 Releases

  • October 2025 Releases

  • October 2025 Releases

  • September 2025 Releases

  • August 2025 Releases

  • July 2025 Releases

  • June 2025 Releases

  • May 2025 Releases

  • April 2025 Releases

  • March 2025 Releases

  • February 2025 Releases

  • January 2025 Releases

Most Popular Product Guides

November 2025

What's new

November 3

The Network Interface Cards (NICs) Multi-Queue feature improves the network performance of and by distributing traffic across multiple queues based on core count, thereby enhancing throughput and reducing latency through efficient multi-core packet processing. This feature is currently available only in the Frankfurt, Germany de/fra/2 data center and particularly beneficial for high-bandwidth, low-latency applications such as databases, analytics platforms, and high-performance computing workloads.

Documentation updates

November 14

A new tutorial describes how to Bring Your Own IP (BYOIP) address or Bring Your Own Autonomous System Number (BYOASN) to IONOS Cloud. It covers the necessary steps for integrating your own IP address range and ASN into IONOS Cloud.

November 5

A new section is available in the AI Model Hub documentation that includes:

  • : Guidelines on data management and processing practices.

  • : IONOS Cloud's compliance approach, including roles as AI "Distributor" and "Provider", and the necessary information to help you meet your own downstream compliance obligations.

AI Model Hub

Learn about AI foundation models and document collections supporting Retrieval-Augmented Generation (RAG) use cases.

Apply Backup Encryption

Learn how to apply client-side AES-256 encryption to the backups.

Private Container Registry DCD How-Tos

Learn how to create and manage Container Registry using the DCD.

Manage Backup Units

Learn how to manage existing backup units using the Backup Service Console.

ionoscloud_networkloadbalancer_forwardingrule

Learn how to create and manage Network Load Balancer Forwarding Rule objects using Terraform.

ionoscloud_firewall

Learn how to create and manage Firewall Rules using Terraform.

Update a MongoDB Cluster

Learn how to update an existing MongoDB cluster using the DCD.

Set Up a vCPU Server

Learn how to create and configure a vCPU Server inside the DCD.

Private Container Registry Overview

Learn about the managed container registry solution, which can be used as part of CI/CD workflows for container workloads.

Set Up a Backup Unit

Learn how to create a backup unit and set up automatic backups.

Subscribe via RSS feed
NIC Multi-Queue available in Frankfurt, Germany de/fra/2
Dedicated Core Servers
vCPU Servers
IONOS Cloud BYOIP/BYOASN Integration Tutorial
AI Model Hub and the European Union AI Act
Governance & Compliance
Data Handling policies
EU AI Act compliance framework and downstream compliance support

Previous Releases

Welcome to the previous releases section of our documentation portal for IONOS Cloud. This section is dedicated to archiving previous release notes for the year(s), excluding the latest release.

2025 Releases
  • November 2025 Releases

  • October 2025 Releases

  • September 2025 Releases

  • August 2025 Releases

  • July 2025 Releases

  • June 2025 Releases

  • May 2025 Releases

  • April 2025 Releases

  • March 2025 Releases

  • February 2025 Releases

  • January 2025 Releases

2024 Releases
  • December 2024 Releases

  • November 2024 Releases

  • October 2024 Releases

  • August 2024 Releases

  • July 2024 Releases

  • June 2024 Releases

  • May 2024 Releases

  • April 2024 Releases

  • March 2024 Releases

  • February 2024 Releases

  • January 2024 Releases

2023 Releases
  • December 2023 Releases

  • November 2023 Releases

  • October 2023 Releases

  • September 2023 Releases

  • August 2023 Releases

  • July 2023 Releases

  • June 2023 Releases

  • May 2023 Releases

January 2025

What's new

Caching feature in API Gateway

January 27

API Gateway supports a Caching feature that improves API performance and reduces server load. Caching stores the response to an API request and serves it to the client.

Network File Storage General Availability

January 7

Network File Storage is now in the General Availability (GA) phase. It offers shared file storage for multiple virtual machines and containerized workloads via the Network File System (NFS) protocol, along with seamless integration of Network File Storage in Kubernetes environments. You can now access the product in all data center locations. For more information, see Endpoints.

2023 Releases

2023 Releases

The following is a list of releases in 2023:

  • December 2023 Releases

  • November 2023 Releases

  • October 2023 Releases

  • September 2023 Releases

  • August 2023 Releases

  • July 2023 Releases

  • June 2023 Releases

  • May 2023 Releases

September 2023

What's new

New Object Storage Web Console (Beta)

September 20

IONOS offers the New Object Storage Web Console (Beta), an enhanced version of the existing Object Storage Web Console in the DCD, providing improved user experience and performance, intuitive design, and faster responsiveness while having the same feature set as the existing web console. Currently, the feature is in the Beta phase and is available by default to all new and existing users. You are encouraged to try out the new web console. This new application console does not impact the functionality of the existing web console.

Cloud DNS General Availability

September 4

The Cloud DNS is now in General Availability (GA) phase. You can publish DNS zones of your domains and subdomains on public Name Servers using Cloud DNS. With the Cloud DNS API, you can create DNS zones and DNS records, import and export DNS zones, secure your DNS zones with DNSSEC and create secondary zones. Additionally, you can also set up ExternalDNS for your Managed Kubernetes with Cloud DNS.

December 2025

What's new

December 4

Cross Connect, previously available in the General Availability (GA) in Frankfurt and London, has now been expanded to Berlin de/txl. It remains in the Early Access (EA) in all other regions.

Documentation updates

🚀

December 1

A dedicated Tutorials portal is now available, delivering step-by-step guides for all essential workflows and product categories. This centralized resource consolidates all learning content, ensuring seamless navigation and faster discovery. To access the new portal, the following changes have been implemented across this Guides portal:

  • The Tutorials hyperlink in the Table of Contents (TOC) on the left navigation bar now leads directly to the Tutorials Portal.

  • The Tutorials card is now listed under the Quick Links section on the product pages.

  • As part of an ongoing effort to improve clarity and organization, the Tutorials section within the AI Model Hub documentation has been renamed to . The content provides the same concise, step-by-step guides on tasks and usage patterns for interacting with the AI Model Hub.

Changes are visible in the following product sections:

🔈

December 1

You can now share more detailed feedback on our documentation using the new Send Feedback option, in addition to the existing emoji-based reactions. It helps us to understand your needs better and continuously refine our documentation.

  • You can find this option on the top right corner of the , next to the Sign up. Upon selecting, you are directed to the .

  • Using the feedback form, you can report documentation issues, suggest improvements, and highlight documentation you found relevant (positive)—all in a structured way. The feedback is available in both English (EN) and German (DE).

  • We encourage you to use this form and play an active role in helping us continuously enhance the quality, accuracy, and usability of our documentation.

February 2025

What's new

February 28

A step ahead in the AI Model Hub: With , you can now use AI Model Hub via the to test the most critical endpoints. Additionally, we will extend the free service for another three months. We offer a set of applications and code projects you can use to get your AI journey started.

February 26

A new tutorial on using acme.sh with IONOS Cloud DNS to manage SSL/TLS certificates is now available. This tutorial covers the installation, configuration, and automation of certificate renewal.

February 24

DBaaS now supports MongoDB 7.0. The creation of MongoDB 5.0 clusters is discontinued. Existing clusters are not affected; they can be to a higher major version.

February 13

IONOS now supports Windows Server 2025 images, both and , via the DCD and the API in all server locations.

February 3

AI Model Hub supports the models Llama 3.3 (70B) and Teuken (7B). Document collections can now use all supported embedding models, allow for chunking, and support PostgreSQL as an alternative backend.

Documentation updates

February 28

We have introduced a Tutorials section in the documentation to enhance the user experience and simplify setup processes. This section provides step-by-step instructions and best practices for configuring and managing VPN Gateways. The guides you through creating an IPSec tunnel between a Virtual Data Center (VDC) and an on-premises gateway, offering clear guidance for a smooth setup.

2024 Releases

2024 Releases

The following is a list of releases in 2024:

June 2024

What's new

June 28

for DNS zones and records management is now also available via the Data Center Designer (DCD) graphical user interface. Leverage the capabilities of either the DCD or the based on your specific needs and use case for DNS management.

June 10

The self-restoration of MariaDB clusters from a backup via the has been made possible by enhanced IONOS DBaaS for MariaDB, which minimizes downtime and data loss in unanticipated scenarios. For more information about its use cases, see .

October 2023

What's new

October 26

The documentation portal now contains information about the new security advisories that Acronis reported. You can find more details about the reported vulnerabilities on the following pages:

October 25

VM Auto Scaling is now available as an Early Access (EA) feature. It is a cloud computing feature that dynamically scales in or scales out the number of virtual machine instances (horizontal scaling) based on customizable monitoring events. The metric-based policy, defined during its configuration, constantly monitors the load and regularly scales the number of VM instances based on the policy threshold. The functionality ensures that the number of replicas in the group remains within the defined constraints.

Documentation updates

October 18

The documentation for Backup Service has been updated to include a new section called Install the Acronis Backup Agent on Linux. This section provides prerequisites, step-by-step instructions, and configuration options to ensure a seamless installation experience.

May 2023

What's new

May 30

Cloud DNS is now available as an Early Access (EA) feature. You can publish DNS Zones of your domains and subdomains on public Name Servers using Cloud DNS. You may also programmatically manage your DNS Zones and Records via API.

January 2024

What's new

January 10

Logging Service now allows the primary account owner to create sub-users and delegate pipeline management responsibilities. Sub-users can only view and manage the pipelines assigned to them by the primary account owner and are not authorized to access pipelines created by other sub-users or the primary account owner. Hence, your credentials and data are secure and not shared with other sub-users. For more information, see .

Set User Privileges through the API

Prerequisite: You need administrative privileges to create and assign user privileges using the Cloud API.

To set user privileges using the Cloud API to manage IAM resources, follow these steps:

1. Authenticate to the Cloud API using your API credentials.

2. using the POST /cloudapi/v6/um/users endpoint.

  • Enter the following required parameters for the user:firstname, lastname, email, and password.

3. using the POST /cloudapi/v6/um/groups endpoint.

  • Enter the required group name parameter for the group.

  • Set the accessAndManageIamResources privilege to true.

4. that is created using the POST /cloudapi/v6/um/groups/{groupId}/users endpoint and provide the user ID in the header.

  • Enter the required id parameter to identify the user uniquely.

Result: The accessAndManageIamResources privilege is granted to the user.

DCD How-Tos

Learn how to use the DCD to create and view Cloud Savings Plans associated with your contract.

Modify Cloud Savings Plan's Name

Only a contract owner can modify the name of Savings Plans.

Follow these steps to modify the name of Savings Plans:

2. Select a specific Savings Plan by clicking its NAME, displayed as a hyperlink.

3. Enter the new Plan name.

4. Select Update name to confirm the renaming.

Result: The selected Savings Plan's name is modified and and it is listed in the Cloud Savings Plans overview.

Limitations

  • Active Savings Plans cannot be edited or deleted.

  • Savings Plans apply automatically, starting with the oldest in the contract and progressing to the newest. You cannot manually select which VMs get applied the pricing of the Savings Plans.

  • You are always billed for the quantity of resources configured in your Savings Plans, regardless of whether they are deployed and in use.

  • AMD Opteron-based instances are not covered by Savings Plans.

  • Startup contracts do not qualify for the Savings Plans.

For reseller contracts:

  • Savings Plans can be created at the subcontract level, but cannot be transferred between them.

  • Currently, only the reseller contract owner is authorized to create Savings Plans for its subcontracts.

Subscribe via RSS feed
Cross Connect General Availability in Berlin de/txl
Tutorials Portal: Step-by-step learning is here
How-Tos
Compute Engine
MongoDB
PostgreSQL
CDN
Cloud DNS
VDC Networking
VPN Gateway
IONOS Object Storage
Network File Storage
New Mechanism to Send Feedback on Documentation
Documentation portal
Feedback form
AI Model Hub How-Tos
How-Tos
DCD
acme.sh Tutorial
MongoDB supported versions updated
upgraded
Windows Server 2025 Image Availability
public
private
AI Model Hub supports Llama 3.3 70B and Teuken
Introducing Tutorials section in VPN Gateway
VPN Gateway
new tutorial
December 2024 Releases
November 2024 Releases
October 2024 Releases
August 2024 Releases
July 2024 Releases
June 2024 Releases
May 2024 Releases
April 2024 Releases
March 2024 Releases
February 2024 Releases
January 2024 Releases
DCD Support for Cloud DNS
Cloud DNS
API
Self-Restore MariaDB Clusters from a Backup
API
use cases
Advisories reported by Acronis
Advisory on CVE-2023-45247
Advisory on CVE-2023-45248
VM Auto Scaling
Install Acronis Backup Agent on Linux
Cloud DNS
Sub-user Management for Logging Service
Features and Benefits
Create a user
Create a group
Assign user to the group
Virtual Machine (VM)

Create Cloud Savings Plans

Learn how to create Cloud Savings Plans for your contract using the DCD.

Modify Cloud Savings Plan's Name

Learn how to modify the name of a Savings Plan using the DCD.

View Cloud Savings Plans

Learn how to view Savings Plans associated with your contract using the DCD.

October 2025

Subscribe via RSS feed

What's new

AI Model Studio Launch

October 23

The AI Model Studio, a PaaS solution capable of fine-tuning pre-trained AI models, is now available on the German market as a collaboration with our partner from manufactAI and will be free to test till the end of the year.

Advisory on CVE-2025-40300

October 20

The documentation portal now has information on medium-severity vulnerabilities reported by ETH Zurich university researchers. This vulnerability may allow malicious KVM guest to leak sensitive information.

Introducing Cloud Savings Plans

October 14

The Cloud Savings Plans, a new pricing model, offer optimized rates on a specific quantity of resources for selected products over a period of one or three years, compared to standard Pay-As-You-Go (PAYG) pricing. It is ideal for consistent and predictable workloads, providing significant cost reductions. For more information, see the FAQ.

Documentation updates

Monitor MongoDB Cluster Metrics

October 23

A new tutorial is now available in the documentation portal demonstrating how to view and monitor metrics for MongoDB Enterprise clusters using Grafana. The tutorial guides users through setting up the logging pipeline and configuring Grafana data sources to visualize key performance metrics. These insights help users proactively identify cluster health or performance issues and plan capacity upgrades effectively.

Subscribe to Release Notes RSS Feed

October 8

You can now subscribe to release notes through Really Simple Syndication (RSS) feed to receive notifications about the latest updates automatically. The RSS feed provides a machine-readable summary of all new and updated release notes, helping you stay informed through your preferred RSS reader or integration tool. You can subscribe to the feed by using the Subscribe via RSS feed option on the latest release notes page.

September 2025

Subscribe via RSS feed

What's new

SUSE Linux Enterprise Server Public Image Availability

September 26

The SUSE Linux Enterprise Server (SLES) public image support is available on any Block Storage type to leverage benefits like cloud-init, Secure Shell (SSH) key, and password injection. The SLES image is available through the DCD and API for data centers in Germany: Berlin de/txl and Frankfurt de/fra and de/fra2 regions. It operates on the Bring Your Own Subscription (BYOS) model. In this version, you can install the Acronis Backup Agent manually after provisioning, providing full flexibility even though automatic installation is unavailable.

IONOS Cloud validated for Red Hat OpenShift Workloads

September 24

IONOS Cloud is now officially validated to run Red Hat OpenShift workloads, allowing Red Hat-certified partners to deploy their OpenShift infrastructure on the IONOS Public Cloud. This validation ensures that IONOS Cloud meets Red Hat’s technical standards and operational best practices, providing a reliable and consistent platform for certified deployments. Partners can leverage the scalability and performance of IONOS Cloud to run enterprise-grade, containerized applications by enabling secure, certified OpenShift operations exclusively through approved partner environments.

Export data from selected products

September 1

Bulk data export is now available for specific products on request. To export bulk data from your account, contact the IONOS Cloud Support. If you want to manually export data by yourself, see Self Data Export.

July 2025

What's new

IONOS Object Storage Expansion in the Frankfurt Region

July 23

IONOS Object Storage is expanding support of Contract-owned Buckets to the metro region of Frankfurt, Germany de. It is available for use at the eu-central-4 endpoint. For more information, see Endpoints.

IAM Federation for Authentication

July 21

Identity and Access Management (IAM) Federation now supports organizations in onboarding their Identity Provider (IDP) and allowing their users to link their account with IONOS Cloud. With this feature, the user can Log in to the Data Center Designer using IDP, which also facilitates Single Sign-On (SSO).

IONOS Cloud Provider for Pulumi

July 16

We are pleased to announce the release of the new IONOS Cloud provider for Pulumi. With this release, developers and DevOps teams can now use Pulumi’s powerful Infrastructure as Code (IaC) framework to define, deploy, and manage resources on IONOS Cloud more efficiently and flexibly. For more information, see IONOS Cloud provider for Pulumi.

November 2023

What's new

Proxy Protocol Support for Application and Network Load Balancers

November 28

Application Load Balancers (ALB) and Network Load Balancers (NLB) now support Proxy Protocol versions to send additional connection information, such as the source and destination. The Targets associated with your ALB and NLB can now be configured to accept incoming traffic using the Proxy Protocol.

Advisory on Escalation of Privilege for Some Intel Processors (CVE-2023-23583)

November 23

Information on security advisory for CVE-2023-23583, also known as Escalation of privilege for some Intel processors vulnerability, is available on the documentation portal. This vulnerability is based on an unexpected behavior for some Intel(R) processors that may allow an authenticated user to potentially enable escalation of privilege and information disclosure or denial of service via local access.

Logging Service General Availability

November 15

Logging Service is now in the General Availability (GA) phase. You can create logging pipeline instances on the available locations to gather logs from multiple sources. You may also programmatically manage your logging pipelines via the API. To learn more about what changed during the transition from the Early Access (EA) phase to the GA phase, see FAQ.

Documentation updates

Cross Connect

November 13

Cross Connect is now available as an Early Access (EA) feature on a restricted early access basis. To access this feature, please contact your sales representative or customer support. With the enhanced feature, you can connect multiple Virtual Data Centers (VDCs) seamlessly in the same region and under the same contract. Connections can be established via a private LAN only, thus enabling consistent and reliable data transfer and ensuring seamless connections, reduced latency, and minimized addressing discrepancies. Cross Connects are flexible, meaning you can easily modify the existing setup by effortlessly adding or deleting existing data centers or modifying the associated data centers.

Advisory on AMD Disclosed Vulnerability (CVE-2023-20569)

November 1

Information on security advisory for CVE-2023-20569, also known as Return Form Procedure (RET) Speculation or Inception is available on the documentation portal. This vulnerability is reported by AMD as a sensitive information disclosure due to speculative side-channel attacks.

July 2023

What's new

Managed Kubernetes Maintenance Window

July 7

The documentation for Managed Kubernetes has been updated to include information about the maintenance window as well as the cluster and node pool maintenance processes.

Managed Kubernetes Versions

July 7

The documentation for Managed Kubernetes has been updated to include information about Kubernetes versions and their availability.

Manage security risks with Vulnerability Register

July 5

The Vulnerability Register serves as a comprehensive record detailing security vulnerabilities that impact IONOS Cloud products and services. This report has been developed as an integral component of our continuous commitment to assist you in effectively mitigating security risks and safeguarding the integrity of your systems.

Application Load Balancer General Availability

July 3

Application Load Balancer is now in the General Availability (GA) phase. With the Application Load Balancer (ALB), incoming application layer traffic can be routed to targets based on user-defined rules.

Network Load Balancer General Availability

July 3

Network Load Balancer is now in the General Availability (GA) phase. With the Network Load Balancer (NLB), you can automatically distribute workloads over several servers, which minimizes disruptions during scaling.

NAT Gateway General Availability

July 3

NAT Gateway is now in the General Availability (GA) phase. With the NAT Gateway, you can enable internet access to virtual machines without exposing them to the internet by a public interface. It acts as an intermediary device that translates IP addresses between the private network and the public internet.

March 2024

What's new

IONOS DBaaS for MariaDB

March 28

IONOS DBaaS provides support for MariaDB clusters to suit your needs. It offers resources such as CPU cores, RAM size (GB), and storage types to create database clusters. Additionally, the database clusters facilitate point-in-time recovery and backup features, making them highly reliable. It also facilitates cloud-based database patching and scalability. The migration process is straightforward due to its compatibility with MySQL.

Firewall Rule Changes Required for Backup Service Users

March 20

Starting today, the Backup Service management servers will switch to the new IP addresses. We recommend you update the configured firewall rules so that the firewall does not restrict backup agent access and allows the backup agents to communicate effectively. For more information, see FAQ.

Grafana Access Enhancement for Sub-Users in Logging Service

March 13

Logging Service is enhanced to allow sub-users within your contract number to use their IONOS credentials and access Grafana upon meeting the pre-conditions. This enhancement improves accessibility and provides a seamless experience for all users within the Grafana environment.

FAQ

The following are a few FAQ that provide insight into the IAM Federation.

What is IAM Federation?

Identity and Access Management (IAM) Federation enables users from an external Identity Provider (IDP) to access cloud resources, including the Data Center Designer (DCD), after successful authentication and establishment of a link between their organization account and the IDP.

Can an organization use any IDP to establish an IAM Federation connection?

Only Federated IDPs, such as SAML 2.0 or OpenID Connect (OIDC), are supported to establish a trust authentication connection with the IAM Federation.

How can a user benefit by using IAM Federation?

Once users link their organization user account with IONOS Cloud IAM Federation, they can sign in with their organization credentials to access IONOS Cloud resources, including the DCD. Additionally, users can experience seamless sign-in to the DCD with SSO. For more information, see Benefits.

Can any user link their account to IAM Federation?

No, only users with an existing account in IONOS Cloud can link their organization accounts with IAM Federation. New users without an IONOS Cloud account cannot establish an IAM Federation account linking. For more information, see Manage User Account in IAM Federation.

How can an organization establish a connection to the IAM Federation?

IONOS Cloud offers APIs that organizations can use to request domain ownership and onboard their IDP to establish a connection with the IAM Federation. For step-by-step instructions, see Configure IAM Federation.

What should an organization do after requesting domain ownership?

The organization must create a TXT Domain Record. Only upon successful creation of the TXT record can IONOS Cloud verify domain ownership. For more information, see Create a TXT Domain Record.

How can users log in to the DCD using IAM Federation?

Once the user have linked their organization account with IAM Federation, they can log in to the DCD using their organization credentials. For more information, see Log in to the Data Center Designer using IDP.

Can a user unlink their account with IAM Federation?

Yes, users can Unlink the user account from IAM Federation using the Manage Linked Accounts section in the DCD.

February 2024

What's new

IONOS Telemetry API for Logging Service

February 27

You can now interact with the IONOS Telemetry API via the managed Grafana provided by the Logging Service. It is also compatible with Prometheus specifications. The Telemetry API uses the same authentication as the IONOS Cloud API; hence, you can use the same API token to authenticate with the Telemetry API.

IONOS Cloud Crossplane Provider is now available in the official Upbound Crossplane Marketplace

February 22

Upbound Crossplane Marketplace now lists IONOS Cloud as the Crossplane Provider. With Crossplane, you can convert a Kubernetes cluster into a universal control plane.

Advisory on Container Escape via runc (CVE-2024-21626)

February 5

Information on security advisory for CVE-2024-21626 is available on the documentation portal. The vulnerability enables containerized escape for attackers using a malicious image, a malicious Dockerfile, or an upstream image.

API/SDK Authentication Token Manager

February 1

The following significant changes are being made to IONOS APIs, SDKs authentication methods, and token management to enhance user security.

  • A new way to manage authentication tokens from the Data Center Designer (DCD) is introduced.

  • Effective March 15, 2024, the Basic Authentication across IONOS’ APIs and SDKs is completely deprecated for user accounts with 2-Factor Authentication (2FA) enabled or 2FA forced. Impacted users can only generate tokens from the API/SDK Authentication Token Manager.

