Network Planning
The OmniShield feature works on a storage-compute decoupled network, where storage nodes are separated from compute nodes to enhance data security in privacy computing.
Figure 1 shows the OmniShield network. The storage-compute decoupled network consists of five nodes, including one management node, two compute nodes, and two storage nodes. A server can function as a management node and a compute node at the same time. In single-node mode, the operations on management and compute nodes mentioned in the following sections must be performed on the same node.
Where,
- The management node is server, which manages tasks.
- A compute node runs compute services in the TEE.
- A storage node stores encrypted data in the REE.
Parent topic: Installation Overview
