Catalyst BYOC
With bring your own cloud (BYOC), the Catalyst data plane runs inside your own cloud, while Diagrid keeps running the control plane. Your applications connect to the data plane over your own network, so application traffic and data never leave your infrastructure.
Every BYOC deployment is a Catalyst region that lives in your cloud. What differs is who operates it.
Choose how your BYOC region is operated
| Managed | Self-managed | |
|---|---|---|
| Infrastructure created by | Diagrid, in your cloud account | You |
| Operated and upgraded by | Diagrid | You |
| You provide | Scoped access to your cloud account | A Kubernetes cluster and its supporting infrastructure |
| Clouds | AWS, Azure | Any Kubernetes — EKS, AKS, GKE, or your own |
| Best when | You want data residency without operating infrastructure | You need full control over the cluster and its lifecycle |
Managed BYOC is the fastest path. You grant Diagrid scoped access to your AWS account or Azure subscription through a cloud connection, and Diagrid provisions and operates the region for you — the same experience as Dedicated Cloud, but the infrastructure sits in your account.
Self-managed BYOC gives your team full ownership. You deploy the Catalyst data plane onto a Kubernetes cluster you run and connect it to Diagrid Cloud. You control the cluster, its networking, and when it upgrades.
What Diagrid manages either way
In both models, Diagrid runs the Catalyst control plane: configuration, project boundaries, policy enforcement, and identity issuance. Region and project lifecycle is driven from the Catalyst console and CLI, and telemetry flows back to Diagrid Cloud so you get the same observability and support experience.
Diagrid Cloud is never in the critical path of your application's data flow — your applications talk directly to the data plane in your own network.
If both the control plane and the data plane must run inside your infrastructure, see Catalyst Enterprise Server.
What's next
- Managed BYOC — grant access and let Diagrid provision the region.
- Self-managed BYOC — deploy and operate the data plane yourself.
- Regions — how regions fit into your organization.