Features and Benefits

Features

  • Single Sign-On (SSO): Users can access IONOS services with their Identity Provider credentials, removing the need for multiple logins. After signing in to an IONOS Cloud account, they can seamlessly use SSO to access other IONOS Cloud services like the Reseller Portal, Control Panel, and so on.

  • Cross-Domain Collaboration: IAM Federation, along with SSO, adds cross-domain authentication, allowing users across organizations to authenticate using IDP and access various applications across other organizations without creating new credentials.

  • Standardized Protocols: IAM Federation supports industry-standard authentication and authorization protocols, such as Security Assertion Markup Language (SAML) and OpenID Connect, ensuring interoperability between different systems and organizations.

  • Cross Domain Collaboration: IAM Federation, along with SSO, adds cross-domain authentication, allowing users across organizations to authenticate using IDP and access various applications across other organizations without creating new credentials.

  • Security: IAM Federation provides a secure way to share identities with domain ownership and authenticate users with IDP, reducing the risk of unauthorized access to resources and services.

Benefits

  • Improved Security: Identity Provider authentication provides stronger authentication and authorization mechanisms. It also reduces the risk of phishing and password-related attacks.

  • Simplified User Management: The IONOS IAM Federation system streamlines user management, allowing contract owners to manage user access to IONOS services using their existing IDP infrastructure.

  • Enhanced User Experience: Users can seamlessly access resources without multiple logins.

  • Reduced Administration: Organizations can reduce the administrative management associated with managing multiple identities and access credentials of users.

List of Savings Plans in your contract
Modify a Savings Plan's name
Savings Plan's name is successfully updated

Overview

Identity and Access Management (IAM) Federation is a system that offers users a seamless authentication experience when logging in to the Data Center Designer (DCD). Using an Identity Provider (IDP) to authenticate the users allows them to share their identity information and proceed with linking the user account with DCD. It also enables Single Sign-On (SSO) when users wants to log in to the DCD using IDP.

When users log in to the DCD with their organization credentials, all services and resources accessed within the DCD remain the same as when they log in using their IONOS Cloud account.

Note:

  • The IAM Federation supports only the Federation for Authentication.

  • The mapping of federation for access will be introduced in future iterations.

Prerequisites: User accounts must be pre-created in IONOS Cloud, and Access and manage Identity and Access Management resources privilege must be granted. For more information, see Users & Groups and Set User Privileges.

IAM Federation workflow

The IAM Federation works as follows:

1. Identity Provider (IDP): The organization sets up an IDP responsible for authenticating users and providing their identity information to other entities.

2. Service Provider (SP): IONOS Cloud, which wants to allow users to access its resources, such as DCD. For more information, see Configure IAM Federation.

3. Federation Protocol: The IDP and SP agree on a federation protocol, such as SAML (Security Assertion Markup Language), OpenID Connect, or OAuth, to facilitate the exchange of identity information.

Note: IONOS accepts SAML 2.0 or OpenID Connect (OIDC) federation protocol.

4. User Authentication: When users try to access a resource from IONOS, they are redirected to the IDP for authentication.

5. Authentication and Authorization: The IDP authenticates the user and provides an authentication response to IONOS, which includes the user's identity information and authorization attributes.

6. Access to Resources: IONOS Cloud then uses the authentication response to grant access to the requested resources, eliminating the need for the user to log in again to the DCD.

IAM Federation workflow

Management

Manage user access and security policies with features in Identity and Access Management.

Usage provides insights into resource usage, cost incurred, and cost alerts for your account.

Features

Identity and Access Management (IAM)

  • Users & Groups: Facilitates adding new users, assigning roles, and managing access permissions.

  • Password Policy: Enforces rules for password strength, expiration, and complexity to ensure secure authentication.

  • Token Manager: Manages authentication tokens, ensuring secure access control across systems.

  • IAM Federation: Enables users to use their orgnization credentials to log in to the DCD and access resources without the need for additonal authentication and authorization.

Usage

  • Cost & Usage: Monitors and reports on resource consumption.

  • Cloud Savings Plans: A pricing model offering lower hourly resource rates compared to the Pay-As-You-Go (PAYG) rates.

  • Cost Alert: Sends notifications when usage exceeds predefined cost thresholds.

  • Resource Overview: Provides a comprehensive view of all resources and their limits.

Quick Links

Create a TXT Domain Record

Prerequisites:

  • The request for domain ownership using the API must be complete.

  • The organization uses IONOS Cloud DNS to publish the Domain Name System (DNS).

Note: If your organization uses any other domain provider, contact your provider to locate the DNS settings and add the TXT record value by referring to the steps in this guide.

You must add the token value provided in the Request Domain Ownership API response to the TXT Domain Record.

You can create a record of type TXT by following these steps:

  • Name: Leave the name value empty for your DNS record. It helps to identify the domain associated with the token by the domain name.

  • TTL: Enter an appropriate Time-To-Live (TTL) setting for your DNS record in seconds. The default value is 3600 seconds.

  • Type: Select the record type as TXT.

  • Content: Enter the token value provided in the API response as the content value. Example: 9019680770992564882066368772815872312262977566198195.

  • Preview: Ensure that the details of the record to be created are accurate.

Define record properties

6. Click Save to create the DNS record.

Result: Your DNS record of type TXT is successfully created.

Next steps

  • After creating the TXT Domain Record, you must manually trigger the domain ownership verification using the Verify Domain Ownership API. This endpoint will only change the domain status to Approved when the TXT Record contains the provided token. The duration of this process ranges from a few seconds to up to a week, depending on your domain provider.

Note: It is recommended to use the command dig +short {yourdomain} TXT to confirm the presence of the token before triggering verification.

  • You can verify the domain ownership status by using the Retrieve Domain API.

Set User Privileges

Users need appropriate privileges to access and manage Identity and Access Management (IAM) resources. IAM has a group privilege called Access and manage Identity and Access Management resources, which must be enabled for a group so that the members of this group inherit it through group privilege settings and can access and manage the IAM resources.

4. In the Privileges tab, select Access and manage Identity and Access Management resources.

Set user privileges

Result: The privilege to manage IAM resources is granted to all the members in the selected group.

Revoke user privileges

IAM Federation

Identity and Access Management (IAM) Federation is a mechanism that lets users from an external Identity Provider (IDP) access IONOS Cloud resources, such as the Data Center Designer, upon successful authentication and establishing the organization account link with the IDP. Federated IDPs such as Security Assertion Markup Language (SAML) 2.0 or OpenID Connect (OIDC) are supported to establish a trust authentication connection. With IAM Federation, users also get to Single Sign-On (SSO) across multiple systems without logging in whenever accessing these resources.

Product Overview

Quick Links

Developer Tools

Frequently Asked Questions (FAQ)

DCD Default Settings

You can set the default values for your Virtual Data Centers (VDCs). Each time you open a new VDC, DCD will place your resources in the preset location, assigning them the same number of cores, memory size, storage capacity, and reserved IP addresses. For example, you can specify that all new VDCs must be located in Berlin or that all processors will use the Intel architecture.

To edit the default settings, follow these steps:

  1. In the DCD, go to Menu > My Profile > DCD Default Settings.

  2. A My settings window will open up. Set the default values for Session settings, Data Center settings, Server settings, Storage settings, and IP settings from the respective drop-down lists.

My Settings lets you set defaults for any infrastructure created in subsequent data centers

Result: Your new settings will be updated immediately. You can undo your changes either by selecting Reset or Reset All.

Resource Overview

You can track the global usage of resources available in your account along with the overview of usage limits per instance.

To view the resource overview, follow these steps:

  1. In the DCD, go to Menu > Management > Resource Overview.

  2. A Resource Overview window will open up with a summary of all resources.

Info If you want to extend these resources, contact IONOS Cloud Support.

Resource overview window

View Cloud Savings Plans

You must be a contract owner to view Savings Plans. Your contract lists all plans that you created, including those that have expired.

Follow these steps to view plans:

2. The Cloud Savings Plans window displays the following details:

  • NAME: Select the name to view the plan's details. To edit the name, see Modify the Cloud Savings Plan Name.

  • QUANTITY: Displays the number of resources associated with the plan.

  • STATUS: Indicates if the plan is Starting soon, Active, Expiring soon, or Expired.

  • START DATE: Displays the date the plan started and billing commenced.

  • END DATE: Displays the date the plan expires and billing concludes.

Toggle the Show expired button to list plans that have already expired. You can also select Create Cloud Savings Plans to create new plans.

List of Savings Plans in your contract

June 2023

What's new

June 20

HDD and ISO images are now accessible through the Data Center Designer (DCD) and the . These latest Debian images are compatible with all IONOS Compute Engine instances, including and .

June 1

Internet Protocol version 6 (IPv6) is now a General Availability (GA) feature for all IONOS Compute Engine instances of type and . Applications can now be hosted in the dual stack with connectivity over both IPv6 and IPv4 within virtual data centers and to and from the internet.

Updates

June 1

Firewall rules configuration for a Network Interface Card (NIC) is now extended to support IPv6. With this enhancement, Firewall rules support ICMPv6 as a protocol, IPv6 addresses as source or destination IPs, and lets you specify the IP version for which a given rule is applicable.

June 1

With IONOS extending IPv6 support to Compute Engine instances, you can now use the Flow Logs to capture data related to IPv6 network traffic flows in addition to IPv4.

Log in to the Data Center Designer using IDP

Prerequisite: The user account must be linked with IAM Federation.

1

Initiate DCD Login

1. Open a web browser and navigate to .

2. Enter your user account Email Address associated with your organization IDP.

3. Click Next.

2

Authentication Options

The user can choose from the following options:

Option 1: Continue to Log in to the DCD using your IONOS Cloud Credentials
  • Enter the Password associated with the IONOS Cloud account.

  • Click Sign In.

Result: The user is succesfully logged in to the DCD using their IONOS Cloud credentials.

Info: The step Complete Sign In is unnecessary because you are already logged in to the DCD.

Option 2: Log in to the DCD Using your Organization Credentials

Prerequisite: The organization must have successfully requested domain ownership and onboarded their IDP. For more information, see .

  • Select the option Sign in with a linked account. In this case, the user is redirected to the organization IDP page to complete the user authentication. Continue with the next step.

3

Complete Sign In

  • Enter your organization login credentials, such as Email, Password, and Sign In.

Result: The user is succesfully logged in to the DCD using their credentials linked with the organization IDP.

Payment Details

You can view and update your account's billing and payment details.

Note:

  • Only users with the contract owner role are authorized to modify payment details.

  • Available payment options vary based on the country associated with your contract; as a result, you may see both options or only Credit card. The availability of SEPA Direct Debit is subject to geographic restrictions.

To edit the payment details, follow these steps:

  1. In the DCD, go to Menu > Your Profile > Payment details.

  2. The Payment Details window will open up. You can set up the payment method by selecting Set up payment method. A Change payment method window will open up.

  3. Select the payment methods in Available payment methods to choose from how you would like to pay. The Credit card option is selected by default.

Select this option to enter your Credit card information. Each transaction is encrypted using Secure Socket Layer (SSL), and the information is secure. You need to provide the following information:

  • Card number: Enter the valid card number for payment processing.

  • Expires (month): Select the expiration month of your credit card from the drop-down list.

  • Expires (year): Select the expiration year of your credit card from the drop-down list.

  • Card verification code: Enter the security code on your credit card to verify the legitimacy during online transactions.

  • Credit card holder's address: You can provide the billing address associated with the credit card for verification purposes. Select either of the following options:

    • Same address as customer data: Select this option if you want to input the same address as you used in customer data.

    • Different address: Select this option to input a different address and provide the name of the Cardholder, Street and number, City, ZIP code, and Country.

    Once done, select Until further notice, I agree that IONOS will collect all amounts due from the above credit card.

Select this option to enter the SEPA Direct Debit information. The SEPA Direct Debit processing can take up to 24 hours. You need to provide the following information for Authorisation for SEPA Direct Debit.

  • Customer Name/Account Holder: Enter the name of the account holder associated with the bank account.

  • IBAN: Enter the complete International Bank Account Number (IBAN).

    (Optional) Once done, select Third-Party Direct Debit Details to authorize a third party, such as a company or service provider, to give your consent to access your bank account.

    • Select I agree that the amounts due may be debited from the specified account until cancelled.

  1. Select Save to make changes.

Result: Your Payment details will be saved.

May 2025

What's new

May 26

The documentation portal now has information on medium-severity vulnerabilities reported by Intel. These vulnerabilities may allow local and authenticated attackers to access sensitive information.

May 15 We are excited to offer the Intel Sierra Forest Xeon Gen 6 processor as a new option for our Dedicated Core Server in our Compute Engine. This high-performance CPU delivers reliable and consistent computing power for even the most demanding applications. Its advanced architecture and 2.4 GHz clock speed ensure seamless execution of complex workloads, providing maximum efficiency and scalability. Sierra Forest will initially be available in the Berlin data center and gradually rolled out to other locations.

May 15 All Virtual Machines (VMs) running on Sierra Forest will require a Unified Extensible Firmware Interface (UEFI) for booting, marking a significant shift as UEFI becomes the mandatory firmware for all Sierra Forest-based VMs. This change ensures a secure and efficient boot process, providing a modern, feature-rich environment compared to the legacy BIOS. For more information about the transition process, see .

May 13 IONOS introduces a dedicated Security product grouping with the . This category combines products with related functions, such as , , and , into a single, organized section. With this update, the navigation path within the DCD is revised to reflect the new structure, making it easier for users to locate and access these security functions. The core functionality remains the same, and the updated navigation information can be found in each product's documentation.

May 2 Managed Kubernetes is releasing Kubernetes version 1.32. For more information about the schedule timeline, see . The updated schedule now also mentions the end-of-life dates for version 1.29.

May 13 The category Security has been renamed to Security Safeguards in the documentation portal to better align with its operation and function. The documentation related to IONOS Cloud security best practice guidelines, reporting of security events, and vulnerability register has been moved to this section.

My Customer Data

To view or update your data, such as the organization's name and address or contact details, follow these steps:

  1. In the DCD, go to Your Profile > My Customer Data.

  2. A My customer data window will open up. You can view the Email Address, a Contract Number, Company name, First name, and Last name.

Info: If you want to make any changes, contact .

  1. Select Edit to update the Street address, ZIP, and City in the Address section. Select Save to make changes.

Info: If you want to update the Country, contact .

  1. Select Edit to update the primary Contact email address, Billing email address and Phone number associated with your account in the Contact section. You can also add other billing addresses by selecting Add another billing email address. Select Save to make changes.

Result: Your Customer Data will be saved.

How-Tos

A step-by-step guide on configuring and managing IAM Federation for a user account.

Delete Domain

To delete a domain, perform a DELETE request with the domainId of the domain.

Endpoint

Use the following endpoint to delete a domain: https://iam.ionos.com/federation/domains/{domainId}.

Request

Note: The following request contains a sample domainId. Replace it with the domainId value to delete the respective domain.

Below is the list of mandatory path parameter:

To make authenticated requests to the API, the following fields are mandatory in the request header:

Response

202 Successful operation

Features and Benefits

Features

  • Multiple Savings Plans: Create and manage multiple Savings Plans according to your needs and growing demands.

  • charges for uncovered resources: Any usage outside the scope of active Savings Plans is automatically billed at the PAYG rate.

  • Price protection during plan term: Once a Savings Plan is active, its pricing remains fixed for the entire duration, regardless of any changes to the pricing of the Savings Plans.

  • Flexible start date selection: The plans either start at 00:00 UTC on the day after the purchase is made or on another chosen day up to 30 days in advance.

Benefits

  • Locked in plan rates: By selecting a one or three-year term, you significantly reduce the rate for resource usage. It helps you cut the costs of essential, always-on workloads and extract maximum value from your cloud infrastructure.

  • Flexibility across workloads: You configure an overall amount of resources based on total usage, not specific machines or zones, so your savings move with your workloads. Defined rates automatically apply across all eligible resources. It allows you to adapt your environment as your needs change.

  • Effortless plan management: View and track all active Savings Plans through the , and create additional Savings Plans as your resource needs grow.

Set User Privileges for Data Center

Users need appropriate privileges to create and manage data center. The group privilege called Create Data Center must be enabled for a group so that the members of this group inherit it through group privilege settings and can create and manage Virtual Data Center (VDCs).

Prerequisite: Make sure you have one or more Groups in the User Manager. To create one, see .

To set user privileges to create and manage VDCs, follow these steps:

  1. In the DCD, go to Menu > Management > Users & Groups.

  2. Select the Groups tab in the User Manager window.

  3. Select the appropriate group to assign relevant privileges.

  4. In the Privileges tab, select Create Data Center.

Note: You can remove the privileges from the group by clearing Create Data Center.

Result: The privilege to create and manage VDCs is granted to all the members in the selected group.

Revoke user privileges

You can revoke a user's Create Data Center privilege by removing the user from all the groups with this privilege enabled.

Warning: You can revoke a user from this privilege by disabling Create Data Center for every group the user belongs to. In this case, all the members in the respective groups would also be revoked from this privilege.

To revoke this privilege from a contract administrator, disable the administrator option on the user account. After performing this action, the contract administrator will become a contract user, and the privileges that were set up for the user before becoming an administrator will then be in effect.

Usage

With Usage, you can track your resource usage, cost incurred, and cost alerts for your account.

Access Permissions

To access Usage features, select Menu > Management on the top navigation menu of the DCD. You will see the following features in the drop-down menu:

Note: The features are subject to access levels based on the user's role.

Quick Links

Retrieve all Links

To retrieve all links of the accounts associated with the IAM Federation in the form of an ID, perform a GET request.

Endpoint

Use the following endpoint to retrieve all links: https://iam.ionos.com/federation/links.

Request

To make authenticated requests to the API, the following fields are mandatory in the request header:

Response

200 Successful operation

Create Cloud Savings Plans

You can create multiple Savings Plans under your contract. Ensure you meet all the before getting started.

Follow these steps to create a plan:

2. Select Create savings plan and enter the following details:

  • Plan name: Enter a name for your Savings Plan.

  • Start date: (optional) You can choose a start date:

    • If you select a date, the Savings Plans will begin at 00:00 UTC on that day.

    • If you do not select a date, the Savings Plans begin at 00:00 UTC on the following day.

  • Product selection: You can apply your customised Savings Plans to any of the listed products:

    • Compute Engine - Dedicated Core Servers

    • Managed Kubernetes - Dedicated Core Node Pools

  • Resources: To create your plans, select the checkbox for each resource you want to cover: Cores and/or RAM. For each selection, define the amount the plan will cover. A separate plan will be created for each resource. Upon selecting the checkboxes, you can modify the number of resources using either the slider or the up-and-down arrow controls in the text box next to the slider.

  • Plan term: Select either a one-year or three-year term for your Savings Plans based on your need.

  • Price per unit: The optimized rate applied to each resource unit under the Savings Plans is displayed.

Info: A summary of your plan will appear in the Summary section on the right side of the window. Active Savings Plans automatically bill any covered usage at the plan's rate throughout the term, providing cost predictability and savings. You can:

  • View the cost per 30-day billing period by selecting 30 days. For example, a resource's monthly cost is calculated by multiplying its unit price by the total hours used.

  • Select Total to view the total accumulated cost for the duration of the plan.

  • Payment option: Usage under the Savings Plans is billed monthly.

  • Click Cloud Savings Plan purchase conditions to read the terms and conditions.

  • Select the I confirm I've read and agree to checkbox when you agree with the terms and conditions.

Note: Plan creation is possible only upon selecting the checkbox.

3. Select Create to create your customized Savings Plans.

Result: Your plan is created and listed in the Cloud Savings Plans overview with the STATUS set to Starting soon. You will also receive a confirmation email to your registered email address. The two confirmation boxes indicate that two separate plans are being created: one for RAM and other one for the number of CPU cores.

Next Steps

After creating the Savings Plans, you can and associated with your contract, but you cannot delete an existing plan.

API How-Tos

With IAM Federation APIs, learn how to set user privileges, create and manage Identity Providers (IDPs), request and manage domain ownership, and user account linking with IAM Federation.

Cloud Savings Plans

The Cloud Savings Plans offer optimized rates on resources for a specific usage amount over one or three years. This pricing model delivers significant cost reductions compared to the standard pricing. It provides guaranteed optimized prices for a set usage and term, making them ideal for predictable and steady workloads.

The guides you through the complete end-to-end workflow, from creation and validation to renewal. Specific explain how the plans apply to your consumption, and the provides information about transparent billing based on resource consumption.

Prerequisite: You must be a contract owner to create and manage the Savings Plans in your contract.

Product Overview

Quick Links

Frequently Asked Questions (FAQ)

Large Language Models

Small models (less than 15 billion parameters)

The following small language models (less than 15 billion parameters) are optimized for fast inference and low resource consumption. They are ideal for real-time applications and scenarios where latency and cost are critical. While their compact size means they may have less "world knowledge" and slightly lower response quality than larger models, they excel at conversational tasks, virtual assistance, and domain adaptation.

  • : A French model from Mistral, tailored for conversational agents and virtual assistants. Its small size ensures efficient inference, and it is particularly effective in scenarios where rapid, context-aware dialogue is essential.

  • : A US-developed model by Meta, designed for conversational agents and virtual assistants. It balances speed and language understanding well, making it suitable for interactive applications that require reliable, fast responses.

  • : A highly adaptable and lightweight model well-suited for conversational agents and virtual assistants across diverse domains. Its efficient architecture enables quick responses and easy customization, making it a strong choice for research and production environments where flexibility is key.

Medium models (between 15 billion and 150 billion parameters)

Medium-sized models provide a strong balance between response quality and inference speed. They are suitable for applications that demand higher accuracy, broader knowledge, and more nuanced language understanding while maintaining reasonable performance and cost.

  • : A French multilingual and multimodal model from Mistral, designed for conversational agents and virtual assistants. It supports both text and image input, offering enhanced performance for applications requiring fast and reliable chat completions across various European languages.

  • : A US model by Meta, offering enhanced response quality for conversational agents and virtual assistants. Its larger parameter count enables more sophisticated reasoning and richer language capabilities, making it ideal for demanding dialogue systems.

  • : A large open-source language model by OpenAI, delivering exceptional response quality and comprehensive knowledge coverage. It excels in complex reasoning, content generation, and conversational tasks, offering a strong balance between performance and inference speed for demanding applications.

Large models (more than 150 billion parameters)

Large models are designed for maximum language understanding, deep reasoning, and high-quality responses. They are best suited for advanced applications where accuracy and depth of knowledge are paramount, though they require more computational resources and have slower inference speeds.

  • : Meta's flagship large language model, delivering exceptional response quality and comprehensive knowledge coverage. It is ideal for research, content generation, and complex conversational tasks where the highest level of language proficiency is required, albeit with slower response times.

Retrieve all Domains

To retrieve all domains, perform a GET request.

Endpoint

Use the following endpoint to retrieve an IDP: https://iam.ionos.com/federation/domains.

Request

To make authenticated requests to the API, the following fields are mandatory in the request header:

Response

200 Successful operation

Identity & Access Management

Manage password policies, users, groups, and token management for secure access control.

Usage

Track cost alerts, usage data, and resource overview for efficient cost management.

IAM Federation

Learn about IAM Federation, its features and benefits, and how to configure it.

How-Tos

Learn how to set user privileges, configure IAM Federation, manage account linking, and log in to the DCD using IDP.

API How-Tos

Learn how to use the API to create and manage IDPs and domains and to retrieve account links associated with IAM Federation.

Cloud API

Access the REST API documentation for IAM Federation.

FAQ

Get answers to the most commonly encountered questions about IAM Federation.

curl --location \
--request DELETE 'https://iam.ionos.com/federation/domains/f181c212-34f1-5843-9bbb-fc2531c7d928' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'

Body Parameters

Type

Description

Example

domainId

string

The ID (UUID) of the domain.

f181c212-34f1-5843-9bbb-fc2531c7d928

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.

