Network + 1.3 - 1.4

Network (NFV)

decoupling of network functions from hardware devices and running them as software instances on virtual machines or containers

Virtual Private Cloud (VPC)

isolated network spave within a public cloud designed to provide a similar level of degmentation, control, and security as private data center

Network Security Groups

used to control inbound and outbound traffic to cloud resources within a VPC

Network Security Lists

Network security lists are also used for managing and securing network traffic in a cloud environment

Cloud Gatways

intermediary devices or services that connect cloud environments with different networks, including private data centers or cloud services

Internet Gatewaty

Serves as a bridge between a company’s VPC and the internet

NAT Gateway

A service that allows instances in a private subnet to access the internet or external services while preventing inbound connections from the internet to those private IPs.

Cloud Connectivity Options

Various methods through which data and applications can connect to and interact with cloud environments

Private-Direct Connection to Cloud Provider

dedicated network link between an organization’s on premises infrastructure and a cloud service provider’s data center

Public

dedicated to a single organizaation and can be hosted on-premises or by third-party

Hybrid

combines public and private models, allowing data and applications to be shared between them

Service Models

Cloud computing describes the various types of services offered over the internet, enabling businesses and users to access computing resources and application without investing in physical infrstructure

Software as a Service (SaaS)

Delivers applications over the internet through a web browser, eliminating the need to install and maintain software on individual devices

Infrastructure as a Service (IaaS)

virtualized computing resources over the internet, offering fully outsources services for computing infrastrucre

Platform as a Service (PaaS)

cloud platform and tools to alloe devleopler to build, test, deploy, and manage applications without worrying about underlying infrstrufrure

Saclability

Capability of a system network or process to handle a growing amount of work, or its potential to enlarge to accommodate growth

Elasticity

Cloud computing regers to the ability to auutometically scale computing resources up or down M

Multitenancy

Software architecture principle where a single instance of software serves multiple tenants, or users

File Transfer Protocol (FTP)

A standard protocol for transferring files between a client and server, using ports 20 (data) and 21 (control), but does not encrypt traffic.

Secure File Transfer Protocol (SFTP)

A secure file transfer protocol that uses SSH (port 22) to encrypt data and commands, providing a safer alternative to FTP.

Secure Shell (SSh)

A cryptopgraphica network protocol that provides secure access to network services over an unsecured network using port 22

Telnet

network protocol used on the Internet or LAN to provide bidirectional to port 23 for interacive text-oritented communication using a virtual terminal connection

Simple Mail Transfer Protcol (SMTP)

standard protocol used by port 25 for email transmission across the Internet

Domain Name System

A hierarchical system that translates domain names into IP addresses, using port 53 for TCP or UDP queries.

Dynamic Host Configuration Protocol (DHCP)

Assigns IP addresses and network settings to devices automatically, using UDP ports 67 (server) and 68 (client).

Hypertext Transfer Protocl (HTTP)

Transfers web content over TCP port 80; a stateless protocol used by browsers and servers.

Network Time Protocol (NTP)

Synchronizes device clocks across a network using UDP port 123 for high-precision time.

Simple Network Management Protocol (SNMP)

Manages network devices; uses UDP 161 for commands and 162 for device responses

Lightweight Directory Access Protocol LDAP

Accesses and manages directory services (like Active Directory) on TCP/UDP port 389.

Hypertext Transfer Protocol Secure (HTTPS)/ SSL

Secure web traffic over TCP port 443 using SSL encryption for privacy and data integrity.

Hypertext Transfer Protocol Secure (HTTPS)/TLS

Secure web traffic over TCP port 443 with TLS encryption; ensures confidentiality and integrity.

Server Message Block (SMB)

File and printer sharing protocol for Windows; uses TCP port 445 for direct IP communication.

Syslog

Collects and sends log messages from devices to a centralized server for monitoring; uses UDP port 514.

Secure SMTP

Secures email communications using SSL/TLS, typically on port 465.

Lightweight Directory Access Protocol LDAP/SSL

Secure LDAP traffic over TCP port 636 using SSL encryption.

SQL Server

Microsoft RDBMS using TCP port 1433 for database access and queries.

MySQL

Open-source RDBMS using TCP port 3306 for database access.

Remote Desktop Protocol (RDP)

Provides remote graphical access to Windows machines using TCP port 3389.

Session Initiation Protocol (SIP)

nitiates, modifies, and terminates real-time sessions (VoIP, video) using ports 5060 (unsecured) and 5061 (TLS-secured).

Internet Control Message Protocl ICMP)

Sends diagnostic and error messages between devices; used for ping and network troubleshooting.

Transmission Control Protocol (TCP)

Connection-oriented protocol providing reliable, ordered, error-checked delivery of data streams.

User Datagram Protocol (UDP)

Connectionless protocol that sends data without delivery guarantees; used for speed-sensitive applications.

Generic Routing Encapsulation (GRE)

Encapsulates various protocols in IP tunnels; used for VPNs and protocol transport over incompatible networks.

Internet Protocol Security IPSec

Secures IP communications with authentication and encryption; operates in Transport or Tunnel mode.

Authentication Header AH

Provides integrity and authentication for IP packets.

Internet Key Exchange IKE

Establishes secure communication channels and negotiates encryption/authentication parameters for VPNs.

Unicast:

One-to-one communication from a single source to a single destination IP.

Multicast

One-to-many communication using a multicast group address; efficient for streaming to multiple recipients.

Anycast:

Sends data to the nearest or best destination among multiple devices sharing the same IP; used in DNS/CDN.

Broadcast

Sends a message from one device to all devices in a network segment; used in IPv4 (not in IPv6).