Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
November 3
The Network Interface Cards (NICs) Multi-Queue feature improves the network performance of and by distributing traffic across multiple queues based on core count, thereby enhancing throughput and reducing latency through efficient multi-core packet processing. This feature is currently available only in the Frankfurt, Germany de/fra/2 data center and particularly beneficial for high-bandwidth, low-latency applications such as databases, analytics platforms, and high-performance computing workloads.
November 14
A new tutorial describes how to Bring Your Own IP (BYOIP) address or Bring Your Own Autonomous System Number (BYOASN) to IONOS Cloud. It covers the necessary steps for integrating your own IP address range and ASN into IONOS Cloud.
November 5
A new section is available in the AI Model Hub documentation that includes:
: Guidelines on data management and processing practices.
: IONOS Cloud's compliance approach, including roles as AI "Distributor" and "Provider", and the necessary information to help you meet your own downstream compliance obligations.
AI Model Hub
Learn about AI foundation models and document collections supporting Retrieval-Augmented Generation (RAG) use cases.
Apply Backup Encryption
Learn how to apply client-side AES-256 encryption to the backups.
Private Container Registry DCD How-Tos
Learn how to create and manage Container Registry using the DCD.
Manage Backup Units
Learn how to manage existing backup units using the Backup Service Console.
ionoscloud_networkloadbalancer_forwardingrule
Learn how to create and manage Network Load Balancer Forwarding Rule objects using Terraform.
ionoscloud_firewall
Learn how to create and manage Firewall Rules using Terraform.
Update a MongoDB Cluster
Learn how to update an existing MongoDB cluster using the DCD.
Set Up a vCPU Server
Learn how to create and configure a vCPU Server inside the DCD.
Private Container Registry Overview
Learn about the managed container registry solution, which can be used as part of CI/CD workflows for container workloads.
Set Up a Backup Unit
Learn how to create a backup unit and set up automatic backups.
Welcome to the previous releases section of our documentation portal for IONOS Cloud. This section is dedicated to archiving previous release notes for the year(s), excluding the latest release.
January 27
API Gateway supports a Caching feature that improves API performance and reduces server load. Caching stores the response to an API request and serves it to the client.
January 7
Network File Storage is now in the General Availability (GA) phase. It offers shared file storage for multiple virtual machines and containerized workloads via the Network File System (NFS) protocol, along with seamless integration of Network File Storage in Kubernetes environments. You can now access the product in all data center locations. For more information, see Endpoints.
September 20
IONOS offers the New Object Storage Web Console (Beta), an enhanced version of the existing Object Storage Web Console in the DCD, providing improved user experience and performance, intuitive design, and faster responsiveness while having the same feature set as the existing web console. Currently, the feature is in the Beta phase and is available by default to all new and existing users. You are encouraged to try out the new web console. This new application console does not impact the functionality of the existing web console.
September 4
The Cloud DNS is now in General Availability (GA) phase. You can publish DNS zones of your domains and subdomains on public Name Servers using Cloud DNS. With the Cloud DNS API, you can create DNS zones and DNS records, import and export DNS zones, secure your DNS zones with DNSSEC and create secondary zones. Additionally, you can also set up ExternalDNS for your Managed Kubernetes with Cloud DNS.
December 4
Cross Connect, previously available in the General Availability (GA) in Frankfurt and London, has now been expanded to Berlin de/txl. It remains in the Early Access (EA) in all other regions.
December 1
A dedicated Tutorials portal is now available, delivering step-by-step guides for all essential workflows and product categories. This centralized resource consolidates all learning content, ensuring seamless navigation and faster discovery. To access the new portal, the following changes have been implemented across this Guides portal:
The Tutorials hyperlink in the Table of Contents (TOC) on the left navigation bar now leads directly to the Tutorials Portal.
The Tutorials card is now listed under the Quick Links section on the product pages.
As part of an ongoing effort to improve clarity and organization, the Tutorials section within the AI Model Hub documentation has been renamed to . The content provides the same concise, step-by-step guides on tasks and usage patterns for interacting with the AI Model Hub.
Changes are visible in the following product sections:
December 1
You can now share more detailed feedback on our documentation using the new Send Feedback option, in addition to the existing emoji-based reactions. It helps us to understand your needs better and continuously refine our documentation.
You can find this option on the top right corner of the , next to the Sign up. Upon selecting, you are directed to the .
Using the feedback form, you can report documentation issues, suggest improvements, and highlight documentation you found relevant (positive)—all in a structured way. The feedback is available in both English (EN) and German (DE).
We encourage you to use this form and play an active role in helping us continuously enhance the quality, accuracy, and usability of our documentation.
February 28
A step ahead in the AI Model Hub: With , you can now use AI Model Hub via the to test the most critical endpoints. Additionally, we will extend the free service for another three months. We offer a set of applications and code projects you can use to get your AI journey started.
February 26
A new tutorial on using acme.sh with IONOS Cloud DNS to manage SSL/TLS certificates is now available. This tutorial covers the installation, configuration, and automation of certificate renewal.
February 24
DBaaS now supports MongoDB 7.0. The creation of MongoDB 5.0 clusters is discontinued. Existing clusters are not affected; they can be to a higher major version.
February 13
IONOS now supports Windows Server 2025 images, both and , via the DCD and the API in all server locations.
February 3
AI Model Hub supports the models Llama 3.3 (70B) and Teuken (7B). Document collections can now use all supported embedding models, allow for chunking, and support PostgreSQL as an alternative backend.
February 28
We have introduced a Tutorials section in the documentation to enhance the user experience and simplify setup processes. This section provides step-by-step instructions and best practices for configuring and managing VPN Gateways. The guides you through creating an IPSec tunnel between a Virtual Data Center (VDC) and an on-premises gateway, offering clear guidance for a smooth setup.
June 28
for DNS zones and records management is now also available via the Data Center Designer (DCD) graphical user interface. Leverage the capabilities of either the DCD or the based on your specific needs and use case for DNS management.
June 10
The self-restoration of MariaDB clusters from a backup via the has been made possible by enhanced IONOS DBaaS for MariaDB, which minimizes downtime and data loss in unanticipated scenarios. For more information about its use cases, see .
October 26
The documentation portal now contains information about the new security advisories that Acronis reported. You can find more details about the reported vulnerabilities on the following pages:
October 25
VM Auto Scaling is now available as an Early Access (EA) feature. It is a cloud computing feature that dynamically scales in or scales out the number of virtual machine instances (horizontal scaling) based on customizable monitoring events. The metric-based policy, defined during its configuration, constantly monitors the load and regularly scales the number of VM instances based on the policy threshold. The functionality ensures that the number of replicas in the group remains within the defined constraints.
October 18
The documentation for Backup Service has been updated to include a new section called Install the Acronis Backup Agent on Linux. This section provides prerequisites, step-by-step instructions, and configuration options to ensure a seamless installation experience.
January 10
Logging Service now allows the primary account owner to create sub-users and delegate pipeline management responsibilities. Sub-users can only view and manage the pipelines assigned to them by the primary account owner and are not authorized to access pipelines created by other sub-users or the primary account owner. Hence, your credentials and data are secure and not shared with other sub-users. For more information, see .
To set user privileges using the Cloud API to manage IAM resources, follow these steps:
1. Authenticate to the Cloud API using your API credentials.
2. using the POST /cloudapi/v6/um/users endpoint.
Enter the following required parameters for the user:firstname, lastname, email, and password.
3. using the POST /cloudapi/v6/um/groups endpoint.
Enter the required group name parameter for the group.
Set the accessAndManageIamResources privilege to true.
4. that is created using the POST /cloudapi/v6/um/groups/{groupId}/users endpoint and provide the user ID in the header.
Enter the required id parameter to identify the user uniquely.
Result: The accessAndManageIamResources privilege is granted to the user.
Learn how to use the DCD to create and view Cloud Savings Plans associated with your contract.
Only a contract owner can modify the name of Savings Plans.
Follow these steps to modify the name of Savings Plans:
2. Select a specific Savings Plan by clicking its NAME, displayed as a hyperlink.
3. Enter the new Plan name.
4. Select Update name to confirm the renaming.
Result: The selected Savings Plan's name is modified and and it is listed in the Cloud Savings Plans overview.
Active Savings Plans cannot be edited or deleted.
Savings Plans apply automatically, starting with the oldest in the contract and progressing to the newest. You cannot manually select which VMs get applied the pricing of the Savings Plans.
You are always billed for the quantity of resources configured in your Savings Plans, regardless of whether they are deployed and in use.
AMD Opteron-based instances are not covered by Savings Plans.
Startup contracts do not qualify for the Savings Plans.
Savings Plans can be created at the subcontract level, but cannot be transferred between them.
Currently, only the reseller contract owner is authorized to create Savings Plans for its subcontracts.
October 23
The AI Model Studio, a PaaS solution capable of fine-tuning pre-trained AI models, is now available on the German market as a collaboration with our partner from manufactAI and will be free to test till the end of the year.
October 20
The documentation portal now has information on medium-severity vulnerabilities reported by ETH Zurich university researchers. This vulnerability may allow malicious KVM guest to leak sensitive information.
October 14
The Cloud Savings Plans, a new pricing model, offer optimized rates on a specific quantity of resources for selected products over a period of one or three years, compared to standard Pay-As-You-Go (PAYG) pricing. It is ideal for consistent and predictable workloads, providing significant cost reductions. For more information, see the FAQ.
October 23
A new tutorial is now available in the documentation portal demonstrating how to view and monitor metrics for MongoDB Enterprise clusters using Grafana. The tutorial guides users through setting up the logging pipeline and configuring Grafana data sources to visualize key performance metrics. These insights help users proactively identify cluster health or performance issues and plan capacity upgrades effectively.
October 8
You can now subscribe to release notes through Really Simple Syndication (RSS) feed to receive notifications about the latest updates automatically. The RSS feed provides a machine-readable summary of all new and updated release notes, helping you stay informed through your preferred RSS reader or integration tool. You can subscribe to the feed by using the Subscribe via RSS feed option on the latest release notes page.
September 26
The SUSE Linux Enterprise Server (SLES) public image support is available on any Block Storage type to leverage benefits like cloud-init, Secure Shell (SSH) key, and password injection. The SLES image is available through the DCD and API for data centers in Germany: Berlin de/txl and Frankfurt de/fra and de/fra2 regions. It operates on the Bring Your Own Subscription (BYOS) model. In this version, you can install the Acronis Backup Agent manually after provisioning, providing full flexibility even though automatic installation is unavailable.
September 24
IONOS Cloud is now officially validated to run Red Hat OpenShift workloads, allowing Red Hat-certified partners to deploy their OpenShift infrastructure on the IONOS Public Cloud. This validation ensures that IONOS Cloud meets Red Hat’s technical standards and operational best practices, providing a reliable and consistent platform for certified deployments. Partners can leverage the scalability and performance of IONOS Cloud to run enterprise-grade, containerized applications by enabling secure, certified OpenShift operations exclusively through approved partner environments.
September 1
Bulk data export is now available for specific products on request. To export bulk data from your account, contact the IONOS Cloud Support. If you want to manually export data by yourself, see Self Data Export.
July 23
IONOS Object Storage is expanding support of Contract-owned Buckets to the metro region of Frankfurt, Germany de. It is available for use at the eu-central-4 endpoint. For more information, see Endpoints.
July 21
Identity and Access Management (IAM) Federation now supports organizations in onboarding their Identity Provider (IDP) and allowing their users to link their account with IONOS Cloud. With this feature, the user can Log in to the Data Center Designer using IDP, which also facilitates Single Sign-On (SSO).
July 16
We are pleased to announce the release of the new IONOS Cloud provider for Pulumi. With this release, developers and DevOps teams can now use Pulumi’s powerful Infrastructure as Code (IaC) framework to define, deploy, and manage resources on IONOS Cloud more efficiently and flexibly. For more information, see IONOS Cloud provider for Pulumi.
November 28
Application Load Balancers (ALB) and Network Load Balancers (NLB) now support Proxy Protocol versions to send additional connection information, such as the source and destination. The Targets associated with your ALB and NLB can now be configured to accept incoming traffic using the Proxy Protocol.
November 23
Information on security advisory for CVE-2023-23583, also known as Escalation of privilege for some Intel processors vulnerability, is available on the documentation portal. This vulnerability is based on an unexpected behavior for some Intel(R) processors that may allow an authenticated user to potentially enable escalation of privilege and information disclosure or denial of service via local access.
November 15
Logging Service is now in the General Availability (GA) phase. You can create logging pipeline instances on the available locations to gather logs from multiple sources. You may also programmatically manage your logging pipelines via the API. To learn more about what changed during the transition from the Early Access (EA) phase to the GA phase, see FAQ.
November 13
Cross Connect is now available as an Early Access (EA) feature on a restricted early access basis. To access this feature, please contact your sales representative or customer support. With the enhanced feature, you can connect multiple Virtual Data Centers (VDCs) seamlessly in the same region and under the same contract. Connections can be established via a private LAN only, thus enabling consistent and reliable data transfer and ensuring seamless connections, reduced latency, and minimized addressing discrepancies. Cross Connects are flexible, meaning you can easily modify the existing setup by effortlessly adding or deleting existing data centers or modifying the associated data centers.
November 1
Information on security advisory for CVE-2023-20569, also known as Return Form Procedure (RET) Speculation or Inception is available on the documentation portal. This vulnerability is reported by AMD as a sensitive information disclosure due to speculative side-channel attacks.
July 7
The documentation for Managed Kubernetes has been updated to include information about the maintenance window as well as the cluster and node pool maintenance processes.
July 7
The documentation for Managed Kubernetes has been updated to include information about Kubernetes versions and their availability.
July 5
The Vulnerability Register serves as a comprehensive record detailing security vulnerabilities that impact IONOS Cloud products and services. This report has been developed as an integral component of our continuous commitment to assist you in effectively mitigating security risks and safeguarding the integrity of your systems.
July 3
Application Load Balancer is now in the General Availability (GA) phase. With the Application Load Balancer (ALB), incoming application layer traffic can be routed to targets based on user-defined rules.
July 3
Network Load Balancer is now in the General Availability (GA) phase. With the Network Load Balancer (NLB), you can automatically distribute workloads over several servers, which minimizes disruptions during scaling.
July 3
NAT Gateway is now in the General Availability (GA) phase. With the NAT Gateway, you can enable internet access to virtual machines without exposing them to the internet by a public interface. It acts as an intermediary device that translates IP addresses between the private network and the public internet.
March 28
IONOS DBaaS provides support for MariaDB clusters to suit your needs. It offers resources such as CPU cores, RAM size (GB), and storage types to create database clusters. Additionally, the database clusters facilitate point-in-time recovery and backup features, making them highly reliable. It also facilitates cloud-based database patching and scalability. The migration process is straightforward due to its compatibility with MySQL.
March 20
Starting today, the Backup Service management servers will switch to the new IP addresses. We recommend you update the configured firewall rules so that the firewall does not restrict backup agent access and allows the backup agents to communicate effectively. For more information, see FAQ.
March 13
Logging Service is enhanced to allow sub-users within your contract number to use their IONOS credentials and access Grafana upon meeting the pre-conditions. This enhancement improves accessibility and provides a seamless experience for all users within the Grafana environment.
The following are a few FAQ that provide insight into the IAM Federation.
Identity and Access Management (IAM) Federation enables users from an external Identity Provider (IDP) to access cloud resources, including the Data Center Designer (DCD), after successful authentication and establishment of a link between their organization account and the IDP.
Only Federated IDPs, such as SAML 2.0 or OpenID Connect (OIDC), are supported to establish a trust authentication connection with the IAM Federation.
Once users link their organization user account with IONOS Cloud IAM Federation, they can sign in with their organization credentials to access IONOS Cloud resources, including the DCD. Additionally, users can experience seamless sign-in to the DCD with SSO. For more information, see Benefits.
No, only users with an existing account in IONOS Cloud can link their organization accounts with IAM Federation. New users without an IONOS Cloud account cannot establish an IAM Federation account linking. For more information, see Manage User Account in IAM Federation.
IONOS Cloud offers APIs that organizations can use to request domain ownership and onboard their IDP to establish a connection with the IAM Federation. For step-by-step instructions, see Configure IAM Federation.
The organization must create a TXT Domain Record. Only upon successful creation of the TXT record can IONOS Cloud verify domain ownership. For more information, see Create a TXT Domain Record.
Once the user have linked their organization account with IAM Federation, they can log in to the DCD using their organization credentials. For more information, see Log in to the Data Center Designer using IDP.
Yes, users can Unlink the user account from IAM Federation using the Manage Linked Accounts section in the DCD.
February 27
You can now interact with the IONOS Telemetry API via the managed Grafana provided by the Logging Service. It is also compatible with Prometheus specifications. The Telemetry API uses the same authentication as the IONOS Cloud API; hence, you can use the same API token to authenticate with the Telemetry API.
February 22
Upbound Crossplane Marketplace now lists IONOS Cloud as the Crossplane Provider. With Crossplane, you can convert a Kubernetes cluster into a universal control plane.
February 5
Information on security advisory for CVE-2024-21626 is available on the documentation portal. The vulnerability enables containerized escape for attackers using a malicious image, a malicious Dockerfile, or an upstream image.
February 1
The following significant changes are being made to IONOS APIs, SDKs authentication methods, and token management to enhance user security.
A new way to manage authentication tokens from the Data Center Designer (DCD) is introduced.
Effective March 15, 2024, the Basic Authentication across IONOS’ APIs and SDKs is completely deprecated for user accounts with 2-Factor Authentication (2FA) enabled or 2FA forced. Impacted users can only generate tokens from the API/SDK Authentication Token Manager.
Single Sign-On (SSO): Users can access IONOS services with their Identity Provider credentials, removing the need for multiple logins. After signing in to an IONOS Cloud account, they can seamlessly use SSO to access other IONOS Cloud services like the Reseller Portal, Control Panel, and so on.
Cross-Domain Collaboration: IAM Federation, along with SSO, adds cross-domain authentication, allowing users across organizations to authenticate using IDP and access various applications across other organizations without creating new credentials.
Standardized Protocols: IAM Federation supports industry-standard authentication and authorization protocols, such as Security Assertion Markup Language (SAML) and OpenID Connect, ensuring interoperability between different systems and organizations.
Cross Domain Collaboration: IAM Federation, along with SSO, adds cross-domain authentication, allowing users across organizations to authenticate using IDP and access various applications across other organizations without creating new credentials.
Security: IAM Federation provides a secure way to share identities with domain ownership and authenticate users with IDP, reducing the risk of unauthorized access to resources and services.