Content-Type

yes

string

Set this to application/json.

curl --location \
--request GET 'https://iam.ionos.com/federation/links' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.

Content-Type

yes

string

Set this to application/json.

{
  "id": "c003494a-e8a1-5a00-bf65-d94f98f69027",
  "type": "collection",
  "href": "/links",
  "items": [
    {
      "id": "5eb3d304-dc75-56cb-9b94-152533912d33",
      "type": "link",
      "href": "/links/5eb3d304-dc75-56cb-9b94-152533912d33",
      "metadata": {
        "createdDate": "2020-12-10T13:37:50+01:00",
        "createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "lastModifiedDate": "2020-12-11T13:37:50+01:00",
        "lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
      },
      "properties": {
        "id": "ac6f04c2-68e1-5e61-97c8-ef0216f1c08e",
        "providerAlias": "oidc",
        "displayName": "IdentityProvider ABC",
        "linkedUsername": "linkedUsername ABC",
        "linked": true
      }
    }
  ]
}
curl --location \
--request GET 'https://iam.ionos.com/federation/domains' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' 

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.

Content-Type

yes

string

Set this to application/json.

{
  "id": "7d4a3d9d-033d-5794-99e6-d5cfa9516fc4",
  "type": "collection",
  "href": "/domains",
  "items":[
    {
      "id": "f181c212-34f1-5843-9bbb-fc2531c7d928",
      "type": "domain",
      "href": "/domains/f181c212-34f1-5843-9bbb-fc2531c7d928",
      "metadata": {
        "createdDate": "2020-12-10T13:37:50+01:00",
        "createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "lastModifiedDate": "2020-12-11T13:37:50+01:00",
        "lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>",
        "account": 123456
      },
      "properties": {
        "domain": "yourcompany.com",
        "status": "REQUESTED",
        "message": "The token provided should be added to the TXT Domain Record, then request to verify the ownership. Important: This is the only time the token will be visible to you, so please take note of it now."
      }
    }
  ]
}
Debian 12 Images
Debian 12
Cloud API
Dedicated Core Servers
Cloud Cubes
IPv6 General Availability
Dedicated Core Servers
Cloud Cubes
Configure Firewall Rules for IPv6
Flow Logs for IPv6
Pay-As-You-Go (PAYG)
Data Center Designer (DCD)
Mistral Nemo
Meta Llama 3.1 8B
openGPT-x Teuken
Mistral Small 24B
Meta Llama 3.3 70B
OpenAI GPT-OSS 120B
Meta Llama 3.1 405B
https://dcd.ionos.com
Configure IAM Federation
IONOS Cloud DCD log in screen
Sign in using IONOS Cloud credentials
Sign in with a linked account
Sign in using organization credentials
Change payment method window
Change payment method window
Advisory on CVE-2025-20623
Introduction of Intel Sierra Forest in Dedicated Core Server CPU Architecture
UEFI support for Sierra Forest VMs
Transition Private Images to UEFI
Security Product Category in the DCD
new simplified and streamlined DCD
Certificate Manager
Network Security Groups
SSH Key Manager
Managed Kubernetes Version
Release Schedule
Security Safeguards category
Intel Sierra Forest in Dedicated Core Server CPU Architecture
IONOS Cloud Support
IONOS Cloud Support
My customer data window

Set User Privileges

Set required user privileges to create and manage IAM resources.

Configure IAM Federation

Learn how as an orgnaization you can request domain ownership and onboard IDP.

Create a TXT Domain Record

Learn how to create a domain record of type TXT and add the token value in it.

Manage User Account in IAM Federation

Learn how to link a user account to IAM Federation.

Log in to the Data Center Designer using IDP

Learn how to log in to the DCD using your organization user account linked with IDP.

Create a group
Set Create Data Center privilege

Menu item

Contract Owner

Administrator

User

Cost and Usage

+

+

Cloud Savings Plans

+

Cost Alert

+

+

Resource Overview

+

+

Cost & Usage

Get a detailed view of cloud costs and consumption statistics.

Cloud Savings Plans

A pricing model offering lower hourly resource rates compared to the Pay-As-You-Go (PAYG) rates.

Cost Alert

Set spending thresholds and receive alerts on cloud costs.

Resource Overview

View usage summaries and status of your cloud resources.

Set User Privileges through the API

Set required user privileges for a user to manage IAM resources.

Create Identity Provider

Learn how to create an IDP for your organization using the API.

Retrieve Identity Provider

Learn how to retrieve an IDP for an organization using the API.

Retrieve all Identity Providers

Learn how to retrieve all associated IDPs for an organization using the API.

Ensure Identity Provider

Learn how to update an existing IDP of an organization using the API.

Delete Identity Provider

Learn how to delete an IDP associated with your organization using the API.

Request Domain Ownership

Learn how to map the organization domain to establish IDP connection using the API.

Retrieve Domain

Learn how to retrieve the organization domain using the API.

Retrieve all Domains

Learn how to retrieve all the domains associated with the organization using the API.

Verify Domain Ownership

Learn how to verify the ownership of the domain associated with the organization using the API.

Retrieve Link

Learn how to retrieve a link of the account associated with the IAM Federation using the API.

Retrieve all Links

Learn how to retrieve all links of the accounts associated with the IAM Federation using the API.

Pay-As-You-Go (PAYG)
Cloud Savings Plans lifecycle
use cases
invoice

Cloud Savings Plans

Learn about the Cloud Savings Plans and its usage.

Use Cases

Learn how Cloud Savings Plans apply to various billing scenarios and workloads.

How-Tos

Learn how to use the DCD to create and view the list of your Cloud Savings Plans.

FAQ

Get answers to the most commonly encountered questions about the Cloud Savings Plans.

December 2023

What's new

Red Hat Enterprise Linux (RHEL) 8 Images

December 20

IONOS now supports RHEL 8 images as part of our ongoing commitment to offering RHEL support to our users. As a result, RHEL 8 images are now compatible with the IONOS public cloud architecture.

Red Hat Enterprise Linux (RHEL) 9 Images

December 18

IONOS is a certified partner of Red Hat and is authorized to provide and run Red Hat Enterprise Linux inside the IONOS public cloud infrastructure. This applies to public RHEL 9 images supplied by IONOS.

Private Node Pools

December 15

Managed Kubernetes now supports Private Node Pools, providing enhanced security, isolation, and flexibility to manage your Kubernetes workloads. You can create Private Node Pools within your Managed Kubernetes clusters to ensure your critical workloads remain secure and protected.

Enhanced Features Released for Backup Service

December 15

Now you can enable advanced features to boost the protection of your workloads:

  • Advanced Backup ensures continuous protection of your data, capturing even the most recent updates to prevent loss.

  • Advanced Security offers comprehensive, continuous malware threat mitigation for your data environments.

  • Advanced Management facilitates the patching of vulnerabilities within your protected data scope.

Renamed Managed Backup to Backup Service

December 15

IONOS has renamed Managed Backup to Backup Service to standardize the product terminology. Earlier, Managed Backup was also referred to as Backup as a Service or Backup by Acronis across different platforms. The new unified name ensures consistency in our communications and branding. This change does not impact the product's functionality, and the service remains unchanged. The documentation portal now reflects the product name changes. For more information, see FAQ.

Revamped IONOS Object Storage DCD Interface

December 14

IONOS offers a revamped DCD interface for IONOS Object Storage in the General Availability (GA) phase. It is an enhanced version of the old DCD interface, providing improved user experience and performance, intuitive design, contextual help, and faster responsiveness. The user interface navigation label is renamed to IONOS Object Storage in the DCD.

New Feature Set in IONOS Object Storage

December 14

IONOS Object Storage offers the Bucket Policy, view object versions and metadata, and Object Lock features in the General Availability (GA) phase. Using Bucket Policy, overarching access policies for a bucket can be set to control data access and usage. With Object Lock, data can be secured by implementing retention policies or legal holds; and with object versions and metadata, object retrieval is easier for large volumes of unstructured data. These new features overall improve the access and data management in the Object Storage.

Container Registry Vulnerability Scanning General Availability

December 13

IONOS offers the new Container Registry Vulnerability Scanning feature in General Availability (GA) phase. Software development is constantly evolving, and security is our top priority. The Container Registry Vulnerability Scanning feature is specifically designed to enhance the security of your containerized applications by proactively identifying potential vulnerabilities present in your artifacts. Scans occur each time an artifact is pushed to the registry and when new vulnerability definitions are published. It quickly detects any security weaknesses in container dependencies and libraries, allowing you to react immediately to prevent exploitation. For more information about reviewing the vulnerability scan results, see View Vulnerability Scan Results.

This feature will be available when creating new container registries, and you can also enable it for existing registries. For more information, see Enable Vulnerability Scanning.

New Container Registry Web Console

December 13

IONOS offers the New Container Registry Web Console, an enhanced version of the existing Container Registry Web Console, providing improved user experience and performance, intuitive design, faster responsiveness and additional features than the existing Container Registry Web Console. For more information, see DCD How-Tos.

Red Hat Enterprise Linux (RHEL) Images

December 4

IONOS is a certified partner of Red Hat and are authorized to provide and run Red Hat Enterprise Linux inside the IONOS public cloud infrastructure. This is applicable to both public RHEL images supplied by IONOS and user-uploaded private RHEL images.

Documentation updates

Reorganized subtopics in Block Storage

December 18

The subtopics in the Block Storage section have been updated. It now contains a new Images & Snapshots section with the appropriate subtopics—IONOS Public Images and Private Images. For more information, see Images & Snapshots.

Reorganized subtopics in Block Storage

December 4

The subtopics in the Block Storage section have been updated. It now contains a new Images & Snapshots section with the appropriate subtopics—Public Images and Private Images. For more information, see Images & Snapshots.

August 2023

What's new

Renamed Virtual Server to Dedicated Core Server

August 18

This is solely for informational purpose and does not require any action from you. IONOS has renamed Virtual Server(s) to Dedicated Core Server(s). This change does not impact the functionality of the product in any manner. As a result, the documentation portal now reflects the product name changes. For more information, see Product Renaming FAQ.

Advisory on Downfall: Information Disclosure in Intel Processors (CVE-2022-40982)

August 18

Added information on security advisory for CVE-2022-40982, also known as “Gather Data Sampling” (GDS) or “Downfall” here.

MongoDB for Enterprise

August 14

IONOS MongoDB database cluster offers MongoDB Enterprise edition supporting versions 5.0 and 6.0 to suit the requirements of enterprise-level deployments. This edition provides advanced capabilities such as sharding database type, enabling the BI Connector, and more resources - CPU cores, RAM size (GB), and storage types to create database clusters. Additionally, the enterprise database clusters facilitate point-in-time recovery and offsite backup features making these clusters highly reliable.

vCPU Servers

August 10

A vCPU Server is a new virtual machine provisioned and hosted in one of IONOS's physical data centers. It behaves like a physical server and can be used as a standalone product or combined with other IONOS cloud products. To configure a vCPU Server, choose a preset (S, M, L, XL, and XXL) that suits your needs. Presets are a combination of specific vCPU-to-RAM ratios. The number of vCPUs and RAMs differs based on the selected preset. You can also tailor the vCPU-to-RAM ratios to meet your requirements—the Preset automatically changes to Custom when you edit the predefined ratio.

Managed Kubernetes Versions

August 8

The documentation for Kubernetes Versions now contains the following details:

  • Managed Kubernetes releases Kubernetes version 1.27; hence, the Available column now mentions the release date.

  • Kubernetes version 1.24 has reached an end-of-life; hence, the Kubernetes end of life column has been updated accordingly.

Documentation updates

Note: The documentation portal URLs are directly affected by the below-mentioned updates. As a result, if you have bookmarked specific pages from the documentation portal, we recommend revisiting the pages and bookmarking the new URLs.

Renamed Certain Sections in the Documentation Portal

August 10

The following sections have been renamed in the documentation portal:

  • Compute Engine is now called Compute.

  • Virtual Machines is now called Compute Engine.

Cloud Cubes is a Separate Section

August 10

Cloud Cubes is no longer under Virtual Machines, but an independent section under Compute.

May 2024

What's new

Contract-Owned Buckets in IONOS Object Storage

May 30

IONOS Object Storage introduces contract-owned buckets in a new region eu-central-3. Users within a single organization can benefit from our Object Storage using contract-owned buckets. Users can now create this bucket type from within the DCD. The earlier bucket-type functionality presented within the Object Storage continues to be supported and is now referred to as user-owned buckets. For the list of operations supported in contract-owned buckets, see Feature comparison.

Certbot Plugin for Cloud DNS

May 24

IONOS announces the release of our Certbot plugin for Cloud DNS. With this plugin, you can automate the process of obtaining and renewing SSL/TLS certificate. This feature enhances security and simplifies certificate management for your domains.

This detailed tutorial will help you get started with the Certbot plugin for Cloud DNS, which provides step-by-step instructions on how to set up and use the plugin effectively.

Advisory on CVE-2024-4323

May 23

Information on the security advisory for CVE-2024-4323 reported by Tenable Research is now available in the documentation portal. The memory corruption vulnerability in Fluent Bit can result in a denial of service, information disclosure, or remote code execution.

Enhancements in Self Service Functionality Feature

May 17

IONOS has introduced self-service functionality features via the DCD to improve the customer experience by giving users control over certain features. Customer data provides additional control and flexibility to your account. With the Payment details module, you can add new payment methods. This feature has enhanced security to provide seamless yet strong customer authentication.

Reverse DNS (PTR) Record Management for IPv4 and IPv6 addresses

May 13

You can now leverage the IONOS Cloud DNS API service to create and manage Reverse DNS (PTR) records for IPv4 and IPv6 addresses. This enhancement enables you to efficiently manage your DNS configurations and network settings and enhance email deliverability.

Unlimited Log Retention with the Logging Service

May 7

Logging Service is enhanced to allow you to configure an unlimited retention period for your logs. With this enhancement, you can store your logs for an indefinite period. The enhancement is available since April 29, 2024.

Advisory on Acronis Vulnerabilities

May 6

Information on the security advisory for four vulnerabilities reported by Acronis is now available in the documentation portal. These vulnerabilities reported in the Cyber Protect Agent cause local privilege escalation and information manipulation without authorization.

1. In the DCD, go to Management > Cloud Savings Plans.

1. In the DCD, go to Management > Cloud Savings Plans.

prerequisites
edit only the plan's name
view all plans
Create Savings Plans
Savings Plans created successfully

1. In the DCD, go to Management > Cloud Savings Plans.

March 2025

What's new

Revamped Cost & Usage in the DCD

March 25 The Cost & Usage view has been revamped with a fresh and intuitive design. It provides:

  • A comprehensive summary of your account's cost for the past six months, including the current month.

  • A monthly report with detailed insights into all costs associated with using Virtual Data Centers (VDCs) and consuming other products and services.

  • Transparency about usage patterns and costs across product categories by displaying the total units consumed, cost per unit, and total cost incurred.

As a result, the Cost & Usage documentation has been revamped to align with the new view and is now categorized as a separate topic in the documentation portal.

IONOS Cloud DNS Webhook for cert-manager

March 25

You can now manage TLS certificates for Kubernetes and OpenShift workloads using the IONOS Cloud DNS Webhook with cert-manager. It enables you to secure your applications with valid TLS certificates that are automatically renewed before they expire. For more information, see the Manage TLS Certificates using IONOS Cloud DNS Webhook for cert-manager tutorial.

Redesigned Certificate Manager with ACME-Based Auto Certificate Support

March 13

IONOS offers a redesigned user interface for the Certificate Manager via the Data Center Designer (DCD). Using this interface, you can seamlessly upload and manage TLS Certificates to integrate key products such as the Managed Application Load Balancer, API Gateway, and CDN.

It also offers additional capabilities such as automatic certificate renewal through integration with Automated Certificate Management Environment (ACME) Providers and Cloud DNS, allowing you to generate and renew TLS certificates automatically, thus simplifying security management and ensuring that your applications remain secure with minimal manual intervention.

DCD Availability for Network Security Groups

March 6

Network Security Groups are now available via the Data Center Designer (DCD) graphical user interface. To secure your network, you can create rules based on your use case and leverage the capabilities of either the DCD or the API.

Documentation updates

New tutorial available for managing TLS Certificates using IONOS Cloud DNS Webhook for cert-manager

March 25

A new tutorial on managing TLS certificates using the IONOS Cloud DNS Webhook for cert-manager is now available. This tutorial covers the installation, configuration, and automation of certificate management for your Kubernetes cluster workloads. By following the steps, you can secure your applications with valid TLS certificates that are automatically renewed before they expire.

New tutorial available for WireGuard VDC to on-premises gateway connectivity

March 24

The new tutorial guides you through connecting a WireGuard peer between an IONOS Virtual Data Center (VDC) and an on-premises gateway, offering clear guidance and a smooth setup. As an enhancement to the user interface, the VPN Gateway Manager in the DCD also lists all tutorials, enabling you to configure your use case effectively.

New tutorial available for IPSec VDC to VDC connectivity

March 18

The new tutorial guides you through creating an IPSec tunnel between IONOS Cloud Virtual Data Centers (VDCs), offering clear guidance for a smooth setup.

Get Started

IONOS Cloud is a robust and flexible platform that helps users build and manage their cloud infrastructure smoothly. The platform offers user-friendly cloud solutions that can be managed via the Data Center Designer (DCD) or API.

This section covers the first steps to working with the IONOS Cloud DCD and explores helpful advanced guides for fully configuring and managing various IONOS Cloud solutions.

First steps

Access the DCD to create and configure your first data center with IONOS Cloud.

Explore advanced guides

Dive deeper with advanced and commonly referred user guides to continue your learning.

Delete an Identity Provider

To delete an IDP, perform a DELETE request with the identityProviderId of the IDP.

Endpoint

Use the following endpoint to delete an IDP: https://iam.ionos.com/federation/identityproviders/{identityProviderId}.

Request

Note: The following request contains a sample identityProviderId. Replace it with the identityProviderId value, whose information you want to delete.

curl --location \
--request DELETE 'https://iam.ionos.com/federation/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' 

Below is the list of mandatory path parameter:

Body Parameters

Type

Description

Example

identityProviderId

string

The ID (UUID) of the IdentityProvider.

5e6323da-8a45-5732-bec1-d7c29c1dc890

To make authenticated requests to the API, the following fields are mandatory in the request header:

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .

Content-Type

yes

string

Set this to application/json.

Response

202 Successful operation

Identity & Access Management

Identity and Access Management (IAM) is a framework of policies and technologies used to ensure that the right users (or entities) have the appropriate access to IONOS Cloud resources. It helps you to control your resources securely and authenticate and authorize access users to use resources and your IONOS Cloud account.

Identity management

When you create an account with IONOS Cloud, you become the contract owner and can access your account using your username and password. To begin with, you login with a sign-in identity and will have access to all the services and resources associated with the account. Ensure that your contract owner credentials are safe.

Next, from your contract owner account, you can set up other users and assign them roles and resources they need. For example, an administrators can have additional permissions whereas or sub-users can have limited permissions.

Access management

Once you create sub-users, they can log in to the IONOS Cloud account using their credentials. The credentials are validated before authorizing access to the resources and privileges associated with the respective user account.

By managing identities and their access privileges, IAM helps protect sensitive data and systems, reducing the risk of unauthorized access. You can control who can access specific resources and ensure compliance with security standards and regulations for your organization.

Access permissions

To access Identity & Access Management features, select Menu > Management on the top navigation menu of the DCD. You will see the following features in the drop-down menu:

Note: The features are subject to access levels based on the user's role.

Menu item

Contract Owner

Administrator

User

+

+

+

+

+ (read-only)

+

+

+

+

+

+

Quick Links

Create a Data Center

Prerequisites:

  • Make sure you have the corresponding permissions to create and manage data centers. By default, contract administrators and owners can create a data center.

  • Only users with Create Data Center privilege can create a data center. For more information, see Set User Privileges for Data Center.

To create a data center, use one of the following options:

Option 1: From the left navigation panel

  1. In the DCD, go to Virtual Data Centers > Create new. A drop-down window appears.

Create a Data Center
  1. Provide the following details:

  • Name: Enter a name to identify the data center uniquely.

  • Region: From the drop-down list, choose the physical location of the data center that hosts your infrastructure.

  • Description: (Optional) Add information that describes the Virtual Data Center (VDC).

  • Create default network security group: Select the checkbox to associate a default security group with the data center. By default, a set of predefined security rules are applied to all Virtual Machines (VMs) created in that respective data center. You can also later customize the rules and members of a default security group.

  1. Select Create to confirm.

Alternatively, you can also create a data center using the following options:

Option 2: From the DCD home page

  • In the DCD, go to the My Virtual Data Centers section and click Create new.

  • Provide the details to create a data center. For more information, see Step 2 in Create a Data Center.

  • Select Create to confirm.

You can create a VDC right on the Dashboard

Result: The data center has been created and can be opened in the workspace. Your DCD dashboard displays the newly created VDC in My Virtual Data Centers.

Info: You can log in to the DCD and scale your infrastructure capacity. Alternatively, you can set defaults and create new resources when needed.

Next steps

After you create a Virtual Data Center (VDC) and are familiar with the primary areas of the DCD application, start navigating through the Data Center Designer to familiarize yourself with it before you configure the VDC.

Retrieve Domain

To retrieve a domain, perform a GET request.

Endpoint

Use the following endpoint to retrieve a domain: https://iam.ionos.com/federation/domains/{domainId}.

Request

Note: The following request contains a sample domainId. Replace it with the domainId value, whose information you want to retrieve.

curl --location \
--request GET 'https://iam.ionos.com/federation/domains/f181c212-34f1-5843-9bbb-fc2531c7d928' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'

Below is the list of mandatory path parameter:

Body Parameters

Type

Description

Example

domainId

string

The ID (UUID) of the domain.

f181c212-34f1-5843-9bbb-fc2531c7d928

To make authenticated requests to the API, the following fields are mandatory in the request header:

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .

Content-Type

yes

string

Set this to application/json.

Response

200 Successful operation

{
   "id":"f181c212-34f1-5843-9bbb-fc2531c7d928",
   "type":"domain",
   "href":"/domains/f181c212-34f1-5843-9bbb-fc2531c7d928",
   "metadata":{
      "createdDate":"2020-12-10T13:37:50+01:00",
      "createdBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "createdByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "lastModifiedDate":"2020-12-11T13:37:50+01:00",
      "lastModifiedBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "lastModifiedByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "resourceURN":"ionos:<product>:<location>:<contract>:<resource-path>",
      "account":123456
   },
   "properties":{
      "domain":"yourcompany.com",
      "status":"REQUESTED",
      "message":"The token provided should be added to the TXT Domain Record, then request to verify the ownership. Important: This is the only time the token will be visible to you, so please take note of it now."
   }
}

Use Cases

This topic outlines specific use cases and describes how the plans are billed based on resource consumption when you have Cloud Savings Plans in your contract.

  • Scenario 1: No Savings Plans

  • Scenario 2: A single Savings Plan for a product

  • Scenario 3: Several Savings Plans, each for different products

  • Scenario 4: Several Savings Plans for the same product

Scenario 1: No Savings Plans

You have not opted for Savings Plans.

Billing process: All usage is billed at the Pay-As-You-Go (PAYG) price.

Scenario 2: A single Savings Plan for a product

You have a Savings Plan defined for a single product.

Billing process:

Actual Consumption

Billing Process

Less or equal to the quantity configured in the Savings Plan

The plan's price applies to the consumption.

Greater than the quantity configured in the Savings Plan

- The plan's price applies to consumption equal to the plan's quantity. - The PAYG price applies to remaining consumption. - The plan's rate is applied to resources chronologically, starting with those in the oldest created .

Scenario 3: Several Savings Plans, each for different products

You have several Savings Plans, each for different products, for example, one for Cores, one for RAM.

Billing process: This scenario uses a billing methodology similar to Scenario 2, but the logic applies independently to each product's Savings Plans. The actual consumption of each product is compared with its dedicated plan's quantity.

