Horizon Cloud Service on IBM Cloud offers several methods of connecting to an existing data center or network with corporate or enterprise applications and data.

During the setup process, you can choose from different connection types and speeds, including VPN, Dedicated Connection, MPLS, or Network Exchange. You can also completely isolate your Horizon Cloud Service environment from the corporate network. When users request corporate resources from the virtual desktop or RDSH desktop or application, the network traffic traverses the preconfigured connection between the Horizon Cloud Service data center and your corporate data center.

Some resources, such as user profile or persona, are better served hosted in the Horizon Cloud Service tenant. A utility server, housed in the Services Zone, is a Windows-based server that provides resources for the services supporting the Horizon Cloud Service infrastructure. In addition to user profile and persona data, utility servers can also be configured to deliver Active Directory, VMware Dynamic Environment Manager™, DHCP, DNS, and File Services. Some services may require purchasing additional storage.

The diagram below shows a typical Horizon Cloud Service on IBM Cloud deployment with the network connections between end users, environment, and the Horizon Cloud Service. You can choose whether to allow end users to access their cloud-hosted virtual desktops through the Internet or only when they are on the corporate network.

Figure 1. Typical Horizon Cloud Service on IBM Cloud Deployment Model