State-of-the-art technology
Under the bonnet, Switch Cloud is based on proven open-source technologies such as OpenStack or Kubernetes, to ensure best possible compatibility. If we do not develop the technology ourselves, we cooperate with Swiss or European partners. The Switch Cloud technology stack consists of these layers:
Layers and their function
- Self-Service UI: User-friendly resource management dashboard
- Monitoring: Overview of system status and error detection via Prometheus and Grafana
- Security layer: Attack protection and access control via firewall, DDoS protection and IAM
- Storage and backup: Secure, scalable data storage with Ceph and S3-compatible systems, supporting HDDs and SSDs depending on the use case
- Containers: Modern and flexible container orchestration with Kubernetes-as-a-Service
- Virtualisation: Distribution of physical resources to virtual machines via OpenStack
- Hardware: Physical basis in data centres, with servers and storage systems
- Network connectivity: Redundant integration of Switch Cloud into the Switch LAN network, to which all Swiss universities and international scientific networks are connected.
Security is non-negotiable
Switch Cloud is operated from two ISO-certified data centres run by Green which are located in Dielsdorf and Lupfig. All security processes and organisational measures are designed for data requiring the highest level of protection. This is complemented by strict data sovereignty: access, storage and processing are the sole responsibility of the institutions – with no back doors for third parties.
An exemplary and forward-looking project based on Switch Cloud is the Medical Research Platform in Bern. Switch is developing it in partnership with the University of Bern, its Faculty of Medicine and the Insel Gruppe. The focus is on supporting research freedom and digital sovereignty, particularly when it comes to managing highly sensitive medical data. Together, we aim to create an interoperable solution that can eventually be used by all Swiss universities and research institutions.
Interoperability between cloud systems
Universities often employ multi-cloud strategies. A sovereign cloud must therefore not be an isolated solution. To promote interoperability, Switch Cloud relies on standardised interfaces: S3 compatibility for storage, open data formats, protocols such as OpenStack, containerisation via Kubernetes for portable workloads, and the well-established Switch edu-ID identification solution, which enables single sign-on between institutions. This allows for hybrid scenarios including commercial clouds, without compromising data sovereignty. We are proud to support universities with the onboarding of the OCRE (Open Cloud for Research Environments) framework agreement. OCRE facilitates access to hyperscaler services for Swiss institutions (and those in 38 other European countries), with minimal administrative effort and without having to go through a new call for tenders. In the future, we see the potential to offer even more cloud solutions from a single source to relieve customers of this complex task if required.
For data transfer, Switch Cloud is directly linked to the Switch LAN high-speed network, which connects all Swiss universities and European scientific networks. This connection guarantees reliable operation, free downloads and transfer speeds of 100 gigabits per second, for efficient exchange with national and international institutions.
A response to real needs
There is no question that hyperscalers boast enormous innovative strength – and we value our collaboration with them. However, discussions with the community show that, when sensitive data is involved, they prefer an alternative. Switch Cloud was designed to complement existing hyperscaler offerings, tailored to the specific needs of research, teaching and internal IT. Our investments in the areas of AI infrastructure and confidential computing are worth mentioning.
The collaborative development of Switch Cloud focuses on three areas of use: research, education and internal IT. In these areas, digital sovereignty is not always of the same importance. Some institutions are also calling for greater clarity in the complex landscape of cloud offerings.
In terms of pricing, we aimed to guarantee reliable planning, with straight forward and transparent tariffs. The more institutions that use Switch Cloud, the better the rates. As a non-profit foundation, we do not focus on maximising profits, but rather on a reliable, controllable and collaborative infrastructure. We placed an emphasis on offering a wide range of options that universities and research institutes can choose from at any time, depending on their specific needs. The requirements for digital infrastructures vary from case to case. Switch Cloud is geared towards this and expands the universities’ own data centres, relieving the burden on operating teams and offering a secure alternative to hyperscalers, particularly for sensitive data.
A sovereign approach to the cloud
Switch Cloud is gradually replacing and extending the existing Switch Engines infrastructure. Its comprehensive ecosystem includes services for compute, storage and backup, security, container and application management, networking, observability and much more. Digital sovereignty hinges on choosing the most suitable cloud. To protect sensitive data and preserve digital independence, you need to be able to rely on a trustworthy, controllable and collaborative infrastructure.