Improved Security: Identity Provider authentication provides stronger authentication and authorization mechanisms. It also reduces the risk of phishing and password-related attacks.
Simplified User Management: The IONOS IAM Federation system streamlines user management, allowing contract owners to manage user access to IONOS services using their existing IDP infrastructure.
Enhanced User Experience: Users can seamlessly access resources without multiple logins.
Reduced Administration: Organizations can reduce the administrative management associated with managing multiple identities and access credentials of users.



Identity and Access Management (IAM) Federation is a system that offers users a seamless authentication experience when logging in to the Data Center Designer (DCD). Using an Identity Provider (IDP) to authenticate the users allows them to share their identity information and proceed with linking the user account with DCD. It also enables Single Sign-On (SSO) when users wants to log in to the DCD using IDP.
When users log in to the DCD with their organization credentials, all services and resources accessed within the DCD remain the same as when they log in using their IONOS Cloud account.
The IAM Federation works as follows:
1. Identity Provider (IDP): The organization sets up an IDP responsible for authenticating users and providing their identity information to other entities.
2. Service Provider (SP): IONOS Cloud, which wants to allow users to access its resources, such as DCD. For more information, see Configure IAM Federation.
3. Federation Protocol: The IDP and SP agree on a federation protocol, such as SAML (Security Assertion Markup Language), OpenID Connect, or OAuth, to facilitate the exchange of identity information.
4. User Authentication: When users try to access a resource from IONOS, they are redirected to the IDP for authentication.
5. Authentication and Authorization: The IDP authenticates the user and provides an authentication response to IONOS, which includes the user's identity information and authorization attributes.
6. Access to Resources: IONOS Cloud then uses the authentication response to grant access to the requested resources, eliminating the need for the user to log in again to the DCD.
Manage user access and security policies with features in Identity and Access Management.
Usage provides insights into resource usage, cost incurred, and cost alerts for your account.
Users & Groups: Facilitates adding new users, assigning roles, and managing access permissions.
Password Policy: Enforces rules for password strength, expiration, and complexity to ensure secure authentication.
Token Manager: Manages authentication tokens, ensuring secure access control across systems.
IAM Federation: Enables users to use their orgnization credentials to log in to the DCD and access resources without the need for additonal authentication and authorization.
Cost & Usage: Monitors and reports on resource consumption.
Cloud Savings Plans: A pricing model offering lower hourly resource rates compared to the Pay-As-You-Go (PAYG) rates.
Cost Alert: Sends notifications when usage exceeds predefined cost thresholds.
Resource Overview: Provides a comprehensive view of all resources and their limits.
You must add the token value provided in the Request Domain Ownership API response to the TXT Domain Record.
You can create a record of type TXT by following these steps:
Name: Leave the name value empty for your DNS record. It helps to identify the domain associated with the token by the domain name.
TTL: Enter an appropriate Time-To-Live (TTL) setting for your DNS record in seconds. The default value is 3600 seconds.
Type: Select the record type as TXT.
Content: Enter the token value provided in the API response as the content value. Example: 9019680770992564882066368772815872312262977566198195.
Preview: Ensure that the details of the record to be created are accurate.
6. Click Save to create the DNS record.
Result: Your DNS record of type TXT is successfully created.
After creating the TXT Domain Record, you must manually trigger the domain ownership verification using the Verify Domain Ownership API. This endpoint will only change the domain status to Approved when the TXT Record contains the provided token. The duration of this process ranges from a few seconds to up to a week, depending on your domain provider.
You can verify the domain ownership status by using the Retrieve Domain API.
Users need appropriate privileges to access and manage Identity and Access Management (IAM) resources. IAM has a group privilege called Access and manage Identity and Access Management resources, which must be enabled for a group so that the members of this group inherit it through group privilege settings and can access and manage the IAM resources.
4. In the Privileges tab, select Access and manage Identity and Access Management resources.
Result: The privilege to manage IAM resources is granted to all the members in the selected group.
Identity and Access Management (IAM) Federation is a mechanism that lets users from an external Identity Provider (IDP) access IONOS Cloud resources, such as the Data Center Designer, upon successful authentication and establishing the organization account link with the IDP. Federated IDPs such as Security Assertion Markup Language (SAML) 2.0 or OpenID Connect (OIDC) are supported to establish a trust authentication connection. With IAM Federation, users also get to Single Sign-On (SSO) across multiple systems without logging in whenever accessing these resources.
You can set the default values for your Virtual Data Centers (VDCs). Each time you open a new VDC, DCD will place your resources in the preset location, assigning them the same number of cores, memory size, storage capacity, and reserved IP addresses. For example, you can specify that all new VDCs must be located in Berlin or that all processors will use the Intel architecture.
To edit the default settings, follow these steps:
In the DCD, go to Menu > My Profile > DCD Default Settings.
A My settings window will open up. Set the default values for Session settings, Data Center settings, Server settings, Storage settings, and IP settings from the respective drop-down lists.
Result: Your new settings will be updated immediately. You can undo your changes either by selecting Reset or Reset All.
You can track the global usage of resources available in your account along with the overview of usage limits per instance.
To view the resource overview, follow these steps:
In the DCD, go to Menu > Management > Resource Overview.
A Resource Overview window will open up with a summary of all resources.
You must be a contract owner to view Savings Plans. Your contract lists all plans that you created, including those that have expired.
Follow these steps to view plans:
2. The Cloud Savings Plans window displays the following details:
NAME: Select the name to view the plan's details. To edit the name, see Modify the Cloud Savings Plan Name.
QUANTITY: Displays the number of resources associated with the plan.
STATUS: Indicates if the plan is Starting soon, Active, Expiring soon, or Expired.
START DATE: Displays the date the plan started and billing commenced.
END DATE: Displays the date the plan expires and billing concludes.
Toggle the Show expired button to list plans that have already expired. You can also select Create Cloud Savings Plans to create new plans.
June 20
HDD and ISO images are now accessible through the Data Center Designer (DCD) and the . These latest Debian images are compatible with all IONOS Compute Engine instances, including and .
June 1
Internet Protocol version 6 (IPv6) is now a General Availability (GA) feature for all IONOS Compute Engine instances of type and . Applications can now be hosted in the dual stack with connectivity over both IPv6 and IPv4 within virtual data centers and to and from the internet.
June 1
Firewall rules configuration for a Network Interface Card (NIC) is now extended to support IPv6. With this enhancement, Firewall rules support ICMPv6 as a protocol, IPv6 addresses as source or destination IPs, and lets you specify the IP version for which a given rule is applicable.
June 1
With IONOS extending IPv6 support to Compute Engine instances, you can now use the Flow Logs to capture data related to IPv6 network traffic flows in addition to IPv4.
Result: The user is succesfully logged in to the DCD using their credentials linked with the organization IDP.
You can view and update your account's billing and payment details.
To edit the payment details, follow these steps:
In the DCD, go to Menu > Your Profile > Payment details.
The Payment Details window will open up. You can set up the payment method by selecting Set up payment method. A Change payment method window will open up.
Select the payment methods in Available payment methods to choose from how you would like to pay. The Credit card option is selected by default.
Select this option to enter your Credit card information. Each transaction is encrypted using Secure Socket Layer (SSL), and the information is secure. You need to provide the following information:
Card number: Enter the valid card number for payment processing.
Expires (month): Select the expiration month of your credit card from the drop-down list.
Expires (year): Select the expiration year of your credit card from the drop-down list.
Card verification code: Enter the security code on your credit card to verify the legitimacy during online transactions.
Credit card holder's address: You can provide the billing address associated with the credit card for verification purposes. Select either of the following options:
Same address as customer data: Select this option if you want to input the same address as you used in customer data.
Different address: Select this option to input a different address and provide the name of the Cardholder, Street and number, City, ZIP code, and Country.
Once done, select Until further notice, I agree that IONOS will collect all amounts due from the above credit card.
Select this option to enter the SEPA Direct Debit information. The SEPA Direct Debit processing can take up to 24 hours. You need to provide the following information for Authorisation for SEPA Direct Debit.
Customer Name/Account Holder: Enter the name of the account holder associated with the bank account.
IBAN: Enter the complete International Bank Account Number (IBAN).
(Optional) Once done, select Third-Party Direct Debit Details to authorize a third party, such as a company or service provider, to give your consent to access your bank account.
Select I agree that the amounts due may be debited from the specified account until cancelled.
Select Save to make changes.
Result: Your Payment details will be saved.
May 26
The documentation portal now has information on medium-severity vulnerabilities reported by Intel. These vulnerabilities may allow local and authenticated attackers to access sensitive information.
May 15 We are excited to offer the Intel Sierra Forest Xeon Gen 6 processor as a new option for our Dedicated Core Server in our Compute Engine. This high-performance CPU delivers reliable and consistent computing power for even the most demanding applications. Its advanced architecture and 2.4 GHz clock speed ensure seamless execution of complex workloads, providing maximum efficiency and scalability. Sierra Forest will initially be available in the Berlin data center and gradually rolled out to other locations.
May 15 All Virtual Machines (VMs) running on Sierra Forest will require a Unified Extensible Firmware Interface (UEFI) for booting, marking a significant shift as UEFI becomes the mandatory firmware for all Sierra Forest-based VMs. This change ensures a secure and efficient boot process, providing a modern, feature-rich environment compared to the legacy BIOS. For more information about the transition process, see .
May 13 IONOS introduces a dedicated Security product grouping with the . This category combines products with related functions, such as , , and , into a single, organized section. With this update, the navigation path within the DCD is revised to reflect the new structure, making it easier for users to locate and access these security functions. The core functionality remains the same, and the updated navigation information can be found in each product's documentation.
May 2 Managed Kubernetes is releasing Kubernetes version 1.32. For more information about the schedule timeline, see . The updated schedule now also mentions the end-of-life dates for version 1.29.
May 13 The category Security has been renamed to Security Safeguards in the documentation portal to better align with its operation and function. The documentation related to IONOS Cloud security best practice guidelines, reporting of security events, and vulnerability register has been moved to this section.
To view or update your data, such as the organization's name and address or contact details, follow these steps:
In the DCD, go to Your Profile > My Customer Data.
A My customer data window will open up. You can view the Email Address, a Contract Number, Company name, First name, and Last name.
Select Edit to update the Street address, ZIP, and City in the Address section. Select Save to make changes.
Select Edit to update the primary Contact email address, Billing email address and Phone number associated with your account in the Contact section. You can also add other billing addresses by selecting Add another billing email address. Select Save to make changes.
Result: Your Customer Data will be saved.
A step-by-step guide on configuring and managing IAM Federation for a user account.
To delete a domain, perform a DELETE request with the domainId of the domain.
Use the following endpoint to delete a domain: https://iam.ionos.com/federation/domains/{domainId}.
Below is the list of mandatory path parameter:
To make authenticated requests to the API, the following fields are mandatory in the request header:
202 Successful operation
Multiple Savings Plans: Create and manage multiple Savings Plans according to your needs and growing demands.
charges for uncovered resources: Any usage outside the scope of active Savings Plans is automatically billed at the PAYG rate.
Price protection during plan term: Once a Savings Plan is active, its pricing remains fixed for the entire duration, regardless of any changes to the pricing of the Savings Plans.
Flexible start date selection: The plans either start at 00:00 UTC on the day after the purchase is made or on another chosen day up to 30 days in advance.
Locked in plan rates: By selecting a one or three-year term, you significantly reduce the rate for resource usage. It helps you cut the costs of essential, always-on workloads and extract maximum value from your cloud infrastructure.
Flexibility across workloads: You configure an overall amount of resources based on total usage, not specific machines or zones, so your savings move with your workloads. Defined rates automatically apply across all eligible resources. It allows you to adapt your environment as your needs change.
Effortless plan management: View and track all active Savings Plans through the , and create additional Savings Plans as your resource needs grow.
Users need appropriate privileges to create and manage data center. The group privilege called Create Data Center must be enabled for a group so that the members of this group inherit it through group privilege settings and can create and manage Virtual Data Center (VDCs).
To set user privileges to create and manage VDCs, follow these steps:
In the DCD, go to Menu > Management > Users & Groups.
Select the Groups tab in the User Manager window.
Select the appropriate group to assign relevant privileges.
In the Privileges tab, select Create Data Center.
Result: The privilege to create and manage VDCs is granted to all the members in the selected group.
You can revoke a user's Create Data Center privilege by removing the user from all the groups with this privilege enabled.
Warning: You can revoke a user from this privilege by disabling Create Data Center for every group the user belongs to. In this case, all the members in the respective groups would also be revoked from this privilege.
To revoke this privilege from a contract administrator, disable the administrator option on the user account. After performing this action, the contract administrator will become a contract user, and the privileges that were set up for the user before becoming an administrator will then be in effect.
To retrieve all links of the accounts associated with the IAM Federation in the form of an ID, perform a GET request.
Use the following endpoint to retrieve all links: https://iam.ionos.com/federation/links.
To make authenticated requests to the API, the following fields are mandatory in the request header:
200 Successful operation
You can create multiple Savings Plans under your contract. Ensure you meet all the before getting started.
Follow these steps to create a plan:
2. Select Create savings plan and enter the following details:
Plan name: Enter a name for your Savings Plan.
Start date: (optional) You can choose a start date:
If you select a date, the Savings Plans will begin at 00:00 UTC on that day.
If you do not select a date, the Savings Plans begin at 00:00 UTC on the following day.
Product selection: You can apply your customised Savings Plans to any of the listed products:
Compute Engine - Dedicated Core Servers
Managed Kubernetes - Dedicated Core Node Pools
Resources: To create your plans, select the checkbox for each resource you want to cover: Cores and/or RAM. For each selection, define the amount the plan will cover. A separate plan will be created for each resource. Upon selecting the checkboxes, you can modify the number of resources using either the slider or the up-and-down arrow controls in the text box next to the slider.
Plan term: Select either a one-year or three-year term for your Savings Plans based on your need.
Price per unit: The optimized rate applied to each resource unit under the Savings Plans is displayed.
Payment option: Usage under the Savings Plans is billed monthly.
Click Cloud Savings Plan purchase conditions to read the terms and conditions.
Select the I confirm I've read and agree to checkbox when you agree with the terms and conditions.
3. Select Create to create your customized Savings Plans.
Result: Your plan is created and listed in the Cloud Savings Plans overview with the STATUS set to Starting soon. You will also receive a confirmation email to your registered email address. The two confirmation boxes indicate that two separate plans are being created: one for RAM and other one for the number of CPU cores.
After creating the Savings Plans, you can and associated with your contract, but you cannot delete an existing plan.
With IAM Federation APIs, learn how to set user privileges, create and manage Identity Providers (IDPs), request and manage domain ownership, and user account linking with IAM Federation.
The Cloud Savings Plans offer optimized rates on resources for a specific usage amount over one or three years. This pricing model delivers significant cost reductions compared to the standard pricing. It provides guaranteed optimized prices for a set usage and term, making them ideal for predictable and steady workloads.
The guides you through the complete end-to-end workflow, from creation and validation to renewal. Specific explain how the plans apply to your consumption, and the provides information about transparent billing based on resource consumption.
The following small language models (less than 15 billion parameters) are optimized for fast inference and low resource consumption. They are ideal for real-time applications and scenarios where latency and cost are critical. While their compact size means they may have less "world knowledge" and slightly lower response quality than larger models, they excel at conversational tasks, virtual assistance, and domain adaptation.
: A French model from Mistral, tailored for conversational agents and virtual assistants. Its small size ensures efficient inference, and it is particularly effective in scenarios where rapid, context-aware dialogue is essential.
: A US-developed model by Meta, designed for conversational agents and virtual assistants. It balances speed and language understanding well, making it suitable for interactive applications that require reliable, fast responses.
: A highly adaptable and lightweight model well-suited for conversational agents and virtual assistants across diverse domains. Its efficient architecture enables quick responses and easy customization, making it a strong choice for research and production environments where flexibility is key.
Medium-sized models provide a strong balance between response quality and inference speed. They are suitable for applications that demand higher accuracy, broader knowledge, and more nuanced language understanding while maintaining reasonable performance and cost.
: A French multilingual and multimodal model from Mistral, designed for conversational agents and virtual assistants. It supports both text and image input, offering enhanced performance for applications requiring fast and reliable chat completions across various European languages.
: A US model by Meta, offering enhanced response quality for conversational agents and virtual assistants. Its larger parameter count enables more sophisticated reasoning and richer language capabilities, making it ideal for demanding dialogue systems.
: A large open-source language model by OpenAI, delivering exceptional response quality and comprehensive knowledge coverage. It excels in complex reasoning, content generation, and conversational tasks, offering a strong balance between performance and inference speed for demanding applications.
Large models are designed for maximum language understanding, deep reasoning, and high-quality responses. They are best suited for advanced applications where accuracy and depth of knowledge are paramount, though they require more computational resources and have slower inference speeds.
: Meta's flagship large language model, delivering exceptional response quality and comprehensive knowledge coverage. It is ideal for research, content generation, and complex conversational tasks where the highest level of language proficiency is required, albeit with slower response times.
Identity & Access Management
Manage password policies, users, groups, and token management for secure access control.
Usage
Track cost alerts, usage data, and resource overview for efficient cost management.
IAM Federation
Learn about IAM Federation, its features and benefits, and how to configure it.
How-Tos
Learn how to set user privileges, configure IAM Federation, manage account linking, and log in to the DCD using IDP.
API How-Tos
Learn how to use the API to create and manage IDPs and domains and to retrieve account links associated with IAM Federation.
Cloud API
Access the REST API documentation for IAM Federation.
FAQ
Get answers to the most commonly encountered questions about IAM Federation.
curl --location \
--request DELETE 'https://iam.ionos.com/federation/domains/f181c212-34f1-5843-9bbb-fc2531c7d928' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'Body Parameters
Type
Description
Example
domainId
string
The ID (UUID) of the domain.
f181c212-34f1-5843-9bbb-fc2531c7d928
Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.
Content-Type
yes
string
Set this to application/json.
curl --location \
--request GET 'https://iam.ionos.com/federation/links' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.
Content-Type
yes
string
Set this to application/json.
{
"id": "c003494a-e8a1-5a00-bf65-d94f98f69027",
"type": "collection",
"href": "/links",
"items": [
{
"id": "5eb3d304-dc75-56cb-9b94-152533912d33",
"type": "link",
"href": "/links/5eb3d304-dc75-56cb-9b94-152533912d33",
"metadata": {
"createdDate": "2020-12-10T13:37:50+01:00",
"createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate": "2020-12-11T13:37:50+01:00",
"lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
},
"properties": {
"id": "ac6f04c2-68e1-5e61-97c8-ef0216f1c08e",
"providerAlias": "oidc",
"displayName": "IdentityProvider ABC",
"linkedUsername": "linkedUsername ABC",
"linked": true
}
}
]
}curl --location \
--request GET 'https://iam.ionos.com/federation/domains' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.