Scenario 4: Several Savings Plans for the same product

Billing process: Savings Plans are applied to the product starting with the oldest plan. Consider two Savings Plans: Plan A (older Savings Plan) and Plan B (newer Savings Plan).

Actual Consumption

Billing Process

Less or equal to the quantity configured in Plan A

Plan A's price bills the consumption. Both plans are still billed in full.

Greater than the quantity configured in Plan A, but less than the combined quantity configured in both plans

Consumption uses Plan A completely and partially uses Plan B, maintaining full billing for both plans.

Equal to the combined quantity configured in both plans

Both plans are consumed and billed completely.

More than the combined quantity configured in both plans

Both plans are completely consumed and overusage is billed at the PAYG price.

December 2024

What's new

December 9

API Gateway is now available in more regions including London, Paris, and Logroño. You can now create, manage, and deploy APIs in these regions using the API Gateway.

December 9

We are excited to announce the launch of IONOS Object Storage in our US data center location, Lenexa. This highly scalable and durable storage solution is designed to support businesses with large amounts of unstructured data. With IONOS Object Storage, users can store, manage, and analyze vast amounts of data, from images and videos to logs and backups.

Located in Lenexa, this new offering ensures low latency and high performance for US-based users. The new endpoint is exposed as us-central-1 and operates as a contract-owned IONOS Object Storage.

December 6

The IONOS AI Model Hub now supports an OpenAI-compatible embeddings endpoint, and the embedding models BGE Large EN v1.5, BGE m3, and Paraphrase Multilingual MPNet base v2.

December 2

We are pleased to announce the expansion of IONOS Cloud products and services with the addition of a new deployment location in Worcester. This new facility marks IONOS's second data center in the United Kingdom, after London, enhancing the capability to support high availability and redundant configurations across geographical locations.

The Worcester data center is classified as a Tier IV facility, which includes comprehensive isolation of critical infrastructure systems to reduce the risk of disruptions significantly and guarantees our users the highest operational security and reliability level. For additional information, refer to the .

You now have the option to deploy the following products in the new data center via the or using the location code gb/bhx via the :

  • Compute Services:

  • Containers:

  • Databases:

  • Network Services:

  • Observability:

  • Storage & Backup:

The following products do not have a distinct deployment in Worcester, but you can still use their centrally located services:

  • AI:

  • Storage & Backup:

April 2024

What's new

April 30

IONOS DBaaS for MariaDB is now available across all IONOS Cloud locations. You can choose any location of your preference from the DCD when you your MariaDB cluster or perform the same actions through the . For a list of region-specific API endpoints, see .

April 25

IONOS Object Storage has increased the length of all newly generated Access Keys and Secret Keys to prepare for the upcoming new functionalities on the offering. Access Keys will now be 92 characters long, and Secret Keys will be 64 characters long.

April 22

Managed Kubernetes now supports Regional Control Planes, allowing users to deploy and manage Kubernetes clusters to new geographic regions with ease. You can benefit from optimized performance and reduced latency between the control plane and the nodes of the node pools within the same region.

For more information, see .

April 10

Starting in May, our Backup Service servers will use an additional IP subnet: 85.215.126.0/24. We recommend you update the configured firewall rules in advance so that the firewall does not restrict backup agent access and allows the backup agents to communicate effectively. For more information, see .

April 5

Information on security advisory for CVE-2024-3094 is available on the documentation portal. The vulnerability enables remote system breaches via SSH, and immediate action is required to resolve it.

Documentation updates

April 2

We are thrilled to announce the release of our revamped documentation portal landing page. The enhancement includes significant improvements to the design outlook and website navigation to streamline the user experience and to make accessing information more accessible and more efficient.

Card-based Design: Visually appealing card layouts provide users with concise information and an easier way to engage with the documentation portal.

Website Navigation: Find the specific product documentation easily with a familiar navigational structure that rearranges the products in the in an alphabetical sequence.

April 2

To reinforce consistency in the product category and product names across IONOS website and documentation portal, the following changes are made effectively:

  • The product categories are renamed, added, and removed.

  • Some of the product names in our documentation portal are renamed and reorganized into product categories in a way that it improves easy discoverability of documentation.

Note: The product renaming does not have any impact on its services and functionality. Incorporation of the updated product names across our documentation pages is an ongoing development, and we will be rolling out this update in phases.

Password Policy

The Password Policy feature in IONOS Cloud helps organizations enforce password security by defining a set of rules that must be followed when creating and updating passwords. This feature is crucial for safeguarding accounts and ensuring adherence to security standards. Always ensure that your policies are in line with industry best practices to safeguard your data effectively.

Note: Only contract owners can define the password policy applicable to the sub-users in the contract.

Features

  • Customizable Rules: The password rule can be customized to your needs such as recommendations to have complex passwords to improve the security of user accounts. You can define criteria on the length of the password, whether or not to include lowercase and uppercase letters, numbers, and special characters in the password and the minimum quantity of each of these character types.

  • Ease of Use: Using the or the , contract owners can manage password policies easily.

  • Flexibility: Create, retrieve, update, or delete a password policy as needed. It is recommended to keep your policies reasonable to promote user compliance. On deleting a password policy, the IONOS standard applies for password management.

Info: The IONOS standard password policy requires a minimum of five characters and recommends including a combination of uppercase and lowercase letters, at least one number, and special characters if needed.

API endpoint

The Password Policy Manager feature is part of the Identity Management API and can be managed using the /{passwordPolicyId}/ endpoint. Further documentation can be found in the respective .

Note: All Create, Read, Update, and Delete (CRUD) operations that can be performed using the Password Policy Manager in the can also be accomplished via the API.

To access this API, you must authenticate requests using your Bearer token, which enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .

Password Policy Manager in the DCD

Using the , you can create, update, or delete a password policy as needed.

Create a password policy

To create a password policy, follow these steps:

1. In the DCD, go to Menu > Management > Password Policy.

2. Click Create password policy in the Password Policy Manager.

3. Enter the following details to configure a password policy:

  • Description: Add a detailed description that explains the password policy. The length of the description must not exceed 1024 characters.

  • Password length: Enter or use arrow keys to select the maximum password length. You cannot set a password policy that is less than 5 characters in length. For example, if the defined length is 9, the password must be a minimum of nine characters in length.

  • Must contain uppercase letters [A—Z]: Select the checkbox if the password policy must contain any uppercase letters from A—Z.

    • Minimum quantity: Enter or use arrow keys to specify the allowed count of uppercase characters in the password. For example, if 4 is the quantity chosen, the password must contain a minimum of four uppercase characters.

  • Must contain lowercase letters [a—z]: Select the checkbox if the password policy must contain any lowercase letters from a—z.

    • Minimum quantity: Enter or use arrow keys to specify the allowed count of lowercase characters in the password. For example, if 4 is the quantity chosen, the password must contain a minimum of four lowercase characters.

  • Must contain numerics [0-9]: Select the checkbox if the password policy must contain numbers from 0 to 9.

    • Minimum quantity: Specify the minimum allowed count of numerics in the password.

  • Must contain special characters [@, #, $, %, etc.]: Select the checkbox if the password policy must contain special characters. Any character apart from a—z,A—Z, and 0 to 9 is referred to as a special character.

    • Minimum quantity: Specify the minimum allowed count of special characters in the password.

Note:

— There are no maximum limits defined for the password length, number of lowercase, uppercase, numerics, and special characters. The quantity specified in the password policy refers to the minimum allowed values.

— When the checkbox for a specific character type to be allowed is selected, then their Minimum quantity allowed value cannot be zero.

4. Click Save password policy.

Result: The password policy is successfully created.

Note:

— The created password policy is enforced only on new users setting up the password. Existing user accounts continue to work on the password policy previously used.

— You can create only one password policy for your contract.

Update a password policy

To update an existing password policy, follow these steps:

1. In the DCD, go to Menu > Management > Password Policy.

2. Click Edit to update the description or password policy details such as the length of the password or characters allowed in the password policy.

3. Click Save to reflect the changes made to the password policy.

Result: The password policy is successfully updated and these changes apply to new users setting up the password. Existing user accounts continue to work on the password policy previously used.

Delete a password policy

If you no longer need a password policy, you can delete it permanently. To delete an existing password policy, follow these steps:

1. In the DCD, go to Menu > Management > Password Policy.

2. Click Delete and confirm the deletion again by selecting Delete and use IONOS Standard.

Info: The IONOS standard password policy requires a minimum of five characters and recommends including a combination of uppercase and lowercase letters, at least one number, and special characters if needed.

Result: The password policy is successfully deleted and the IONOS standard applies for password management.

October 2024

What's new

October 18

The documentation portal now has information on the security advisory for a critical vulnerability reported in Grafana 11. This vulnerability may allow attackers to execute arbitrary code on affected systems, leading to complete system compromise.

October 15

The documentation portal now has information on the security advisory for vulnerabilities reported in the Kubernetes Image Builder that enables default credentials during the image build process.

October 9

Cost Alert notification is essential for effective cloud cost management. These notifications act as alerts for spending thresholds, helping you control your budget, optimize resource usage, and make informed decisions about your cloud infrastructure. It is configurable via the DCD and the . Configuring a cost alert is solely within the authority of contract owners and users with administrator access rights. For more information, see .

October 8

The documentation portal now has information on the security advisory for vulnerabilities reported in the Linux Common Unix Printing System (CUPS). By chaining these vulnerabilities, an attacker could cause remote code execution.

October 7

Information on the security advisory for three vulnerabilities reported by Redis is now available in the documentation portal. These vulnerabilities, reported by Redis, allow an authenticated remote user to execute arbitrary remote code and perform Denial of Service (DoS) attacks.

October 1

Reverse DNS is now available via the IONOS Data Center Designer (DCD). You can leverage its capabilities to create and efficiently manage Reverse DNS (PTR) records for IPv4 and IPv6 addresses.

October 1

Effective October 1st, we have updated our Cubes configuration templates to include more tailored options. We now offer nine template sizes, each varying by processor, memory, and storage capacities. The templates are divided into two categories: one for Basic Cubes and the other for Memory Cubes. To understand the detailed breakdown of resources for each template, see .

October 1

The IONOS AI Model Hub now supports Llama 405B from Meta.

Documentation updates

October 17

With a consistent approach to improve the user's experience with IONOS Cloud documentation, the Get Started section in the documentation portal is restructured to provide a simple, step-by-step guide that helps users onboard with setting up , managing user and account settings, and explore advanced product feature configurations. All these guides are categorized under the documentation portal's new section Set Up IONOS Cloud.

October 15

The IONOS Cloud products that are currently available only on a request basis are now shown with a label on the . Users can now scan through the page and easily identify such products and contact sales representative or to acess them. The products currently with this label are Event Streams for Apache Kafka, CDN, VPN Gateway, and Network File Storage.

Token Manager

This tutorial guides you through generating and managing authentication tokens in the Data Center Designer (DCD).

Note: The API/SDK Authentication Token Manager can be used by any user but is mandatory for 2FA enabled and forced accounts.

Generate authentication token

In the DCD, you can now generate the authentication token to securely access IONOS Cloud APIs and SDKs by using the API/SDK Authentication Token Manager. Along with improved user security, the Token Manager offers a seamless user experience to generate tokens in a simplified way and use the token several times to access the APIs and SDKs. You can generate up to 100 authentication tokens and use any of these token values for authorizing access to APIs and SDKs.

To create a secure authentication token for authorizing to use APIs and SDKs, follow these steps:

  1. In the DCD, go to Menu > Management > Token Manager.

  1. In the API/SDK Authentication Token Manager, select Generate Token.

  2. Copy the Token ID and Close the token-generated window.

Warning: You must save the token value for future uses. You will not be able to see the token value again due to security reasons.

Note: You can download the token value as a text file for future uses by selecting the Download option next to the Token Value.

Result: An authentication token is generated and listed in the API/SDK Authentication Token Manager screen.

Authentication token attributes

  • Each token has a Time To Live (TTL), which is the duration for which a token is valid before it expires and becomes inactive. Select a TTL value from the drop-down list. The following are the possible values:

    • 1 Hour

    • 4 Hours

    • 1 Day

    • 7 Days

    • 30 Days

    • 60 Days

    • 90 Days

    • 180 Days

    • 365 Days

  • Each token consists of:

    • ID: This is the ID of the token which you can use in the . For example, to by ID.

    • Creation Date: The date and time stamp of the token.

    • Expiration Date: The date and time stamp when the token becomes invalid depending on the defined TTL at the time of token generation.

  • The generated token is listed in the API/SDK Authentication Token Manager screen.

  • The Token Value is displayed only once upon generation, and you must save this value for future use.

  • The token is valid based on the defined TTL field at the time of token generation.

Delete an authentication token

Note: The deletion of a token in the Authentication Token Manager will result in the deactivation of the token even when it has not expired. It becomes invalid immediately.

To delete an authentication token, follow these steps:

  1. In the DCD, go to Menu > Management > Token Manager.

  2. In the API/SDK Authentication Token Manager, select the authentication token to delete and select the Delete option.

  3. Select Delete to confirm.

Result: The authentication token is successfully deleted and removed from the tokens list in the API/SDK Authentication Token Manager.

November 2024

What's new

November 26

VPN Gateway is now in the General Availability (GA) phase. It is designed to ensure secure and scalable encrypted connections between your IONOS Cloud resources and remote infrastructure using two key VPN protocols: IPSec and WireGuard.

We are excited to announce the following enhancements to VPN Gateway: — Active-Passive High Availability (HA) mode to ensure redundancy in the event of failures. — Availability of new tiers that can be paired with HA. Additionally, you have the option to switch between HA and non-HA configurations and upgrade your plans as needed. — Ability to visualize all LANs connected to the respective VPN Gateway. — Option to download VPN Gateway configuration to your local system.

November 22

The documentation portal now has information on the security advisory for a high vulnerability reported by the Kubernetes Security Response Committee. This vulnerability allows attackers to execute arbitrary commands in the vulnerable Managed Kubernetes cluster versions beyond the container boundary.

November 18

Beginning today, you will observe that the DCD portal's have been redesigned, resulting from the integration of IONOS Cloud Identity and Access Management (IAM) Single Sign-On (SSO) into the login process. You do not need to make any changes to your account.

November 11

Starting November 11, our AI Model Hub supports the OpenAI Image endpoint. In addition we launched the FLUX.1 schnell text-to-image model.

November 11

We've enhanced the firewall rules for Network Security Groups and NIC-based firewalls. In addition to the existing TCP, UDP, ICMP, and ICMPv6 protocols, we now support GRE, VRRP, AH, and ESP protocols. This expansion is available through both the Cloud API v6 and DCD platforms.

November 11

Effective immediately, you can specify custom MAC addresses when creating network interfaces (NICs) for Compute instances. This feature is accessible via Cloud API v6 and DCD. Ensure that you configure custom MAC addresses at the time of creation and that you cannot modify them during subsequent network interface updates. This capability is advantageous for environments requiring specific MAC addresses to comply with software licensing conditions.

November 8

This is to inform you that Managed Kubernetes version 1.28 will reach its end of life (EOL) on December 4, 2024. After that, you cannot create new clusters or node pools using Kubernetes version 1.28. Existing clusters or node pools running on version 1.28 will be automatically upgraded to version 1.29 during the next scheduled maintenance window after the EOL date.

November 7

Starting November 11, we will implement an update to the IONOS Cloud Identity and Access Management (IAM) Single Sign-On (SSO) login system to enhance security and usability for our users. You will notice that the new SSO will consist of two : — The first screen requires your email address and password. — The second screen requests a Time-based one-time password (TOTP) if you have activated 2-Factor Authentication.

November 6

IONOS releases Network Security Groups, a centralized firewall policy manager that allows you to filter and control network traffic to and from virtual network resources within a given Virtual Data Center (VDC). NSGs contain security rules that allow or deny traffic based on various criteria, such as source and destination IP addresses, ports, and protocols for its member VMs and NICs.

Note: Network Security Groups are currently accessible only via the Cloud API v6. The DCD support will be available soon.

November 5

We are excited to announce the launch of our new Database as a Service (DBaaS) interface for our Database products: , , , and . Designed with user experience in mind, the new DCD interface provides a more intuitive and an efficient management experience.

November 4

Event Streams for Apache Kafka is now in the General Availability (GA) phase. It is a managed solution that is fully integrated with the DCD, offering a variety of cluster sizes to accommodate the diverse requirements of different applications. With this service, you can build secure event-driven architectures. The product will initially be available only in the German data centers (Frankfurt & Berlin), and will be gradually rolled out to all locations.

November 4

Managed Kubernetes is releasing Kubernetes version 1.31. For more information about the schedule timeline, see .

Account Security

To protect your IONOS Cloud account from unauthorized access, each account comes with the following security features:

Change Password

You can provide the password for your IONOS account during registration. Use the feature to enforce secure password practices by defining rules for password creation and modification that apply to all users within the contract.

To change the password, follow these steps:

  1. In the DCD, go to Menu > Your Profile > Password & Security.

  2. In the Change Password view, enter your Current Password, New Password and then Repeat New Password.

  3. Select Change Password.

Result: The password is changed and becomes effective with the next login.

If you forget your password, then you can reset it. For more information, see .

Set up 2-Factor Authentication

You can set up 2-Factor Authentication in addition to your login credentials. This authentication method requires an app-generated security code. Once 2-Factor Authentication has been activated, you can only access your account by entering the authentication code you receive from the Authenticator App. This method can be extended to hide specific data centers and snapshots from users, even if they belong to an authorized group. This feature is only available in DCD.

Prerequisites:

  • Based on your device, install any Authenticator App of your choice.

  • The Authenticator App must be able to access your camera, and the time on the mobile device needs to be set automatically.

You can turn on 2-Factor Authentication for your accounts.

Note: An administrator or a contract owner can enforce 2-Factor Authentication for subuser accounts but cannot enable it for those accounts. Only account users can enable 2-Factor Authentication for their accounts. Once you enable it, the DCD application will prompt you for 2-Factor Authentication during your next login.

To activate 2FA for your account, follow these steps:

  1. In the DCD, go to Menu > Your Profile > Password & Security.

  2. In 2-Factor Authentication section, select the Enable 2-Factor Authentication option. The 2-Factor Authentication Setup Assistant will open.

  1. Proceed through each step by selecting Next.

    • Install the Authenticator app from the or from based on your device.

    • Scan the QR code using the Authenticator app on your smartphone.

    • Enter the Security Token.

    • Select Done to exit the 2-Factor Authentication window.

An administrator or a contract owner can enforce 2-Factor Authentication for subuser accounts but cannot enable it for those accounts. Only account users can enable 2-Factor Authentication for their accounts.

To activate 2FA for another user account, follow these steps:

  1. In the DCD, go to Menu > Management > Users & Groups.

  2. Select the required user in the User Manager window.

  3. In the Meta Data tab, select the Force 2-Factor Auth option.

  4. Select Save.

Result: The 2-Factor Authentication is enforced to your login workflow and becomes mandatory from your next login if you enable 2-Factor Authentication. You must provide a verification code each time you log in to the DCD.

Set Support PIN

To ensure that the support calls are made by authorized users, you are asked for the support PIN to verify the account. You can set your support PIN in the DCD and change it at any time.

To set or change your support PIN, follow these steps:

  1. In the DCD, go to Menu > Your Profile > Password & Security.

  2. In the Set Support PIN section, enter your support PIN in the PIN field to confirm your identity.

  3. Select Set Support PIN.

Result: The support PIN is now saved. You can use it to verify your account with .

Account Management

An IONOS Cloud account represents your individual accounts associated with IONOS. Based on the user's roles, an account can be further categorized as the contract owner's account, administrator's account, or user account.

You can add cloud resources and manage the resources and your data on the cloud via your account. Each account is given a unique ID called the Contract ID during creation.

Features

  • Centralized customer profile management: It provides a unified view of your data, including contact information and organization details, keeping it consistent and up-to-date.

  • Secure payment and billing integration: It enables you to manage your payment methods with automated invoicing for timely payments, enhancing financial transparency while reducing the risk of billing discrepancies.

  • Advanced account security controls: Features such as and support pin configuration protect sensitive data and minimize unauthorized access. They help organizations meet compliance standards and safeguard user trust.

  • Personalized account settings and preferences: Set the default settings for your .

Access Permissions

To access your account, select Menu and click your initials on the top navigation menu of the DCD. You will see your user name, email address, contract number, and the following features in the drop-down menu:

Note: The features are subject to access levels based on the user's role.

Quick Links

Retrieve Link

To retrieve a link of the account associated with the IAM Federation in the form of an ID, perform a GET request.

Endpoint

Use the following endpoint to retrieve a link: https://iam.ionos.com/federation/links/{linkId}.

Request

Note: The following request contains a sample linkId. Replace them with the linkId value, whose information you want to retrieve.

Below is the list of mandatory path parameter:

To make authenticated requests to the API, the following fields are mandatory in the request header:

Response

200 Successful operation

Request Domain Ownership

Prerequisite: Only contract administrators, owners, and users with accessAndManageIamResources privilege can create and manage Identity Providers (IDPs) through the API. You can also set user privileges in the DCD. For more information, see .

To request the ownership of a domain, perform a POST request.

Endpoint

Use the following endpoint to request for domain ownership: https://iam.ionos.com/federation/domains.

Request

Below is the list of mandatory body parameters:

To make authenticated requests to the API, the following fields are mandatory in the request header:

Response

202 Successful operation

Note:

  • The token value provided in the API response must be saved, as this will be the only time it is displayed. This token value must be added to the TXT Domain Record and proceed with the domain ownership verification.

  • If you are using IONOS Cloud DNS, you can add the TXT Domain Record by following the steps in .

  • If your organization uses any other domain provider, contact your provider to locate the DNS settings and add the TXT record value.

Manage User Account in IAM Federation

Once the organization IDP is onboarded to use IAM Federation, the organization's users can link their accounts to IAM Federation and unlink them whenever needed.

Link User Account to IAM Federation

Upon linking a user account from the organization to IAM Federation, users can log in to the DCD using their organization credentials.

Prerequisites:

  • The onboarding of the organization IDP must be successfully completed using the discovery endpoint. For more information, see .

  • The user must already have an IONOS Cloud account.

To link a user's account from the organization to IONOS DCD, follow these steps:

1

Initiate Account Linking

1. Log in to the DCD using your IONOS Cloud account Email and Password. For more information, see .

2. Go to Menu > Management > IAM Federation.

2

IDP Selection

  • In the Managed Linked Accounts, select Link under ACTIONS against the organization IDP user account that needs to be linked with IAM Federation.

3

IDP Authentication

Note: You are logged out of the DCD and redirected to your organization IDP to complete the authentication.

  • Enter your organization login credentials such as Email, Password, and Sign In.

4

Authorization from IDP

  • The IDP authenticates the user and authorizes the IONOS Cloud IAM Federation system to access their account information.

Result:

  • Your organization's user account is successfully linked with IAM Federation.

  • The user successfully signs into the DCD and is redirected to the Manage Linked Accounts.

Next steps

User can now log in to the using their organization IDP credentials. To do so, see .

Unlink the user account from IAM Federation

Warning: Upon unlinking the user account from IAM Federation, users can log in to the DCD only using their IONOS Cloud account credentials.

To unlink a user's account from the organization with IONOS DCD, follow these steps:

2. In the Managed Linked Accounts, select Unlink under ACTIONS against the organization IDP user account that needs to be linked with IAM Federation.

Result: Your user account from the organization has been successfully unlinked from IAM Federation. From then on, you can log in to the DCD only using your IONOS Cloud account credentials.

Note: User can also unlink their account from the IDP anytime by revoking access to their account information.

Models

We continually strive to bring you the best and latest AI technologies, ensuring you have access to cutting-edge solutions that deliver the optimal experience. Therefore, we continuously update our model catalog by introducing the latest models and retiring older ones.

This page provides a detailed list of models, categorized by their current status, to keep you informed about upcoming changes in model availability.

