Cloud Providers
Polaris can currently be deployed on Google Cloud Platform and Microsoft Azure using their respective Confidential Computing services. In all cases, all resources are provisioned on the client's infrastructure, and Fr0ntierX has no ability to access any data or services. All components of the provisioned stack are open-source and can be audited by the client.
Google Cloud Platform
When deploying Polaris on Google Cloud Platform (GCP), a Confidential Virtual Machine (CVM) is provisioned for each Polaris container. The VM is created using a public Polaris image based on the Google Container-Optimized OS and automatically starts the Polaris Proxy along with the configured Client Workload. There are some limitations on the machine configurations that support Confidential Computing. For more information, please refer to the Google Cloud documentation.
You can deploy Polaris on GCP using the Polaris VM offer in the Google Cloud Marketplace.
Microsoft Azure
Polaris containers on Microsoft Azure are provisioned using confidential Azure Container Instances. For each Polaris instance, a confidential container group is created, containing separate containers for the Polaris Proxy and the Client Workload. Some limitations on the CPU count and memory size of the container instances apply. Please refer to the Azure documentation for more information.
You can deploy Polaris on Azure as a Managed Application using the offer in the Azure Marketplace. The Managed Application is configured to grant you full access to all resources, while access by Fr0ntierX to the resources is strictly prohibited.