Content-Type
yes
string
Set this to application/json.
{
"id": "7d4a3d9d-033d-5794-99e6-d5cfa9516fc4",
"type": "collection",
"href": "/domains",
"items":[
{
"id": "f181c212-34f1-5843-9bbb-fc2531c7d928",
"type": "domain",
"href": "/domains/f181c212-34f1-5843-9bbb-fc2531c7d928",
"metadata": {
"createdDate": "2020-12-10T13:37:50+01:00",
"createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate": "2020-12-11T13:37:50+01:00",
"lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>",
"account": 123456
},
"properties": {
"domain": "yourcompany.com",
"status": "REQUESTED",
"message": "The token provided should be added to the TXT Domain Record, then request to verify the ownership. Important: This is the only time the token will be visible to you, so please take note of it now."
}
}
]
}








Menu item
Contract Owner
Administrator
User
+
+
+
+
+
+
+



December 20
IONOS now supports RHEL 8 images as part of our ongoing commitment to offering RHEL support to our users. As a result, RHEL 8 images are now compatible with the IONOS public cloud architecture.
December 18
IONOS is a certified partner of Red Hat and is authorized to provide and run Red Hat Enterprise Linux inside the IONOS public cloud infrastructure. This applies to public RHEL 9 images supplied by IONOS.
December 15
Managed Kubernetes now supports Private Node Pools, providing enhanced security, isolation, and flexibility to manage your Kubernetes workloads. You can create Private Node Pools within your Managed Kubernetes clusters to ensure your critical workloads remain secure and protected.
December 15
Now you can enable advanced features to boost the protection of your workloads:
Advanced Backup ensures continuous protection of your data, capturing even the most recent updates to prevent loss.
Advanced Security offers comprehensive, continuous malware threat mitigation for your data environments.
Advanced Management facilitates the patching of vulnerabilities within your protected data scope.
December 15
IONOS has renamed Managed Backup to Backup Service to standardize the product terminology. Earlier, Managed Backup was also referred to as Backup as a Service or Backup by Acronis across different platforms. The new unified name ensures consistency in our communications and branding. This change does not impact the product's functionality, and the service remains unchanged. The documentation portal now reflects the product name changes. For more information, see FAQ.
December 14
IONOS offers a revamped DCD interface for IONOS Object Storage in the General Availability (GA) phase. It is an enhanced version of the old DCD interface, providing improved user experience and performance, intuitive design, contextual help, and faster responsiveness. The user interface navigation label is renamed to IONOS Object Storage in the DCD.
December 14
IONOS Object Storage offers the Bucket Policy, view object versions and metadata, and Object Lock features in the General Availability (GA) phase. Using Bucket Policy, overarching access policies for a bucket can be set to control data access and usage. With Object Lock, data can be secured by implementing retention policies or legal holds; and with object versions and metadata, object retrieval is easier for large volumes of unstructured data. These new features overall improve the access and data management in the Object Storage.
December 13
IONOS offers the new Container Registry Vulnerability Scanning feature in General Availability (GA) phase. Software development is constantly evolving, and security is our top priority. The Container Registry Vulnerability Scanning feature is specifically designed to enhance the security of your containerized applications by proactively identifying potential vulnerabilities present in your artifacts. Scans occur each time an artifact is pushed to the registry and when new vulnerability definitions are published. It quickly detects any security weaknesses in container dependencies and libraries, allowing you to react immediately to prevent exploitation. For more information about reviewing the vulnerability scan results, see View Vulnerability Scan Results.
This feature will be available when creating new container registries, and you can also enable it for existing registries. For more information, see Enable Vulnerability Scanning.
December 13
IONOS offers the New Container Registry Web Console, an enhanced version of the existing Container Registry Web Console, providing improved user experience and performance, intuitive design, faster responsiveness and additional features than the existing Container Registry Web Console. For more information, see DCD How-Tos.
December 4
IONOS is a certified partner of Red Hat and are authorized to provide and run Red Hat Enterprise Linux inside the IONOS public cloud infrastructure. This is applicable to both public RHEL images supplied by IONOS and user-uploaded private RHEL images.
December 18
The subtopics in the Block Storage section have been updated. It now contains a new Images & Snapshots section with the appropriate subtopics—IONOS Public Images and Private Images. For more information, see Images & Snapshots.
December 4
The subtopics in the Block Storage section have been updated. It now contains a new Images & Snapshots section with the appropriate subtopics—Public Images and Private Images. For more information, see Images & Snapshots.
August 18
This is solely for informational purpose and does not require any action from you. IONOS has renamed Virtual Server(s) to Dedicated Core Server(s). This change does not impact the functionality of the product in any manner. As a result, the documentation portal now reflects the product name changes. For more information, see Product Renaming FAQ.
August 18
Added information on security advisory for CVE-2022-40982, also known as “Gather Data Sampling” (GDS) or “Downfall” here.
August 14
IONOS MongoDB database cluster offers MongoDB Enterprise edition supporting versions 5.0 and 6.0 to suit the requirements of enterprise-level deployments. This edition provides advanced capabilities such as sharding database type, enabling the BI Connector, and more resources - CPU cores, RAM size (GB), and storage types to create database clusters. Additionally, the enterprise database clusters facilitate point-in-time recovery and offsite backup features making these clusters highly reliable.
August 10
A vCPU Server is a new virtual machine provisioned and hosted in one of IONOS's physical data centers. It behaves like a physical server and can be used as a standalone product or combined with other IONOS cloud products. To configure a vCPU Server, choose a preset (S, M, L, XL, and XXL) that suits your needs. Presets are a combination of specific vCPU-to-RAM ratios. The number of vCPUs and RAMs differs based on the selected preset. You can also tailor the vCPU-to-RAM ratios to meet your requirements—the Preset automatically changes to Custom when you edit the predefined ratio.
August 8
The documentation for Kubernetes Versions now contains the following details:
Managed Kubernetes releases Kubernetes version 1.27; hence, the Available column now mentions the release date.
Kubernetes version 1.24 has reached an end-of-life; hence, the Kubernetes end of life column has been updated accordingly.
Note: The documentation portal URLs are directly affected by the below-mentioned updates. As a result, if you have bookmarked specific pages from the documentation portal, we recommend revisiting the pages and bookmarking the new URLs.
August 10
The following sections have been renamed in the documentation portal:
Compute Engine is now called Compute.
Virtual Machines is now called Compute Engine.
August 10
Cloud Cubes is no longer under Virtual Machines, but an independent section under Compute.
May 30
IONOS Object Storage introduces contract-owned buckets in a new region eu-central-3. Users within a single organization can benefit from our Object Storage using contract-owned buckets. Users can now create this bucket type from within the DCD. The earlier bucket-type functionality presented within the Object Storage continues to be supported and is now referred to as user-owned buckets. For the list of operations supported in contract-owned buckets, see Feature comparison.
May 24
IONOS announces the release of our Certbot plugin for Cloud DNS. With this plugin, you can automate the process of obtaining and renewing SSL/TLS certificate. This feature enhances security and simplifies certificate management for your domains.
This detailed tutorial will help you get started with the Certbot plugin for Cloud DNS, which provides step-by-step instructions on how to set up and use the plugin effectively.
May 23
Information on the security advisory for CVE-2024-4323 reported by Tenable Research is now available in the documentation portal. The memory corruption vulnerability in Fluent Bit can result in a denial of service, information disclosure, or remote code execution.
May 17
IONOS has introduced self-service functionality features via the DCD to improve the customer experience by giving users control over certain features. Customer data provides additional control and flexibility to your account. With the Payment details module, you can add new payment methods. This feature has enhanced security to provide seamless yet strong customer authentication.
May 13
You can now leverage the IONOS Cloud DNS API service to create and manage Reverse DNS (PTR) records for IPv4 and IPv6 addresses. This enhancement enables you to efficiently manage your DNS configurations and network settings and enhance email deliverability.
May 7
Logging Service is enhanced to allow you to configure an unlimited retention period for your logs. With this enhancement, you can store your logs for an indefinite period. The enhancement is available since April 29, 2024.
May 6
Information on the security advisory for four vulnerabilities reported by Acronis is now available in the documentation portal. These vulnerabilities reported in the Cyber Protect Agent cause local privilege escalation and information manipulation without authorization.
1. In the DCD, go to Management > Cloud Savings Plans.

1. In the DCD, go to Management > Cloud Savings Plans.


1. In the DCD, go to Management > Cloud Savings Plans.


March 25 The Cost & Usage view has been revamped with a fresh and intuitive design. It provides:
A comprehensive summary of your account's cost for the past six months, including the current month.
A monthly report with detailed insights into all costs associated with using Virtual Data Centers (VDCs) and consuming other products and services.
Transparency about usage patterns and costs across product categories by displaying the total units consumed, cost per unit, and total cost incurred.
As a result, the Cost & Usage documentation has been revamped to align with the new view and is now categorized as a separate topic in the documentation portal.
March 25
You can now manage TLS certificates for Kubernetes and OpenShift workloads using the IONOS Cloud DNS Webhook with cert-manager. It enables you to secure your applications with valid TLS certificates that are automatically renewed before they expire. For more information, see the Manage TLS Certificates using IONOS Cloud DNS Webhook for cert-manager tutorial.
March 13
IONOS offers a redesigned user interface for the Certificate Manager via the Data Center Designer (DCD). Using this interface, you can seamlessly upload and manage TLS Certificates to integrate key products such as the Managed Application Load Balancer, API Gateway, and CDN.
It also offers additional capabilities such as automatic certificate renewal through integration with Automated Certificate Management Environment (ACME) Providers and Cloud DNS, allowing you to generate and renew TLS certificates automatically, thus simplifying security management and ensuring that your applications remain secure with minimal manual intervention.
March 6
Network Security Groups are now available via the Data Center Designer (DCD) graphical user interface. To secure your network, you can create rules based on your use case and leverage the capabilities of either the DCD or the API.
March 25
A new tutorial on managing TLS certificates using the IONOS Cloud DNS Webhook for cert-manager is now available. This tutorial covers the installation, configuration, and automation of certificate management for your Kubernetes cluster workloads. By following the steps, you can secure your applications with valid TLS certificates that are automatically renewed before they expire.
March 24
The new tutorial guides you through connecting a WireGuard peer between an IONOS Virtual Data Center (VDC) and an on-premises gateway, offering clear guidance and a smooth setup. As an enhancement to the user interface, the VPN Gateway Manager in the DCD also lists all tutorials, enabling you to configure your use case effectively.
March 18
The new tutorial guides you through creating an IPSec tunnel between IONOS Cloud Virtual Data Centers (VDCs), offering clear guidance for a smooth setup.
IONOS Cloud is a robust and flexible platform that helps users build and manage their cloud infrastructure smoothly. The platform offers user-friendly cloud solutions that can be managed via the Data Center Designer (DCD) or API.
This section covers the first steps to working with the IONOS Cloud DCD and explores helpful advanced guides for fully configuring and managing various IONOS Cloud solutions.
Access the DCD to create and configure your first data center with IONOS Cloud.
Dive deeper with advanced and commonly referred user guides to continue your learning.
To delete an IDP, perform a DELETE request with the identityProviderId of the IDP.
Use the following endpoint to delete an IDP: https://iam.ionos.com/federation/identityproviders/{identityProviderId}.
curl --location \
--request DELETE 'https://iam.ionos.com/federation/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' Below is the list of mandatory path parameter:
Body Parameters
Type
Description
Example
identityProviderId
string
The ID (UUID) of the IdentityProvider.
5e6323da-8a45-5732-bec1-d7c29c1dc890
To make authenticated requests to the API, the following fields are mandatory in the request header:
Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .
Content-Type
yes
string
Set this to application/json.
202 Successful operation
Identity and Access Management (IAM) is a framework of policies and technologies used to ensure that the right users (or entities) have the appropriate access to IONOS Cloud resources. It helps you to control your resources securely and authenticate and authorize access users to use resources and your IONOS Cloud account.
When you create an account with IONOS Cloud, you become the contract owner and can access your account using your username and password. To begin with, you login with a sign-in identity and will have access to all the services and resources associated with the account. Ensure that your contract owner credentials are safe.
Next, from your contract owner account, you can set up other users and assign them roles and resources they need. For example, an administrators can have additional permissions whereas or sub-users can have limited permissions.
Once you create sub-users, they can log in to the IONOS Cloud account using their credentials. The credentials are validated before authorizing access to the resources and privileges associated with the respective user account.
By managing identities and their access privileges, IAM helps protect sensitive data and systems, reducing the risk of unauthorized access. You can control who can access specific resources and ensure compliance with security standards and regulations for your organization.
To access Identity & Access Management features, select Menu > Management on the top navigation menu of the DCD. You will see the following features in the drop-down menu:
Menu item
Contract Owner
Administrator
User
+
+
+
+
+ (read-only)
+
+
+
+
+
+
To create a data center, use one of the following options:
Option 1: From the left navigation panel
In the DCD, go to Virtual Data Centers > Create new. A drop-down window appears.
Provide the following details:
Name: Enter a name to identify the data center uniquely.
Region: From the drop-down list, choose the physical location of the data center that hosts your infrastructure.
Description: (Optional) Add information that describes the Virtual Data Center (VDC).
Create default network security group: Select the checkbox to associate a default security group with the data center. By default, a set of predefined security rules are applied to all Virtual Machines (VMs) created in that respective data center. You can also later customize the rules and members of a default security group.
Select Create to confirm.
Alternatively, you can also create a data center using the following options:
Option 2: From the DCD home page
In the DCD, go to the My Virtual Data Centers section and click Create new.
Provide the details to create a data center. For more information, see Step 2 in Create a Data Center.
Select Create to confirm.
Result: The data center has been created and can be opened in the workspace. Your DCD dashboard displays the newly created VDC in My Virtual Data Centers.
After you create a Virtual Data Center (VDC) and are familiar with the primary areas of the DCD application, start navigating through the Data Center Designer to familiarize yourself with it before you configure the VDC.
To retrieve a domain, perform a GET request.
Use the following endpoint to retrieve a domain: https://iam.ionos.com/federation/domains/{domainId}.
curl --location \
--request GET 'https://iam.ionos.com/federation/domains/f181c212-34f1-5843-9bbb-fc2531c7d928' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'Below is the list of mandatory path parameter:
Body Parameters
Type
Description
Example
domainId
string
The ID (UUID) of the domain.
f181c212-34f1-5843-9bbb-fc2531c7d928
To make authenticated requests to the API, the following fields are mandatory in the request header:
Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .
Content-Type
yes
string
Set this to application/json.
200 Successful operation
{
"id":"f181c212-34f1-5843-9bbb-fc2531c7d928",
"type":"domain",
"href":"/domains/f181c212-34f1-5843-9bbb-fc2531c7d928",
"metadata":{
"createdDate":"2020-12-10T13:37:50+01:00",
"createdBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate":"2020-12-11T13:37:50+01:00",
"lastModifiedBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN":"ionos:<product>:<location>:<contract>:<resource-path>",
"account":123456
},
"properties":{
"domain":"yourcompany.com",
"status":"REQUESTED",
"message":"The token provided should be added to the TXT Domain Record, then request to verify the ownership. Important: This is the only time the token will be visible to you, so please take note of it now."
}
}This topic outlines specific use cases and describes how the plans are billed based on resource consumption when you have Cloud Savings Plans in your contract.
You have not opted for Savings Plans.
Billing process: All usage is billed at the Pay-As-You-Go (PAYG) price.
You have a Savings Plan defined for a single product.
Billing process:
Actual Consumption
Billing Process
Less or equal to the quantity configured in the Savings Plan
The plan's price applies to the consumption.
Greater than the quantity configured in the Savings Plan
- The plan's price applies to consumption equal to the plan's quantity. - The PAYG price applies to remaining consumption. - The plan's rate is applied to resources chronologically, starting with those in the oldest created .
You have several Savings Plans, each for different products, for example, one for Cores, one for RAM.
Billing process: This scenario uses a billing methodology similar to Scenario 2, but the logic applies independently to each product's Savings Plans. The actual consumption of each product is compared with its dedicated plan's quantity.
Billing process: Savings Plans are applied to the product starting with the oldest plan. Consider two Savings Plans: Plan A (older Savings Plan) and Plan B (newer Savings Plan).
Actual Consumption
Billing Process
Less or equal to the quantity configured in Plan A
Plan A's price bills the consumption. Both plans are still billed in full.
Greater than the quantity configured in Plan A, but less than the combined quantity configured in both plans
Consumption uses Plan A completely and partially uses Plan B, maintaining full billing for both plans.
Equal to the combined quantity configured in both plans
Both plans are consumed and billed completely.
More than the combined quantity configured in both plans
Both plans are completely consumed and overusage is billed at the PAYG price.
December 9
API Gateway is now available in more regions including London, Paris, and Logroño. You can now create, manage, and deploy APIs in these regions using the API Gateway.
December 9
We are excited to announce the launch of IONOS Object Storage in our US data center location, Lenexa. This highly scalable and durable storage solution is designed to support businesses with large amounts of unstructured data. With IONOS Object Storage, users can store, manage, and analyze vast amounts of data, from images and videos to logs and backups.
Located in Lenexa, this new offering ensures low latency and high performance for US-based users. The new endpoint is exposed as us-central-1 and operates as a contract-owned IONOS Object Storage.
December 6
The IONOS AI Model Hub now supports an OpenAI-compatible embeddings endpoint, and the embedding models BGE Large EN v1.5, BGE m3, and Paraphrase Multilingual MPNet base v2.
December 2
We are pleased to announce the expansion of IONOS Cloud products and services with the addition of a new deployment location in Worcester. This new facility marks IONOS's second data center in the United Kingdom, after London, enhancing the capability to support high availability and redundant configurations across geographical locations.
The Worcester data center is classified as a Tier IV facility, which includes comprehensive isolation of critical infrastructure systems to reduce the risk of disruptions significantly and guarantees our users the highest operational security and reliability level. For additional information, refer to the .
You now have the option to deploy the following products in the new data center via the or using the location code gb/bhx via the :
Compute Services:
Containers:
Databases:
Network Services:
Observability:
Storage & Backup:
The following products do not have a distinct deployment in Worcester, but you can still use their centrally located services:
AI:
Storage & Backup:
April 30
IONOS DBaaS for MariaDB is now available across all IONOS Cloud locations. You can choose any location of your preference from the DCD when you your MariaDB cluster or perform the same actions through the . For a list of region-specific API endpoints, see .
