LoginSign Up
← Back to all sparks
E

Exoscale

DEVOPS
Velocity6.3

European cloud hosting provider offering compute, storage and managed Kubernetes

www.exoscale.com ↗

Exoscale lets customers keep their own encryption keys outside its cloud.

cloud-infrastructureeuropean-cloudkey-managementdata-sovereigntynetworking
◆Current state
Exoscale, a European cloud provider, opened a private preview of KMS External Key Store on 3 November: customers connect Exoscale KMS to their own HSM or key manager through a proxy they host, and Exoscale never sees the key material. It implements the AWS KMS XKS proxy API, so existing proxies work unchanged. This follows a free VPC in every zone in October, object-storage lifecycle rules, asymmetric KMS keys and cheaper IPv6 load balancing.
◆Where it's heading
KMS has moved fast: asymmetric keys in early October, external keys four weeks later. Together with VPC and lifecycle rules, Exoscale is closing gaps against the hyperscalers, and XKS points its pitch at sovereignty-bound customers who need to prove the provider cannot decrypt their data.
◆Prediction
XKS will likely widen from private preview to general availability, and the next steps are probably more services encrypting with KMS keys; the entries don't say which services or when.

◆Recent moves

  1. 11d ago

    KMS External Key Store (XKS) is now in private preview

    ⚡ SPARK

    The second KMS release in a month, and the one that gives Exoscale's sovereignty pitch something to back it. It extends the October run of infrastructure basics into a feature aimed at regulated customers.

    View source ↗
  2. 17d ago

    Virtual Private Cloud (VPC) is now available

    VPC replaces Private Networks with security groups and multiple subnets in one network, free in every zone with a 99.95% SLA. It brings Exoscale's private networking in line with what larger clouds offer, and existing private network users will eventually need to move.

    View source ↗
  3. 24d ago

    New on the Marketplace: MonitOP, powered by Exoscale

    A healthcare software vendor running on Exoscale joins the marketplace. Partner listing, no change to the platform.

    View source ↗
  4. 26d ago

    SOS: Native Bucket Lifecycle Rules

    Object storage buckets can expire objects, prune old versions and abort incomplete multipart uploads on a schedule. Transitions between storage classes are not supported yet, which limits it to cleanup.

    View source ↗
  5. 1mo ago

    KMS now supports asymmetric encryption and digital signatures

    Exoscale KMS adds asymmetric keys for encryption and digital signatures through the API, CLI, portal and SDKs.

    View source ↗
  6. 1mo ago

    Network Load Balancer now supports IPv6

    Network Load Balancers support IPv6 at about 40% less than the IPv4 version, since Elastic IPv6 addresses are free. Pricing is used to push customers toward IPv6.

    View source ↗