Active Models

The following models are currently active in the AI Model Hub with no scheduled retirement date:

Scheduled for Retirement

The following models are scheduled to be retired. After the specified date, they will no longer be available to use in the AI Model Hub:

To avoid disruption and ensure long-term support, please replace models scheduled for retirement in current and new projects with suitable alternatives.

Retired Models

These models are no longer available to use in the AI Model Hub:

Overview

The IONOS Cloud Savings Plans are a pricing model that offers significantly optimized resource rates for a specific quantity of cloud resource usage, measured per hour, over a one or three-year term, compared to prices. It provides a substantially reduced price for consistent resource usage and is a key feature for cloud cost optimization.

Prerequisites:

  • You must be a contract owner to create Savings Plans.

  • Your contracts must be in the “Billable” status to purchase Savings Plans. If a contract holds any other status, the Data Center Designer (DCD) does not display the option to purchase Savings Plans.

Note: The current resource allocation limits in your contract determine the amount of resources you can configure in your Savings Plans.

Cloud Savings Plans lifecycle

The following shows the Savings Plans lifecycle. Log in to the DCD to Savings Plans for your contract.

1

Validate your details

Ensure you fulfill the following:

  • You are a contract owner.

  • Your contract is in the “Billable” status.

  • You have entered a valid address and payment details.

2

Create Cloud Savings Plans

1. In the , choose the start date, applicable products, the number of resources, and a duration of either one year or three years for your Savings Plans. For more information, see .

When you choose Savings Plans:

  • You become eligible for the corresponding Savings Plans rates on applicable products.

  • Billing for the plan continues for the full term at the agreed-upon amount, regardless of your actual resource usage. For more information, see .

Note: You cannot modify the Savings Plans after they are activated. If your needs grow, you can purchase additional plans at any time. Any resource usage exceeding your plan's coverage will be billed at the standard PAYG rate.

2. Confirm the details before you agree to the terms and conditions.

3. Upon purchase, you will receive a confirmation email at your registered address detailing your successful enrollment in the Savings Plan.

3

Activate Cloud Savings Plans

Your Savings Plans activate on the specified start date, upon purchase. The Savings Plans rates will be automatically applied to your eligible product usage, beginning at 00:00 UTC on the effective date. No manual configuration is necessary.

4

Monitor usage and billing

The rate of your Savings Plans is applied automatically to your eligible product usage, up to the amount you have chosen. It prioritizes the application of Savings Plans rates based on the creation time, from oldest to newest.

Any usage that exceeds your chosen resources is billed at the standard PAYG rate, ensuring flexibility while maintaining savings on predictable workloads.

Your details all usage from the billing period. It clearly distinguishes between usage covered by your Savings Plans and any extra usage charged at the standard PAYG rate.

Track your resource usage costs using reports and set up to track budget thresholds. Together, these tools enable you to monitor spending in real-time and manage your cloud costs effectively. By reviewing alerts and usage reports, you can better use your Savings Plans and identify opportunities to optimize resource usage.

5

Cloud Savings Plans expiry

You receive a notification 30 days before your Savings Plans expire. You can create new plans before the expiry of your old Savings Plans. If there are eligible Savings Plans, your usage automatically reverts to PAYG pricing the day after expiration. While no service interruption occurs, you may not be able to access the previous plan rates during transition to the PAYG pricing.

To continue your Savings Plans benefits, log in to the DCD and purchase new plans to start immediately after your current term ends. It ensures continuous cost optimization without disruption.

Understanding the scope of the Savings Plans: Savings Plans operate on the billing layer to automatically apply your plan rates. They do not operate on the resource layer, which means they do not reserve physical capacity. Therefore, your lower rate is guaranteed for any eligible usage; however, the availability of specific resources is determined by data center capacity when you create them.

Cost Alert

Overview

The Cost Alert Notification feature helps you to monitor and manage the cloud infrastructure costs. This feature allows you to set up alerts that notify you when your spending reaches predefined thresholds. Once the set threshold is exceeded, you will receive a notification via email, providing immediate awareness of cost overruns. The Cost Alert Notification feature is available for contract owners and administrators.

This documentation covers how to create, edit, and delete the cost alert notification.

Mechanism

The Cost Alert Notification is a real-time notification. IONOS runs billing calculations periodically due to the data aggregation of billing events. It does not run the invoice calculation permanently. Therefore, an offset to the configured amount may be expected. The first time the invoice amount calculated is above or equal to the threshold value, an e-mail will be sent to the e-mail address defined in the configuration. This notification is sent only once and not repeated with every following invoice calculation.

The Cost Alert Notification will be based on the net amount of the contract invoice (excl. VAT).

Furthermore, the Cost Alert Notification feature does not execute any other operation - especially no changes to any service.

API endpoint

The Cost Alert Notification feature is part of the Billing API. It can be managed using the /{contractId}/ usage-alert endpoints. Further documentation can be found in the respective .

To access the Billing API, you must authenticate requests using your basic authentication credentials or a Bearer token (required for Multi-Factor Authentication accounts). The Bearer token must be retrieved through the in the DCD.

DCD How-Tos

The Cost Alert Notification feature is part of the Account Settings at the top right of the menu bar.

Create a cost alert

To create a cost alert for your account, follow these steps:

  1. In the DCD, go to Menu > Management > Cost alert.

  2. In the Cost alert window choose Create cost alert.

  1. Enter the amount you need and your email address in the window.

  2. Choose Create cost alert.

Result: The cost alert is successfully created.

Edit a cost alert

You can edit the cost alert after creating it.

  1. In the Menu go to Management > Cost alert.

  2. In the Cost alert window choose Edit.

  1. Edit the amount and the email in the corresponding fields.

  2. Click Save to save changes.

Regularly check your email for updates regarding your spending. Based on the alerts you receive, make adjustments as necessary.

Delete a cost alert

  1. In the Menu go to Management > Cost alert.

  2. In the Cost alert window choose Delete.

Result: You will receive a notification that the cost alert was successfully deleted.

Feature permission

The configuration of a cost alert can be managed by contract owners and users in the role of administrators only. Other contract members with the user role cannot access the feature. Within the IONOS multi-tenant model, access to the feature is also restricted to users in the role of administrators. It is only accessible to the contract owner of the respective multi-tenant contract.

Log in to the Data Center Designer

Log in to the DCD and explore the dashboard and menu options.

Create a Data Center

Create a data center and learn about individual User Interface (UI) elements.

Configure a Data Center

Configure a dedicated core server, add storage and a network, and provision the changes.

Set User Privileges for Data Center

Learn how to create subusers and assign them relevant privileges to access data center.

Data Center Designer

Learn about IONOS DCD, access the core cloud services intuitively via the DCD UI, and configure and manage them.

Set Up a Dedicated Core Server

Set up and manage a dedicated core server.

Set Up a Network Load Balancer

Distribute incoming traffic efficiently with a network load balancer.

Set Up a PostgreSQL Database Cluster

Set up a high-availability, scalable PostgreSQL database cluster for your applications.

Set Up Block Storage

Configure and manage reliable block storage for your data needs.

Configure a NAT Gateway

Establish a secure NAT gateway for private network internet access.

Configure a Network on your VDC

Manage and configure networks within your Virtual Data Center (VDC).

Set Up Object Storage Access

Set up and access scalable S3-compatible Object Storage.

Connect to Virtual Machines via SSH

Establish secure SSH connections to your remote servers.

Set Up Backup Units

Configure and manage backup units to safeguard your data.

Configure Flow Logs

Set up flow logs to monitor and analyze network traffic.

Set Up a Kubernetes Cluster

Deploy and manage a Kubernetes cluster for container orchestration.

Create Alarms and Actions

Set up monitoring alerts and actions for your infrastructure.

curl --location \
--request GET 'https://iam.ionos.com/federation/links/5eb3d304-dc75-56cb-9b94-152533912d33' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'

Body Parameters

Type

Description

Example

linkId

string

The ID (UUID) of the link.

5eb3d304-dc75-56cb-9b94-152533912d33

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.

Content-Type

yes

string

Set this to application/json.

{
  "id": "5eb3d304-dc75-56cb-9b94-152533912d33",
  "type": "link",
  "href": "/links/5eb3d304-dc75-56cb-9b94-152533912d33",
  "metadata": {
    "createdDate": "2020-12-10T13:37:50+01:00",
    "createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedDate": "2020-12-11T13:37:50+01:00",
    "lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
  },
  "properties": {
    "id": "ac6f04c2-68e1-5e61-97c8-ef0216f1c08e",
    "providerAlias": "oidc",
    "displayName": "IdentityProvider ABC",
    "linkedUsername": "linkedUsername ABC",
    "linked": true
  }
}
Generate authentication token

Users & Groups

Set user privileges; limit or extend access to chosen roles.

Password Policy

Create and manage password policy to secure user accounts.

Token Manager

Create, manage, and delete an authentication token using the API/SDK Authentication Token Manager.

IAM Federation

Onboard the organization Identity Provider (IDP) to log in to the DCD using their organization credentials.

Users & Groups
Password Policy
Token Manager
IAM Federation
Generate authentication token
Virtual Machine (VM)
API Gateway is available in new regions
New IONOS Object Storage in Lenexa, USA
Embeddings models added to AI Model Hub
IONOS's new data center in Worcester, United Kingdom
Service Catalog
DCD
API
Dedicated Core Servers
vCPU Servers
Cubes
VM Auto Scaling
Managed Kubernetes
In-Memory DB
MariaDB
MongoDB
PostgreSQL
Certificate Manager
Cloud DNS
Cross Connect
DDoS Protect
Flow Logs
IPv6 Configuration
Managed Application Load Balancer
Managed NAT Gateway
Managed Network Load Balancer
VDC Networking
VPN Gateway
Activity Logs
Block Storage
AI Model Hub
Backup Service
IONOS Object Storage
DBaaS for MariaDB is available in all IONOS Cloud locations
create
API
API How-Tos
Increased Key Length in IONOS Object Storage
Managed Kubernetes - Regional Control Planes
Set Up a Cluster
Firewall Rule Changes for Backup Service Users
FAQ
Critical Backdoor in XZ Utils for Linux (CVE-2024-3094)
Redesigned Documentation Portal Landing Page
Product User Guides
Updates to IONOS Cloud Product Categories and Products
VPN Gateway General Availability
Advisory on CVE-2024-10220
Changes to the Login Process
login screens
AI Model Hub now supports OpenAI Image endpoint
Firewall Rules Upgrade: Broader Protocol Coverage
Introducing Custom MAC Address Capability for Network Interfaces
Kubernetes Version 1.28 End-of-Life Notification
Changes to the Login Process
login screens
Network Security Groups Support in Cloud API v6
New Database Interface
In-Memory DB
MariaDB
MongoDB
PostgreSQL
Event Streams for Apache Kafka General Availability
Managed Kubernetes Versions
Release Schedule
curl --location \
--request POST 'https://iam.ionos.com/federation/domains' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' \
--data '{
  "domain": "yourcompany.com"
}'

Body Parameters

Type

Description

Example

domain

string

Represents the domain to map the user email domains to the IDPs.

yourcompany.com

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.

Content-Type

yes

string

Set this to application/json.

{
   "id":"5e6323da-8a45-5732-bec1-d7c29c1dc890",
   "type":"domain",
   "href":"/domain/5e6323da-8a45-5732-bec1-d7c29c1dc890",
   "metadata":{
      "createdDate":"2020-12-10T13:37:50+01:00",
      "createdBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "createdByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "lastModifiedDate":"2020-12-11T13:37:50+01:00",
      "lastModifiedBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "lastModifiedByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "resourceURN":"ionos:<product>:<location>:<contract>:<resource-path>"
   },
   "properties":{
      "token":"9019680770992564882066368772815872312262977566198195",
      "domain":"yourcompany.com",
      "status":"REQUESTED",
      "message":"The token provided should be added to the TXT Domain Record, then request to verify the ownership. Important: This is the only time the token will be visible to you, so please take note of it now."
   }
}
Set User Privileges for Identity and Access Management
Create a TXT Domain Record

Model Provider

Model Name

Scheduled to Retire On

Alternative

stability.ai

Stable Diffusion XL

January 12, 2026

FLUX.1 [schnell]

Model Provider

Model Name

Retired On

Alternative

Meta

Llama 3.1 (70B)

May 1, 2025

Meta Llama 3.3 (70B)

Mistral

Mistral 7B

August 1, 2025

Mistral Nemo (12B)

Mistral

Mixtral 8x7B

September 22, 2025

Mistral Small 24B

Large Language Models
Coding models
Embedding Models
Text To Image Models
Pay-As-You-Go (PAYG)
create
Data Center Designer (DCD)
Create Cloud Savings Plans
Use Cases
Virtual Machine (VM)
monthly invoice
Cost & Usage
Cost Alert
DCD
IAM Identity Password Policies API
Password Policy API documentation
DCD
Generate authentication token
DCD
Create a password policy
Edit password policy
Update a password policy
Delete password policy screen
Delete a password policy
Auth API
delete the token
Token Manager option in the drop-down
Generate authentication token
Authentication token generated in the API/SDK Authentication Token Manager screen
Authentication token attributes
Deletion of an authentication token
Change Password
Set up 2-Factor Authentication
Set Support PIN
Password Policy
Resetting Your IONOS Account Password
Google Play Store
Apple iTunes
IONOS Cloud Support
Change Password window
Enable 2-Factor Authentication from the Password & Security tab of the Account Settings
Enable 2-Factor Authentication for an individual user from the User Manager window
Set Support PIN window

Menu item

Contract Owner

Administrator

User

My Customer Data

+

Payment Details

+

Account Security

+

+

+

DCD Default Settings

+

+

+

2-Factor Authentication
Virtual Data Centers (VDCs)
Account Settings drop-down menu

My Customer Data

Manage your company information, address, and contact details. Contract owner only

Payment Details

Get a detailed view of your payment details.

Account Security

Set a new password, 2-factor authentication, or configure a support pin.

DCD Default Settings

View your default DCD setttings.

Billing API documentation
Token Manager
Create Cost alert
Cost alert created
Edit Cost alert
Delete Cost alert
Cost alert deleted
Advisory on CVE-2024-9264
Advisory on Kubernetes Image Builder Vulnerabilities
Cost Alert notification
Billing API
Feature permission
Advisory on Linux CUPS Vulnerabilities
Advisory on Redis Vulnerabilities
DCD support for Reverse DNS (PTR) record management
Updated Cubes Configuration Templates
Configuration templates
Llama 405B added to AI Model Hub
Restructured Get Started Documentation
Data Center Designer
Available on request label
documentation portal
IONOS Cloud Support
Available on request
Cost and Usage view
Easy access to VPN Gateway tutorials

June 2025

What's new

Support for Kafka Version 3.9.0

June 27

Event Streams for Apache Kafka service now supports Kafka version 3.9.0, effective June 27, 2025. In this context, we will mark version 3.8.0 as deprecated.

We will soon offer the possibility to patch existing clusters from Kafka version 3.8.0 to 3.9.0 via a single call to an API endpoint.

Observability Products are now available in the USA

June 26

Observability products extend their availability to the new region, Lenexa, USA. With this expansion, the Logging Service is available at https://logging.us-mci.ionos.com and the Monitoring Service at https://monitoring.us-mci.ionos.com endpoint.

Logging Service: DCD Availability

June 24

Logging Service is now available in the Data Center Designer (DCD). It provides centralized log collection, storage, and analysis, as well as the ability to manage logs from various sources, gain insights, and improve system monitoring. You can access it using the DCD or API for streamlined observability and enhanced troubleshooting capabilities.

Network Services: VM Auto Scaling has a new product category

June 6

VM Auto Scaling has been reclassified from the Management category to the Network Services category within the new streamlined DCD. This change reflects the increasing integration of scaling features with networking services such as load balancing and target groups. No changes have been made to existing configurations or functionality—only the placement in the DCD has changed. Accordingly, the corresponding documentation category has been updated.

AI Model Hub: Model Cards available

June 6

For all models offered on the AI Model Hub, IONOS now offers extensive model cards illustrating not only the technical benefits of each model, but also their suitability in terms of use cases and their quality concerning sovereignty.

IONOS announces the upcoming phasing out of Mistral 7B in the AI Model Hub. This decision is part of our ongoing efforts to improve and align the product with more efficient and future-proof models.

Observability Products: Grafana Sign-in with the DCD IAM

June 5

IONOS announces the availability of signing in to the Observability Products' Grafana instance using the DCD IAM. This feature allows users to log in to Grafana using their IONOS credentials through the IAM SSO, enhancing security and simplifying access management.

Cloud DNS: Secondary Zones now supported in the DCD

June 3

IONOS announces the availability of Secondary Zone management directly within the DCD, which was previously accessible only through the API. This update empowers you to seamlessly create and manage secondary zones through the UI. Whether your primary zones are hosted externally or you are looking to extend redundancy, DCD now supports complete secondary zone configurations for enhanced load distribution, security, and flexibility or as a backup during primary zone failover.

Documentation updates

New Tutorial for setting up a CDN Distribution with IONOS Object Storage as the origin

June 26

A new tutorial for setting up a CDN Distribution is now available. This guide provides a step-by-step process to configure a Content Delivery Network (CDN) for your website using IONOS Object Storage as the origin.

Most Popular Product Guides

June 19

The new Most Popular Product Guides section highlights the most helpful and engaging guides identified through user interaction data. This enhancement offers a centralized location of high-value content, helping you find answers more efficiently and get the most out of our products.

Updated VM Auto Scaling documentation category

June 6

The VM Auto Scaling documentation has been moved from the Compute Services section to the Network Services category. This update aligns with recent DCD changes that group auto scaling features more closely with networking services. No changes have been made to functionality, this update is for documentation organization only.

April 2025

What's new

🎉New simplified and streamlined DCD Interface

April 30

At IONOS, we are excited to announce the launch of our new and improved interface, designed with users in mind. The DCD application interface features a redesigned top navigation menu, a left navigation menu, and a DCD dashboard, providing the following advantages:

  • Simplified navigation: Easy access to the product categories and groupings.

  • Better organization: Better and logical product groupings that make browsing and discovering them and associated services easier.

  • Improved user experience: Whether you are a first-time visitor or a returning user, the new interface ensures a smoother, more enjoyable journey.

  • Consistency: A consistent look and feel across all sections and optimized for all devices. This update is part of our ongoing commitment to providing a user-friendly experience that helps you easily find the right products. As a result, you can also see that we have already updated the images in certain sections of the documentation portal, while the rest are still in progress.

Support for Kafka Version 3.8.0

April 30

Event Streams for Apache Kafka service will now support Kafka version 3.8.0 starting 30 April 2025. In this context, we will mark version 3.7.0 as deprecated.

Starting 28 May 2025, creating new Kafka instances in version 3.7.0 will no longer be possible. We will then migrate existing instances from version 3.7.0 to version 3.8.0 without requiring any action from you or service interruption.

Microsoft SQL Server Image Availability

April 16

IONOS Public Images now supports using Microsoft SQL Server Images to configure Block Storage. The following combinations are available:

  • MSSQL-2019 (All Editions) on Windows-2019

  • MSSQL-2022 (All Editions) on Windows-2022

These images are available through both the DCD and the API. The Microsoft SQL Enterprise Server Images are available only on contacting IONOS Cloud Support.

New Location Support for Event Streams for Apache Kafka

April 15

We are excited to announce the launch of Event Streams for Apache Kafka in our Las Vegas, United States (us-las), France, Paris (fr-par), and Spain, Logroño (es-vit) data centers in addition to the existing location support in Germany, United Kingdom, and the United States. Supporting these new locations ensures we can offer a co-located Managed Kafka at any of our existing data centers. The new endpoints are kafka.us-las, kafka.fr-par, and kafka.es-vit.

Activated KMS Service for Windows Guests

April 2

At IONOS, we are excited to announce the integration of Key Management Service (KMS) for seamless activation and management of Microsoft Windows operating systems within our cloud infrastructure. While the activation process for new Windows instances will continue to occur automatically, this enhancement will facilitate the reactivation and management of existing Windows instances.

Server Type Selection for Kubernetes Node Pools

April 1

IONOS offers greater flexibility and simplicity for users to choose the server type as either Dedicated Core or vCPU for their Managed Kubernetes nodes. You can also choose to update the server type even after the node pool creation. This capability is supported both through the DCD and the API. To support this function, in the DCD, you see the new field Server type in the Node Template section while creating a Kubernetes node pool.

Discontinuing support for AMD Opteron Servers on IONOS Public Cloud in Frankfurt

April 1 IONOS announces the upcoming phasing out of AMD Opteron servers in the Frankfurt (de/fra) data center. This decision is part of our ongoing efforts to improve the product and align it with more efficient and future-proof solutions.

Alternative options: For continued functionality, you can transition to Dedicated Core server with AMD Epyc CPU architecture or to a vCPU Server. You can manually change to one of these options from April 1, 2025, until May 13, 2025. Starting on May 13, 2025, eligible systems running AMD Opteron-based Compute Engine workloads will automatically begin transitioning to AMD Epyc processors within the Frankfurt location.

July 2024

What's new

AI Model Hub

July 31

IONOS releases the AI Model Hub platform, which features foundational models and vector databases as a service. Using these services, you can also implement retrieval augmented generation use cases.

We have added documentation support to help you use our new AI Model Hub. The key topics include:

  • Guided steps for using our foundation models.

  • Instructions for managing our vector database as a service.

  • Steps to conduct retrieval augmented generation.

New Network menu in the DCD

July 29

The Data Center Designer (DCD) now features a new dedicated Network menu aimed at consolidating all network-related products for easier access and streamlining product management within the DCD. The products now grouped under this menu include Connectivity, Load Balancing, Edge Networking, and Security products. The IP Management, Cross Connect, Target Groups, Cloud DNS, and SSL Certificate Manager products listed earlier under the Management menu have been moved to the Network menu.

Network File Storage

July 29

IONOS releases Network File Storage, a managed service that offers shared file storage for multiple virtual machines and containerized workloads via the NFS protocol. The product is currently available on a request basis, will initially be available only in the German data centers (Frankfurt & Berlin), and will be gradually rolled out to all locations.

It is currently available on a request basis. To access this product, please contact your sales representative or IONOS Cloud Support.

Cross Connect General Availability in the Frankfurt Region

July 29

This release introduces additional capabilities, enabling you to connect all Virtual Data Centers (VDCs) in the Frankfurt region via private LANs. We recommend upgrading your existing Cross Connect to the latest version. For more information, see Upgrade Cross Connect to the Latest Version.

Managed Kubernetes Versions

July 8

Managed Kubernetes is releasing Kubernetes version 1.30. For more information about the schedule timeline, see Release Schedule.

Advisory on CVE-2024-6387

July 4

Information on the security advisory for CVE-2024-6387, announced by OpenSSH, is now available on the documentation portal. This advisory addresses a signal handler race condition in OpenSSH that affects sshd in its default configuration.

Changes to AMD Opteron Node Pools

July 3

AMD Opteron CPUs will be phased out for Kubernetes node pools and new Opteron-based VMs. We recommend updating your Terraform and Crossplane configurations to reflect the new CPU type to avoid errors.

Documentation updates

Changes to Backup Service

July 31

We have updated the Backup Service documentation. The key topics include:

  • Step-by-step instructions for configuring backup encryption in Apply Backup Encryption.

  • Detailed information on encryption at rest, encryption in transit, and secure data deletion practices in Data Security.

Certificate Manager

July 30

The Network Services product category now includes a new Certificate Manager section. This update relocates the Manage SSL Certificates documentation from the Managed Application Load Balancer product to the new section. Additional documentation on certificate management will be added shortly.

Veeam Backup & Replication settings for Object Storage

July 18

We have added documentation support to help you configure Veeam Backup & Replication with the new eu-central-3 Object Storage region. The key topics include:

  • Guided steps for adding a new Object Storage repository.

  • Instructions for creating backup jobs with performance-optimized settings.