April 25
IONOS Object Storage has increased the length of all newly generated Access Keys and Secret Keys to prepare for the upcoming new functionalities on the offering. Access Keys will now be 92 characters long, and Secret Keys will be 64 characters long.
April 22
Managed Kubernetes now supports Regional Control Planes, allowing users to deploy and manage Kubernetes clusters to new geographic regions with ease. You can benefit from optimized performance and reduced latency between the control plane and the nodes of the node pools within the same region.
For more information, see .
April 10
Starting in May, our Backup Service servers will use an additional IP subnet: 85.215.126.0/24. We recommend you update the configured firewall rules in advance so that the firewall does not restrict backup agent access and allows the backup agents to communicate effectively. For more information, see .
April 5
Information on security advisory for CVE-2024-3094 is available on the documentation portal. The vulnerability enables remote system breaches via SSH, and immediate action is required to resolve it.
April 2
We are thrilled to announce the release of our revamped documentation portal landing page. The enhancement includes significant improvements to the design outlook and website navigation to streamline the user experience and to make accessing information more accessible and more efficient.
Card-based Design: Visually appealing card layouts provide users with concise information and an easier way to engage with the documentation portal.
Website Navigation: Find the specific product documentation easily with a familiar navigational structure that rearranges the products in the in an alphabetical sequence.
April 2
To reinforce consistency in the product category and product names across IONOS website and documentation portal, the following changes are made effectively:
The product categories are renamed, added, and removed.
Some of the product names in our documentation portal are renamed and reorganized into product categories in a way that it improves easy discoverability of documentation.
Note: The product renaming does not have any impact on its services and functionality. Incorporation of the updated product names across our documentation pages is an ongoing development, and we will be rolling out this update in phases.
The Password Policy feature in IONOS Cloud helps organizations enforce password security by defining a set of rules that must be followed when creating and updating passwords. This feature is crucial for safeguarding accounts and ensuring adherence to security standards. Always ensure that your policies are in line with industry best practices to safeguard your data effectively.
Customizable Rules: The password rule can be customized to your needs such as recommendations to have complex passwords to improve the security of user accounts. You can define criteria on the length of the password, whether or not to include lowercase and uppercase letters, numbers, and special characters in the password and the minimum quantity of each of these character types.
Ease of Use: Using the or the , contract owners can manage password policies easily.
Flexibility: Create, retrieve, update, or delete a password policy as needed. It is recommended to keep your policies reasonable to promote user compliance. On deleting a password policy, the IONOS standard applies for password management.
The Password Policy Manager feature is part of the Identity Management API and can be managed using the /{passwordPolicyId}/ endpoint. Further documentation can be found in the respective .
To access this API, you must authenticate requests using your Bearer token, which enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .
Using the , you can create, update, or delete a password policy as needed.
To create a password policy, follow these steps:
1. In the DCD, go to Menu > Management > Password Policy.
2. Click Create password policy in the Password Policy Manager.
3. Enter the following details to configure a password policy:
Description: Add a detailed description that explains the password policy. The length of the description must not exceed 1024 characters.
Password length: Enter or use arrow keys to select the maximum password length. You cannot set a password policy that is less than 5 characters in length. For example, if the defined length is 9, the password must be a minimum of nine characters in length.
Must contain uppercase letters [A—Z]: Select the checkbox if the password policy must contain any uppercase letters from A—Z.
Minimum quantity: Enter or use arrow keys to specify the allowed count of uppercase characters in the password. For example, if 4 is the quantity chosen, the password must contain a minimum of four uppercase characters.
Must contain lowercase letters [a—z]: Select the checkbox if the password policy must contain any lowercase letters from a—z.
Minimum quantity: Enter or use arrow keys to specify the allowed count of lowercase characters in the password. For example, if 4 is the quantity chosen, the password must contain a minimum of four lowercase characters.
Must contain numerics [0-9]: Select the checkbox if the password policy must contain numbers from 0 to 9.
Minimum quantity: Specify the minimum allowed count of numerics in the password.
Must contain special characters [@, #, $, %, etc.]: Select the checkbox if the password policy must contain special characters. Any character apart from a—z,A—Z, and 0 to 9 is referred to as a special character.
Minimum quantity: Specify the minimum allowed count of special characters in the password.
4. Click Save password policy.
Result: The password policy is successfully created.
To update an existing password policy, follow these steps:
1. In the DCD, go to Menu > Management > Password Policy.
2. Click Edit to update the description or password policy details such as the length of the password or characters allowed in the password policy.
3. Click Save to reflect the changes made to the password policy.
Result: The password policy is successfully updated and these changes apply to new users setting up the password. Existing user accounts continue to work on the password policy previously used.
If you no longer need a password policy, you can delete it permanently. To delete an existing password policy, follow these steps:
1. In the DCD, go to Menu > Management > Password Policy.
2. Click Delete and confirm the deletion again by selecting Delete and use IONOS Standard.
Result: The password policy is successfully deleted and the IONOS standard applies for password management.
October 18
The documentation portal now has information on the security advisory for a critical vulnerability reported in Grafana 11. This vulnerability may allow attackers to execute arbitrary code on affected systems, leading to complete system compromise.
October 15
The documentation portal now has information on the security advisory for vulnerabilities reported in the Kubernetes Image Builder that enables default credentials during the image build process.
October 9
Cost Alert notification is essential for effective cloud cost management. These notifications act as alerts for spending thresholds, helping you control your budget, optimize resource usage, and make informed decisions about your cloud infrastructure. It is configurable via the DCD and the . Configuring a cost alert is solely within the authority of contract owners and users with administrator access rights. For more information, see .
October 8
The documentation portal now has information on the security advisory for vulnerabilities reported in the Linux Common Unix Printing System (CUPS). By chaining these vulnerabilities, an attacker could cause remote code execution.
October 7
Information on the security advisory for three vulnerabilities reported by Redis is now available in the documentation portal. These vulnerabilities, reported by Redis, allow an authenticated remote user to execute arbitrary remote code and perform Denial of Service (DoS) attacks.
October 1
Reverse DNS is now available via the IONOS Data Center Designer (DCD). You can leverage its capabilities to create and efficiently manage Reverse DNS (PTR) records for IPv4 and IPv6 addresses.
October 1
Effective October 1st, we have updated our Cubes configuration templates to include more tailored options. We now offer nine template sizes, each varying by processor, memory, and storage capacities. The templates are divided into two categories: one for Basic Cubes and the other for Memory Cubes. To understand the detailed breakdown of resources for each template, see .
October 1
The IONOS AI Model Hub now supports Llama 405B from Meta.
October 17
With a consistent approach to improve the user's experience with IONOS Cloud documentation, the Get Started section in the documentation portal is restructured to provide a simple, step-by-step guide that helps users onboard with setting up , managing user and account settings, and explore advanced product feature configurations. All these guides are categorized under the documentation portal's new section Set Up IONOS Cloud.
October 15
The IONOS Cloud products that are currently available only on a request basis are now shown with a label on the . Users can now scan through the page and easily identify such products and contact sales representative or to acess them. The products currently with this label are Event Streams for Apache Kafka, CDN, VPN Gateway, and Network File Storage.
This tutorial guides you through generating and managing authentication tokens in the Data Center Designer (DCD).
In the DCD, you can now generate the authentication token to securely access IONOS Cloud APIs and SDKs by using the API/SDK Authentication Token Manager. Along with improved user security, the Token Manager offers a seamless user experience to generate tokens in a simplified way and use the token several times to access the APIs and SDKs. You can generate up to 100 authentication tokens and use any of these token values for authorizing access to APIs and SDKs.
To create a secure authentication token for authorizing to use APIs and SDKs, follow these steps:
In the DCD, go to Menu > Management > Token Manager.
In the API/SDK Authentication Token Manager, select Generate Token.
Copy the Token ID and Close the token-generated window.
Warning: You must save the token value for future uses. You will not be able to see the token value again due to security reasons.
Result: An authentication token is generated and listed in the API/SDK Authentication Token Manager screen.
Each token has a Time To Live (TTL), which is the duration for which a token is valid before it expires and becomes inactive. Select a TTL value from the drop-down list. The following are the possible values:
1 Hour
4 Hours
1 Day
7 Days
30 Days
60 Days
90 Days
180 Days
365 Days
Each token consists of:
ID: This is the ID of the token which you can use in the . For example, to by ID.
Creation Date: The date and time stamp of the token.
Expiration Date: The date and time stamp when the token becomes invalid depending on the defined TTL at the time of token generation.
The generated token is listed in the API/SDK Authentication Token Manager screen.
The Token Value is displayed only once upon generation, and you must save this value for future use.
The token is valid based on the defined TTL field at the time of token generation.
To delete an authentication token, follow these steps:
In the DCD, go to Menu > Management > Token Manager.
In the API/SDK Authentication Token Manager, select the authentication token to delete and select the Delete option.
Select Delete to confirm.
Result: The authentication token is successfully deleted and removed from the tokens list in the API/SDK Authentication Token Manager.
November 26
VPN Gateway is now in the General Availability (GA) phase. It is designed to ensure secure and scalable encrypted connections between your IONOS Cloud resources and remote infrastructure using two key VPN protocols: IPSec and WireGuard.
We are excited to announce the following enhancements to VPN Gateway: — Active-Passive High Availability (HA) mode to ensure redundancy in the event of failures. — Availability of new tiers that can be paired with HA. Additionally, you have the option to switch between HA and non-HA configurations and upgrade your plans as needed. — Ability to visualize all LANs connected to the respective VPN Gateway. — Option to download VPN Gateway configuration to your local system.
November 22
The documentation portal now has information on the security advisory for a high vulnerability reported by the Kubernetes Security Response Committee. This vulnerability allows attackers to execute arbitrary commands in the vulnerable Managed Kubernetes cluster versions beyond the container boundary.
November 18
Beginning today, you will observe that the DCD portal's have been redesigned, resulting from the integration of IONOS Cloud Identity and Access Management (IAM) Single Sign-On (SSO) into the login process. You do not need to make any changes to your account.
November 11
Starting November 11, our AI Model Hub supports the OpenAI Image endpoint. In addition we launched the FLUX.1 schnell text-to-image model.
November 11
We've enhanced the firewall rules for Network Security Groups and NIC-based firewalls. In addition to the existing TCP, UDP, ICMP, and ICMPv6 protocols, we now support GRE, VRRP, AH, and ESP protocols. This expansion is available through both the Cloud API v6 and DCD platforms.
November 11
Effective immediately, you can specify custom MAC addresses when creating network interfaces (NICs) for Compute instances. This feature is accessible via Cloud API v6 and DCD. Ensure that you configure custom MAC addresses at the time of creation and that you cannot modify them during subsequent network interface updates. This capability is advantageous for environments requiring specific MAC addresses to comply with software licensing conditions.
November 8
This is to inform you that Managed Kubernetes version 1.28 will reach its end of life (EOL) on December 4, 2024. After that, you cannot create new clusters or node pools using Kubernetes version 1.28. Existing clusters or node pools running on version 1.28 will be automatically upgraded to version 1.29 during the next scheduled maintenance window after the EOL date.
November 7
Starting November 11, we will implement an update to the IONOS Cloud Identity and Access Management (IAM) Single Sign-On (SSO) login system to enhance security and usability for our users. You will notice that the new SSO will consist of two : — The first screen requires your email address and password. — The second screen requests a Time-based one-time password (TOTP) if you have activated 2-Factor Authentication.
November 6
IONOS releases Network Security Groups, a centralized firewall policy manager that allows you to filter and control network traffic to and from virtual network resources within a given Virtual Data Center (VDC). NSGs contain security rules that allow or deny traffic based on various criteria, such as source and destination IP addresses, ports, and protocols for its member VMs and NICs.
Note: Network Security Groups are currently accessible only via the Cloud API v6. The DCD support will be available soon.
November 5
We are excited to announce the launch of our new Database as a Service (DBaaS) interface for our Database products: , , , and . Designed with user experience in mind, the new DCD interface provides a more intuitive and an efficient management experience.
November 4
Event Streams for Apache Kafka is now in the General Availability (GA) phase. It is a managed solution that is fully integrated with the DCD, offering a variety of cluster sizes to accommodate the diverse requirements of different applications. With this service, you can build secure event-driven architectures. The product will initially be available only in the German data centers (Frankfurt & Berlin), and will be gradually rolled out to all locations.
November 4
Managed Kubernetes is releasing Kubernetes version 1.31. For more information about the schedule timeline, see .
To protect your IONOS Cloud account from unauthorized access, each account comes with the following security features:
You can provide the password for your IONOS account during registration. Use the feature to enforce secure password practices by defining rules for password creation and modification that apply to all users within the contract.
To change the password, follow these steps:
In the DCD, go to Menu > Your Profile > Password & Security.
In the Change Password view, enter your Current Password, New Password and then Repeat New Password.
Select Change Password.
Result: The password is changed and becomes effective with the next login.
If you forget your password, then you can reset it. For more information, see .
You can set up 2-Factor Authentication in addition to your login credentials. This authentication method requires an app-generated security code. Once 2-Factor Authentication has been activated, you can only access your account by entering the authentication code you receive from the Authenticator App. This method can be extended to hide specific data centers and snapshots from users, even if they belong to an authorized group. This feature is only available in DCD.
You can turn on 2-Factor Authentication for your accounts.
To activate 2FA for your account, follow these steps:
In the DCD, go to Menu > Your Profile > Password & Security.
In 2-Factor Authentication section, select the Enable 2-Factor Authentication option. The 2-Factor Authentication Setup Assistant will open.
Proceed through each step by selecting Next.
Install the Authenticator app from the or from based on your device.
Scan the QR code using the Authenticator app on your smartphone.
Enter the Security Token.
Select Done to exit the 2-Factor Authentication window.
An administrator or a contract owner can enforce 2-Factor Authentication for subuser accounts but cannot enable it for those accounts. Only account users can enable 2-Factor Authentication for their accounts.
To activate 2FA for another user account, follow these steps:
In the DCD, go to Menu > Management > Users & Groups.
Select the required user in the User Manager window.
In the Meta Data tab, select the Force 2-Factor Auth option.
Select Save.
Result: The 2-Factor Authentication is enforced to your login workflow and becomes mandatory from your next login if you enable 2-Factor Authentication. You must provide a verification code each time you log in to the DCD.
To ensure that the support calls are made by authorized users, you are asked for the support PIN to verify the account. You can set your support PIN in the DCD and change it at any time.
To set or change your support PIN, follow these steps:
In the DCD, go to Menu > Your Profile > Password & Security.
In the Set Support PIN section, enter your support PIN in the PIN field to confirm your identity.
Select Set Support PIN.
Result: The support PIN is now saved. You can use it to verify your account with .
An IONOS Cloud account represents your individual accounts associated with IONOS. Based on the user's roles, an account can be further categorized as the contract owner's account, administrator's account, or user account.
You can add cloud resources and manage the resources and your data on the cloud via your account. Each account is given a unique ID called the Contract ID during creation.
Centralized customer profile management: It provides a unified view of your data, including contact information and organization details, keeping it consistent and up-to-date.
Secure payment and billing integration: It enables you to manage your payment methods with automated invoicing for timely payments, enhancing financial transparency while reducing the risk of billing discrepancies.
Advanced account security controls: Features such as and support pin configuration protect sensitive data and minimize unauthorized access. They help organizations meet compliance standards and safeguard user trust.
Personalized account settings and preferences: Set the default settings for your .
To access your account, select Menu and click your initials on the top navigation menu of the DCD. You will see your user name, email address, contract number, and the following features in the drop-down menu:
To retrieve a link of the account associated with the IAM Federation in the form of an ID, perform a GET request.
Use the following endpoint to retrieve a link: https://iam.ionos.com/federation/links/{linkId}.
Below is the list of mandatory path parameter:
To make authenticated requests to the API, the following fields are mandatory in the request header:
200 Successful operation
To request the ownership of a domain, perform a POST request.
Use the following endpoint to request for domain ownership: https://iam.ionos.com/federation/domains.
Below is the list of mandatory body parameters:
To make authenticated requests to the API, the following fields are mandatory in the request header:
202 Successful operation
Once the organization IDP is onboarded to use IAM Federation, the organization's users can link their accounts to IAM Federation and unlink them whenever needed.
Upon linking a user account from the organization to IAM Federation, users can log in to the DCD using their organization credentials.
To link a user's account from the organization to IONOS DCD, follow these steps:
Result:
Your organization's user account is successfully linked with IAM Federation.
The user successfully signs into the DCD and is redirected to the Manage Linked Accounts.
User can now log in to the using their organization IDP credentials. To do so, see .
Warning: Upon unlinking the user account from IAM Federation, users can log in to the DCD only using their IONOS Cloud account credentials.
To unlink a user's account from the organization with IONOS DCD, follow these steps:
2. In the Managed Linked Accounts, select Unlink under ACTIONS against the organization IDP user account that needs to be linked with IAM Federation.
Result: Your user account from the organization has been successfully unlinked from IAM Federation. From then on, you can log in to the DCD only using your IONOS Cloud account credentials.
We continually strive to bring you the best and latest AI technologies, ensuring you have access to cutting-edge solutions that deliver the optimal experience. Therefore, we continuously update our model catalog by introducing the latest models and retiring older ones.
This page provides a detailed list of models, categorized by their current status, to keep you informed about upcoming changes in model availability.
The following models are currently active in the AI Model Hub with no scheduled retirement date:
The following models are scheduled to be retired. After the specified date, they will no longer be available to use in the AI Model Hub:
To avoid disruption and ensure long-term support, please replace models scheduled for retirement in current and new projects with suitable alternatives.
These models are no longer available to use in the AI Model Hub:
The IONOS Cloud Savings Plans are a pricing model that offers significantly optimized resource rates for a specific quantity of cloud resource usage, measured per hour, over a one or three-year term, compared to prices. It provides a substantially reduced price for consistent resource usage and is a key feature for cloud cost optimization.
The following shows the Savings Plans lifecycle. Log in to the DCD to Savings Plans for your contract.
1. In the , choose the start date, applicable products, the number of resources, and a duration of either one year or three years for your Savings Plans. For more information, see .
When you choose Savings Plans:
You become eligible for the corresponding Savings Plans rates on applicable products.
Billing for the plan continues for the full term at the agreed-upon amount, regardless of your actual resource usage. For more information, see .
2. Confirm the details before you agree to the terms and conditions.
3. Upon purchase, you will receive a confirmation email at your registered address detailing your successful enrollment in the Savings Plan.
