Public Cloud Marketplaces
NeuVector Prime by SUSE is now available in the AWS and Azure Cloud Marketplace.
This brings the value of running NeuVector, the cloud-native, zero-trust container security platform, to cloud customers with the added benefit of a pay monthly pricing model available through the cloud marketplaces.
This document covers some of the frequently asked questions about the listing in the following 4 categories:
-
[Miscellaneous]
The Listing​
What is the SUSE NeuVector Prime listing on the Cloud Marketplace?
By selecting the NeuVector listing from the public cloud marketplace, customers can deploy NeuVector to their Kubernetes environment with the advantage of having monthly billing via that cloud provider.
Where do I find NeuVector Prime in the Cloud Marketplace?
The listings can be found in the AWS and Azure Marketplace, there are two listings:
-
For AWS Marketplace:
-
For Azure Marketplace:
Why are there 2 listings, which one should I use?
We have 2 listings for NeuVector Prime, in AWS "EU and UK only" and "non-EU and non-UK only" and in Azure "24x7 Support" and "24x7 Support (EMEA Orders Only)", you should pick the listing that reflects where your cloud account gets billed.
Are these listings available in all countries?
The NeuVector Prime listing on the public cloud is not available to purchase in all countries. Your billing country is based on the cloud Account ID used to do the deployment. Please read the addendum at the end of this FAQ for a list of countries that can and cannot transact NeuVector Prime,via the marketplace.
My cloud account is in the USA, but I want to deploy NeuVector in another region, a region that is in a country where I currently cannot transact NeuVector, is this possible?
Yes. As long as your cloud account is billed to one of the allowed countries, it is possible to deploy NeuVector in any region.
Is this listing available in China?
Whilst it is not possible to transact/bill NeuVector Prime in China, it is possible to deploy into regions in China. Please read the addendum at the end of this FAQ for a list of countries that can and cannot transact NeuVector via the cloud marketplace.
Billing​
I have an existing NeuVector subscription; can I use this on the public cloud?
BYOS (Bring Your Own Subscription) NeuVector Prime deployments are supported on the public cloud, but billing would be through your normal software purchase channels and not through the cloud provider marketplace. Once the existing subscription term ends, you can purchase NeuVector Prime via the cloud marketplace and reconfigure your cluster to support monthly billing through the cloud provider.
I have an existing deployment covered by a NeuVector subscription; can I use this new listing in the cloud marketplace for new deployments?
Yes, the marketplace listing works independently from your existing NeuVector Prime subscriptions. Please remember that support processes may be different for deployments using your existing subscription and those billed via the cloud Marketplace.
Tell me more about how the billing for NeuVector Prime works via the cloud?
When purchasing NeuVector Prime through the cloud provider marketplace, the billing is as follows:
-
Billing is monthly and handled via the cloud provider marketplace.
-
Nodes are counted hourly when NeuVector is active and added to a usage total.
-
An average node count is calculated for the month.
-
There is a monthly usage charge for each node in the average node count.
-
The monthly usage charge depends on the number of nodes in use.
There is a 5-node minimum, if the average node count is less than 5 nodes, the charge will be for 5 nodes.
What are the pricing tiers?
NeuVector Prime has different pricing tiers when purchasing via the cloud marketplace. This is based on the number of nodes on which NeuVector is deployed. Details of the tiers are below, please check the listing for further pricing information.
Table 1. Pricing tiers
| Tier | Nodes (from) | Nodes (to) |
|---|---|---|
| 1 | 5 | 15 |
| 2 | 16 | 50 |
| 3 | 51 | 100 |
| 4 | 101 | 250 |
| 5 | 251 | 1000 |
| 6 | 1000 | 15 |
Is there a way to try NeuVector Prime before purchasing?
If using the NeuVector Prime listing in the cloud provider marketplace, billing commences from the time of deployment. NeuVector can also be deployed manually using the standard documentation and repositories. When ready to add support to your NeuVector deployment and have this billed via the cloud marketplace, follow the available documentation.
How does SUSE calculate the ‘average number of nodes’ to bill for?
The average node count is calculated by adding the number of active nodes (counted hourly) and dividing by the number of hours NeuVector has been active in the billing cycle.
Below are 3 examples of how the average node count is calculated.
The example uses 730 hours for the billing cycle. Actual billing would depend on the number of days in the month and the resulting billing cycle.
