Skip to content

Deployment Models

What Deployment Models are supported by Omnistrate

We support three Deployment Models to decide where your application runs and meet your distribution needs:

  • Hosted SaaS: Deployed in your SaaS provider account
  • BYOC Anywhere: Deployed in your customer's account
  • Air-Gapped: Deployed to isolated cloud environments and local hardware

For a comprehensive overview of all deployment scenarios and use cases, visit our Use Cases section.

For Hosted SaaS tenancy options, see the Cellular Multi-Tenancy Overview and Dedicated Tenancy Overview.

Hosted SaaS

The Hosted SaaS model deploys your application in your SaaS provider account and provides a fully managed experience to your customers.

Many SaaS Products like Slack, Stripe, GitHub are offered in this model.

Here is a reference architecture:

ControlPlaneDataPlaneOmnistrateSaaS Provider AccountSaaS Provider Account Control commandsTelemetryDeploy & manageStatus & metrics

Customer Networks

For enhanced security and network isolation while maintaining this deployment model, you can enable Customer Networks. This advanced feature allows your customers to define network partitioning on dedicated stacks, providing complete isolation and the ability to set up private network paths for customer connectivity. This gives you the benefits of dedicated infrastructure per customer while keeping services self-served through Hosted SaaS.

To learn more about configuring customer networks, see Customer Networks.

BYOC Anywhere

Your customers require that data stays in their account due to security and migration cost. To support them, you have to host your application in their account as a fully-managed solution.

The BYOC deployment model exactly addresses this use-case by seamlessly establishing the trust relationship between your account and your customers' accounts enabling the deployment and management of resources.

We follow the industry standard secure techniques to reverse the connection to prevent any inbound connections to your customers' account, encrypted channel through TLS and OAuth to secure the connectivity between your customers account and your account.

Many SaaS Products like Databricks, RedPanda BYOC are offered in this model.

Note

There are several terms for BYOC mode in the industry and they are all somewhat related. - Bring Your Own Cloud (BYOC) - Bring Your Own VPC

Here is a reference architecture:

ControlPlaneDataPlaneOmnistrateService Provider AccountYour Customer AccountBYOC Controller Control commandsConsolidated statusDeploy & manageStatus & metrics

To learn more, check the BYOC Anywhere use case.

Air-Gapped

Air-Gapped installations are suitable for isolated environments, running on a company's local hardware. This model offers the greatest control, security, and independence but requires high initial costs and internal maintenance. In contrast, cloud installations run on a provider's remote servers, offering significant cost savings through a subscription model, enhanced scalability, flexibility, and faster deployment, though at the cost of less direct control and reliance on the internet and the provider.

Here is a reference architecture:

ControlPlaneDataPlaneOperatorOmnistrateSaaS Provider AccountYour Customer Air-Gapped EnvironmentInstaller Package Prepares 1. Download Installer2. Scripted Install/Upgrade

Learn more about air-gapped deployments in the Air-Gapped Use Case. For a step-by-step guide to building an air-gapped installer, see Air-Gapped Installer Plan.