The rate of your Savings Plans is applied automatically to your eligible product usage, up to the amount you have chosen. It prioritizes the application of Savings Plans rates based on the creation time, from oldest to newest.
Any usage that exceeds your chosen resources is billed at the standard PAYG rate, ensuring flexibility while maintaining savings on predictable workloads.
Your details all usage from the billing period. It clearly distinguishes between usage covered by your Savings Plans and any extra usage charged at the standard PAYG rate.
Track your resource usage costs using reports and set up to track budget thresholds. Together, these tools enable you to monitor spending in real-time and manage your cloud costs effectively. By reviewing alerts and usage reports, you can better use your Savings Plans and identify opportunities to optimize resource usage.
You receive a notification 30 days before your Savings Plans expire. You can create new plans before the expiry of your old Savings Plans. If there are eligible Savings Plans, your usage automatically reverts to PAYG pricing the day after expiration. While no service interruption occurs, you may not be able to access the previous plan rates during transition to the PAYG pricing.
To continue your Savings Plans benefits, log in to the DCD and purchase new plans to start immediately after your current term ends. It ensures continuous cost optimization without disruption.
The Cost Alert Notification feature helps you to monitor and manage the cloud infrastructure costs. This feature allows you to set up alerts that notify you when your spending reaches predefined thresholds. Once the set threshold is exceeded, you will receive a notification via email, providing immediate awareness of cost overruns. The Cost Alert Notification feature is available for contract owners and administrators.
This documentation covers how to create, edit, and delete the cost alert notification.
The Cost Alert Notification is a real-time notification. IONOS runs billing calculations periodically due to the data aggregation of billing events. It does not run the invoice calculation permanently. Therefore, an offset to the configured amount may be expected. The first time the invoice amount calculated is above or equal to the threshold value, an e-mail will be sent to the e-mail address defined in the configuration. This notification is sent only once and not repeated with every following invoice calculation.
The Cost Alert Notification will be based on the net amount of the contract invoice (excl. VAT).
Furthermore, the Cost Alert Notification feature does not execute any other operation - especially no changes to any service.
The Cost Alert Notification feature is part of the Billing API. It can be managed using the /{contractId}/ usage-alert endpoints. Further documentation can be found in the respective .
To access the Billing API, you must authenticate requests using your basic authentication credentials or a Bearer token (required for Multi-Factor Authentication accounts). The Bearer token must be retrieved through the in the DCD.
The Cost Alert Notification feature is part of the Account Settings at the top right of the menu bar.
To create a cost alert for your account, follow these steps:
In the DCD, go to Menu > Management > Cost alert.
In the Cost alert window choose Create cost alert.
Enter the amount you need and your email address in the window.
Choose Create cost alert.
Result: The cost alert is successfully created.
You can edit the cost alert after creating it.
In the Menu go to Management > Cost alert.
In the Cost alert window choose Edit.
Edit the amount and the email in the corresponding fields.
Click Save to save changes.
Regularly check your email for updates regarding your spending. Based on the alerts you receive, make adjustments as necessary.
In the Menu go to Management > Cost alert.
In the Cost alert window choose Delete.
Result: You will receive a notification that the cost alert was successfully deleted.
The configuration of a cost alert can be managed by contract owners and users in the role of administrators only. Other contract members with the user role cannot access the feature. Within the IONOS multi-tenant model, access to the feature is also restricted to users in the role of administrators. It is only accessible to the contract owner of the respective multi-tenant contract.
Log in to the Data Center Designer
Log in to the DCD and explore the dashboard and menu options.
Create a Data Center
Create a data center and learn about individual User Interface (UI) elements.
Configure a Data Center
Configure a dedicated core server, add storage and a network, and provision the changes.
Set User Privileges for Data Center
Learn how to create subusers and assign them relevant privileges to access data center.
Data Center Designer
Learn about IONOS DCD, access the core cloud services intuitively via the DCD UI, and configure and manage them.
Set Up a Dedicated Core Server
Set up and manage a dedicated core server.
Set Up a Network Load Balancer
Distribute incoming traffic efficiently with a network load balancer.
Set Up a PostgreSQL Database Cluster
Set up a high-availability, scalable PostgreSQL database cluster for your applications.
Set Up Block Storage
Configure and manage reliable block storage for your data needs.
Configure a NAT Gateway
Establish a secure NAT gateway for private network internet access.
Configure a Network on your VDC
Manage and configure networks within your Virtual Data Center (VDC).
Set Up Object Storage Access
Set up and access scalable S3-compatible Object Storage.
Connect to Virtual Machines via SSH
Establish secure SSH connections to your remote servers.
Set Up Backup Units
Configure and manage backup units to safeguard your data.
Configure Flow Logs
Set up flow logs to monitor and analyze network traffic.
Set Up a Kubernetes Cluster
Deploy and manage a Kubernetes cluster for container orchestration.
Create Alarms and Actions
Set up monitoring alerts and actions for your infrastructure.
curl --location \
--request GET 'https://iam.ionos.com/federation/links/5eb3d304-dc75-56cb-9b94-152533912d33' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'Body Parameters
Type
Description
Example
linkId
string
The ID (UUID) of the link.
5eb3d304-dc75-56cb-9b94-152533912d33
Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.
Content-Type
yes
string
Set this to application/json.
{
"id": "5eb3d304-dc75-56cb-9b94-152533912d33",
"type": "link",
"href": "/links/5eb3d304-dc75-56cb-9b94-152533912d33",
"metadata": {
"createdDate": "2020-12-10T13:37:50+01:00",
"createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate": "2020-12-11T13:37:50+01:00",
"lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
},
"properties": {
"id": "ac6f04c2-68e1-5e61-97c8-ef0216f1c08e",
"providerAlias": "oidc",
"displayName": "IdentityProvider ABC",
"linkedUsername": "linkedUsername ABC",
"linked": true
}
}Users & Groups
Set user privileges; limit or extend access to chosen roles.
Password Policy
Create and manage password policy to secure user accounts.
Token Manager
Create, manage, and delete an authentication token using the API/SDK Authentication Token Manager.
IAM Federation
Onboard the organization Identity Provider (IDP) to log in to the DCD using their organization credentials.
curl --location \
--request POST 'https://iam.ionos.com/federation/domains' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' \
--data '{
"domain": "yourcompany.com"
}'Body Parameters
Type
Description
Example
domain
string
Represents the domain to map the user email domains to the IDPs.
yourcompany.com
Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.
Content-Type
yes
string
Set this to application/json.
{
"id":"5e6323da-8a45-5732-bec1-d7c29c1dc890",
"type":"domain",
"href":"/domain/5e6323da-8a45-5732-bec1-d7c29c1dc890",
"metadata":{
"createdDate":"2020-12-10T13:37:50+01:00",
"createdBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate":"2020-12-11T13:37:50+01:00",
"lastModifiedBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN":"ionos:<product>:<location>:<contract>:<resource-path>"
},
"properties":{
"token":"9019680770992564882066368772815872312262977566198195",
"domain":"yourcompany.com",
"status":"REQUESTED",
"message":"The token provided should be added to the TXT Domain Record, then request to verify the ownership. Important: This is the only time the token will be visible to you, so please take note of it now."
}
}Model Provider
Model Name
Scheduled to Retire On
Alternative
Stable Diffusion XL
January 12, 2026
FLUX.1 [schnell]
Model Provider
Model Name
Retired On
Alternative
Meta
Llama 3.1 (70B)
May 1, 2025
Mistral
August 1, 2025
Mistral
September 22, 2025














Menu item
Contract Owner
Administrator
User
+
+
+
+
+
+
+
+









June 27
Event Streams for Apache Kafka service now supports Kafka version 3.9.0, effective June 27, 2025. In this context, we will mark version 3.8.0 as deprecated.
We will soon offer the possibility to patch existing clusters from Kafka version 3.8.0 to 3.9.0 via a single call to an API endpoint.
June 26
Observability products extend their availability to the new region, Lenexa, USA. With this expansion, the Logging Service is available at https://logging.us-mci.ionos.com and the Monitoring Service at https://monitoring.us-mci.ionos.com endpoint.
June 24
Logging Service is now available in the Data Center Designer (DCD). It provides centralized log collection, storage, and analysis, as well as the ability to manage logs from various sources, gain insights, and improve system monitoring. You can access it using the DCD or API for streamlined observability and enhanced troubleshooting capabilities.
June 6
VM Auto Scaling has been reclassified from the Management category to the Network Services category within the new streamlined DCD. This change reflects the increasing integration of scaling features with networking services such as load balancing and target groups. No changes have been made to existing configurations or functionality—only the placement in the DCD has changed. Accordingly, the corresponding documentation category has been updated.
June 6
For all models offered on the AI Model Hub, IONOS now offers extensive model cards illustrating not only the technical benefits of each model, but also their suitability in terms of use cases and their quality concerning sovereignty.
IONOS announces the upcoming phasing out of Mistral 7B in the AI Model Hub. This decision is part of our ongoing efforts to improve and align the product with more efficient and future-proof models.
June 5
IONOS announces the availability of signing in to the Observability Products' Grafana instance using the DCD IAM. This feature allows users to log in to Grafana using their IONOS credentials through the IAM SSO, enhancing security and simplifying access management.
June 3
IONOS announces the availability of Secondary Zone management directly within the DCD, which was previously accessible only through the API. This update empowers you to seamlessly create and manage secondary zones through the UI. Whether your primary zones are hosted externally or you are looking to extend redundancy, DCD now supports complete secondary zone configurations for enhanced load distribution, security, and flexibility or as a backup during primary zone failover.
June 26
A new tutorial for setting up a CDN Distribution is now available. This guide provides a step-by-step process to configure a Content Delivery Network (CDN) for your website using IONOS Object Storage as the origin.
June 19
The new Most Popular Product Guides section highlights the most helpful and engaging guides identified through user interaction data. This enhancement offers a centralized location of high-value content, helping you find answers more efficiently and get the most out of our products.
June 6
The VM Auto Scaling documentation has been moved from the Compute Services section to the Network Services category. This update aligns with recent DCD changes that group auto scaling features more closely with networking services. No changes have been made to functionality, this update is for documentation organization only.
April 30
At IONOS, we are excited to announce the launch of our new and improved interface, designed with users in mind. The DCD application interface features a redesigned top navigation menu, a left navigation menu, and a DCD dashboard, providing the following advantages:
Simplified navigation: Easy access to the product categories and groupings.
Better organization: Better and logical product groupings that make browsing and discovering them and associated services easier.
Improved user experience: Whether you are a first-time visitor or a returning user, the new interface ensures a smoother, more enjoyable journey.
Consistency: A consistent look and feel across all sections and optimized for all devices. This update is part of our ongoing commitment to providing a user-friendly experience that helps you easily find the right products. As a result, you can also see that we have already updated the images in certain sections of the documentation portal, while the rest are still in progress.
April 30
Event Streams for Apache Kafka service will now support Kafka version 3.8.0 starting 30 April 2025. In this context, we will mark version 3.7.0 as deprecated.
Starting 28 May 2025, creating new Kafka instances in version 3.7.0 will no longer be possible. We will then migrate existing instances from version 3.7.0 to version 3.8.0 without requiring any action from you or service interruption.
April 16
IONOS Public Images now supports using Microsoft SQL Server Images to configure Block Storage. The following combinations are available:
MSSQL-2019 (All Editions) on Windows-2019
MSSQL-2022 (All Editions) on Windows-2022
These images are available through both the DCD and the API. The Microsoft SQL Enterprise Server Images are available only on contacting IONOS Cloud Support.
April 15
We are excited to announce the launch of Event Streams for Apache Kafka in our Las Vegas, United States (us-las), France, Paris (fr-par), and Spain, Logroño (es-vit) data centers in addition to the existing location support in Germany, United Kingdom, and the United States. Supporting these new locations ensures we can offer a co-located Managed Kafka at any of our existing data centers. The new endpoints are kafka.us-las, kafka.fr-par, and kafka.es-vit.
April 2
At IONOS, we are excited to announce the integration of Key Management Service (KMS) for seamless activation and management of Microsoft Windows operating systems within our cloud infrastructure. While the activation process for new Windows instances will continue to occur automatically, this enhancement will facilitate the reactivation and management of existing Windows instances.
April 1
IONOS offers greater flexibility and simplicity for users to choose the server type as either Dedicated Core or vCPU for their Managed Kubernetes nodes. You can also choose to update the server type even after the node pool creation. This capability is supported both through the DCD and the API. To support this function, in the DCD, you see the new field Server type in the Node Template section while creating a Kubernetes node pool.
April 1 IONOS announces the upcoming phasing out of AMD Opteron servers in the Frankfurt (de/fra) data center. This decision is part of our ongoing efforts to improve the product and align it with more efficient and future-proof solutions.
Alternative options: For continued functionality, you can transition to Dedicated Core server with AMD Epyc CPU architecture or to a vCPU Server. You can manually change to one of these options from April 1, 2025, until May 13, 2025. Starting on May 13, 2025, eligible systems running AMD Opteron-based Compute Engine workloads will automatically begin transitioning to AMD Epyc processors within the Frankfurt location.
July 31
IONOS releases the AI Model Hub platform, which features foundational models and vector databases as a service. Using these services, you can also implement retrieval augmented generation use cases.
We have added documentation support to help you use our new AI Model Hub. The key topics include:
Guided steps for using our foundation models.
Instructions for managing our vector database as a service.
Steps to conduct retrieval augmented generation.
July 29
The Data Center Designer (DCD) now features a new dedicated Network menu aimed at consolidating all network-related products for easier access and streamlining product management within the DCD. The products now grouped under this menu include Connectivity, Load Balancing, Edge Networking, and Security products. The IP Management, Cross Connect, Target Groups, Cloud DNS, and SSL Certificate Manager products listed earlier under the Management menu have been moved to the Network menu.
July 29
IONOS releases Network File Storage, a managed service that offers shared file storage for multiple virtual machines and containerized workloads via the NFS protocol. The product is currently available on a request basis, will initially be available only in the German data centers (Frankfurt & Berlin), and will be gradually rolled out to all locations.
It is currently available on a request basis. To access this product, please contact your sales representative or IONOS Cloud Support.
July 29
This release introduces additional capabilities, enabling you to connect all Virtual Data Centers (VDCs) in the Frankfurt region via private LANs. We recommend upgrading your existing Cross Connect to the latest version. For more information, see Upgrade Cross Connect to the Latest Version.
July 8
Managed Kubernetes is releasing Kubernetes version 1.30. For more information about the schedule timeline, see Release Schedule.
July 4
Information on the security advisory for CVE-2024-6387, announced by OpenSSH, is now available on the documentation portal. This advisory addresses a signal handler race condition in OpenSSH that affects sshd in its default configuration.
July 3
AMD Opteron CPUs will be phased out for Kubernetes node pools and new Opteron-based VMs. We recommend updating your Terraform and Crossplane configurations to reflect the new CPU type to avoid errors.
July 31
We have updated the Backup Service documentation. The key topics include:
Step-by-step instructions for configuring backup encryption in Apply Backup Encryption.
Detailed information on encryption at rest, encryption in transit, and secure data deletion practices in Data Security.
July 30
The Network Services product category now includes a new Certificate Manager section. This update relocates the Manage SSL Certificates documentation from the Managed Application Load Balancer product to the new section. Additional documentation on certificate management will be added shortly.
July 18
We have added documentation support to help you configure Veeam Backup & Replication with the new eu-central-3 Object Storage region. The key topics include:
Guided steps for adding a new Object Storage repository.
Instructions for creating backup jobs with performance-optimized settings.
Steps to migrate your backup repository to the eu-central-3 region.
Recommended settings to apply 8 MB blocks in storage optimization.
As an organization, to begin using Identity Provider (IDP) to log in to the DCD, follow these steps:
1. Using the API, the organization must request domain ownership. This domain ownership establishes a connection between the organization and its IDP.
2. The organization must Create a TXT Domain Record using the token value provided in the Request Domain Ownership API.
1. Onboard the organization IDP. To do so, Create Identity Provider using the API.
2. Depending on the IDP type, you must provide the following details to IONOS Cloud:
client_id: Your OIDC client ID.
client_secret: The client secret key.
Secret (SAML 2.0): X.509 certificate.
Upon receipt of the discovery endpoint from the organization, IONOS Cloud performs the following actions:
Verifies the domain ownership.
Verifies the discovery endpoint.
Creates the IDP using the configuration in the discovery endpoint.
Links the IDP to the domain to be used by the user accounts in that domain.
Result: The organization IDP is successfully onboarded to IONOS Cloud.
From the OIDC discovery endpoint, the following details are considered to configure the IAM Federation by IONOS Cloud:
issuer: The URL of the OIDC issuer.
authorization_endpoint: The URL of the authorization endpoint.
token_endpoint: The URL of the token endpoint.
userinfo_endpoint: The URL of the user info endpoint.
jwks_uri: The URL of the JSON Web Key Set (JWKS).
client_id: The client ID of the OIDC client.
client_secret: The client secret of the OIDC client.
For more information on the OIDC discovery endpoint, refer to the OpenID Connect 1.0 Documentation.
From the SAML 2.0 discovery endpoint, the following details are considered to configure the IAM Federation by IONOS Cloud:
entityId: The entity ID of the SAML 2.0 IdP.
singleSignOnService: The URL of the Single Sign-On (SSO) service.
x509cert: The X.509 certificate of the SAML 2.0 identity provider.
signatureAlgorithm: The signature algorithm used by the SAML 2.0 identity provider.
sloBinding: The binding used for single logout.
sloUrl: The URL of the single logout service.
For more information on the SAML 2.0 discovery endpoint, refer to the SAML 2.0 Documentation.
At your organization IDP, allow IONOS Cloud to link with the following discovery endpoints:
OIDC Discovery Endpoint: https://iam.ionos.com/realms/cloud/.well-known/openid-configuration
SAML 2.0 Discovery Endpoint: https://iam.ionos.com/realms/cloud/protocol/saml/descriptor
The IONOS AI Model Hub is designed to simplify the deployment and management of advanced machine learning models, eliminating the complexities associated with hardware and infrastructure. This inference service serves a range of powerful AI models that enable developers to implement sophisticated AI solutions without concerns about underlying hardware and operational overhead.
IONOS' AI Model Hub supports various use cases, including:
Text Generation: Utilize pre-trained Large Language Models (LLMs) to generate text and answer queries using textual descriptions.
Image Generation: Utilize pre-trained text-to-image models to create images based on textual descriptions.