  • Steps to migrate your backup repository to the eu-central-3 region.

  • Recommended settings to apply 8 MB blocks in storage optimization.

Configure IAM Federation

As an organization, to begin using Identity Provider (IDP) to log in to the DCD, follow these steps:

1

Request Domain Ownership

1. Using the API, the organization must request domain ownership. This domain ownership establishes a connection between the organization and its IDP.

2. The organization must Create a TXT Domain Record using the token value provided in the Request Domain Ownership API.

Note: IONOS Cloud performs the verification and approval process after you manually trigger it using the Verify Domain Ownership API. Upon successful domain ownership validation, IONOS Cloud will proceed with the IAM Federation configuration for your organization. The duration of this process ranges from a few seconds to up to a week, depending on your domain provider.

2

Onboard Identity Provider

Prerequisites:

  • The domain ownership must be successfully verified and approved by IONOS Cloud.

  • IONOS Cloud accepts SAML 2.0 or OpenID Connect (OIDC) identity providers. Hence, your IDP must be either of these two types.

1. Onboard the organization IDP. To do so, Create Identity Provider using the API.

2. Depending on the IDP type, you must provide the following details to IONOS Cloud:

Info: You can find these details in the discovery endpoint. For more information, see Discovery endpoint.

  • client_id: Your OIDC client ID.

  • client_secret: The client secret key.

  • Secret (SAML 2.0): X.509 certificate.

3

Configuration from IONOS Cloud

  • Upon receipt of the discovery endpoint from the organization, IONOS Cloud performs the following actions:

    • Verifies the domain ownership.

    • Verifies the discovery endpoint.

    • Creates the IDP using the configuration in the discovery endpoint.

    • Links the IDP to the domain to be used by the user accounts in that domain.

Note: In the Access settings for OIDC, use the following information:

  • Valid redirect URIs: https://iam.ionos.com/realms/cloud/broker/identityProviderId/endpoint, where the IdentityProviderID is the id obtained from listing the identity providers.

  • Web origins: https://iam.ionos.com, which is used to map the web origins from the authentication redirect.

Result: The organization IDP is successfully onboarded to IONOS Cloud.

Discovery endpoint

From the OIDC discovery endpoint, the following details are considered to configure the IAM Federation by IONOS Cloud:

  • issuer: The URL of the OIDC issuer.

  • authorization_endpoint: The URL of the authorization endpoint.

  • token_endpoint: The URL of the token endpoint.

  • userinfo_endpoint: The URL of the user info endpoint.

  • jwks_uri: The URL of the JSON Web Key Set (JWKS).

  • client_id: The client ID of the OIDC client.

  • client_secret: The client secret of the OIDC client.

For more information on the OIDC discovery endpoint, refer to the OpenID Connect 1.0 Documentation.

From the SAML 2.0 discovery endpoint, the following details are considered to configure the IAM Federation by IONOS Cloud:

  • entityId: The entity ID of the SAML 2.0 IdP.

  • singleSignOnService: The URL of the Single Sign-On (SSO) service.

  • x509cert: The X.509 certificate of the SAML 2.0 identity provider.

  • signatureAlgorithm: The signature algorithm used by the SAML 2.0 identity provider.

  • sloBinding: The binding used for single logout.

  • sloUrl: The URL of the single logout service.

Note: Use metadata XML files to share configuration details since there are no standardized URL-based discovery mechanisms like in the OIDC Discovery Endpoint.

For more information on the SAML 2.0 discovery endpoint, refer to the SAML 2.0 Documentation.

At your organization IDP, allow IONOS Cloud to link with the following discovery endpoints:

  • OIDC Discovery Endpoint: https://iam.ionos.com/realms/cloud/.well-known/openid-configuration

  • SAML 2.0 Discovery Endpoint: https://iam.ionos.com/realms/cloud/protocol/saml/descriptor

Overview

The IONOS AI Model Hub is designed to simplify the deployment and management of advanced machine learning models, eliminating the complexities associated with hardware and infrastructure. This inference service serves a range of powerful AI models that enable developers to implement sophisticated AI solutions without concerns about underlying hardware and operational overhead.

IONOS' AI Model Hub supports various use cases, including:

  • Text Generation: Utilize pre-trained Large Language Models (LLMs) to generate text and answer queries using textual descriptions.

  • Image Generation: Utilize pre-trained text-to-image models to create images based on textual descriptions.

  • Document Collections: Store and query extensive document collections based on semantic similarity.

  • Retrieval Augmented Generation (RAG): Enhance responses by combining Large Language Models with contextually relevant documents stored in a vector database.

  • Tool Calling: Enable AI models to interact with external systems by invoking APIs or executing predefined functions. This allows for dynamic, task-based automation such as triggering workflows, retrieving real-time data, or integrating with business applications —all initiated through natural language prompts.

Features

The IONOS AI Model Hub Service offers a wide array of features tailored to meet the needs of modern developers:

  • Managed Hosting: Utilize AI models without needing to maintain the underlying infrastructure.

  • Security and Compliance: Keep your data secure and compliant with regulations, as data processing is confined within Germany. Your input data remains exclusively for your use and is excluded from training purposes.

  • Scalability: Scale your AI deployments seamlessly to meet your needs.

  • Integration Options: Easily integrate with your applications using REST APIs that are fully OpenAI-compatible, with support for popular programming languages like Python and Bash.

  • Diverse Model Offerings: Choose from various foundation models, including Large Language Models and text-to-image models, each capable of generating innovative, and sophisticated AI outputs.

  • Document Collections: Store and manage document collections and perform semantic similarity searches to extract contextually relevant information.

  • Retrieval Augmented Generation: Combine vector databases and Large Language Models to generate enhanced outputs that are contextually aware, providing more accurate and helpful responses.

  • Token-based Billing: Pay for the services based on the number of tokens used, enabling cost-efficient usage and transparency in billing.

Concepts

Understanding the foundational concepts of the IONOS AI Model Hub will help you leverage its full potential:

Foundation Models

Foundation models are pre-trained on massive datasets to perform a wide range of language and image processing tasks. They can generate text, answer questions, and create images based on textual descriptions. With IONOS, you can access these models through APIs, simplifying the process of integrating advanced AI capabilities into your applications.

Key Points

  • Access various open-source Large Language Models for text generation and text-to-image models for image generation.

  • Use models without managing underlying hardware.

  • Maintain data privacy and comply with German data protection regulations.

Document Collections

Vector databases provide a way to store and manage document collections, enabling semantic similarity searches. Documents are converted to embeddings (vector representations), allowing the discovery of related content through similarity searches.

Key points

  • Persist documents and search for semantically similar content.

  • Use API endpoints to manage document collections and perform searches.

  • Ensure document storage and processing stays within Germany.

Retrieval Augmented Generation (RAG)

Retrieval Augmented Generation enhances the performance of Large Language Models by combining their inherent capabilities with contextually relevant information retrieved from document collections stored in vector databases. This approach allows the model to produce highly accurate and detailed responses tailored to specific queries.

Key points

  • Use Large Language Models together with document collections from vector databases.

  • Improve response accuracy and relevance by incorporating more context.

  • Implement sophisticated AI solutions using a combination of querying and generation.

Components

API Endpoints

Use dedicated REST API endpoints to interact with various models and services. These endpoints are designed to facilitate the quick and easy integration of AI capabilities into your applications. The IONOS AI Model Hub provides two API options for maximum flexibility: its native IONOS AI Model Hub API and an OpenAI-compatible API, making it easy to work with tools that support OpenAI endpoints.

OpenAI-Compatible endpoints

These endpoints mirror OpenAI’s API structure, allowing for seamless integration with tools and platforms already designed for OpenAI:

  1. Models: Retrieve the list of available models and their details.

  2. Chat Completions: Generate conversational responses using supported Large Language Models.

  3. Image Generations: Generate high-quality images based on text prompts.

  4. Embeddings: Generate text embeddings as numerical vectors for semantic search, text similarity, and clustering.

Native IONOS AI Model Hub endpoints

  1. Model Management: Endpoints for retrieving model lists, querying models, and managing predictions.

  2. Document Management: Endpoints to create, modify, retrieve, and delete document collections, and individual documents.

  3. Querying and Generating: Endpoints for combining semantic searches with Large Language Models to implement Retrieval Augmented Generation scenarios.

Authentication and Authorization

Security is paramount, and IONOS provides robust mechanisms to authenticate and authorize API requests. You must generate and use API tokens to access the AI services securely. For more information about generating a corresponding token, see Access Management.

Data Privacy and Compliance

IONOS ensures that all data processing complies with German and European data protection regulations. Your data is processed within Germany, providing more layer of security and compliance. For more information, see Data Handling.

Technical Support

IONOS offers expert technical support to help you troubleshoot and optimize your AI deployments. Whether you need assistance with API integration or model performance, the support and Professional Service team is available to ensure your success during German business hours.

Backup of Collections in Vector Database

IONOS recommends implementing a backup strategy for the data saved to collections in the vector database. This ensures that your collections can be restored in case of accidental deletion or other unforeseen events.

Configure IAM Federation
Log in to the Data Center Designer
DCD
Log in to the Data Center Designer with your Identity Provider
Link the user account
User signs in on the organization page
User account linked
Unlink the user account

Verify Domain Ownership

Prerequisite:

  • Only contract administrators, owners, and users with accessAndManageIamResources privilege can create and manage Identity Providers (IDPs) through the API. You can also set user privileges in the DCD. For more information, see Set User Privileges for Identity and Access Management.

  • The token value obtained from the Request Domain Ownership API must be added to the TXT Domain Record before verifying the domain ownership.

To validate the token is part of the domain which has been already requested for domain ownership, perform a PUT request with the domainId of the domain.

Endpoint

Use the following endpoint to create or update an IDP: https://iam.ionos.com/federation/domains/{domainId}/verify.

Request

Note: The following request contains a sample domainId. Replace them with the domainId value whose domain ownership must be verified.

curl --location \
--request PUT 'https://iam.ionos.com/federation/domains/f181c212-34f1-5843-9bbb-fc2531c7d928/verify' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'

Below is the list of mandatory path parameter:

Body Parameters

Type

Description

Example

domainId

string

The ID (UUID) of the domain.

f181c212-34f1-5843-9bbb-fc2531c7d928

To make authenticated requests to the API, the following fields are mandatory in the request header:

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .

Content-Type

yes

string

Set this to application/json.

Response

201 Successful operation

{
  "id": "f181c212-34f1-5843-9bbb-fc2531c7d928",
  "type": "domain",
  "href": "/domains/f181c212-34f1-5843-9bbb-fc2531c7d928",
  "metadata": {
    "createdDate": "2020-12-10T13:37:50+01:00",
    "createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedDate": "2020-12-11T13:37:50+01:00",
    "lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>",
    "account": 123456
  },
  "properties": {
    "domain": "yourcompany.com",
    "status": "APPROVED"
  }
}

AI Model Hub

The IONOS AI Model Hub is a fully managed platform that makes it easy to build powerful, AI-driven applications. Leverage foundation models, vector databases, and Retrieval-Augmented Generation (RAG) capabilities—all while ensuring robust data privacy, security, and compliance.

Whether generating content, building chatbots, enriching applications with AI-generated images, or implementing semantic search — AI Model Hub gives you the tools to bring your ideas to life.

Prerequisite: An Authentication Token is necessary to access and use the AI Model Hub. If you have no Authentication Token yet, you can generate one using the Access Management.

Product Overview

Get started with the foundational concepts and platform features.

Advanced Concepts

Deepen your understanding of the AI Model Hub’s technical capabilities.

How-Tos

Step-by-step guides to help you integrate and scale AI in your projects.

Governance and Compliance

Review our governance and compliance policies for the IONOS AI Model Hub.

Developer Tools

Explore the available APIs to programmatically interact with the AI Model Hub.

Frequently Asked Questions (FAQ)

Retrieve all Identity Providers

To retrieve all IDPs, perform a GET request.

Endpoint

Use the following endpoint to retrieve an IDP: https://iam.ionos.com/federation/identityproviders.

Request

curl --location \
--request GET 'https://iam.ionos.com/federation/identityproviders' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'

To make authenticated requests to the API, the following fields are mandatory in the request header:

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .

Content-Type

yes

string

Set this to application/json.

Response

200 Successful operation

{
  "id": "ac6f04c2-68e1-5e61-97c8-ef0216f1c08e",
  "type": "collection",
  "href": "/identityproviders",
  "items": [
    {
      "id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
      "type": "identityprovider",
      "href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
      "metadata": {
        "createdDate": "2020-12-10T13:37:50+01:00",
        "createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "lastModifiedDate": "2020-12-11T13:37:50+01:00",
        "lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
        "resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
      },
      "properties": {
        "name": "IdentityProvider ABC",
        "enabled": true,
        "domain": "ionos.com",
        "configuration": {
          "saml": {
            "metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
            "endpoint": "https://iam.ionos.com/realms/cloud/broker/yourIdentityProvider/endpoint/descriptor"
          },
          "oidc": {
            "openidConfigurationUrl": "https://example.com/.well-known/openid-configuration",
            "clientName": "Example Client",
            "endpoint": "https://iam.ionos.com/realms/cloud/.well-known/openid-configuration"
          }
        }
      }
    }
  ]
}

Retrieve Identity Provider

To retrieve an IDP, perform a GET request with the identityProviderId of the IDP.

Endpoint

Use the following endpoint to retrieve an IDP: https://iam.ionos.com/federation/identityproviders/{identityProviderId}.

Request

Note: The following request contains a sample identityProviderId. Replace it with the identityProviderId value, whose information you want to retrieve.

curl --location \
--request GET 'https://iam.ionos.com/federation/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' 

Below is the list of mandatory path parameter:

Body Parameters

Type

Description

Example

identityProviderId

string

The ID (UUID) of the IDP.

5e6323da-8a45-5732-bec1-d7c29c1dc890

To make authenticated requests to the API, the following fields are mandatory in the request header:

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .

Content-Type

yes

string

Set this to application/json.

Response

200 Successful operation

{
  "id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
  "type": "identityprovider",
  "href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
  "metadata": {
    "createdDate": "2020-12-10T13:37:50+01:00",
    "createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedDate": "2020-12-11T13:37:50+01:00",
    "lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
  },
  "properties": {
    "name": "IdentityProvider ABC",
    "enabled": true,
    "domain": "yourDomain.com",
    "configuration": {
      "oidc": {
        "openidConfigurationUrl": "https://example.com/.well-known/openid-configuration",
        "clientName": "Example Client",
        "endpoint": "https://iam.ionos.com/realms/cloud/.well-known/openid-configuration"
      }
    }
  }
}
{
  "id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
  "type": "identityprovider",
  "href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
  "metadata": {
    "createdDate": "2020-12-10T13:37:50+01:00",
    "createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedDate": "2020-12-11T13:37:50+01:00",
    "lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
  },
  "properties": {
    "name": "IdentityProvider ABC",
    "enabled": true,
    "domain": "ionos.com",
    "configuration": {
      "saml": {
        "metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
        "endpoint": "https://iam.ionos.com/realms/cloud/broker/yourIdentityProvider/endpoint/descriptor"
      }
    }
  }
}

Cost & Usage

The Cost & Usage view provides a more detailed and intuitive view of cloud costs and consumption statistics. The view gives you the ability to explore the usage of all services with the currently applicable list prices, excluding any discounts and VAT. It provides a clear breakdown of service usage and pricing, allowing for better visibility into your consumption patterns. It compares estimated costs and usage across various product categories, which are subdivided into specific line items. The page outlines the services or features used, the total units consumed, and the corresponding costs incurred.

The granular level of detail ensures you clearly understand where your resources are being utilized and how they contribute to overall spending. You can view relevant data that helps make informed decisions about your cloud resources.

Prerequisites: You must be one of the following to access the Cost & Usage view:

Contract Type
Contract Users
Accessible?

Regular contracts

Contract administrators Contract owners

✅ ✅

Reseller contracts

Contract owners

✅

The cost calculation depends on the aggregated usage of all resources consumed during the selected period. Because usage data is updated periodically (at least once a day) depending on the product, the usage for the current period may be offset by up to 24 hours. Thus, the report ensures you have the required information for monitoring consumptions and accommodating the update intervals of various services to give you a cost report for services and product usage in your cloud environment. For more information on pricing, see IONOS Cloud Prices.

Note:

  • Billing is based on product usage, with charges computed according to the listed prices. Hence, it should be viewed as an estimate and may not match the final invoice details.

  • This page does not reflect special pricing or discounts, meaning the figures shown may not align with any custom agreements or promotional rates in place.

In addition to the Cost & Usage view on the DCD, you can retrieve detailed invoice data and a granular resource-allocated usage distribution through the IONOS Cloud Billing API. It provides a powerful and flexible way to access comprehensive billing information, enabling you to track and analyze your usage at a granular level programmatically. By leveraging the Billing API, you can integrate billing data into your internal systems, automate reporting processes, and gain deeper insights into resource consumption across various services. We recommend you explore and utilize this API to streamline your billing workflows and enhance cost management capabilities.

The Cost & Usage view, in combination with the Cost Alert feature, provides an enhanced way for you to proactively manage your cloud expenditures. When setting up a cost alert you will receive a notification as soon as the cost of your contract reaches the predefined threshold, allowing you to analyze your usage. The integration offers greater control and visibility over usage patterns and associated costs, helping avoid unexpected charges.

Access Cost & Usage

To view the services and products cost and usage for your account, follow these steps:

1. In the DCD, go to Menu > Management > Cost & Usage.

2. Select a Period from the drop-down list to generate a detailed report for the specified time frame. By default, the current month and its breakdown are displayed. Additionally, you have the option to generate a report for the past six months, starting from the current month.

Select Period

Result: The report displays the following information:

  • Period: The current period is displayed by default. You may notice that the cost computation for the period starts from the beginning of the month. However, if you choose:  — Current month: The report is generated from the first of the month until the date of report generation.  — Previous months: The report is generated from the first of the month until the end of the month. You can generate the report only for the last six months of the contract.

  • Current total amount for this period: Displays the total cost incurred for the respective month due to the services and product usage.

  • Product categories: The product categories on the left frame display the total cost for using individual products or services from the respective product category. Click on it for a detailed breakdown. Products or services that do not have a product mapping are listed in Others.

  • Price category: Displays the total price associated with the products or services consumed in the respective product category. It is a summary of the product or service usage that helps identify the total cost of this category, meaning costs are grouped per consumed product, independent of whether a single instance or multiple services caused the usage. In some cases, like for Virtual Data Centers (VDCs), the total cost is aggregated by each VDC. The price category shows one of the following based on the usage:  — —: No service or product was used from the respective product category during the chosen period.  — 0.00: The free quota covered the services or products that were used.  — Total cost: Services or products from the respective product category were used. Click on it for a detailed breakdown.

Cost and Usage view

Detailed breakdown

The table displays the following information:

  • Item: Displays the product item description including the description of the calculation unit of the product item. Example: 1h per GB RAM. If aggregate costs are displayed, like in VDCs, click on it to view a detailed service or product consumption breakdown.

  • Price per unit: Displays the cost per unit for the service or product used.

  • Usage: Displays the number of units consumed. It indicates the number of units consumed by each product item.

  • Total: Displays the total cost incurred for the amount of units of the respective product item. It is calculated as price per unit * amount of usage.

August 2025

What's new

August 25

Managed Kubernetes is releasing Kubernetes version 1.33. For more information about the schedule timeline, see .

August 19

We have commissioned an additional data center that extends the Frankfurt, Germany metro region, enhancing high availability, redundancy, and operational security through network connectivity with our existing de/fra location. The data center is designed to deliver scalability, robust data security, and high performance by leveraging state-of-the-art hardware components. For more information, refer to the .

Support for specific products and services

You can now deploy the following products in the new data center using one of the following methods. Existing deployments in Frankfurt remain unaffected:

  • Selecting Germany / Frankfurt am Main (de/fra/2) from the drop-down list in the .

  • Specifying the location code as de/fra/2 for .

Compute Services:

Containers:

Data Analytics:

Databases:

Network Services:

Observability:

Storage & Backup:

  • You can upload only images to the new Frankfurt region using the ftps://ftp-fra-2.ionos.com endpoint.

Security:

August 12

IONOS Cloud now supports the GPT-OSS 120B model, a high-performance, multilingual, reasoning model in the AI Model Hub. This advanced AI model excels in text generation, complex reasoning, and natural language processing across multiple domains, offering fast inference through an efficient expert routing architecture.

August 1

IONOS Cloud supports Mistral Small 24B model, a high-performance multilingual and multimodal AI, in the AI Model Hub. This model processes both text and image inputs, delivers fast and reliable chat completions, and leverages advanced capabilities like streaming and tool calling, all optimized for a broad range of European languages.

Documentation updates

August 22

A new tutorial for deploying on IONOS Cloud Virtual Machines (VMs), using either a pre-configured Plesk QCOW image or the installer, is now available. This guide provides step-by-step instructions for setting up your IONOS Cloud instance for Plesk installation using one of these methods.

August 1

The Images & Snapshots documentation has been relocated from the product section and placed directly under the category Storage & Backup. This update aligns with the recent and is intended to enhance documentation visibility and organization. No changes have been made to product functionality.

Data Center Designer

The Data Center Designer (DCD) is a unique tool for creating and managing . Its graphical user interface (GUI) makes data center configuration intuitive and straightforward. You can drag and drop virtual elements from the Palette to set up and configure data center infrastructure components in the Workspace. For more information, see .

Similar to a physical data center, you can use the DCD to connect various virtual elements to create a complete hosting infrastructure. For more information, see .

The same visual design approach is used to make any adjustments later. You can log in to the DCD and scale your infrastructure capacity. Alternatively, you can set defaults and create new resources when needed.

You can set up your data center infrastructure by using a drag-and-drop visual interface.

The DCD contains the following elements:

DCD elements

The square elements serve as building blocks for your VDC. Each element represents an IONOS Cloud product or service. Some elements are compatible, while others are not. For example, a Server icon can be combined with the Storage ( or ) icon. In practice, this would represent the physical act of connecting a hard drive to a server machine. For more information, see .

Palette and workspace

The palette is a dynamic sidebar that contains VDC elements. You can click and drag each element from the palette into your workspace and position it as per your requirements.

All cloud products and services are compatible with each other. You may create a Server and add Storage to it. A LAN Network will interconnect your Servers.

Some elements may connect automatically via drag-and-drop. The DCD will then join the two if able. Otherwise, it will open configuration space for approval.

Right-click an element and select Delete from the drop-down menu. You can also select the element directly and hit Delete/Backspace from your keyboard.

Context menu

The context menu offers different options depending on the element. To see the context menu, right-click on any element. For example, right-click a Cube or a Server to update it.

Inspector pane

When an element is selected, the Inspector pane will appear on the right side of your screen. You can configure the element properties. For example, for a Server element, you can define its Name and , Preset, vCPUs and RAM.

This pane allows you to finalize the creation of your data center. Once your VDC is set up, select PROVISION CHANGES. This makes your infrastructure available for use.

Core functionality

Using the DCD, you can both control and manage the following services provided by IONOS Cloud:

  • : Create, configure, and delete entire data centers. Cross-connect between VDCs and tailor user access across your organization.

  • and : Set up, pause, and restart virtual instances, such as , , or , with customizable storage, CPU, and RAM capacity. Instances can be scaled based on usage. For more information about configuring a data center, see .

  • : Upload, edit, and delete your private images or use images provided by IONOS Cloud. Create or save snapshots for future instances.

  • : Reserve and manage static public . Create and manage private and public LANs, including firewall setups.

  • Basic Features: Save and manage ; connect via ; launch instances via ; record networking via flow logs and monitor your instance use with monitoring software.

Compatibility

As a web application, the DCD works effectively on the following browsers:

  • Google Chrome™: Version 30+

  • Mozilla® Firefox®: Version 28+

  • Apple® Safari®: Version 5+

  • Opera™: Version 12+

  • Microsoft® Internet Explorer®: Version 11 & Edge

We recommend using Google Chrome™ and Mozilla® Firefox®.