Table 2. Usage calculations for different scenarios
| Hours Active | Nodes | Usage Total | Average Node count | Node billed | |
|---|---|---|---|---|---|
| Static Usage | 730 | 10 | 7300 | 10 | 10 @Tier 1 |
| Bursting Model | 730 | 10 (562 Hours) & 20 (168 Hours) | 10660 | 15 | 15 @Tier 1 (Rounded from 14.6) |
| Transient Cluster | 336 | 20 | 6720 | 20 | 20 @Tier 2 |
Static usage: Using NeuVector on 10 nodes, for 1 month (730 hours) with no additional nodes added in the month.
Bursting Model: Using NeuVector on 10 nodes for 3 weeks (562 hours) in the month, bursting to 30 nodes for 1 week (168 hours).
Transient cluster: A temporary deployment of NeuVector on 20 nodes for 2 weeks (336 hours).
Are special commercial terms available?
Depending on the deployment, it may be possible to secure special commercial terms. e.g. An annual subscription would be handled via an AWS private offer. Please contact SUSE for more information.
Can my spend on NeuVector Prime count towards my cloud discount program such as AWS EDP or Azure’s MACC?
-
For AWS, the spend can count towards your EDP. Please contact your AWS Sales Team for more details.
-
For Azure, the spend can count towards your MACC. Please contact your Microsoft Azure Sales Team for more details.
How do I purchase NeuVector Prime for additional nodes?
Once NeuVector has been deployed from the listing on the cloud marketplace and billing is active, there is no need to make a specific purchase for additional nodes. Billing is dynamic and based on the number of nodes where NeuVector is deployed. Just add NeuVector to additional nodes in federated clusters as needed.
Is this an annual commitment, will it auto-renew?
By default, the NeuVector Prime listing in the cloud provider marketplace is billed on a monthly cycle, based on usage. Billing is on-going for as long as NeuVector is deployed.
Depending on the deployment, custom monthly pricing may be available. This applies to AWS and Azure deployments.
Technical (Billing)​
Do I need a managed Kubernetes cluster running in my cloud provide to install NeuVector Prime and be billed via the marketplace?
Yes. For AWS, to benefit from monthly billing via the AWS Marketplace, the primary cluster must be an EKS Cluster running in your AWS Account. For Azure, to benefit from monthly billing via the Azure Marketplace, the primary cluster must be an AKS Cluster running in your Azure Account.
On which Kubernetes distributions can the NeuVector Prime Cloud Marketplace listing be deployed?
For AWS, the NeuVector Prime AWS Marketplace listing must be deployed on an Amazon EKS. For Azure, the NeuVector Prime Azure Marketplace listing must be deployed on AKS via the marketplace offering.
Downstream clusters can run any Supported Kubernetes platform, such as RKE, RKE2, K3s, AKS, EKS, GKE, vanilla Kubernetes, OpenShift, Mirantis Kubernetes Engine, and so on. Please see Supported Platforms.
What is the deployment mechanism?
For AWS, the Marketplace listing for NeuVector Prime is deployed using Helm. For Azure, the NeuVector Prime Azure Marketplace listing is deployed using the Azure Portal (and the deployment is CNAB based).
What is the easiest way to get started?
The way to get started is to add the cloud marketplace listing for NeuVector Prime to a managed cubernetes cluster, such as as EKS or AKS. Follow the instructions in the usage section, a Helm chart in AWS and the Azure Portal for Azure, takes care of the application installation and setting up billing.
What version of NeuVector is installed when using the marketplace listing?
The marketplace listing for NeuVector Prime is tied to a specific version of NeuVector, typically the latest version available at the time of the listing update. Please check the listing for further information.
I need a prior version of NeuVector installed, can I still use the listing?
No. There is no choice of NeuVector version when deploying using the marketplace listing. If a prior version of NeuVector is required, must be installed manually using the standard documentation.
How often is the listing updated (including the version of NeuVector)?
The marketplace listing is tied to a specific version of NeuVector, usually the latest version available at the time the listing was last updated.
Typically, the marketplace listing is updated quarterly, or more frequently if there are security issues. NeuVector itself is updated with major, minor, or patch versions every 6-8 weeks.
To update the NeuVector product to a current version before the marketplace listing is updated, please see Updating NeuVector.
I have many Kubernetes clusters across multiple cloud accounts, does the NeuVector billing still work and enable tiered pricing?
