Skip to main content

​
About

Infrastructure as a Service (IaaS) at MacStadium provides secure, high-performance access to bare metal Mac infrastructure, optimized for a variety of development, testing, and general compute workflows.

​
Overview

MacStadium has three secure global data centers across the globe:
  • Las Vegas, USA
  • Atlanta, USA
  • Dublin, Ireland
The data centers adhere to industry-leading security and compliance certifications, including SOC 1, SOC 2, SOC 3, ISO 27001, 27017, and 27018. 👍 For more details, visit Trust page.

​
Getting Started

​
Bare Metal Mac Models

MacStadium offers a variety of standard Intel, M1, M2, and M4 based models of the latest Mac Mini and Mac Studio configurations, optimized for various tasks. These models provide flexibility for users requiring different levels of performance, from lightweight testing to resource-heavy production environments.

​
Networking and Storage

MacStadium infrastructure provides networking and storage solutions that address secure access and throughput controls.
  • Cisco ASAv Firewalls : High-end and high-performance firewall systems that ensure secure network segmentation and traffic management.
  • Pure Storage Arrays : Reliable, high-speed storage arrays for optimal data performance and redundancy.
  • MacStadium Private Cloud Networking - Networking solution to provide for secure access and up to 1 Gbps throughput.

​
Key Differentiators

  • Optimized Mac Models : Mac Mini and Mac Studio offerings are designed to handle a wide range of tasks, from development and testing to high-performance media production environments.
  • Consistent Pricing : Enjoy predictable and transparent pricing, ensuring cost efficiency to scale.
  • Integrated Virtualization with Orka : Orka, is seamlessly integrated with the IaaS, making it easier to manage virtual Mac environments.
  • Apple Expertise : With years of specialized experience in Mac infrastructure, MacStadium delivers a high-level of service and support.
  • High-Security Standards : MacStadium complies with commonly requested security practices, ensuring customer data and operations remain safe and compliant.

​
Data Center Certifications

All of our data centers are audited and/or certified by various internationally-recognized attestation and certification compliance standards. Below is the list of our data center locations and the associated certifications. To request an NDA, ISO certification letter, SOC summary report or certificate listed below, or if you have any other compliance related questions, please contact us. Every MacStadium private cloud deploys with a dedicated Cisco firewall that offers unmatched protection and enhanced security for your cloud environment. MacStadium dedicated firewalls give your security teams root access to the firewall, the ability to configure settings to their specifications, and even the ability to lock MacStadium out, so you maintain total control. With Cisco firewalls, MacStadium customers can:
  • Filter any internet and internal traffic in real-time
  • Perform packet inspection, port blocking, and breach protection
  • Establish secure remote network or multi-site encrypted Virtual PrivateNetwork (VPN) tunnels to connect MacStadium infrastructure into a local environment or public cloud (e.g. AWS, Azure, or Google Cloud)
  • Leverage AnyConnect software client VPN for secure remote user access
  • Enable optional high-availability redundant failover configurations
  • Pass traffic from certain IP ranges (e.g., a Jenkins master) and block all other traffic
  • Depending on your needs, MacStadium offers both virtual and physical Cisco firewalls.

​
Cisco Adaptive Security Virtual Appliance (ASAv)

MacStadium offers virtual firewall solutions based on the best-selling Cisco Adaptive Security Appliance (ASA) protocol. The Cisco Adaptive Security Virtual Appliance (ASAv) runs the same software as physical Cisco ASAs, delivering full ASA firewall and VPN capabilities to cloud environments that help safeguard traffic and multi-tenant architectures. Optimized for data center deployments, the ASAv is designed to work as a virtual machine. The advantage for MacStadium customers of using a virtual firewall comes from faster deployments and easier upgrades. We recommend ASAv firewalls for all use cases that have sustained throughput demands of less than 500 Mbps (125 Mbps Encrypted) as it delivers exceptional security and performance at a great price. With a Cisco ASAv protecting their MacStadium private cloud, customers can:
  • Implement uniform security across multiple physical and virtual domains
  • Accelerate provisioning with predetermined configurations
  • Simplify management by using representational state transfer (REST) APIs to manage the device, easily introduce Cisco ASAv into software-defined networking (SDN) environments, and incorporate ASAv into custom policy-orchestration systems
The virtual appliance supports the same site-to-site VPN, remote-access VPN, and clientless VPN functionalities that physical ASA devices do. Most of the features that are supported on a physical ASA by Cisco software are also supported on the virtual appliance, with the notable exceptions of Cisco not supporting clustering and multiple contexts support (i.e. having multiple separate (virtual) firewalls on the same hardware) on ASAv implementations.

​
Cisco Adaptive Security Appliance (ASA)

MacStadium also offers physical ASA hardware devices for customers who require those capabilities or need more throughput than a virtual firewall can handle. The standard appliance MacStadium offers is a Cisco ASAv10 firewall, and is for any customer who needs a dedicated, virtual security appliance to protect their host environment. When customers need even more power for inspection and protection, MacStadium also offers Cisco Firepower 2100 NGFW series appliances. The main difference between the two appliances is in an increase of 10 gigs per second in speed, connections and packets per second for the 2100 series. All Cisco devices deliver: Market-proven security capabilities that integrate multiple full-featured, high-performance security services, including application-aware firewall, SSL and IPsec VPN, IPS, antivirus, antispam, anti-phishing, and web filtering services.
Comprehensive management interfaces including the graphical Cisco Adaptive Security Device Manager (ASDM), a comprehensive command line interface (CLI), verbose syslog, and Simple Network Management Protocol (SNMP) support that round out a rich complement of management options.