AWS Networking Refresher: The Core Concepts

This set of flashcards covers key terms and concepts from the AWS Networking Refresher lecture, focusing on the OSI model, networking principles, firewall types, and security mechanisms.

OSI Model

A conceptual framework used to understand network communication divided into seven layers.

Layer 1 (Physical)

The hardware components responsible for transmitting raw bits, such as cables and servers.

Layer 2 (Data Link)

Transfers data between adjacent nodes, using MAC addresses and frames.

Layer 3 (Network)

Controls logical addressing and routing between networks using IP addresses and packets.

Layer 4 (Transport)

Manages end-to-end communications, reliability, and flow control, utilizing TCP/UDP and ports.

Layer 7 (Application)

The layer that users interact with, which processes application-specific data.

CIDR (Classless Inter-Domain Routing)

A method for allocating IP addresses and managing IP routing.

NAT (Network Address Translation)

A technique that allows private IP addresses to access the internet without exposing them.

VLANs (Virtual Local Area Networks)

Logical partitions of a physical switch to create separate networks.

Jumbo Frames

Ethernet frames larger than 1500 bytes, used to increase network efficiency.

Stateful Firewall

A firewall that monitors and allows return traffic if it is part of an established connection.

Stateless Firewall

A firewall that treats each packet independently and requires explicit rules for both inbound and outbound traffic.

Layer 7 Firewall

A security tool that filters web traffic based on content to prevent attacks like SQL Injection.

DDoS (Distributed Denial of Service)

An attack where multiple systems target a single service to overload it and cause a denial of service.

SSL & TLS

Cryptographic protocols that secure communications over networks by encrypting data in transit.

BGP (Border Gateway Protocol)

The protocol used to manage how packets are routed across the internet.

IPSEC VPN

A secure network connection that encrypts data sent over the public internet.