Document Collections: Store and query extensive document collections based on semantic similarity.
Retrieval Augmented Generation (RAG): Enhance responses by combining Large Language Models with contextually relevant documents stored in a vector database.
Tool Calling: Enable AI models to interact with external systems by invoking APIs or executing predefined functions. This allows for dynamic, task-based automation such as triggering workflows, retrieving real-time data, or integrating with business applications —all initiated through natural language prompts.
The IONOS AI Model Hub Service offers a wide array of features tailored to meet the needs of modern developers:
Managed Hosting: Utilize AI models without needing to maintain the underlying infrastructure.
Security and Compliance: Keep your data secure and compliant with regulations, as data processing is confined within Germany. Your input data remains exclusively for your use and is excluded from training purposes.
Scalability: Scale your AI deployments seamlessly to meet your needs.
Integration Options: Easily integrate with your applications using REST APIs that are fully OpenAI-compatible, with support for popular programming languages like Python and Bash.
Diverse Model Offerings: Choose from various foundation models, including Large Language Models and text-to-image models, each capable of generating innovative, and sophisticated AI outputs.
Document Collections: Store and manage document collections and perform semantic similarity searches to extract contextually relevant information.
Retrieval Augmented Generation: Combine vector databases and Large Language Models to generate enhanced outputs that are contextually aware, providing more accurate and helpful responses.
Token-based Billing: Pay for the services based on the number of tokens used, enabling cost-efficient usage and transparency in billing.
Understanding the foundational concepts of the IONOS AI Model Hub will help you leverage its full potential:
Foundation models are pre-trained on massive datasets to perform a wide range of language and image processing tasks. They can generate text, answer questions, and create images based on textual descriptions. With IONOS, you can access these models through APIs, simplifying the process of integrating advanced AI capabilities into your applications.
Access various open-source Large Language Models for text generation and text-to-image models for image generation.
Use models without managing underlying hardware.
Maintain data privacy and comply with German data protection regulations.
Vector databases provide a way to store and manage document collections, enabling semantic similarity searches. Documents are converted to embeddings (vector representations), allowing the discovery of related content through similarity searches.
Persist documents and search for semantically similar content.
Use API endpoints to manage document collections and perform searches.
Ensure document storage and processing stays within Germany.
Retrieval Augmented Generation enhances the performance of Large Language Models by combining their inherent capabilities with contextually relevant information retrieved from document collections stored in vector databases. This approach allows the model to produce highly accurate and detailed responses tailored to specific queries.
Use Large Language Models together with document collections from vector databases.
Improve response accuracy and relevance by incorporating more context.
Implement sophisticated AI solutions using a combination of querying and generation.
Use dedicated REST API endpoints to interact with various models and services. These endpoints are designed to facilitate the quick and easy integration of AI capabilities into your applications. The IONOS AI Model Hub provides two API options for maximum flexibility: its native IONOS AI Model Hub API and an OpenAI-compatible API, making it easy to work with tools that support OpenAI endpoints.
These endpoints mirror OpenAI’s API structure, allowing for seamless integration with tools and platforms already designed for OpenAI:
Models: Retrieve the list of available models and their details.
Chat Completions: Generate conversational responses using supported Large Language Models.
Image Generations: Generate high-quality images based on text prompts.
Embeddings: Generate text embeddings as numerical vectors for semantic search, text similarity, and clustering.
Model Management: Endpoints for retrieving model lists, querying models, and managing predictions.
Document Management: Endpoints to create, modify, retrieve, and delete document collections, and individual documents.
Querying and Generating: Endpoints for combining semantic searches with Large Language Models to implement Retrieval Augmented Generation scenarios.
Security is paramount, and IONOS provides robust mechanisms to authenticate and authorize API requests. You must generate and use API tokens to access the AI services securely. For more information about generating a corresponding token, see Access Management.
IONOS ensures that all data processing complies with German and European data protection regulations. Your data is processed within Germany, providing more layer of security and compliance. For more information, see Data Handling.
IONOS offers expert technical support to help you troubleshoot and optimize your AI deployments. Whether you need assistance with API integration or model performance, the support and Professional Service team is available to ensure your success during German business hours.
IONOS recommends implementing a backup strategy for the data saved to collections in the vector database. This ensures that your collections can be restored in case of accidental deletion or other unforeseen events.




To validate the token is part of the domain which has been already requested for domain ownership, perform a PUT request with the domainId of the domain.
Use the following endpoint to create or update an IDP: https://iam.ionos.com/federation/domains/{domainId}/verify.
curl --location \
--request PUT 'https://iam.ionos.com/federation/domains/f181c212-34f1-5843-9bbb-fc2531c7d928/verify' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'Below is the list of mandatory path parameter:
Body Parameters
Type
Description
Example
domainId
string
The ID (UUID) of the domain.
f181c212-34f1-5843-9bbb-fc2531c7d928
To make authenticated requests to the API, the following fields are mandatory in the request header:
Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .
Content-Type
yes
string
Set this to application/json.
201 Successful operation
{
"id": "f181c212-34f1-5843-9bbb-fc2531c7d928",
"type": "domain",
"href": "/domains/f181c212-34f1-5843-9bbb-fc2531c7d928",
"metadata": {
"createdDate": "2020-12-10T13:37:50+01:00",
"createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate": "2020-12-11T13:37:50+01:00",
"lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>",
"account": 123456
},
"properties": {
"domain": "yourcompany.com",
"status": "APPROVED"
}
}The IONOS AI Model Hub is a fully managed platform that makes it easy to build powerful, AI-driven applications. Leverage foundation models, vector databases, and Retrieval-Augmented Generation (RAG) capabilities—all while ensuring robust data privacy, security, and compliance.
Whether generating content, building chatbots, enriching applications with AI-generated images, or implementing semantic search — AI Model Hub gives you the tools to bring your ideas to life.
Get started with the foundational concepts and platform features.
Deepen your understanding of the AI Model Hub’s technical capabilities.
Step-by-step guides to help you integrate and scale AI in your projects.
Review our governance and compliance policies for the IONOS AI Model Hub.
Explore the available APIs to programmatically interact with the AI Model Hub.
To retrieve all IDPs, perform a GET request.
Use the following endpoint to retrieve an IDP: https://iam.ionos.com/federation/identityproviders.
curl --location \
--request GET 'https://iam.ionos.com/federation/identityproviders' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json'To make authenticated requests to the API, the following fields are mandatory in the request header:
Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .
Content-Type
yes
string
Set this to application/json.
200 Successful operation
{
"id": "ac6f04c2-68e1-5e61-97c8-ef0216f1c08e",
"type": "collection",
"href": "/identityproviders",
"items": [
{
"id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
"type": "identityprovider",
"href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
"metadata": {
"createdDate": "2020-12-10T13:37:50+01:00",
"createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate": "2020-12-11T13:37:50+01:00",
"lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
},
"properties": {
"name": "IdentityProvider ABC",
"enabled": true,
"domain": "ionos.com",
"configuration": {
"saml": {
"metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
"endpoint": "https://iam.ionos.com/realms/cloud/broker/yourIdentityProvider/endpoint/descriptor"
},
"oidc": {
"openidConfigurationUrl": "https://example.com/.well-known/openid-configuration",
"clientName": "Example Client",
"endpoint": "https://iam.ionos.com/realms/cloud/.well-known/openid-configuration"
}
}
}
}
]
}To retrieve an IDP, perform a GET request with the identityProviderId of the IDP.
Use the following endpoint to retrieve an IDP: https://iam.ionos.com/federation/identityproviders/{identityProviderId}.
curl --location \
--request GET 'https://iam.ionos.com/federation/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' Below is the list of mandatory path parameter:
Body Parameters
Type
Description
Example
identityProviderId
string
The ID (UUID) of the IDP.
5e6323da-8a45-5732-bec1-d7c29c1dc890
To make authenticated requests to the API, the following fields are mandatory in the request header:
Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .
Content-Type
yes
string
Set this to application/json.
200 Successful operation
{
"id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
"type": "identityprovider",
"href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
"metadata": {
"createdDate": "2020-12-10T13:37:50+01:00",
"createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate": "2020-12-11T13:37:50+01:00",
"lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
},
"properties": {
"name": "IdentityProvider ABC",
"enabled": true,
"domain": "yourDomain.com",
"configuration": {
"oidc": {
"openidConfigurationUrl": "https://example.com/.well-known/openid-configuration",
"clientName": "Example Client",
"endpoint": "https://iam.ionos.com/realms/cloud/.well-known/openid-configuration"
}
}
}
}{
"id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
"type": "identityprovider",
"href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
"metadata": {
"createdDate": "2020-12-10T13:37:50+01:00",
"createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate": "2020-12-11T13:37:50+01:00",
"lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
},
"properties": {
"name": "IdentityProvider ABC",
"enabled": true,
"domain": "ionos.com",
"configuration": {
"saml": {
"metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
"endpoint": "https://iam.ionos.com/realms/cloud/broker/yourIdentityProvider/endpoint/descriptor"
}
}
}
}The Cost & Usage view provides a more detailed and intuitive view of cloud costs and consumption statistics. The view gives you the ability to explore the usage of all services with the currently applicable list prices, excluding any discounts and VAT. It provides a clear breakdown of service usage and pricing, allowing for better visibility into your consumption patterns. It compares estimated costs and usage across various product categories, which are subdivided into specific line items. The page outlines the services or features used, the total units consumed, and the corresponding costs incurred.
The granular level of detail ensures you clearly understand where your resources are being utilized and how they contribute to overall spending. You can view relevant data that helps make informed decisions about your cloud resources.
Regular contracts
Contract administrators Contract owners
✅ ✅
Reseller contracts
Contract owners
✅
The cost calculation depends on the aggregated usage of all resources consumed during the selected period. Because usage data is updated periodically (at least once a day) depending on the product, the usage for the current period may be offset by up to 24 hours. Thus, the report ensures you have the required information for monitoring consumptions and accommodating the update intervals of various services to give you a cost report for services and product usage in your cloud environment. For more information on pricing, see IONOS Cloud Prices.
Note:
Billing is based on product usage, with charges computed according to the listed prices. Hence, it should be viewed as an estimate and may not match the final invoice details.
This page does not reflect special pricing or discounts, meaning the figures shown may not align with any custom agreements or promotional rates in place.
In addition to the Cost & Usage view on the DCD, you can retrieve detailed invoice data and a granular resource-allocated usage distribution through the IONOS Cloud Billing API. It provides a powerful and flexible way to access comprehensive billing information, enabling you to track and analyze your usage at a granular level programmatically. By leveraging the Billing API, you can integrate billing data into your internal systems, automate reporting processes, and gain deeper insights into resource consumption across various services. We recommend you explore and utilize this API to streamline your billing workflows and enhance cost management capabilities.
The Cost & Usage view, in combination with the Cost Alert feature, provides an enhanced way for you to proactively manage your cloud expenditures. When setting up a cost alert you will receive a notification as soon as the cost of your contract reaches the predefined threshold, allowing you to analyze your usage. The integration offers greater control and visibility over usage patterns and associated costs, helping avoid unexpected charges.
To view the services and products cost and usage for your account, follow these steps:
1. In the DCD, go to Menu > Management > Cost & Usage.
2. Select a Period from the drop-down list to generate a detailed report for the specified time frame. By default, the current month and its breakdown are displayed. Additionally, you have the option to generate a report for the past six months, starting from the current month.
Result: The report displays the following information:
Period: The current period is displayed by default. You may notice that the cost computation for the period starts from the beginning of the month. However, if you choose: — Current month: The report is generated from the first of the month until the date of report generation. — Previous months: The report is generated from the first of the month until the end of the month. You can generate the report only for the last six months of the contract.
Current total amount for this period: Displays the total cost incurred for the respective month due to the services and product usage.
Product categories: The product categories on the left frame display the total cost for using individual products or services from the respective product category. Click on it for a detailed breakdown. Products or services that do not have a product mapping are listed in Others.
Price category: Displays the total price associated with the products or services consumed in the respective product category. It is a summary of the product or service usage that helps identify the total cost of this category, meaning costs are grouped per consumed product, independent of whether a single instance or multiple services caused the usage. In some cases, like for Virtual Data Centers (VDCs), the total cost is aggregated by each VDC. The price category shows one of the following based on the usage: — —: No service or product was used from the respective product category during the chosen period. — 0.00: The free quota covered the services or products that were used. — Total cost: Services or products from the respective product category were used. Click on it for a detailed breakdown.
The table displays the following information:
Item: Displays the product item description including the description of the calculation unit of the product item. Example: 1h per GB RAM. If aggregate costs are displayed, like in VDCs, click on it to view a detailed service or product consumption breakdown.
Price per unit: Displays the cost per unit for the service or product used.
Usage: Displays the number of units consumed. It indicates the number of units consumed by each product item.
Total: Displays the total cost incurred for the amount of units of the respective product item. It is calculated as price per unit * amount of usage.
August 25
Managed Kubernetes is releasing Kubernetes version 1.33. For more information about the schedule timeline, see .
August 19
We have commissioned an additional data center that extends the Frankfurt, Germany metro region, enhancing high availability, redundancy, and operational security through network connectivity with our existing de/fra location. The data center is designed to deliver scalability, robust data security, and high performance by leveraging state-of-the-art hardware components. For more information, refer to the .
August 12
IONOS Cloud now supports the GPT-OSS 120B model, a high-performance, multilingual, reasoning model in the AI Model Hub. This advanced AI model excels in text generation, complex reasoning, and natural language processing across multiple domains, offering fast inference through an efficient expert routing architecture.
August 1
IONOS Cloud supports Mistral Small 24B model, a high-performance multilingual and multimodal AI, in the AI Model Hub. This model processes both text and image inputs, delivers fast and reliable chat completions, and leverages advanced capabilities like streaming and tool calling, all optimized for a broad range of European languages.
August 22
A new tutorial for deploying on IONOS Cloud Virtual Machines (VMs), using either a pre-configured Plesk QCOW image or the installer, is now available. This guide provides step-by-step instructions for setting up your IONOS Cloud instance for Plesk installation using one of these methods.
August 1
The Images & Snapshots documentation has been relocated from the product section and placed directly under the category Storage & Backup. This update aligns with the recent and is intended to enhance documentation visibility and organization. No changes have been made to product functionality.
The Data Center Designer (DCD) is a unique tool for creating and managing . Its graphical user interface (GUI) makes data center configuration intuitive and straightforward. You can drag and drop virtual elements from the Palette to set up and configure data center infrastructure components in the Workspace. For more information, see .
Similar to a physical data center, you can use the DCD to connect various virtual elements to create a complete hosting infrastructure. For more information, see .
The same visual design approach is used to make any adjustments later. You can log in to the DCD and scale your infrastructure capacity. Alternatively, you can set defaults and create new resources when needed.
You can set up your data center infrastructure by using a drag-and-drop visual interface.
The DCD contains the following elements:
The square elements serve as building blocks for your VDC. Each element represents an IONOS Cloud product or service. Some elements are compatible, while others are not. For example, a Server icon can be combined with the Storage ( or ) icon. In practice, this would represent the physical act of connecting a hard drive to a server machine. For more information, see .
The palette is a dynamic sidebar that contains VDC elements. You can click and drag each element from the palette into your workspace and position it as per your requirements.
All cloud products and services are compatible with each other. You may create a Server and add Storage to it. A LAN Network will interconnect your Servers.
Some elements may connect automatically via drag-and-drop. The DCD will then join the two if able. Otherwise, it will open configuration space for approval.
Right-click an element and select Delete from the drop-down menu. You can also select the element directly and hit Delete/Backspace from your keyboard.
The context menu offers different options depending on the element. To see the context menu, right-click on any element. For example, right-click a Cube or a Server to update it.
When an element is selected, the Inspector pane will appear on the right side of your screen. You can configure the element properties. For example, for a Server element, you can define its Name and , Preset, vCPUs and RAM.
This pane allows you to finalize the creation of your data center. Once your VDC is set up, select PROVISION CHANGES. This makes your infrastructure available for use.
Using the DCD, you can both control and manage the following services provided by IONOS Cloud:
: Create, configure, and delete entire data centers. Cross-connect between VDCs and tailor user access across your organization.
and : Set up, pause, and restart virtual instances, such as , , or , with customizable storage, CPU, and RAM capacity. Instances can be scaled based on usage. For more information about configuring a data center, see .
: Upload, edit, and delete your private images or use images provided by IONOS Cloud. Create or save snapshots for future instances.
: Reserve and manage static public . Create and manage private and public LANs, including firewall setups.
Basic Features: Save and manage ; connect via ; launch instances via ; record networking via flow logs and monitor your instance use with monitoring software.
As a web application, the DCD works effectively on the following browsers:
Google Chrome™: Version 30+
Mozilla® Firefox®: Version 28+
Apple® Safari®: Version 5+
Opera™: Version 12+
Microsoft® Internet Explorer®: Version 11 & Edge
Now that you are familiar with the DCD, you can start configuring your VDC.
To set user privileges, follow these steps:
1. In the DCD, go to Menu > Management > Users & Groups.
2. Select the Groups tab in the User Manager window.
3. Select the appropriate group to which you want to assign privileges from the list of groups.
Name
Description
Provides access to the IONOS Cloud products and features.
2. Workspace
You can arrange element icons in this space via drag-and-drop.
3. Palette
Movable element icons that can be combined in the Workspace.
4. Elements
The icon represents a component of the VDC.
5. Context menu
Right-click an element to display additional options.
View and configure properties of the selected element.








August 26
IONOS Object Storage has extended support for the Replication feature through the DCD. You can now replicate data from user-owned buckets to contract-owned buckets in the eu-central-3 region. Previously, this functionality was only available via the API.
August 22
This release introduces the Access Logging feature in Managed Application Load Balancer (ALB). It enhances monitoring and analyzing ALB traffic with detailed logging capabilities.
August 22
This release introduces the Access Logging feature in Managed Network Load Balancer (NLB). It enhances monitoring and analyzing NLB traffic with detailed logging capabilities.
August 22
New capabilities have been added to the Managed Application Load Balancer: — Configure gRPC Support — Configure WebSocket Support These enhancements provide comprehensive instructions for setting up gRPC that enables users to define service methods and messages in a language-agnostic way, making it easy to create APIs that work seamlessly across different platforms and setting up WebSocket support, a communication protocol that provides full-duplex communication channels over a single TCP connection.
August 19
This release introduces Monitoring Service. IONOS Cloud introduces the Monitoring Service, which provides a centralized and scalable solution for monitoring and analyzing your application and infrastructure metrics. Hence, Monitoring as a Service is now considered a legacy. We recommend switching to the Monitoring Service for better support and capabilities. For more information, see FAQs.
