live wire
AI · Red Hat documents usage-based admission fair sharing for Kueue 1.4 on OpenShiftRed Hat DeveloperAI: Red Hat maps governed firewall changes from ServiceNow through Ansible and two human approval gatesRed Hat DeveloperCLUSTER MGMT · ACM 2.17 makes Submariner 0.24 GA with Important-rated fixesRed Hat ErrataPLATFORM · Red Hat makes on-premises Lightspeed recommendations GA for Satellite 6.18Red Hat ErrataSECURITY · Red Hat Hardened Images updates Tomcat 10 for nine authentication, access-control and DoS flawsRed Hat ErrataAI · Open Data Hub 3.6.0 EA1 bundles Trainer, MLflow and llm-d componentsOpen Data HubAI · Speculators 0.6.0 adds P-EAGLE parallel drafting for vLLM speculative decodingRed Hat DeveloperSECURITY · OpenShift 4.17.57 fixes seven Go and TLS CVEs in an Important-rated updateRed Hat ErrataAI · Red Hat benchmarks local LLM guardrails with EvalHub, exposing regex accuracy and latency trade-offsRed Hat DeveloperAI · Red Hat maps silent tool-call failures across agentic pipelinesRed HatAPI · Kuadrant 1.5.3 adds GRPCRoute policies and developer-portal API-key workflowsKuadrantAI · (Aug 25) IBM releases Apache-2.0 Granite 4.2 reasoning models in 3B, 8B and 30B sizesIBM ResearchJAVA · Red Hat build of Quarkus 3.33.3.SP1 fixes 13 CVEs in an Important-rated updateRed Hat errataAI · vLLM moves Kimi K2 RL weight sync across 384 H100s in 7.53 seconds (Aug 22)vLLMAI · Red Hat documents usage-based admission fair sharing for Kueue 1.4 on OpenShiftRed Hat DeveloperAI: Red Hat maps governed firewall changes from ServiceNow through Ansible and two human approval gatesRed Hat DeveloperCLUSTER MGMT · ACM 2.17 makes Submariner 0.24 GA with Important-rated fixesRed Hat ErrataPLATFORM · Red Hat makes on-premises Lightspeed recommendations GA for Satellite 6.18Red Hat ErrataSECURITY · Red Hat Hardened Images updates Tomcat 10 for nine authentication, access-control and DoS flawsRed Hat ErrataAI · Open Data Hub 3.6.0 EA1 bundles Trainer, MLflow and llm-d componentsOpen Data HubAI · Speculators 0.6.0 adds P-EAGLE parallel drafting for vLLM speculative decodingRed Hat DeveloperSECURITY · OpenShift 4.17.57 fixes seven Go and TLS CVEs in an Important-rated updateRed Hat ErrataAI · Red Hat benchmarks local LLM guardrails with EvalHub, exposing regex accuracy and latency trade-offsRed Hat DeveloperAI · Red Hat maps silent tool-call failures across agentic pipelinesRed HatAPI · Kuadrant 1.5.3 adds GRPCRoute policies and developer-portal API-key workflowsKuadrantAI · (Aug 25) IBM releases Apache-2.0 Granite 4.2 reasoning models in 3B, 8B and 30B sizesIBM ResearchJAVA · Red Hat build of Quarkus 3.33.3.SP1 fixes 13 CVEs in an Important-rated updateRed Hat errataAI · vLLM moves Kimi K2 RL weight sync across 384 H100s in 7.53 seconds (Aug 22)vLLM
upstreambeat.ai
guideAI

Red Hat maps the four layers needed to move enterprise AI beyond a model pilot

A new architecture guide separates compute, model storage, serving and integration—and shows which responsibilities remain when teams use managed APIs.

Four-layer AI architecture with managed API boundary and enterprise integration.
AI-generated illustration
By The News Desk· Aug 27, 2026

A model endpoint is only one part of an enterprise AI system. In a new architecture guide, Red Hat divides the production stack into four layers: compute, model storage, inference and serving, and integration with existing systems.

The framework is useful because it makes the boundary between managed and self-hosted AI explicit. A managed model provider can operate the first three layers, but the application team still owns integration. A self-hosted deployment keeps all four layers inside the organization’s operating model.

What the four layers cover

The first layer is accelerator-backed compute. Red Hat describes GPU capacity, device memory and expected concurrency as linked sizing decisions: insufficient capacity appears as latency, throttling or queued requests. OpenShift and GPU operators are presented as the scheduling and isolation layer for self-hosted inference.

The second layer is durable model storage. That includes weights, tokenizers and serving configuration, with object storage or versioned OCI images as common packaging choices. The guide recommends maintaining an approved catalog of model checkpoints rather than treating shared storage as an informal model registry.

The third layer separates the inference engine from model serving. Engines such as vLLM load weights, tokenize requests, batch work and stream output. Serving adds the operational envelope: routing, health checks, replicas and autoscaling aligned to GPU capacity. Red Hat positions Red Hat AI Inference, built around vLLM, as its supported runtime option and says equivalent capabilities are included with Red Hat AI Enterprise.

Integration is the lasting responsibility

The fourth layer is where the model connects to databases, identity providers, monitoring systems, internal APIs and business workflows. Red Hat distinguishes two traffic directions.

For systems calling AI, the application remains in control and sends requests to an OpenAI-compatible endpoint. Production concerns include authentication, retries, quotas, token-aware rate limits and audit logging. The guide points to Red Hat Connectivity Link as an AI-aware gateway for this traffic on Kubernetes and OpenShift.

For AI calling systems, an agent or its framework selects tools and may chain actions. That expands the control problem to tool discovery, delegated access, input validation and unintended actions. The guide presents Model Context Protocol as a common tool interface, while warning that enterprises still need federated discovery, identity-based filtering and audit. Red Hat says Connectivity Link’s MCP gateway, currently in technology preview, is intended to provide that governed front door.

What teams can do with the framework

Architecture reviews can use the four layers as a responsibility checklist. Teams choosing managed APIs should document which provider operates compute, storage and serving while retaining an explicit plan for integration. Teams self-hosting on OpenShift should add model artifact governance, accelerator capacity and serving operations to that same plan.

The practical lesson is deliberately unglamorous: selecting a model does not select an architecture. The work that turns a capable model into a dependable application sits in the infrastructure and integration around it.

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.