Private cloud consulting — engineers who design, deploy, and operate it in production
Open-source Cozystack (a CNCF project we create and maintain) →Ænix Platform, the supported commercial distribution →Aenix builds, operates and migrates it.
Private cloud consulting is an advisory and delivery service in which experienced platform engineers design, build, migrate to, and operate a private cloud running on infrastructure the customer controls. Aenix delivers it as the team behind Cozystack, an open-source CNCF project that runs virtual machines (via KubeVirt) and containers on one Kubernetes API, with Cilium eBPF networking, LINSTOR/DRBD storage, and Tenant-CRD multi-tenancy. Engagements suit organizations leaving VMware after Broadcom changes, meeting sovereignty mandates, repatriating from hyperscalers, or sizing private infrastructure for AI workloads. Aenix covers architecture design, multi-tenancy and operations model, migration, and operational handover, recommending platforms on technical fit rather than partnership economics, with no per-CPU licensing and no vendor-roadmap lock-in.
Quick facts
What it isAdvisory and delivery service where Aenix engineers design, build, migrate to, and operate a customer-controlled private cloud.
LicenseApache 2.0 (no per-CPU / per-core licensing)
StatusCozystack is a CNCF project (Sandbox since 2025-02-28; Incubating expected late summer 2026)
Who it is forOrganizations exiting VMware after Broadcom, under sovereignty mandates, repatriating from hyperscalers, building a service-provider cloud, or sizing private AI infrastructure.
Engagement modelArchitecture review (5-15 days), implementation (3-12 months), or managed private cloud; preceded by a free 30-minute discovery call.
Platform foundationCozystack: KubeVirt VMs and containers on one Kubernetes API, Cilium eBPF networking, LINSTOR/DRBD storage, Tenant CRD multi-tenancy.
Vendor stanceNo hyperscaler bias; OpenStack, OpenShift, and vendor-led platforms supported when they fit better than Cozystack.
Private cloud is back — driven by Broadcom-induced VMware exits, sovereignty mandates, AI workload economics, and FinOps pressure on hyperscaler bills. The Broadcom Private Cloud Outlook 2025 found 53% of organizations now prioritize private cloud for new workloads, and 69% are evaluating repatriation. The architecture decisions are bigger than picking a vendor — they shape operations for the next decade.
Ænix is the team behind Cozystack, an open-source CNCF project — a Kubernetes-native private cloud platform we run in production with service providers, banks, and regulated enterprises. Our private cloud consulting engagements bring those same engineers to your engagement.
Pairs with:Ænix Private Cloud Platform for regulated enterprises building private/hybrid sovereign cloud; Public Cloud Platform for large operators running their own public-cloud-class platform.
Production private cloud experience · Open-source foundation · No hyperscaler bias · EU + Central Asia
Who needs private cloud consulting
The engagement fits when:
VMware exit triggered by Broadcom — re-architecting on a new foundation rather than VCF subscription
Sovereignty / regulator pressure — data must live in customer-controlled infrastructure
Cost trajectory — public cloud bill outpacing predictability
AI workload economics — sustained inference / training where hyperscaler economics don’t fit
Service-provider model — building a customer-facing private cloud product
Greenfield — new infrastructure with private cloud as the architecture
If two or more apply, structured private cloud consulting compounds. If you have one trigger and a small estate, lighter-weight engagement (architecture review only) may be sufficient.
What we cover in a private cloud engagement
1. Architecture design
Compute layer (KubeVirt-based virtualization, container orchestration), storage (LINSTOR/DRBD via Piraeus), networking (Cilium / NSX-equivalent), identity, observability, backup/DR. Decisions documented with named trade-offs.
2. Multi-tenancy and operations model
Tenant CRD, per-tenant quotas, RBAC, audit. For service-provider model, customer-facing portal and billing integration.
3. Migration and integration
From VMware, OpenStack, hyperscaler, or hybrid — migration plan, cutover sequencing, integration with remaining cloud workloads.
4. Operational handover
Runbooks, on-call patterns, capacity planning, security and compliance posture. Knowledge transfer to your platform team.
Vendor-led “private cloud in a box”
Vendor sells a turnkey private cloud appliance. Lock-in is structural; the vendor’s roadmap becomes your roadmap. Worst of both worlds: hardware refresh cost + vendor licensing.
Cloud rebuild on commodity hardware
Team builds private cloud from open-source components without the operational discipline that hyperscalers spent a decade engineering. Self-service breaks; operational debt accumulates.
Architecture optimized for one trigger
Built for VMware exit, but didn’t consider AI workloads coming next year. Built for sovereignty, but didn’t account for cost. Built for cost, but didn’t address sovereignty. Re-architecting later is expensive.
Under-invested platform-team capacity
Private cloud is built; platform team is the same size as the team that operated VMware. Operational debt builds; team burns out; private cloud becomes the next emergency.