August 16
The Private Container Registry now supports IP Access Control Lists (IP ACLs), offering enhanced security and granular access control. This feature allows you to specify IP subnets permitted to access your registry, limiting access to trusted sources within your network. IP ACLs are easy to configure via the API with the apiSubnetAllowList parameter. Once configured, access attempts from outside the allowed subnets are immediately blocked, ensuring real-time protection without disrupting authorized users.
August 14
The new Password Policy Manager feature is now available for contract owners, enabling the creation of a customizable password policy that strengthens security within their contracts. Using the DCD or the IAM Identity Password Policies API, contract owners can manage password policy.
August 14
Kubernetes Version 1.27 has now reached its End of Life (EOL). From now on, you cannot provision any more clusters or node pools for version 1.27. Existing clusters or node pools running on version 1.27 will be automatically upgraded to version 1.28 during the next scheduled maintenance window after August 14, 2024.
August 9
You can now set up accessing Object Storage over a private LAN by configuring a Managed Network Load Balancer (NLB) with the public IP addresses of the required Object Storage endpoint as the Target IP address and configuring the Private IP as the Listener IP of the forwarding rule.
August 8
This is to inform you that Managed Kubernetes version 1.27 will reach its end of life (EOL) on August 14, 2024. After that, you cannot create new clusters or node pools using Kubernetes version 1.27. Existing clusters or node pools running on version 1.27 will be automatically upgraded to version 1.28 during the next scheduled maintenance window after the EOL date.
August 2
The Certificate Manager now supports the auto-renew of SSL certificates via the API. With this function, the certificate manager automatically renews the certificate before it expires. The renewed certificate is also available in the DCD to use them. This feature is currently supported only via the API and available on a request basis. To access this feature, please contact your sales representative or IONOS Cloud Support.
August 1
IONOS releases NFS Volumes support for Kubernetes. This feature allows the integration of IONOS Network File Storage (NFS) with Kubernetes clusters, mounting NFS volumes as PVCs in the cluster. Network File Storage is initially available only in the German data centers (Frankfurt and Berlin), and will be gradually rolled out to all locations.
It is currently available on a request basis. To access this product, please contact your sales representative or IONOS Cloud Support.
August 1
IONOS introduces Event Streams for Apache Kafka, a managed solution that is fully integrated with the DCD, offering a variety of cluster sizes to accommodate the diverse requirements of different applications. With this service, you can build secure event-driven architectures. The product will initially be available only in the German data centers (Frankfurt & Berlin), and will be gradually rolled out to all locations.
It is currently available on a request basis. To access this product, please contact your sales representative or IONOS Cloud Support.
August 1
The self-restoration of MariaDB clusters from a backup is possible via the DCD. It minimizes downtime and data loss in unanticipated scenarios. For more information, see Use Cases.
August 1
IONOS offers a robust VPN Gateway feature designed to ensure secure and scalable encrypted connections between your IONOS cloud resources and remote infrastructure. This solution supports two key VPN protocols: IPSec and WireGuard, providing you with flexibility and advanced security options to meet your networking needs.
It is currently available on a request basis. To access this product, please contact your sales representative or IONOS Cloud Support.
August 1
IONOS DBaaS provides support for In-Memory DB instances and offers resources such as CPU cores and RAM size (GB) to create In-Memory DB instances. Additionally, the instance facilitates backup via snapshots and the option to recover data, making them highly reliable. It also facilitates cloud-based In-Memory DB instance patching and scalability.
August 1
IONOS releases CDN, a content delivery network service with multiple edge servers geographically well situated within the user's proximity to deliver content swiftly and securely with enhanced features such as Web Application Firewall (WAF) and DDoS Layer 7 protection. It is currently available on a request basis. To access this product, please contact your sales representative or IONOS Cloud Support.
August 1
The API Gateway offers a suite of functionalities to help you efficiently create, manage, and monitor your APIs. It provides essential features for managing and optimizing interactions between clients and backend services, ensuring secure and efficient API operations. Currently, it is only available in Berlin but will soon be rolled out to more locations.
The following provides detailed information about the Cloud Savings Plans.
The IONOS Cloud Savings Plans model provides a lower hourly rate on compute resources in exchange for a planned term of one or three years. It is designed to offer substantial savings for customers with consistent, predictable workloads.
Choosing a plan for a set usage and term provides a substantially lower hourly rate rate on your eligible cloud usage compared to Pay-As-You-Go (PAYG) prices. Regular PAYG rates apply to any usage exceeding your plan.
You can choose either a one-year or a three-year term, based on your needs.
For detailed information about various billing use case scenarios, see Use Cases. The invoice also reflects resource distribution applying the oldest Virtual Machines (VMs) first rule, and the incurred cost for resource usage. For more information, see Invoice.
They are similar in that both offer optimized prices for usage.
Reserved Instances
Savings Plans
- It often requires you to select specific instance types, regions, and operating systems. - Usually includes a capacity reservation.
- Offers broader flexibility. - Applies to usage across various CPU models, sizes, regions, and operating systems. - Continues to apply even if your workload changes. - Applies only at the financial level and does not provide capacity reservation.
Choosing between Savings Plans and PAYG depends on your workload patterns and financial goals. For stable and predictable usage, Savings Plans offer better value. For flexible, short-term, or variable usage, PAYG provides more adaptability. The table below outlines the criteria for evaluating and selecting the most suitable plan based on your workload and usage patterns.
Cloud Savings Plans
PAYG
Your workloads are stable and consistently running.
Your workloads are sporadic or subject to sudden spikes.
You aim to reduce costs through long-term plans.
You operate short-term or temporary workloads. You are in an exploratory, development, or testing phase.
You have a fixed workload.
Your workloads vary frequently.
You want to benefit from loyalty-based plan rates and long-term investment returns.
You need maximum flexibility, including for multi-cloud environments.
Resource-based commitment: Savings Plans are based on a commitment to a total amount of resource usage rather than to specific VM families. Example: 50 cores and 200 GB of RAM.
Flexible resource allocation: The resource-based model enables workloads to migrate across VM types and families without compromising the benefits of the Savings Plan's pricing. This flexibility ensures that savings follow the workload, regardless of instance configuration.
Change VMs anytime: You can upgrade, downgrade, or change the CPU family of your VMs at any time. The Savings Plans are automatically applied to the new VM configuration, provided it is within your resource limits.
Availability across regions: The Savings Plans apply across all eligible usage in supported IONOS data centers and regions. You do not need to restrict workloads to a specific location to benefit from the pricing of the Savings Plans.
Kubernetes integration: Savings Plans extend to IONOS's Managed Kubernetes environments. Resources consumed by nodes are eligible for coverage under Savings Plans. You can scale or resize node pools, and the savings adjust accordingly.
Capped coverage: The preferential pricing applies only up to the selected amount of resources. For example, if you select 50 cores but use 60, the Savings Plan's rate covers the first 50, and the remaining 10 are billed at the standard PAYG rates.
Chronological application: IONOS applies the Savings Plan benefits in a chronological order, starting with the oldest eligible VM. The rates are applied until the selected amount is reached.
1. Fulfill the prerequisites: Make sure you meet all prerequisites before proceeding.
2. Review the use cases: Explore the Use Cases to understand different scenarios. This will help you choose the plan that best fits your needs based on your past resource usage.
3. Understand the Cloud Savings Plan's lifecycle: Go through the lifecycle to learn how the Savings Plans work from creation to completion.
4. Create and manage your plan: Use the Data Center Designer (DCD) to create and manage your Savings Plans.
No, we currently only accept monthly recurring payments for your Savings Plans.
Savings Plans cannot be modified or canceled once purchased. They commit you to a specific level of usage for the selected term. If you need additional resources, you will need to purchase additional Savings Plans. Therefore, you must carefully analyze your usage and choose your plans accordingly.
Accurate usage forecasting is key to getting the most value from your plan. The full amount of resources in your plan is billed on a recurring basis, whether or not your actual usage reaches that level. Any unused resources do not roll over to the next billing period.
You can monitor your resource usage costs using the invoice, Cost & Usage, in combination with Cost Alert, which allows you to manage your cloud expenditures proactively. With these alerts and reports, you can leverage your plans and identify potential areas for optimization.
The Savings Plans apply to the following products:
Compute Engine - Dedicated Core Servers
Managed Kubernetes - Dedicated Core Node Pools
Resource consumption billed at PAYG rates appears under its respective VDC.
Resource consumption covered by a Savings Plan is moved from its VDC and grouped under the plan's name.
1. In the DCD, go to Menu > Management > IAM Federation.
Overview
Learn about the AI Model Hub's capabilities and core AI principles.
Models
Learn more about the models offered and their key distinctions.
Embeddings
Discover how embeddings power semantic similarity and search.
Tool Calling
Learn how to connect models to tools and APIs for dynamic responses.
Access Management
Set up your contract and user accounts.
Rate Limits
Understand rate limits of the IONOS AI Model Hub.
Text Generation
Use Large Language Models (LLMs) to generate high-quality content.
Enrich Text with Images
Generate high-quality images based on text prompts.
Tool Calling
Enable AI-driven workflows through dynamic tool calling.
Image Generation
Create visuals from text using diffusion models.
Text Embeddings
Generate vector embeddings for semantic similarity tasks.
Document Collections
Persist and manage custom data for fine-tuned responses.
Semantic Search
Implement semantic search across your document collections.
Retrieval Augmented Generation
Build your first RAG pipeline combining knowledge and LLMs.
Tool Integration
Integrate the AI Model Hub with external tools and apps.
Data Handling
Review our policies on data privacy, secure storage, and GDPR compliance.
European Union AI Act
Understand our roles under the EU AI Act and how we support your compliance.
AI Model Hub - Inference API
API Documentation for the AI Model Hub endpoints.
AI Model Hub - OpenAI compatible API
API Documentation for the OpenAI compatible AI Model Hub endpoints.
FAQ
Get answers to the most commonly encountered questions about AI Model Hub.
To revoke user privileges, follow these steps:
1. In the DCD, go to Menu > Management > Users & Groups.
2. Choose one of the following options:
Result: The privilege is successfully revoked.
Upon creating a data center, you can manually configure the IONOS Cloud infrastructure for each server using the palette and workspace in the DCD. It comprises all the building blocks and the necessary resources required to configure, operate, and manage your products and services. You can also configure and manage multiple VDCs and configure settings for each server automatically.
To configure your Dedicated Core Server, follow these steps:
Drag the Dedicated Core server element from the palette into the workspace.
Enter the following details in the Settings tab of the Inspector pane:
Name: Enter a unique name for your server.
Availability Zone: Select a zone from the drop-down list to host the server on the chosen zone.
CPU Architecture: Select either AMD or Intel cores.
Cores: Select the number of CPU cores.
RAM: Select any size starting from 0.25 GB to the maximum limit allotted to you. The size can be increased or reduced in steps of 0.25 GB. The maximum limit varies based on your contract resource limits and the chosen data center. For more information about creating a full-fledged server, see Create a Dedicated Core Server.
Network Security Groups: Select one or more network security groups from the drop-down list to associate them with the Dedicated Core server. You can choose from any of the default or custom groups.
Result: The Dedicated Core Server is now created and can be updated based on your requirements.
Drag a Storage element from the palette onto a Dedicated Core server in the workspace.
To configure your Storage element, enter the following details in the Inspector pane:
Name: Enter a storage name unique to the VDC.
Availability Zone: Select a zone from the drop-down list to host the storage element associated with the server.
Size in GB: Choose the required storage capacity.
Performance: Select a value from the drop-down list based on the requirement. You can either select Premium or Standard, and the performance of your storage element varies accordingly.
Image: Select an image from the drop-down list. You can select one of IONOS images or choose your own.
Password: Enter a password for the chosen image on the server—a root or an administrator password.
Backup Unit: Select a backup unit from the drop-down list. Click Create Backup Unit to instantly create a new backup unit if unavailable.
For more information about adding storage to the server, see Block Storage Overview.
Result: The storage will now be added to your Dedicated Core Server.
1. Create a Network Interface Card (NIC) by clicking the + icon on the Dedicated Core server in the workspace and attach it to the Internet element. Alternatively, you can right-click the Dedicated Core server > Actions > Add NIC and then attach it to the Internet element.
2. To configure your NIC element, enter the following details in the Network tab of the Inspector pane:
Name: Enter a NIC name unique to this VDC.
MAC: Media Access Control Address field is populated automatically upon provisioning and cannot be changed.
LAN: The name of the LAN connected to internet is displayed. To select another LAN, click the drop-down list and select to move NIC to the LAN. A LAN that connects to the internet becomes a public LAN.
Firewall: It is Disabled by default. Select a value from the drop-down list to configure your firewall settings. For more information, see Configure a Firewall.
Network Security Groups: Select one or more network security groups from the drop-down list to associate them with the Dedicated Core server. You can choose from any of the default or custom groups.
IPv4 Configuration:
Primary IP: The primary IP address is automatically assigned by the IONOS DHCP server. You can, however, enter an IP address for manual assignment by selecting one of the reserved IP addresses from the drop-down list. Private IP addresses (according to RFC 1918) must be entered manually.
DHCP: It is often necessary to run a DHCP server in your virtual data center (e.g., PXE boot for fast rollout of VMs). If you use your own DHCP server, clear this check box so that the IONOS DHCP server does not reassign your IPs.
Add IP: Select the IP address from the drop-down list.
For more information about network configuration, see Configure a Network.
Result: The data center will now be connected to the internet.
1. Double-click the + icon on the server. This creates an NIC connected to a private LAN.
2. In the LAN tab of the Inspector pane, enter a unique name for the LAN, and optionally, you may update the LAN color.
Result: The private LAN is successfully configured. A NIC IP is auto-generated, and the IP address is private.
Select PROVISION CHANGES in the Inspector pane to start the provisioning.
Review your changes in the Validation tab of the Provision Data Center window.
Confirm changes by entering your password. Resolve conflicts without a password.
When ready, select Provision Now.
Result: The data center will now be provisioned. DCD will display a Provisioning Complete notification when your cloud infrastructure is ready.
After configuring data centers, you can specify a preferred default data center location, IP settings, and resource capacity for future VDCs. For more information about configuring VDC defaults, see Create a Dedicated Core Server. Next, you can define users and assign them the privilege required to create data centers.
To create a new Identity Provider (IDP), perform a POST request.
Use the following endpoint to create an IDP: https://iam.ionos.com/federation/identityproviders.
curl --location \
--request POST 'https://iam.ionos.com/federation/identityproviders' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' \
--data '{
"metadata": {},
"properties": {
"type": "oidc",
"name": "IdentityProvider ABC",
"enabled": true,
"domain": "yourDomain.com",
"configuration": {
"oidc": {
"openidConfigurationUrl": "https://example.com/.well-known/openid-configuration",
"clientSecret": "MIICyzCCAbSgAwIBAgIJAMyYqQJkmRIOMA0GCSqGSIb3DQEB...",
"clientName": "Example Client"
}
}
}
}'curl --location \
--request POST 'https://iam.ionos.com/federation/identityproviders' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' \
--data '{
"metadata": {},
"properties": {
"type": "saml",
"name": "IdentityProvider ABC",
"enabled": true,
"domain": "yourDomain.com",
"configuration": {
"saml": {
"metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
"x509Certificate": "MIICyzCCAbSgAwIBAgIJAMyYqQJkmRIOMA0GCSqGSIb3DQEB..."
}
}
}
}'Below is the list of mandatory body parameters:
Body Parameters
Type
Description
Example
properties
object
Properties with all the data needed to create a new IDP.
example.com
type
string
The type of identityProvider configuration.
oidc, saml
name
string
Name to uniquely identify the IDP.
IdentityProvider ABC
enabled
boolean
Choose to enable or disable the IDP.
true
configuration
object
Specify the configuration details of the identity broker.
oidc, saml
To make authenticated requests to the API, the following fields are mandatory in the request header:
Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, .
Content-Type
yes
string
Set this to application/json.
201 Successful operation
{
"id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
"type": "identityprovider",
"href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
"metadata": {
"createdDate": "2020-12-10T13:37:50+01:00",
"createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate": "2020-12-11T13:37:50+01:00",
"lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
},
"properties": {
"name": "IdentityProvider ABC",
"enabled": true,
"domain": "yourDomain.com",
"configuration": {
"oidc": {
"openidConfigurationUrl": "https://example.com/.well-known/openid-configuration",
"clientName": "Example Client",
"endpoint": "https://iam.ionos.com/realms/cloud/.well-known/openid-configuration"
}
}
}
}{
"id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
"type": "identityprovider",
"href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
"metadata": {
"createdDate": "2020-12-10T13:37:50+01:00",
"createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate": "2020-12-11T13:37:50+01:00",
"lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
},
"properties": {
"name": "IdentityProvider ABC",
"enabled": true,
"domain": "yourDomain.com",
"configuration": {
"saml": {
"metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
"x509Certificate": "MIICyzCCAbSgAwIBAgIJAMyYqQJkmRIOMA0GCSqGSIb3DQEB"
}
}
}
}Summary: Teuken 7B is a German sovereign AI model developed through the OpenGPT-X research initiative, designed to support European digital sovereignty. This model excels in multilingual communication across 24 EU languages, featuring an efficient multilingual tokenizer that provides superior performance for European linguistic contexts while ensuring data privacy and regulatory compliance for EU-based applications.
Intelligence
Speed
Sovereignty
Input
Output
Low
High
Moderate
Text
Text
Description: Research project outcome from OpenGPT-X initiative focused on European AI sovereignty. As project funding ended in early 2025, the model's future development is currently unclear.
Model identifier: openGPT-X/Teuken-7B-instruct-commercial
IONOS Launch
End of Life
Alternative
Successor
February 1, 2025
N/A
Provider
Country
License
Flavor
Release
Germany
Instruct
November 26, 2024
Context window
Parameters
Quantization
Multilingual
Further details
8k
7.45B
fp8
Yes
Text
Image
Audio
Input and output
Not supported
Not supported
Chat Completions
Embeddings
Image generation
v1/chat/completions
Not supported
Not supported
Streaming
Reasoning
Tool calling
Supported
Not supported
Not supported
Rate limits ensure fair usage and reliable access to the AI Model Hub. In addition to the contract-wide rate limits, no model-specific limits apply.
1. In the DCD, go to Menu > Network Services > Cloud DNS > Public zones tab.
2. Select Primary Zones from the drop-down list.
3. Select the appropriate primary zone in the DNS ZONES column to create records. Alternatively, click Details & Records in the ACTIONS column.