Next steps

Now that you are familiar with the DCD, you can start configuring your VDC.

Prerequisite: Make sure you have one or more Groups in the User Manager. To create one, see .

To set user privileges, follow these steps:

1. In the DCD, go to Menu > Management > Users & Groups.

2. Select the Groups tab in the User Manager window.

3. Select the appropriate group to which you want to assign privileges from the list of groups.

Generate authentication token
Generate authentication token
Generate authentication token
Managed Kubernetes Version
Release Schedule
Additional Data Center is now operational in Frankfurt
Service Catalog
DCD
API-based requests
Dedicated Core Servers
vCPU Servers
Cubes
Managed Kubernetes
Private Container Registry
Event Streams for Apache Kafka
In-Memory DB
MariaDB
MongoDB
PostgreSQL
Cross Connect
DDoS Protect
Flow Logs
IPv6 Configuration
Managed Application Load Balancer
Managed NAT Gateway
Managed Network Load Balancer
VDC Networking
VM Auto Scaling
VPN Gateway
Logging Service
Monitoring Service
Block Storage
Images & Snapshots:
Unified Extensible Firmware Interface (UEFI)-based
IONOS Object Storage
Network File Storage
Network Security Groups
AI Model Hub supports GPT-OSS 120B in Beta Mode
AI Model Hub supports Mistral Small 24B
New Tutorial for installing Plesk on IONOS Cloud VMs
Plesk
Updated Images & Snapshots Documentation Section
Block Storage
streamlined DCD interface

Name

Description

1. Top navigation menu

Provides access to the IONOS Cloud products and features.

2. Workspace

You can arrange element icons in this space via drag-and-drop.

3. Palette

Movable element icons that can be combined in the Workspace.

4. Elements

The icon represents a component of the VDC.

5. Context menu

Right-click an element to display additional options.

6. Inspector pane

View and configure properties of the selected element.

Virtual Data Center (VDCs)
Palette and workspace
Configure a Data Center
HDD
SSD
Set Up Storage
Availability Zone
Data Centers
Compute Engine
Cubes
Dedicated Core servers
vCPU servers
Cubes
Configure a Data Center
Block Storage
Networking
IP addresses
SSH keys
Remote Console
cloud-init
Create an hosting infrastructure using DCD
DCD
Individual element icons
Once joined, the elements create a new combined element in the Workspace
Context menu
Inspector pane

August 2024

What's new

Replication Enhancement

August 26

IONOS Object Storage has extended support for the Replication feature through the DCD. You can now replicate data from user-owned buckets to contract-owned buckets in the eu-central-3 region. Previously, this functionality was only available via the API.

Enable Access Logging for Application Load Balancer

August 22

This release introduces the Access Logging feature in Managed Application Load Balancer (ALB). It enhances monitoring and analyzing ALB traffic with detailed logging capabilities.

Enable Access Logging for Network Load Balancer

August 22

This release introduces the Access Logging feature in Managed Network Load Balancer (NLB). It enhances monitoring and analyzing NLB traffic with detailed logging capabilities.

gRPC Support and WebSocket Support

August 22

New capabilities have been added to the Managed Application Load Balancer: — Configure gRPC Support — Configure WebSocket Support These enhancements provide comprehensive instructions for setting up gRPC that enables users to define service methods and messages in a language-agnostic way, making it easy to create APIs that work seamlessly across different platforms and setting up WebSocket support, a communication protocol that provides full-duplex communication channels over a single TCP connection.

Monitoring Service

August 19

This release introduces Monitoring Service. IONOS Cloud introduces the Monitoring Service, which provides a centralized and scalable solution for monitoring and analyzing your application and infrastructure metrics. Hence, Monitoring as a Service is now considered a legacy. We recommend switching to the Monitoring Service for better support and capabilities. For more information, see FAQs.

Private Container Registry IP ACLs

August 16

The Private Container Registry now supports IP Access Control Lists (IP ACLs), offering enhanced security and granular access control. This feature allows you to specify IP subnets permitted to access your registry, limiting access to trusted sources within your network. IP ACLs are easy to configure via the API with the apiSubnetAllowList parameter. Once configured, access attempts from outside the allowed subnets are immediately blocked, ensuring real-time protection without disrupting authorized users.

Password Policy Manager

August 14

The new Password Policy Manager feature is now available for contract owners, enabling the creation of a customizable password policy that strengthens security within their contracts. Using the DCD or the IAM Identity Password Policies API, contract owners can manage password policy.

Kubernetes Version 1.27 End-of-Life

August 14

Kubernetes Version 1.27 has now reached its End of Life (EOL). From now on, you cannot provision any more clusters or node pools for version 1.27. Existing clusters or node pools running on version 1.27 will be automatically upgraded to version 1.28 during the next scheduled maintenance window after August 14, 2024.

Access Object Storage from a Private LAN

August 9

You can now set up accessing Object Storage over a private LAN by configuring a Managed Network Load Balancer (NLB) with the public IP addresses of the required Object Storage endpoint as the Target IP address and configuring the Private IP as the Listener IP of the forwarding rule.

Kubernetes Version 1.27 End-of-Life Notification

August 8

This is to inform you that Managed Kubernetes version 1.27 will reach its end of life (EOL) on August 14, 2024. After that, you cannot create new clusters or node pools using Kubernetes version 1.27. Existing clusters or node pools running on version 1.27 will be automatically upgraded to version 1.28 during the next scheduled maintenance window after the EOL date.

Auto-Renewable SSL Certificate Support

August 2

The Certificate Manager now supports the auto-renew of SSL certificates via the API. With this function, the certificate manager automatically renews the certificate before it expires. The renewed certificate is also available in the DCD to use them. This feature is currently supported only via the API and available on a request basis. To access this feature, please contact your sales representative or IONOS Cloud Support.

Network File Storage (NFS) Volumes for Kubernetes

August 1

IONOS releases NFS Volumes support for Kubernetes. This feature allows the integration of IONOS Network File Storage (NFS) with Kubernetes clusters, mounting NFS volumes as PVCs in the cluster. Network File Storage is initially available only in the German data centers (Frankfurt and Berlin), and will be gradually rolled out to all locations.

It is currently available on a request basis. To access this product, please contact your sales representative or IONOS Cloud Support.

Event Streams for Apache Kafka

August 1

IONOS introduces Event Streams for Apache Kafka, a managed solution that is fully integrated with the DCD, offering a variety of cluster sizes to accommodate the diverse requirements of different applications. With this service, you can build secure event-driven architectures. The product will initially be available only in the German data centers (Frankfurt & Berlin), and will be gradually rolled out to all locations.

It is currently available on a request basis. To access this product, please contact your sales representative or IONOS Cloud Support.

Self-restore MariaDB Clusters from the DCD

August 1

The self-restoration of MariaDB clusters from a backup is possible via the DCD. It minimizes downtime and data loss in unanticipated scenarios. For more information, see Use Cases.

VPN Gateway

August 1

IONOS offers a robust VPN Gateway feature designed to ensure secure and scalable encrypted connections between your IONOS cloud resources and remote infrastructure. This solution supports two key VPN protocols: IPSec and WireGuard, providing you with flexibility and advanced security options to meet your networking needs.

It is currently available on a request basis. To access this product, please contact your sales representative or IONOS Cloud Support.

In-Memory DB

August 1

IONOS DBaaS provides support for In-Memory DB instances and offers resources such as CPU cores and RAM size (GB) to create In-Memory DB instances. Additionally, the instance facilitates backup via snapshots and the option to recover data, making them highly reliable. It also facilitates cloud-based In-Memory DB instance patching and scalability.

CDN

August 1

IONOS releases CDN, a content delivery network service with multiple edge servers geographically well situated within the user's proximity to deliver content swiftly and securely with enhanced features such as Web Application Firewall (WAF) and DDoS Layer 7 protection. It is currently available on a request basis. To access this product, please contact your sales representative or IONOS Cloud Support.

Access and Manage the API Gateway

August 1

The API Gateway offers a suite of functionalities to help you efficiently create, manage, and monitor your APIs. It provides essential features for managing and optimizing interactions between clients and backend services, ensuring secure and efficient API operations. Currently, it is only available in Berlin but will soon be rolled out to more locations.

FAQ

The following provides detailed information about the Cloud Savings Plans.

General

What are Cloud Savings Plans?

The IONOS Cloud Savings Plans model provides a lower hourly rate on compute resources in exchange for a planned term of one or three years. It is designed to offer substantial savings for customers with consistent, predictable workloads.

How do Savings Plans help me save money?

Choosing a plan for a set usage and term provides a substantially lower hourly rate rate on your eligible cloud usage compared to Pay-As-You-Go (PAYG) prices. Regular PAYG rates apply to any usage exceeding your plan.

What terms are available?

You can choose either a one-year or a three-year term, based on your needs.

How do I get billed?

For detailed information about various billing use case scenarios, see Use Cases. The invoice also reflects resource distribution applying the oldest Virtual Machines (VMs) first rule, and the incurred cost for resource usage. For more information, see Invoice.

Are the Savings Plans similar to a Reserved Instance (RI)?

They are similar in that both offer optimized prices for usage.

Reserved Instances

Savings Plans

- It often requires you to select specific instance types, regions, and operating systems. - Usually includes a capacity reservation.

- Offers broader flexibility. - Applies to usage across various CPU models, sizes, regions, and operating systems. - Continues to apply even if your workload changes. - Applies only at the financial level and does not provide capacity reservation.

How can I determine if Savings Plans is better for me than PAYG?

Choosing between Savings Plans and PAYG depends on your workload patterns and financial goals. For stable and predictable usage, Savings Plans offer better value. For flexible, short-term, or variable usage, PAYG provides more adaptability. The table below outlines the criteria for evaluating and selecting the most suitable plan based on your workload and usage patterns.

Cloud Savings Plans

PAYG

Your workloads are stable and consistently running.

Your workloads are sporadic or subject to sudden spikes.

You aim to reduce costs through long-term plans.

You operate short-term or temporary workloads. You are in an exploratory, development, or testing phase.

You have a fixed workload.

Your workloads vary frequently.

You want to benefit from loyalty-based plan rates and long-term investment returns.

You need maximum flexibility, including for multi-cloud environments.

Why should I opt for the Savings Plans, and what value do they add?

  • Resource-based commitment: Savings Plans are based on a commitment to a total amount of resource usage rather than to specific VM families. Example: 50 cores and 200 GB of RAM.

  • Flexible resource allocation: The resource-based model enables workloads to migrate across VM types and families without compromising the benefits of the Savings Plan's pricing. This flexibility ensures that savings follow the workload, regardless of instance configuration.

  • Change VMs anytime: You can upgrade, downgrade, or change the CPU family of your VMs at any time. The Savings Plans are automatically applied to the new VM configuration, provided it is within your resource limits.

  • Availability across regions: The Savings Plans apply across all eligible usage in supported IONOS data centers and regions. You do not need to restrict workloads to a specific location to benefit from the pricing of the Savings Plans.

  • Kubernetes integration: Savings Plans extend to IONOS's Managed Kubernetes environments. Resources consumed by nodes are eligible for coverage under Savings Plans. You can scale or resize node pools, and the savings adjust accordingly.

  • Capped coverage: The preferential pricing applies only up to the selected amount of resources. For example, if you select 50 cores but use 60, the Savings Plan's rate covers the first 50, and the remaining 10 are billed at the standard PAYG rates.

  • Chronological application: IONOS applies the Savings Plan benefits in a chronological order, starting with the oldest eligible VM. The rates are applied until the selected amount is reached.

Purchase and Management

How can I get started with the Savings Plans?

1. Fulfill the prerequisites: Make sure you meet all prerequisites before proceeding.

2. Review the use cases: Explore the Use Cases to understand different scenarios. This will help you choose the plan that best fits your needs based on your past resource usage.

3. Understand the Cloud Savings Plan's lifecycle: Go through the lifecycle to learn how the Savings Plans work from creation to completion.

4. Create and manage your plan: Use the Data Center Designer (DCD) to create and manage your Savings Plans.

Can I pay upfront for my Savings Plans?

No, we currently only accept monthly recurring payments for your Savings Plans.

Can I change or cancel Savings Plans after I have purchased them?

Savings Plans cannot be modified or canceled once purchased. They commit you to a specific level of usage for the selected term. If you need additional resources, you will need to purchase additional Savings Plans. Therefore, you must carefully analyze your usage and choose your plans accordingly.

What happens if I do not use the full quantity defined in my Savings Plans?

Accurate usage forecasting is key to getting the most value from your plan. The full amount of resources in your plan is billed on a recurring basis, whether or not your actual usage reaches that level. Any unused resources do not roll over to the next billing period.

Monitoring and Optimization

How can I track my Savings Plan's utilization and savings?

You can monitor your resource usage costs using the invoice, Cost & Usage, in combination with Cost Alert, which allows you to manage your cloud expenditures proactively. With these alerts and reports, you can leverage your plans and identify potential areas for optimization.

Do the Savings Plans apply to all cloud products in my contract?

The Savings Plans apply to the following products:

  • Compute Engine - Dedicated Core Servers

  • Managed Kubernetes - Dedicated Core Node Pools

Invoice

How are Savings Plans represented in my invoice?

  • Resource consumption billed at PAYG rates appears under its respective VDC.

  • Resource consumption covered by a Savings Plan is moved from its VDC and grouped under the plan's name.

1. In the DCD, go to Menu > Management > IAM Federation.

Overview

Learn about the AI Model Hub's capabilities and core AI principles.

Models

Learn more about the models offered and their key distinctions.

Embeddings

Discover how embeddings power semantic similarity and search.

Tool Calling

Learn how to connect models to tools and APIs for dynamic responses.

Access Management

Set up your contract and user accounts.

Rate Limits

Understand rate limits of the IONOS AI Model Hub.

Text Generation

Use Large Language Models (LLMs) to generate high-quality content.

Enrich Text with Images

Generate high-quality images based on text prompts.

Tool Calling

Enable AI-driven workflows through dynamic tool calling.

Image Generation

Create visuals from text using diffusion models.

Text Embeddings

Generate vector embeddings for semantic similarity tasks.

Document Collections

Persist and manage custom data for fine-tuned responses.

Semantic Search

Implement semantic search across your document collections.

Retrieval Augmented Generation

Build your first RAG pipeline combining knowledge and LLMs.

Tool Integration

Integrate the AI Model Hub with external tools and apps.

Data Handling

Review our policies on data privacy, secure storage, and GDPR compliance.

European Union AI Act

Understand our roles under the EU AI Act and how we support your compliance.

AI Model Hub - Inference API

API Documentation for the AI Model Hub endpoints.

AI Model Hub - OpenAI compatible API

API Documentation for the OpenAI compatible AI Model Hub endpoints.

FAQ

Get answers to the most commonly encountered questions about AI Model Hub.

Create a group

To revoke user privileges, follow these steps:

1. In the DCD, go to Menu > Management > Users & Groups.

2. Choose one of the following options:

Option 1: Remove the User from all the Groups in which the Privilege is Enabled

1. Select the user from the Users tab in the User Manager window.

2. Go to the Groups tab, select the group name enabling the privilege, and click Remove from Group.

3. Repeat step 2 for all the groups where the privilege to be revoked is applied.

Remove the user from the Group
Option 2: Remove the Privilege from all the Groups the User Belongs To

1. Select the Groups tab in the User Manager window.

2. Select the Group Name in which the privilege to be revoked is applied and the user belongs to this group.

3. Clear the checkbox against the privilege name.

4. Repeat steps 2 and 3 for all the groups where the privilege to be revoked is applied.

Remove the privilege from all Groups user belongs to

Warning: This option removes the privilege for all the members in the groups from which the privilege is revoked.

Note: To revoke this privilege from a contract administrator, turn off the administrator option on the user account. After performing this action, the contract administrator will become a contract user, and the privileges set up for the user before becoming an administrator will be in effect.

Result: The privilege is successfully revoked.

Configure a Data Center

Upon creating a data center, you can manually configure the IONOS Cloud infrastructure for each server using the palette and workspace in the DCD. It comprises all the building blocks and the necessary resources required to configure, operate, and manage your products and services. You can also configure and manage multiple VDCs and configure settings for each server automatically.

Prerequisites:

— Make sure you have the corresponding permissions to create and manage data centers. By default, contract administrators and owners can configure a data center.

— Only group users with Edit access to the data center resource can configure the data center. Users of a group added to a data center with only Visible to Groups access can only view the data center. For more information, see Add group to a resource.

— A data center must be created. To do so, follow the steps in Create a Data Center.

Configure a Dedicated Core Server

To configure your Dedicated Core Server, follow these steps:

  1. Drag the Dedicated Core server element from the palette into the workspace.

  2. Enter the following details in the Settings tab of the Inspector pane:

    • Name: Enter a unique name for your server.

    • Availability Zone: Select a zone from the drop-down list to host the server on the chosen zone.

    • CPU Architecture: Select either AMD or Intel cores.

    • Cores: Select the number of CPU cores.

    • RAM: Select any size starting from 0.25 GB to the maximum limit allotted to you. The size can be increased or reduced in steps of 0.25 GB. The maximum limit varies based on your contract resource limits and the chosen data center. For more information about creating a full-fledged server, see Create a Dedicated Core Server.

    • Network Security Groups: Select one or more network security groups from the drop-down list to associate them with the Dedicated Core server. You can choose from any of the default or custom groups.

Drag a Dedicated Core server element from the palette onto the workspace and configure its properties on the right

Result: The Dedicated Core Server is now created and can be updated based on your requirements.

Add storage to the Dedicated Core Server

  1. Drag a Storage element from the palette onto a Dedicated Core server in the workspace.

  2. To configure your Storage element, enter the following details in the Inspector pane:

Combining a Storage element with the Dedicated Core server in the workspace joins two elements
  • Name: Enter a storage name unique to the VDC.

  • Availability Zone: Select a zone from the drop-down list to host the storage element associated with the server.

  • Size in GB: Choose the required storage capacity.

  • Performance: Select a value from the drop-down list based on the requirement. You can either select Premium or Standard, and the performance of your storage element varies accordingly.

  • Image: Select an image from the drop-down list. You can select one of IONOS images or choose your own.

  • Password: Enter a password for the chosen image on the server—a root or an administrator password.

  • Backup Unit: Select a backup unit from the drop-down list. Click Create Backup Unit to instantly create a new backup unit if unavailable.

For more information about adding storage to the server, see Block Storage Overview.

Result: The storage will now be added to your Dedicated Core Server.

Connect to the internet

1. Create a Network Interface Card (NIC) by clicking the + icon on the Dedicated Core server in the workspace and attach it to the Internet element. Alternatively, you can right-click the Dedicated Core server > Actions > Add NIC and then attach it to the Internet element.

2. To configure your NIC element, enter the following details in the Network tab of the Inspector pane:

  • Name: Enter a NIC name unique to this VDC.

  • MAC: Media Access Control Address field is populated automatically upon provisioning and cannot be changed.

  • LAN: The name of the LAN connected to internet is displayed. To select another LAN, click the drop-down list and select to move NIC to the LAN. A LAN that connects to the internet becomes a public LAN.

  • Firewall: It is Disabled by default. Select a value from the drop-down list to configure your firewall settings. For more information, see Configure a Firewall.

  • Network Security Groups: Select one or more network security groups from the drop-down list to associate them with the Dedicated Core server. You can choose from any of the default or custom groups.

  • IPv4 Configuration:

    • Primary IP: The primary IP address is automatically assigned by the IONOS DHCP server. You can, however, enter an IP address for manual assignment by selecting one of the reserved IP addresses from the drop-down list. Private IP addresses (according to RFC 1918) must be entered manually.

    • DHCP: It is often necessary to run a DHCP server in your virtual data center (e.g., PXE boot for fast rollout of VMs). If you use your own DHCP server, clear this check box so that the IONOS DHCP server does not reassign your IPs.

  • Add IP: Select the IP address from the drop-down list.

For more information about network configuration, see Configure a Network.

Connect your Dedicated Core server to the internet by configuring the Network settings in the Inspector pane

Result: The data center will now be connected to the internet.

Configure a private LAN

Note: The LANs added here are private. To configure a public LAN, see Connect to the Internet.

1. Double-click the + icon on the server. This creates an NIC connected to a private LAN.

2. In the LAN tab of the Inspector pane, enter a unique name for the LAN, and optionally, you may update the LAN color.

Result: The private LAN is successfully configured. A NIC IP is auto-generated, and the IP address is private.

Provision Changes

  1. Select PROVISION CHANGES in the Inspector pane to start the provisioning.

  2. Review your changes in the Validation tab of the Provision Data Center window.

  3. Confirm changes by entering your password. Resolve conflicts without a password.

  4. When ready, select Provision Now.

Finalize the setup by requesting that the resources are provisioned
Confirm by selecting Provision Now

Result: The data center will now be provisioned. DCD will display a Provisioning Complete notification when your cloud infrastructure is ready.

You may configure the MAC and IP addresses once the resource is provisioned.

Next steps

After configuring data centers, you can specify a preferred default data center location, IP settings, and resource capacity for future VDCs. For more information about configuring VDC defaults, see Create a Dedicated Core Server. Next, you can define users and assign them the privilege required to create data centers.

Create Identity Provider

Prerequisite: Only contract administrators, owners, and users with accessAndManageIamResources privilege can create and manage Identity Providers (IDPs) through the API. You can also set user privileges in the DCD. For more information, see Set User Privileges for Identity and Access Management.

To create a new Identity Provider (IDP), perform a POST request.

Endpoint

Use the following endpoint to create an IDP: https://iam.ionos.com/federation/identityproviders.

Info: You can find the configuration details in the discovery endpoint. For more information, see Discovery endpoint.

Request

curl --location \
--request POST 'https://iam.ionos.com/federation/identityproviders' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' \
--data '{
  "metadata": {},
  "properties": {
    "type": "oidc",
    "name": "IdentityProvider ABC",
    "enabled": true,
    "domain": "yourDomain.com",
    "configuration": {
      "oidc": {
        "openidConfigurationUrl": "https://example.com/.well-known/openid-configuration",
        "clientSecret": "MIICyzCCAbSgAwIBAgIJAMyYqQJkmRIOMA0GCSqGSIb3DQEB...",
        "clientName": "Example Client"
      }
    }
  }
}'
curl --location \
--request POST 'https://iam.ionos.com/federation/identityproviders' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' \
--data '{
  "metadata": {},
  "properties": {
    "type": "saml",
    "name": "IdentityProvider ABC",
    "enabled": true,
    "domain": "yourDomain.com",
    "configuration": {
      "saml": {
        "metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
        "x509Certificate": "MIICyzCCAbSgAwIBAgIJAMyYqQJkmRIOMA0GCSqGSIb3DQEB..."
      }
    }
  }
}'

Below is the list of mandatory body parameters:

Body Parameters

Type

Description

Example

properties

object

Properties with all the data needed to create a new IDP.

example.com

type

string

The type of identityProvider configuration.

oidc, saml

name

string

Name to uniquely identify the IDP.

IdentityProvider ABC

enabled

boolean

Choose to enable or disable the IDP.

true

configuration

object

Specify the configuration details of the identity broker.

oidc, saml

To make authenticated requests to the API, the following fields are mandatory in the request header:

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .

Content-Type

yes

string

Set this to application/json.