Implementation engagement (3-12 months) — Ænix engineers integrated with your team, building the foundation, multi-tenancy, operations model. Knowledge transfer throughout.
Managed private cloud — for organizations needing the platform but lacking operating capacity.
No hyperscaler partnership. On a private-cloud decision that is the material fact: nothing in our margin moves when the answer is “keep this in the public cloud”, so we can say it.
We operate the destination.Cozystack is in production with service providers and regulated enterprises, so the capacity model and the operational headcount in our recommendations come from bills we have paid.
When
What
Output
Day 0
30-min discovery call (free)
Confirm fit
Phase 1: Architecture review (5-15 days)
Focused engagement
Target architecture, capacity model
Phase 2: Implementation (3-12 months)
Integrated build
Production private cloud, runbooks, knowledge transfer
Phase 3: Operate (optional)
Managed-services or in-house
Sustained private cloud
"Running Nuvolos on sovereign bare metal meant we needed hyperscaler-grade multi-tenancy without the hyperscaler. Cozystack delivered exactly that — isolated tenants, shared GPUs, KubeVirt for legacy workloads — and it's why we can promise our customers infrastructure control, not just a workspace."
Alexandru PopescuCEO, Nuvolos
"Aenix has been a true partner in building Hikube, our Swiss sovereign cloud. Their technology is rock-solid, but what really sets them apart is how closely they listen and the quality of their support, always responsive, always invested in our success. As Hikube has grown, Aenix has grown with us. It's a partnership in the fullest sense."
Matthieu RobinCEO, Hidora & Hikube
"Cozystack has the energy of a young project and the strength of a mature platform — a rare and rather dangerous combination for the old guard. Ænix maintains it with the mindset of a hungry startup: they listen, move fast, and solve customer problems instead of sending them into a support maze."
Qasym MajenFounder, QOSI — Qazaq Open Source Initiative
"Cozystack is a powerful platform, but Ænix is what lets us squeeze every last bit of value out of it. Their team knows the product down to the source code, responds within minutes rather than days, and treats our roadmap as if it were their own. With Ænix behind us, we ship new managed services faster and sleep better — the platform just keeps running."
Evgeniy KozhukhovskiyCEO & Founder, Kubeone
"Working with Ænix feels less like buying support and more like gaining an engineering partner. They bring serious product and platform expertise to every conversation, flag risks before they become incidents, and help us turn Cozystack into real business results: shorter time-to-market, predictable operations, and infrastructure costs we can finally plan around."
SFSergey FedenyakCEO & Founder, Gohost
"Cozystack helps us stay agile and spread opensource as far as we can reach."
Tamerlan AbuFounder, QOSI — Qazaq Open Source Initiative
The logos above are production Ænix Public Cloud Platform deployments. Named references for the NDA-covered engagements are shared on the discovery call.
Ænix is the team behind Cozystack — a CNCF Project, Kubernetes Certified Distribution, OpenSSF Best Practices.
Frequently asked questions
Do we have to use Cozystack for the private cloud?
No. Cozystack is the open-source foundation Aenix recommends for multi-tenant and sovereign use cases, but engagements also extend OpenStack, OpenShift, and vendor-led platforms when those are the better technical fit. Recommendations reflect technical fit, not partnership economics.
How does private cloud consulting differ from VMware migration consulting?
VMware migration is one path that can lead to private cloud when the destination is private. A private cloud engagement covers all paths to a customer-controlled platform: VMware exit, OpenStack rebuild, hyperscaler repatriation, and greenfield builds.
What does an engagement cover?
Four areas: architecture design (compute via KubeVirt, LINSTOR (DRBD) storage, Cilium networking, identity, observability, backup/DR); multi-tenancy and operations model using the Tenant CRD, quotas, RBAC, and audit; migration and integration; and operational handover with runbooks and knowledge transfer to your platform team.
How long does it take and how is it structured?
It starts with a free 30-minute discovery call, then an architecture review of 5-15 days producing a target architecture and capacity model, followed by an optional implementation engagement of 3-12 months with Aenix engineers integrated into your team, and optional managed operation afterward.
Is the private cloud platform vendor-locked or licensed per CPU?
No. The recommended foundation, Cozystack, is open source under Apache 2.0 with no per-CPU or per-core licensing, so the platform is one you own without vendor-roadmap lock-in. Aenix productizes it as the Ænix Platform and sells services on top, but the underlying project stays open.
Private cloud or hybrid cloud — which should we choose?
Most modern deployments end up hybrid, with selected workloads on private infrastructure and others remaining in public cloud. Pure private cloud is a specific choice driven by sovereignty or cost economics. The engagement assesses which model fits your workloads, regulations, and budget.
Ready to talk?
Book a 30-minute discovery call — no commitment. We confirm fit, the right platform, and the next steps.