4. Click Create record in the Details & Records window.
5. Enter the following details in the Create Record window:
Enabled/Disabled: Set it to either Enabled (by default) or Disabled.
1. Open a web browser and navigate to .
2. On the top right corner of the login screen, select your preferred language. The DCD supports German (DE), English (EN), Spanish (ES), and French (FR) languages.
3. Enter the Email Address with which you signed-up for an IONOS Cloud account and click Next.
4. Enter the Password and click Sign In.
5. The screen to enter the code is only visible to users with enabled.
5. Click Sign In.
Result: You are successfully logged in to the DCD application.
Once logged in, you will see three primary areas of the DCD application:
The top navigation menu enables you to create and manage the data center, and view and manage your user account. Additionally, you can view notifications, visit the help section, learn more about DCD, and contact when needed.
The left navigation menu consists Virtual Data Centers (VDCs) and product categories, which you can use to access all the IONOS Cloud services. You can also create new VDCs or manage existing VDCs, access documentation, explore what's new in DCD, and additional details about the DCD.
The DCD dashboard shows a concise overview of your VDCs in My Virtual Data Centers, and Resource Allocation shows the current usage of resources across your infrastructure. You will also see options to contact , What's new in the DCD, and IONOS Cloud Status details.
To provide feedback about the DCD dashboard, select Feedback about this page. You can submit your rating, provide reasons, and share what you liked or could improve.
You need to create your first data center to start seeing data center-relevant details in the dashboard. To do so, see and .
Navigate to the to explore the DCD core functionalities and elements or start .
To update an existing IDP, perform a PUT request with the identityProviderId of the IDP.
Use the following endpoint to create or update an IDP: https://iam.ionos.com/federation/identityproviders/{identityProviderId}.
Below is the list of mandatory path parameter:
Below is the list of mandatory body parameters:
To make authenticated requests to the API, the following fields are mandatory in the request header:
200 Successful operation: IDP is successfully updated.
201 Successful operation: IDP is successfully ensured.
Following is an example of when an IDP is successfully updated or ensured for the given IDP details.








curl --location \
--request PUT 'https://iam.ionos.com/federation/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' \
--data '{
"id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
"metadata": {},
"properties": {
"type": "saml",
"name": "IdentityProvider ABC",
"enabled": true,
"domain": "ionos.com",
"configuration": {
"saml": {
"metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
"x509Certificate": "MIICyzCCAbSgAwIBAgIJAMyYqQJkmRIOMA0GCSqGSIb3DQEB"
}
}
}
}'Body Parameters
Type
Description
Example
identityProviderId
string
The ID (UUID) of the IdentityProvider.
5e6323da-8a45-5732-bec1-d7c29c1dc890
Body Parameters
Type
Description
Example
id
string
The ID (UUID) of the IDP.
5e6323da-8a45-5732-bec1-d7c29c1dc890
properties
object
Properties with all the data needed to update the IDP.
example.com
type
string
The type of identityProvider configuration.
oidc, saml
name
string
Name of the IDP.
IdentityProvider ABC
enabled
boolean
Choose to enable or disable the IDP.
true
configuration
object
Specify the configuration details to update for the identity broker.
oidc, saml
Header Parameters
Required
Type
Description
Authorization
yes
string
The Bearer token enables requests to authenticate using a JSON Web Token (JWT). From the DCD, Generate authentication token.
Content-Type
yes
string
Set this to application/json.
{
"id":"5e6323da-8a45-5732-bec1-d7c29c1dc890",
"type":"identityprovider",
"href":"/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
"metadata":{
"createdDate":"2020-12-10T13:37:50+01:00",
"createdBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate":"2020-12-11T13:37:50+01:00",
"lastModifiedBy":"ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId":"87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN":"ionos:<product>:<location>:<contract>:<resource-path>"
},
"properties":{
"name":"IdentityProvider ABC",
"enabled":true,
"domain":"ionos.com",
"configuration":{
"oidc":{
"openidConfigurationUrl":"https://example.com/.well-known/openid-configuration",
"clientName":"Example Client",
"endpoint":"https://iam.ionos.com/realms/cloud/.well-known/openid-configuration"
}
}
}
}{
"id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
"type": "identityprovider",
"href": "/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890",
"metadata": {
"createdDate": "2020-12-10T13:37:50+01:00",
"createdBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"createdByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedDate": "2020-12-11T13:37:50+01:00",
"lastModifiedBy": "ionos:identity:::users/87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"lastModifiedByUserId": "87f9a82e-b28d-49ed-9d04-fba2c0459cd3",
"resourceURN": "ionos:<product>:<location>:<contract>:<resource-path>"
},
"properties": {
"name": "IdentityProvider ABC",
"enabled": true,
"domain": "ionos.com",
"configuration": {
"saml": {
"metadataDescriptor": "https://yourproviderconfiguration/protocol/saml/descriptor",
"endpoint": "https://iam.ionos.com/realms/cloud/broker/yourIdentityProvider/endpoint/descriptor"
}
}
}
}curl --location \
--request PUT 'https://iam.ionos.com/federation/identityproviders/5e6323da-8a45-5732-bec1-d7c29c1dc890' \
--header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJraWQiO' \
--header 'Content-Type: application/json' \
--data '{
"id": "5e6323da-8a45-5732-bec1-d7c29c1dc890",
"metadata": {},
"properties": {
"type": "oidc",
"name": "IdentityProvider ABC",
"enabled": true,
"domain": "ionos.com",
"configuration": {
"oidc": {
"openidConfigurationUrl": "https://example.com/.well-known/openid-configuration",
"clientSecret": "MIICyzCCAbSgAwIBAgIJAMyYqQJkmRIOMA0GCSqGSIb3DQEB...",
"clientName": "Example Client"
}
}
}
}'Note: The AI Model Hub promotional period ended on September 30, 2025, but your journey continues by scaling your innovations from prototype to production with our simple, pay-as-you-go pricing.
2FA
Description
Enabled
Enter the six-digit Time-based one-time password (TOTP) from your authenticator app to continue the login process.
Disabled
You will not see the additional screen if you have not enabled 2FA. You can navigate to the next step. However, we highly encourage enabling 2FA to enhance security.
Options
Description
1. IONOS logo
Click the logo to navigate back to the dashboard from any screen within the DCD.
2. icon
Click the icon to expand or hide the left navigation bar, causing the DCD interface to adjust its width accordingly.
3. Management
Create, view, and manage users and groups; define password policies; and create and manage tokens.
4. Notification icon
View any active notifications.
5. Help icon
View online help documentation, learn more about the DCD, and contact IONOS Cloud Support when needed.
View and manage your contract, payment details, general account settings, and password and security-related details.
Options
Description
Virtual Data Centers
View the list of data centers and their details or create a new data center.
Leverage AI functionalities with open source generative models.
Manage containerized applications.
Host and manage your databases with IONOS Cloud database services.
Manage IONOS Storage and Backup services.
Observe system behavior through logging, activity tracking, and gather insights using metrics.
Manage network connectivity and edge networking functions with improved security and IP management.
Use data platform services and manage Big Data workloads.
Manage network security settings, SSH access, and certificates to secure your data center.
Redirects you to the IONOS Cloud Documentation portal.
Redirects you to the Tutorials to help you get started with managing your account.
What's New in DCD
Discover the new version of the DCD, new product launches, recent enhancements, and feature updates in the DCD.
About DCD
Displays version details, copyright information, and the company logo.





The Users & Groups feature provides core Identity and Access Management (IAM) capabilities within the IONOS Cloud environment. It is designed to support Role-Based Access control (RBAC) by enabling fine-grained management of user identities, group associations, and resource-level permissions.
This tutorial guides you through creating and managing Users, Groups, and Resources in the Virtual Data Center (VDC) via the User Manager. You can create new users, add them to user groups, and assign privileges to each group. Privileges either limit or increase your access based on the user role. The User Manager lets you control user access to specific areas of your VDC.
A user is an individual who can log in to IONOS Cloud. Each user can have different roles based on the privileges assigned. The assigned privileges determine the tasks the user is allowed to perform. For example, administrators can assign roles, manage access tokens, enforce MFA, and track user activity across services. For more information about creating users, see Create a user.
A new VDC in the Data Center Designer (DCD) is manageable by contract owners. To assign resource management capabilities to other members in VDC, you can add users and groups and grant them appropriate privileges to work with the data center resources.
A group is a logical collections of users used to streamline permission assignments. Groups enable scalable access control by allowing roles to be applied collectively rather than individually. This is especially effective in large or dynamic teams.
When assigning a user to a group, whether you are a contract owner or an administrator, you can:
Create a new user within DCD and assign the user to a group.
Assign privileges to the group, so users of the group can access and manage products.
It encompasses all resources accessible to users or groups. Access permissions can be granted or restricted at the group or individual user level. The DCD also facilitates efficient resource management and visibility into the resources accessible to specific users or groups. Users, such as administrators or contract owners, with create permissions can create resources, which become editable or sharable to non-administrator users in a group only when the resource is associated with the group. For more information about resource sharing, see Enable or disable access for a resource.
Together, these components form the foundation for secure multi-user access control, secured access, and operational efficiency in IONOS Cloud.
In the DCD, go to Menu > Management > Users & Groups.
Select Create in the Users tab.
Enter the user's First Name, Last Name, Email, and Password.
Select Create to confirm.
Result: A user is successfully created and listed in the Users list.
The creation of groups is useful when you need to assign specific duties to the members of a group. You can create a group and add members to this group. You can then assign privileges to the entire group.
In the Groups tab, select Create.
Enter a Group Name.
Select Create to confirm.
Result: The group is now created and visible in the Groups list. You can now assign permissions, users, and resources to your group.
In the Groups tab, select a group from the Groups list.
In the Privileges tab, select checkboxes next to the privilege name.
Result: The group has the required privileges now.
Users are added to your new group on an individual basis. Once you have created a new member, you must assign them to the group.
In the Groups tab, select the required group.
In the Members tab, add users from the Add User drop-down list.
Result: The users are now assigned to the group. These users have privileges and access rights to the resources corresponding to their group.
Users can be removed from your group on an individual basis.
Select the Members tab.
Click Remove User.
Result: This user is now removed from the group.
In the Groups tab, select the required group.
Select the Resources of Group tab.
Click Grant Access and select the resource to be assigned to the group from the drop-down list.
Result: The group now has the newly assigned resources. You have enabled read access for the selected resource.
Group resource sharing is crucial for managing access and permissions within IONOS Cloud. The primary purpose of assigning a resource to a group in IONOS Cloud is to manage and restrict actions that users (non-administrators) can perform on those resources. Specifically, the actions controlled by group membership are as follows:
Access
Description
View
Adding the resource to the list enables users in the specific group to see the resources.
Edit
Allows users in the group to manage the resource.
Share
Share the resource between the groups of your contract and only those to which you belong. The users belonging to the group with which you share the resource gain view permissions.
Note:
Users created using the IONOS Cloud API /um/users endpoint have limited permissions.
Resources created by the contract owner are, by default, not visible to users.
Users cannot see or interact with resources created under the contract owner without being part of a shared group.
Administrators or contract owners can enable resource access to users by selecting the appropriate checkboxes:
Edit: Select the checkbox to allow users in the respective group to edit or manage the resources.
Share: Select the checkbox to share the resource between the groups of your contract, and only those to which you belong. The users of the group gain view permissions.
To restrict access, select the required resource and clear either the Edit or Share checkboxes or directly click Revoke Access to revoke both permissions.
In the Resources tab, select a resource from the list.
In the Visible to Groups tab, click Add Group.
Select a group from the drop-down list.
Result: This group can now access the allocated resource.
This comprehensive comparison table shows all currently active foundation models in the IONOS AI Model Hub, providing essential information about their capabilities, modalities, and features at a glance. Click on each model name to access detailed summaries and specifications.
The following table provides a comprehensive comparison of all active foundation models currently available in the AI Model Hub:
Model Name
Type
Input Modality
Output Modality
Streaming
Tool Calling
Model Size
Language Model
Text
Text
✅
✅
Small
Language Model
Text
Text
✅
✅
Small
Language Model
Text
Text
✅
❌
Small
Language Model
Text, Image
Text
✅
✅
Medium
Language Model
Text
Text
✅
✅
Medium
Language Model
Text
Text
✅
❌
Medium
Language Model
Text
Text
✅
✅
Large
Coding Model
Text
Text
✅
❌
Medium
Embedding Model
Text
Vector
❌
❌
-
Embedding Model
Text
Vector
❌
❌
-
Embedding Model
Text
Vector
❌
❌
-
Image Generation
Text
Image
❌
❌
-
Image Generation
Text
Image
❌
❌
-
The IONOS AI Model Hub offers three distinct categories of foundation models, each optimized for specific use cases:
Small language models are optimized for fast inference and low resource consumption. They are ideal for real-time applications and scenarios where latency and cost are critical.
Medium-sized models provide a strong balance between response quality and inference speed. They are suitable for applications that demand higher accuracy and more nuanced language understanding.
Large models are designed for maximum language understanding, deep reasoning, and high-quality responses. They are best suited for advanced applications where accuracy and depth of knowledge are paramount.
Embedding models convert text into dense vector representations, enabling semantic search, clustering, and similarity comparison. They are essential for building search engines, recommendation systems, and knowledge retrieval applications.
Text-to-image models generate images from textual descriptions, supporting creative and generative AI use cases such as content creation, design, and prototyping.








Explore our guides and reference documents to integrate IONOS Cloud products and services.
Explore our guides and reference documents to integrate IONOS Cloud products and services.
Additional data center in Frankfurt: IONOS Cloud's services are now also available from our newly added data center in Frankfurt, Germany, enhancing high availability, redundancy, and operational security. Existing deployments in Frankfurt remain unaffected. You can deploy products in the new data center by selecting Germany / Frankfurt am Main (de/fra/2) from the drop-down list in the DCD, or by using the location code de/fra/2 when deploying through the API. For more information, see Release Notes.
December 2025 Releases
Discover our latest products, features, and enhancements to develop innovative applications.
Most Popular
Navigate directly to the most popular product guides to accelerate solution discovery and boost efficiency.
Get Started
With the Data Center Designer, you can create a fully functioning Virtual Data Center and manage services provided by IONOS Cloud.
Account Management
Manage your IONOS DCD account, payment details, and security functions to access and manage your contract securely.
Management
Manage user access and security policies, review resource usage and cost incurred, set cost alerts.
APIs
Build, deploy, and manage applications on the IONOS infrastructure more efficiently to enable integration, improve scalability, and enhance security.
SDKs
Simplify developing and managing applications deployed on the IONOS infrastructure with IONOS SDKs to build scalable, reliable, and efficient solutions.
Config Management Tools
Manage and control the configurations of software systems and infrastructure components in an automated and systematic manner.
AI Model Hub
A comprehensive platform to access AI foundation models and document collections supporting retrieval augmented generation use cases.
Compute Engine
Scalable instances with a dedicated resource functionality.
Cubes
Scalable instance with an attached NVMe Volume.
Managed Kubernetes
Facilitate a fully automated setup of Kubernetes clusters.
Private Container Registry
Manage docker and OCI compliant registries for use with your managed Kubernetes clusters.
Event Streams for Apache Kafka
A flexible and fully-managed Apache Kafka service for seamless data streaming and real-time analytics in the cloud.
In-Memory DB
An open-source instance that offers scalability, security, backup and recovery, and in-memory database persistence while supporting key-value data formats.
MariaDB
A fully-managed, open-source, MySQL-compatible database cluster offering backup, database patching, enhanced security, and scalability.
MongoDB
An open-source, NoSQL database cluster offering security, backup snapshots, and horizontal scalability with replication and sharding.
PostgreSQL
An open-source SQL database cluster offering security, backup and recovery, and horizontal and vertical scalability with replication.
API Gateway
A robust and flexible platform that allows the creation, management, and security of APIs on the IONOS Cloud infrastructure.
CDN
Available on request
Improve content distribution to websites with edge servers designed to optimize content delivery and secure web applications with WAF and Layer 7 DDoS protection.
Cloud DNS
Simplified ways to manage DNS zones and records and enhanced security with DNSSEC.
Cross Connect
Establish secure network connections between multiple Virtual Data Centers using a single LAN conduit within the IONOS Cloud ecosystem.
DDoS Protect
Increase your online security with DDoS protection and ensure uninterrupted operations from malicious attacks.
Flow Logs
Enhance security and provide detailed visibility into your network traffic.
IPv6 Configuration
Seamlessly allow advanced connectivity for addressing your evolving cloud infrastructure through secure, long-term, sustainable solutions.
Managed Application Load Balancer
Managed optimal load balancing service offered at the application level to improve responsiveness and availability.
Managed NAT Gateway
Boost online access and communication by equipping your networks with a managed NAT gateway, which can effectively translate IP addresses to a single, protected point and provide secure internet connectivity.
Managed Network Load Balancer
Maximize your Cloud's availability with a managed NLB that distributes incoming traffic in a scalable, fault-tolerant manner to ensure a seamless and reliable user experience.
VDC Networking
Core network management including configuring firewalls and reserving IPs to establish isolated virtual networks that interconnect VMs and various resources within the virtual data center.
VM Auto Scaling
Automatic scaling of VM instances according to performance metrics and VM load.
VPN Gateway
Securely establish site-to-site connections between on-premises networks and cloud resources using WireGuard or IPSec protocols.
Logging Service
Manage, monitor, and analyze log data from various sources using a centralized, and scalable platform.
Monitoring Service
Advanced metrics service on host-based, application, network, and system metrics, and is compatible with Prometheus.
Monitoring as a Service (Legacy)
Gather metrics on Dedicated Core Server and Cube resource usage.
Backup Service
Secure data storage backup solution with encryption, rapid disaster recovery, and data restoration for all application scenarios.
Block Storage
Cloud-based storage service offering cost-effective, large-scale storage with HDD storage and high performance and durability with SSD storage.
IONOS Object Storage
An S3-compliant service that stores and manages data as objects in a bucket, offering secure storage using access control and object lock.
Network File Storage
A managed service offering shared file storage for multiple VMs and containerized workloads through a secure NFS protocol.
Certificate Manager
Streamlined methods for provisioning and managing SSL/TLS certificates for web applications.
Network Security Groups
Secure your virtual networks effortlessly with Network Security Groups, your shield against unauthorized access and threats.
SSH Key Manager
Securely generate, store, and manage SSH keys to enable reliable authentication, and authorization to access remote servers and systems.
Security Safeguards
Central information source to securely use IONOS Cloud products and services.