Response

201 Successful operation

{
  "id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
  "type": "identityprovider",
  "href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
  "metadata": {
    "createdDate": "2020-12-10T13:37:50+01:00",
    "createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedDate": "2020-12-11T13:37:50+01:00",
    "lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
  },
  "properties": {
    "name": "IdentityProvider ABC",
    "enabled": true,
    "domain": "yourDomain.com",
    "configuration": {
      "oidc": {
        "openidConfigurationUrl": "https://example.com/.well-known/openid-configuration",
        "clientName": "Example Client",
        "endpoint": "https://iam.ionos.com/realms/cloud/.well-known/openid-configuration"
      }
    }
  }
}
{
  "id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
  "type": "identityprovider",
  "href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
  "metadata": {
    "createdDate": "2020-12-10T13:37:50+01:00",
    "createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedDate": "2020-12-11T13:37:50+01:00",
    "lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
  },
  "properties": {
    "name": "IdentityProvider ABC",
    "enabled": true,
    "domain": "yourDomain.com",
    "configuration": {
      "saml": {
        "metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
        "x509Certificate": "MIICyzCCAbSgAwIBAgIJAMyYqQJkmRIOMA0GCSqGSIb3DQEB"
      }
    }
  }
}

Teuken 7B

Summary: Teuken 7B is a German sovereign AI model developed through the OpenGPT-X research initiative, designed to support European digital sovereignty. This model excels in multilingual communication across 24 EU languages, featuring an efficient multilingual tokenizer that provides superior performance for European linguistic contexts while ensuring data privacy and regulatory compliance for EU-based applications.

Intelligence

Speed

Sovereignty

Input

Output

Low

High

Moderate

Text

Text

Central parameters

Description: Research project outcome from OpenGPT-X initiative focused on European AI sovereignty. As project funding ended in early 2025, the model's future development is currently unclear.

Model identifier: openGPT-X/Teuken-7B-instruct-commercial

IONOS AI Model Hub Lifecycle and Alternatives

IONOS Launch

End of Life

Alternative

Successor

February 1, 2025

N/A

Origin

Provider

Country

License

Flavor

Release

Germany

Instruct

November 26, 2024

Technology

Context window

Parameters

Quantization

Multilingual

Further details

8k

7.45B

fp8

Yes

Modalities

Text

Image

Audio

Input and output

Not supported

Not supported

Endpoints

Chat Completions

Embeddings

Image generation

v1/chat/completions

Not supported

Not supported

Features

Streaming

Reasoning

Tool calling

Supported

Not supported

Not supported

Rate limits

Rate limits ensure fair usage and reliable access to the AI Model Hub. In addition to the contract-wide rate limits, no model-specific limits apply.

1. In the DCD, go to Menu > Network Services > Cloud DNS > Public zones tab.

2. Select Primary Zones from the drop-down list.

3. Select the appropriate primary zone in the DNS ZONES column to create records. Alternatively, click Details & Records in the ACTIONS column.

Zone selection

4. Click Create record in the Details & Records window.

5. Enter the following details in the Create Record window:

  • Enabled/Disabled: Set it to either Enabled (by default) or Disabled.

Log in to the Data Center Designer

1. Open a web browser and navigate to .

2. On the top right corner of the login screen, select your preferred language. The DCD supports German (DE), English (EN), Spanish (ES), and French (FR) languages.

3. Enter the Email Address with which you signed-up for an IONOS Cloud account and click Next.

Note: If your organization is onboarded to IAM Federation and you have linked your user account, you are directed to your organization's Identity Provider (IDP) to log in to the DCD. Skip the next steps and continue with the instructions in to complete signing in to the DCD.

4. Enter the Password and click Sign In.

5. The screen to enter the code is only visible to users with enabled.

5. Click Sign In.

Result: You are successfully logged in to the DCD application.

DCD application

Once logged in, you will see three primary areas of the DCD application:

The top navigation menu

The top navigation menu enables you to create and manage the data center, and view and manage your user account. Additionally, you can view notifications, visit the help section, learn more about DCD, and contact when needed.

The left navigation menu

The left navigation menu consists Virtual Data Centers (VDCs) and product categories, which you can use to access all the IONOS Cloud services. You can also create new VDCs or manage existing VDCs, access documentation, explore what's new in DCD, and additional details about the DCD.

The DCD dashboard

The DCD dashboard shows a concise overview of your VDCs in My Virtual Data Centers, and Resource Allocation shows the current usage of resources across your infrastructure. You will also see options to contact , What's new in the DCD, and IONOS Cloud Status details.

To provide feedback about the DCD dashboard, select Feedback about this page. You can submit your rating, provide reasons, and share what you liked or could improve.

You need to create your first data center to start seeing data center-relevant details in the dashboard. To do so, see and .

Next steps

Navigate to the to explore the DCD core functionalities and elements or start .

Ensure Identity Provider

Prerequisite: Only contract administrators, owners, and users with accessAndManageIamResources privilege can create and manage Identity Providers (IDPs) through the API. You can also set user privileges in the DCD. For more information, see .

To update an existing IDP, perform a PUT request with the identityProviderId of the IDP.

Note: If an IDP for a given identityProviderId does not exist, an IDP is created (ensured) instead.

Endpoint

Use the following endpoint to create or update an IDP: https://iam.ionos.com/federation/identityproviders/{identityProviderId}.

Request

Note: The following request contains a sample identityProviderId. Replace it with the identityProviderId value whose information you want to update.

Below is the list of mandatory path parameter:

Below is the list of mandatory body parameters:

To make authenticated requests to the API, the following fields are mandatory in the request header:

Response

  • 200 Successful operation: IDP is successfully updated.

  • 201 Successful operation: IDP is successfully ensured.

Following is an example of when an IDP is successfully updated or ensured for the given IDP details.

Generate authentication token
Nemo (12B)
OpenGPT-X
License
Hugging Face
curl --location \
--request PUT 'https://iam.ionos.com/federation/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' \
--data '{
  "id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
  "metadata": {},
  "properties": {
    "type": "saml",
    "name": "IdentityProvider ABC",
    "enabled": true,
    "domain": "ionos.com",
    "configuration": {
      "saml": {
        "metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
        "x509Certificate": "MIICyzCCAbSgAwIBAgIJAMyYqQJkmRIOMA0GCSqGSIb3DQEB"
      }
    }
  }
}'

Body Parameters

Type

Description

Example

identityProviderId

string

The ID (UUID) of the IdentityProvider.

5e6323da-8a45-5732-bec1-d7c29c1dc890

Body Parameters

Type

Description

Example

id

string

The ID (UUID) of the IDP.

5e6323da-8a45-5732-bec1-d7c29c1dc890

properties

object

Properties with all the data needed to update the IDP.

example.com

type

string

The type of identityProvider configuration.

oidc, saml

name

string

Name of the IDP.

IdentityProvider ABC

enabled

boolean

Choose to enable or disable the IDP.

true

configuration

object

Specify the configuration details to update for the identity broker.

oidc, saml

Header Parameters

Required

Type

Description

Authorization

yes

string

The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.

Content-Type

yes

string

Set this to application/json.

{
   "id":"5e6323da-8a45-5732-bec1-d7c29c1dc890",
   "type":"identityprovider",
   "href":"/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
   "metadata":{
      "createdDate":"2020-12-10T13:37:50+01:00",
      "createdBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "createdByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "lastModifiedDate":"2020-12-11T13:37:50+01:00",
      "lastModifiedBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "lastModifiedByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
      "resourceURN":"ionos:<product>:<location>:<contract>:<resource-path>"
   },
   "properties":{
      "name":"IdentityProvider ABC",
      "enabled":true,
      "domain":"ionos.com",
      "configuration":{
         "oidc":{
            "openidConfigurationUrl":"https://example.com/.well-known/openid-configuration",
            "clientName":"Example Client",
            "endpoint":"https://iam.ionos.com/realms/cloud/.well-known/openid-configuration"
         }
      }
   }
}
{
  "id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
  "type": "identityprovider",
  "href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
  "metadata": {
    "createdDate": "2020-12-10T13:37:50+01:00",
    "createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedDate": "2020-12-11T13:37:50+01:00",
    "lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
    "resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
  },
  "properties": {
    "name": "IdentityProvider ABC",
    "enabled": true,
    "domain": "ionos.com",
    "configuration": {
      "saml": {
        "metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
        "endpoint": "https://iam.ionos.com/realms/cloud/broker/yourIdentityProvider/endpoint/descriptor"
      }
    }
  }
}
Set User Privileges for Identity and Access Management
curl --location \
--request PUT 'https://iam.ionos.com/federation/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' \
--data '{
   "id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
   "metadata": {},
   "properties": {
      "type": "oidc",
      "name": "IdentityProvider ABC",
      "enabled": true,
      "domain": "ionos.com",
      "configuration": {
         "oidc": {
            "openidConfigurationUrl": "https://example.com/.well-known/openid-configuration",
            "clientSecret": "MIICyzCCAbSgAwIBAgIJAMyYqQJkmRIOMA0GCSqGSIb3DQEB...",
            "clientName": "Example Client"
         }
      }
   }
}'

Note: The AI Model Hub promotional period ended on September 30, 2025, but your journey continues by scaling your innovations from prototype to production with our simple, pay-as-you-go pricing.

2FA

Description

Enabled

Enter the six-digit Time-based one-time password (TOTP) from your authenticator app to continue the login process.

Disabled

You will not see the additional screen if you have not enabled 2FA. You can navigate to the next step. However, we highly encourage enabling 2FA to enhance security.

Options

Description

1. IONOS logo

Click the logo to navigate back to the dashboard from any screen within the DCD.

2. icon

Click the icon to expand or hide the left navigation bar, causing the DCD interface to adjust its width accordingly.

3. Management

Create, view, and manage users and groups; define password policies; and create and manage tokens.

4. Notification icon

View any active notifications.

5. Help icon

View online help documentation, learn more about the DCD, and contact IONOS Cloud Support when needed.

6. Account Management

View and manage your contract, payment details, general account settings, and password and security-related details.

Options

Description

Virtual Data Centers

View the list of data centers and their details or create a new data center.

AI

Leverage AI functionalities with open source generative models.

Containers

Manage containerized applications.

Databases

Host and manage your databases with IONOS Cloud database services.

Storage & Backup

Manage IONOS Storage and Backup services.

Observability

Observe system behavior through logging, activity tracking, and gather insights using metrics.

Network Services

Manage network connectivity and edge networking functions with improved security and IP management.

Data Analytics

Use data platform services and manage Big Data workloads.

Security

Manage network security settings, SSH access, and certificates to secure your data center.

Documentation

Redirects you to the IONOS Cloud Documentation portal.

Tutorials

Redirects you to the Tutorials to help you get started with managing your account.

What's New in DCD

Discover the new version of the DCD, new product launches, recent enhancements, and feature updates in the DCD.

About DCD

Displays version details, copyright information, and the company logo.

https://dcd.ionos.com
Log in to the Data Center Designer with your IDP
2-Factor Authentication (2FA)
The top navigation menu
The left navigation menu
The DCD dashboard
IONOS Cloud Support
IONOS Cloud Support
Create a Data Center
Configure a Data Center
Data Center Designer
creating a data center
IONOS DCD log in screen
IONOS DCD log in screen
Authenticate with a Time-based one-time password (TOTP) for enhanced security
The top navigation menu
DCD dashboard

Users & Groups

The Users & Groups feature provides core Identity and Access Management (IAM) capabilities within the IONOS Cloud environment. It is designed to support Role-Based Access control (RBAC) by enabling fine-grained management of user identities, group associations, and resource-level permissions.

This tutorial guides you through creating and managing Users, Groups, and Resources in the Virtual Data Center (VDC) via the User Manager. You can create new users, add them to user groups, and assign privileges to each group. Privileges either limit or increase your access based on the user role. The User Manager lets you control user access to specific areas of your VDC.

A user is an individual who can log in to IONOS Cloud. Each user can have different roles based on the privileges assigned. The assigned privileges determine the tasks the user is allowed to perform. For example, administrators can assign roles, manage access tokens, enforce MFA, and track user activity across services. For more information about creating users, see Create a user.

User access control

A new VDC in the Data Center Designer (DCD) is manageable by contract owners. To assign resource management capabilities to other members in VDC, you can add users and groups and grant them appropriate privileges to work with the data center resources.

Prerequisites: Make sure you have the appropriate privileges. Only contract administrators and owners can manage users within a VDC.

A group is a logical collections of users used to streamline permission assignments. Groups enable scalable access control by allowing roles to be applied collectively rather than individually. This is especially effective in large or dynamic teams.

Benefits of user group assignment

When assigning a user to a group, whether you are a contract owner or an administrator, you can:

  • Create a new user within DCD and assign the user to a group.

  • Assign privileges to the group, so users of the group can access and manage products.

  • Manage the resources that members of the group can access. Example: VDCs, Images, Snapshots, or IP blocks.

Note: Administrators do not need to be managed in groups, as they automatically have access to all resources associated with the contract.

It encompasses all resources accessible to users or groups. Access permissions can be granted or restricted at the group or individual user level. The DCD also facilitates efficient resource management and visibility into the resources accessible to specific users or groups. Users, such as administrators or contract owners, with create permissions can create resources, which become editable or sharable to non-administrator users in a group only when the resource is associated with the group. For more information about resource sharing, see Enable or disable access for a resource.

Together, these components form the foundation for secure multi-user access control, secured access, and operational efficiency in IONOS Cloud.

Create a user

  1. In the DCD, go to Menu > Management > Users & Groups.

  2. Select Create in the Users tab.

  3. Enter the user's First Name, Last Name, Email, and Password.

Note: — The email address of the new user must be unique.

— The password must adhere to the contract's password policy. For more information, see Manage Password Policy.

  1. Select Create to confirm.

Creating a new user in VDC

Result: A user is successfully created and listed in the Users list.

Create a group

The creation of groups is useful when you need to assign specific duties to the members of a group. You can create a group and add members to this group. You can then assign privileges to the entire group.

  1. In the Groups tab, select Create.

  2. Enter a Group Name.

  3. Select Create to confirm.

Result: The group is now created and visible in the Groups list. You can now assign permissions, users, and resources to your group.

User groups can be created directly from the Groups tab in the User Manager

Assign privileges to a group

  1. In the Groups tab, select a group from the Groups list.

  2. In the Privileges tab, select checkboxes next to the privilege name.

Note: You do not need to save your selections. This action automatically grants or removes privileges.

Result: The group has the required privileges now.

Assigning privileges to the group

Note: To remove the privileges for a group, clear the checkbox next to the privilege name.

Add users to a group

Users are added to your new group on an individual basis. Once you have created a new member, you must assign them to the group.

  1. In the Groups tab, select the required group.

  2. In the Members tab, add users from the Add User drop-down list.

Choose a user from the drop-down list and add them to the highlighted group as a member

Result: The users are now assigned to the group. These users have privileges and access rights to the resources corresponding to their group.

Remove a user from the group

Users can be removed from your group on an individual basis.

  1. Select the Members tab.

  2. Click Remove User.

Remove a user from the group

Result: This user is now removed from the group.

Assign resources to a group

  1. In the Groups tab, select the required group.

  2. Select the Resources of Group tab.

  3. Click Grant Access and select the resource to be assigned to the group from the drop-down list.

Select a resource from the Resources of a Group tab to assign to a group of users

Result: The group now has the newly assigned resources. You have enabled read access for the selected resource.

Enable or disable access for a resource

Group resource sharing is crucial for managing access and permissions within IONOS Cloud. The primary purpose of assigning a resource to a group in IONOS Cloud is to manage and restrict actions that users (non-administrators) can perform on those resources. Specifically, the actions controlled by group membership are as follows:

Access

Description

View

Adding the resource to the list enables users in the specific group to see the resources.

Edit

Allows users in the group to manage the resource.

Share

Share the resource between the groups of your contract and only those to which you belong. The users belonging to the group with which you share the resource gain view permissions.

Note:

  • Users created using the IONOS Cloud API /um/users endpoint have limited permissions.

  • Resources created by the contract owner are, by default, not visible to users.

  • Users cannot see or interact with resources created under the contract owner without being part of a shared group.

Administrators or contract owners can enable resource access to users by selecting the appropriate checkboxes:

  • Edit: Select the checkbox to allow users in the respective group to edit or manage the resources.

  • Share: Select the checkbox to share the resource between the groups of your contract, and only those to which you belong. The users of the group gain view permissions.

To restrict access, select the required resource and clear either the Edit or Share checkboxes or directly click Revoke Access to revoke both permissions.

Enable or disable access for the resources of a group

Add group to a resource

  1. In the Resources tab, select a resource from the list.

  2. In the Visible to Groups tab, click Add Group.

  3. Select a group from the drop-down list.

Select the resource you wish to make available to a user group. The group members can now exercise their chosen privileges.

Result: This group can now access the allocated resource.

Models Comparison

This comprehensive comparison table shows all currently active foundation models in the IONOS AI Model Hub, providing essential information about their capabilities, modalities, and features at a glance. Click on each model name to access detailed summaries and specifications.

Features overview

The following table provides a comprehensive comparison of all active foundation models currently available in the AI Model Hub:

Model Name

Type

Input Modality

Output Modality

Streaming

Tool Calling

Model Size

Language Model

Text

Text

✅

✅

Small

Language Model

Text

Text

✅

✅

Small

Language Model

Text

Text

✅

❌

Small

Language Model

Text, Image

Text

✅

✅

Medium

Language Model

Text

Text

✅

✅

Medium

Language Model

Text

Text

✅

❌

Medium

Language Model

Text

Text

✅

✅

Large

Coding Model

Text

Text

✅

❌

Medium

Embedding Model

Text

Vector

❌

❌

-

Embedding Model

Text

Vector

❌

❌

-

Embedding Model

Text

Vector

❌

❌

-

Image Generation

Text

Image

❌

❌

-

Image Generation

Text

Image

❌

❌

-

Understanding Model categories

The IONOS AI Model Hub offers three distinct categories of foundation models, each optimized for specific use cases:

Large Language Models

Small Models (Less than 15 billion parameters)

Small language models are optimized for fast inference and low resource consumption. They are ideal for real-time applications and scenarios where latency and cost are critical.

Medium Models (15 billion to 150 billion parameters)

Medium-sized models provide a strong balance between response quality and inference speed. They are suitable for applications that demand higher accuracy and more nuanced language understanding.

Large Models (More than 150 billion parameters)

Large models are designed for maximum language understanding, deep reasoning, and high-quality responses. They are best suited for advanced applications where accuracy and depth of knowledge are paramount.

Embedding Models

Embedding models convert text into dense vector representations, enabling semantic search, clustering, and similarity comparison. They are essential for building search engines, recommendation systems, and knowledge retrieval applications.

Text-to-Image Models

Text-to-image models generate images from textual descriptions, supporting creative and generative AI use cases such as content creation, design, and prototyping.

Mistral Nemo 12B
Llama 3.1 8B
Teuken 7B
Mistral Small 24B
Llama 3.3 70B
GPT-OSS 120B
Llama 3.1 405B
Code Llama 13B
BGE Large v1.5
BGE m3
Paraphrase Multilingual MPNet v2
FLUX.1-schnell
Stable Diffusion XL

Overview

Explore our guides and reference documents to integrate IONOS Cloud products and services.

Explore our guides and reference documents to integrate IONOS Cloud products and services.

Documentation Spotlight

Set Up IONOS Cloud

Additional data center in Frankfurt: IONOS Cloud's services are now also available from our newly added data center in Frankfurt, Germany, enhancing high availability, redundancy, and operational security. Existing deployments in Frankfurt remain unaffected. You can deploy products in the new data center by selecting Germany / Frankfurt am Main (de/fra/2) from the drop-down list in the DCD, or by using the location code de/fra/2 when deploying through the API. For more information, see Release Notes.

Developer Reference

Product User Guides

AI

Compute Services

Containers

Data Analytics

Databases

Network Services

Observability

Storage & Backup

Security

Security Safeguards

December 2025 Releases

Discover our latest products, features, and enhancements to develop innovative applications.

Most Popular

Navigate directly to the most popular product guides to accelerate solution discovery and boost efficiency.

Get Started

With the Data Center Designer, you can create a fully functioning Virtual Data Center and manage services provided by IONOS Cloud.

Account Management

Manage your IONOS DCD account, payment details, and security functions to access and manage your contract securely.

Management

Manage user access and security policies, review resource usage and cost incurred, set cost alerts.

APIs

Build, deploy, and manage applications on the IONOS infrastructure more efficiently to enable integration, improve scalability, and enhance security.

SDKs

Simplify developing and managing applications deployed on the IONOS infrastructure with IONOS SDKs to build scalable, reliable, and efficient solutions.

Config Management Tools

Manage and control the configurations of software systems and infrastructure components in an automated and systematic manner.

AI Model Hub

A comprehensive platform to access AI foundation models and document collections supporting retrieval augmented generation use cases.

Compute Engine

Scalable instances with a dedicated resource functionality.

Cubes

Scalable instance with an attached NVMe Volume.

Managed Kubernetes

Facilitate a fully automated setup of Kubernetes clusters.

Private Container Registry

Manage docker and OCI compliant registries for use with your managed Kubernetes clusters.

Event Streams for Apache Kafka

A flexible and fully-managed Apache Kafka service for seamless data streaming and real-time analytics in the cloud.

In-Memory DB

An open-source instance that offers scalability, security, backup and recovery, and in-memory database persistence while supporting key-value data formats.

MariaDB

A fully-managed, open-source, MySQL-compatible database cluster offering backup, database patching, enhanced security, and scalability.

MongoDB

An open-source, NoSQL database cluster offering security, backup snapshots, and horizontal scalability with replication and sharding.

PostgreSQL

An open-source SQL database cluster offering security, backup and recovery, and horizontal and vertical scalability with replication.

API Gateway

A robust and flexible platform that allows the creation, management, and security of APIs on the IONOS Cloud infrastructure.

CDN

Available on request

Improve content distribution to websites with edge servers designed to optimize content delivery and secure web applications with WAF and Layer 7 DDoS protection.

Cloud DNS

Simplified ways to manage DNS zones and records and enhanced security with DNSSEC.

Cross Connect

Establish secure network connections between multiple Virtual Data Centers using a single LAN conduit within the IONOS Cloud ecosystem.

DDoS Protect

Increase your online security with DDoS protection and ensure uninterrupted operations from malicious attacks.

Flow Logs

Enhance security and provide detailed visibility into your network traffic.

IPv6 Configuration

Seamlessly allow advanced connectivity for addressing your evolving cloud infrastructure through secure, long-term, sustainable solutions.

Managed Application Load Balancer

Managed optimal load balancing service offered at the application level to improve responsiveness and availability.

Managed NAT Gateway

Boost online access and communication by equipping your networks with a managed NAT gateway, which can effectively translate IP addresses to a single, protected point and provide secure internet connectivity.

Managed Network Load Balancer

Maximize your Cloud's availability with a managed NLB that distributes incoming traffic in a scalable, fault-tolerant manner to ensure a seamless and reliable user experience.

VDC Networking

Core network management including configuring firewalls and reserving IPs to establish isolated virtual networks that interconnect VMs and various resources within the virtual data center.

VM Auto Scaling

Automatic scaling of VM instances according to performance metrics and VM load.

VPN Gateway

Securely establish site-to-site connections between on-premises networks and cloud resources using WireGuard or IPSec protocols.

Logging Service

Manage, monitor, and analyze log data from various sources using a centralized, and scalable platform.

Monitoring Service

Advanced metrics service on host-based, application, network, and system metrics, and is compatible with Prometheus.

Monitoring as a Service (Legacy)

Gather metrics on Dedicated Core Server and Cube resource usage.

Backup Service

Secure data storage backup solution with encryption, rapid disaster recovery, and data restoration for all application scenarios.

Block Storage

Cloud-based storage service offering cost-effective, large-scale storage with HDD storage and high performance and durability with SSD storage.

IONOS Object Storage

An S3-compliant service that stores and manages data as objects in a bucket, offering secure storage using access control and object lock.

Network File Storage

A managed service offering shared file storage for multiple VMs and containerized workloads through a secure NFS protocol.

Certificate Manager

Streamlined methods for provisioning and managing SSL/TLS certificates for web applications.

Network Security Groups

Secure your virtual networks effortlessly with Network Security Groups, your shield against unauthorized access and threats.

SSH Key Manager

Securely generate, store, and manage SSH keys to enable reliable authentication, and authorization to access remote servers and systems.

Security Safeguards

Central information source to securely use IONOS Cloud products and services.