Reference
Glossary
Definitions of the terms used in the Bulutistan Cloud console and documentation, from API token to VPN service, with a link to each term's main article.
This glossary defines the terms used in the console and in this documentation. Product names, such as Virtual Machines or Backup Center, are explained on each product's overview page.
| Term | Definition |
|---|---|
| API token | A credential for the REST API whose secret starts with pc_live_. It acts as the member who created it, limited to the token's scopes. See Service accounts and API tokens. |
| Application credential | An OpenStack credential for one project, used by OpenStack tools such as the openstack CLI and Terraform. See What is OpenStack API Access? |
| Backup plan | A Backup Center policy that sets when backups run and how long they're kept, for the volumes that you assign to it. See Create and manage backup plans. |
| Boot source | Where an instance's OS disk comes from: an image, an existing volume, or a volume snapshot. See Boot sources: images, volumes, and snapshots. |
| Bucket | A container for objects in Object Storage. A bucket is private or public. See What is Object Storage? |
| Built-in role | One of the roles that the platform defines: Owner, Contributor, Reader, and Billing Operator. You can't change them. See Use built-in and custom roles. |
| cloud-init | The tool in an instance's operating system that applies the admin account, the SSH keys, and the user data when the instance boots for the first time. See Configure a virtual machine at first boot with cloud-init. |
| Commitment | An agreement to spend a fixed amount per hour on compute instances for one or three years, in return for a discounted rate. A commitment is a Savings Plan or Reserved Instances. See Savings Plans and Reserved Instances. |
| Custom role | A role that you define in your organization, with the permissions that you choose. See Use built-in and custom roles. |
| Deletion protection | A setting on an instance or a volume. While it's on, the console and the REST API refuse to delete the resource. See Protect a volume. |
| Egress | Traffic that leaves an instance. Security group rules apply to ingress or egress. See Security group rules. |
| Endpoint group | A Site-to-Site VPN object that names one end of a tunnel: subnets for the local end, or address ranges (CIDRs) for the remote end. See Services, policies, endpoint groups, and site connections. |
| External gateway | A router's connection to an external network. It gives the subnets behind the router a path to the internet. See Subnets, routers, and routes. |
| Flavor | The name that the API and OpenStack tools use for a size. See Sizes and series. |
| Floating IP | A public IPv4 address that you allocate from an external network and associate with an instance or a port, so that the internet can reach it. See What is Floating IPs? |
| Health monitor | Checks the members of a load balancer pool. See Listeners, pools, members, and health monitors. |
| Idempotency key | A value that you send in the Idempotency-Key header to identify one write. A retry with the same key returns the first result instead of repeating the change. See Idempotent requests. |
| IKE policy | The Site-to-Site VPN settings for phase 1: how the two gateways authenticate each other and agree on keys. See Services, policies, endpoint groups, and site connections. |
| Image | The template for an instance's OS disk: an operating system and, for an image that you capture, your software and settings. See What is Images? |
| Ingress | Traffic that comes into an instance. Security group rules apply to ingress or egress. See Security group rules. |
| Instance | A virtual machine (VM). See What is Virtual Machines? |
| IPsec policy | The Site-to-Site VPN settings for phase 2: how the traffic inside the tunnel is encrypted and authenticated. See Services, policies, endpoint groups, and site connections. |
| Key pair | An SSH key in your project that you add to instances when you create them, to sign in over SSH. See Manage SSH key pairs. |
| Listener | The protocol and port on which a load balancer receives traffic. See Listeners, pools, members, and health monitors. |
| Load balancer | Receives traffic on its VIP and spreads it across the members of its pools. See What is Load Balancers? |
| Member | A server, given as an IP address and a port, that receives traffic from a load balancer pool. See Listeners, pools, members, and health monitors. |
| Object | A file stored in a bucket. See Upload, download, and delete objects. |
| Operation | The record that tracks an asynchronous request until it reaches a final state. Operations make up the Activity Log. See Synchronous and asynchronous requests. |
| Pool | In Load Balancers, the group of members that a listener sends traffic to. For Floating IPs, the external network that the addresses come from. See Listeners, pools, members, and health monitors. |
| Port | A connection point on a network that holds an IP address of one of its subnets. Instances connect to subnets through ports. See Ports, fixed IPs, and port security. |
| Project | Holds your resources in one region, inside a subscription. In the REST API, most paths start with a project's ID. See Tenants, subscriptions, projects, and regions. |
| Quota | A limit on how much of a resource a subscription can use, shared between its projects. See Quotas. |
| Recovery point | A backup of one volume, made by a run of a backup plan, that you can restore from. See Restore a volume from a recovery point. |
| Region | A location where Bulutistan Cloud runs a cloud, for example Istanbul 1. See Regions. |
| Restore point | A copy of every disk of an instance, taken at one moment. See Create an instance restore point. |
| Role | A set of permissions. For each permission resource, a role grants no access, read access, or manage access. See Users, roles, and scopes. |
| Role assignment | A role given to a member or a service account on a subscription or a project. See Role assignments. |
| Router | Connects subnets with each other and, through its external gateway, with the internet. See Subnets, routers, and routes. |
| Scope | Where a role assignment applies: a subscription or a project. In the REST API, the project in the request path. See Scopes, URLs, and request format. |
| Security group | A set of rules that allow traffic to and from the instances that use the group. Traffic that no rule allows is dropped. See What is Security Groups? |
| Service account | A machine identity for automation. It calls the REST API with keys whose secrets start with sak_live_. See Service accounts and API tokens. |
| Site connection | The Site-to-Site VPN tunnel itself, between your VPN service and the gateway at the other end. See Services, policies, endpoint groups, and site connections. |
| Size | The compute resources of an instance, such as its vCPUs and memory. See Sizes and series. |
| SNAT | Source network address translation on a router. Instances without a Floating IP reach the internet through the router's address. See Internet access: SNAT and Floating IPs. |
| Subnet | An IPv4 address block in a network. A subnet that you create in the console or through the REST API uses a private address block. See Subnets, routers, and routes. |
| Subscription | Holds projects, and sets their billing currency and their region. Quotas are set for each subscription. See Tenants, subscriptions, projects, and regions. |
| Tag | A key and value that you attach to a resource to organize, find, and select resources. See Organize resources with tags. |
| Tenant | Your organization in Bulutistan Cloud. It holds subscriptions, members, service accounts, and custom roles. See Tenants, subscriptions, projects, and regions. |
| Two-factor authentication | Signing in with a code from an authenticator app in addition to the password. See Enforce two-factor authentication. |
| User data | A script or cloud-init configuration that runs when an instance boots for the first time. See Configure a virtual machine at first boot with cloud-init. |
| VIP | The virtual IP address on which a load balancer receives traffic. See Listeners, pools, members, and health monitors. |
| Virtual network | A private network in a project, divided into subnets. See What is Virtual Networks? |
| Volume | A Block Storage disk that you attach to one instance at a time. See What is Block Storage? |
| Volume snapshot | A point-in-time copy of one volume. See Create volume snapshots. |
| Volume type | The kind of storage that a volume uses. The region decides which volume types you can use. See Volume types. |
| VPN service | The Site-to-Site VPN object that sets the router that your tunnels end on. See Services, policies, endpoint groups, and site connections. |