myDRE Optional Services Catalog
This service catalog defines the optional, advanced add-on infrastructure services available for the myDRE platform. These components enable enhanced functionality—such as centralized software deployment, multi-party computation, and advanced machine learning—while maintaining alignment with ISO 27001:2023 (A.08.20, A.08.22) and NIS 2 security architecture frameworks.
Cost Transparency Policy: Optional services are subject to two cost vectors:
- Additional raw Microsoft Azure consumption costs (billed directly via your organization's Azure Provider).
- Service-specific provisioning or management fees which may be applied by anDREa. All financial figures listed are indicative projections, expressed in Euros (€), and exclude VAT.
1. Centralized Software Share
Instead of uploading redundant installer files across individual research environments, a centralized Software Share provides a consolidated library managed directly by the Tenant's Local Research Support Team.
- Operational Benefits: Greatly optimizes storage efficiency by keeping a single copy of frequently used applications and simplifies the end-user setup experience inside Virtual Machines.
- Deployment Protocol: Requested by the Local Research Support Team via a standard support ticket.
Indicative Monthly Azure Consumption Profile
| Infrastructure Component | Estimated Operational Scope | Indicative Cost (EUR/Month) |
|---|---|---|
| Chocolatey Repository Server | Core package management orchestration engine | €72.00 |
| Azure Storage Account & Fileshare | 1 TB baseline capacity utilization (Estimated at €0.0551 per GB) | €55.10 |
| Storage Transactions | 200,000 Read/Write I/O cycles | €7.50 |
| Azure Private Link | 730 hours continuous secure routing | €7.30 |
| Private Link Network Transit | 10 TB Ingress/Egress data transfer volume | €91.00 |
| Total Estimated Footprint | €232.90 |
2. RDP-over-HTML (Azure Bastion Integration)
This network mitigation allows researchers to securely access both Windows (GUI) and Linux (SSH/GUI) Virtual Machines directly through a standard web browser interface.
- Security & Network Benefits: Bypasses perimeter blocks on standard RDP port
3389. By encapsulating remote sessions natively inside HTTPS port443, it eliminates the exposure of public management ports to the internet. - Technical Constraints: Requires a baseline deployment scale of at least 2 active VMs within the environment. Local Research Support Teams must manually adjust Bastion scale tiers to accommodate user volume spikes.
- Deployment Protocol: Requested by the Local Research Support Team via a standard support ticket.
Indicative Monthly Azure Consumption Profile
| Scale Matrix | Capacity Thresholds | Indicative Cost (EUR/Month) |
|---|---|---|
| Base Configuration | Encompasses the first 40 to 80 concurrently active VMs | €192.00 |
| Incremental Upscaling Tier | Added dynamically for each additional batch of 20 to 40 active VMs | + €96.00 |
| Total Baseline Footprint | €288.00 |
3. Advanced Enterprise Integrations
These specialized platforms can be embedded directly into tenant subscriptions to support complex computing and secure data-sharing frameworks.
Azure Machine Learning (AML) Service
- Capabilities: Provisions enterprise-grade data science environments, model training automation, and GPU-driven compute fabrics directly integrated with existing myDRE security parameters.
- Provisioning & Commercial Inquiries: Contact
support@mydre.orgto review technical prerequisites and receive custom consumption mapping.
Linksight Server Instance Deployment
- Capabilities: Facilitates secure decentralized data analysis through native Multi-Party Computation (MPC). Users can securely execute collaborative analytics across multi-institutional datasets without revealing underlying raw records.
- Implementation: Deployed as a secure instance from the Azure Marketplace into the myDRE shared subscription plane.
- Provisioning & Commercial Inquiries: Contact
support@mydre.orgfor architecture deployment support.