Yes. Downstream (federated) clusters running NeuVector can be deployed across single or multiple cloud accounts, on-premises or even across diffferent public clouds. Downstream nodes report up to the primary NeuVector deployment. This process is called federation and is needed to enable tiered pricing for your NeuVector deployments.
Billing is routed to the cloud provider account in which the primary cluster is running.
I have multiple independent clusters, each running a separate installation of the NeuVector Prime marketplace listing, how is this billed?
As the NeuVector deployments are independent, each cluster is billed separately from the others. It is not possible to benefit from tiered pricing across clusters unless the NeuVector deployments are federated. Federation requires that only the primary cluster (not downstream remotes) be installed with the NeuVector Prime marketplace listing. Learn more about federation in Enterprise Multi-Cluster Management.
If Federation is not possible, consider custom terms from SUSE.
How can I federate NeuVector to benefit from tiered pricing across all deployments?
The primary cluster must be running on a managed kubernetes cluster. This is EKS in the AWS Cloud, or AKS in Azure. The cluster must be running the NeuVector Prime marketplace listing.
There MUST be network connectivity between the controllers in each cluster on the required ports. The controller is exposed externally to its cluster by either a primary or remote service. See Enterprise Multi-Cluster Management for more information on federating clusters.
I have purchased multiple SUSE products from the public cloud marketplace (e.g., Rancher Prime and NeuVector Prime), does the marketplace billing method still work?
Yes. The billing mechanisms for the two deployments are independent and will be billed separately via the marketplace.
I already have an existing cluster in place and want to add NeuVector Prime and have this billed via the marketplace. Is this possible?
Yes, providing it is an EKS cluster in AWS, or AKS in Azure. Simply deploy the AWS Marketplace listing for NeuVector Prime to your EKS or AKS cluster.
I already have an existing cluster with NeuVector deployed, can I just install the NeuVector Prime marketplace listing and have support billed via the cloud marketplace?
Yes. This is possible by redeploying the NeuVector Prime from the cloud provider marketplace listing. Please follow the documentation to back up the existing NeuVector configuration, as it may be necessary to restore the configuration into the new deployment.
Technical (Product)​
How do I get support?
It is very simple to open a support case with SUSE for NeuVector. Create a ‘supportconfig’ via the NewVector UI and upload the output to the SUSE Customer Center. The support config bundle can be exported from the NeuVector console under Settings > Configuration.
For multi-cluster (federated) deployments, export the supportconfig bundle from the primary cluster only. The NeuVector Prime billing mechanism must be active on the primary cluster to open a support case.
Is there any difference between the NeuVector Prime product on the cloud marketplace compared to the versions I can run in my own data center or install manually in the cloud?
The NeuVector Prime product in the cloud marketplace is the same product with the same functionality as what you would install manually in the cloud or run on-premises. The only difference is the billing route.
Does the primary cluster (responsible for billing) need to run 24/7?
To ensure continuity with support, it is recommended that the primary NeuVector Prime cluster always remains active.
What if the primary cluster responsible for billing is unable to connect to the cloud provider billing framework?
There may be multiple reasons why the primary cluster is unable to connect to the billing framework, but it is the customer’s responsibility to ensure that the primary cluster is active and connected. While the cluster is not connected to the billing framework, it is not possible to raise a support request.
My primary cluster has been offline, what happens with billing when it reconnects?
If the primary cluster is offline or disconnected from the cloud provider billing framework for a period of time, when it reconnects, the stored usage data will be uploaded and will appear on your next marketplace bill.
Depending on when in the month the primary cluster gets reconnected you may have several months of usage on your next billing cycle.
How do I get fixes and updates to NeuVector?
NeuVector is updated with major, minor, or patch versions every 6-8 weeks. To update NeuVector to a current version before the NeuVector Prime marketplace listing is updated, please see Updating NeuVector.
Miscellaneous​
Where can I find out more about the NeuVector Prime Marketplace listing?
-
For AWS:
- You can find out more about the NeuVector Prime AWS Marketplace listing in the NeuVector documentation.
-
For Azure:
- You can find out more about the NeuVector Prime AWS Marketplace listing in the NeuVector documentation.
Where can I find out more about NeuVector?
Learn more about NeuVector and NeuVector Prime with:
Appendix​
Countries that can transact NeuVector Prime through the cloud marketplace Please see the Geographical Availability of NeuVector Prime and other SUSE Marketplace products at this link.