Cloud and Data Center

CompTIA+ Network Learning

Cloud Computing

The practice of using a network of remote servers hosted on the internet to store, manage, and process data, rather than a local server or personal computer.

Virtualization

The process of creating a virtual version of something, such as a server, operating system, storage device, or network resource.

Datacenter

A facility used to house computer systems and associated components, such as telecommunications and storage systems.

Virtual Network Devices

Software-based network devices that enable the movement and operation of systems within a virtualized environment, such as virtual routers, switches, and firewalls.

Hypervisor

A specialized software that enables virtualization to occur on a physical machine by emulating the physical hardware for each virtual machine.

Type 1 Hypervisor

A hypervisor that runs directly on the hardware, without the need for an additional operating system layer.

Type 2 Hypervisor

A hypervisor that runs as a software application on top of an existing operating system.

Virtual Storage Solutions

Methods for storing data in a virtualized environment, including network-attached storage (NAS), storage area networks (SAN), and fiber channel (FC).

Network-Attached Storage (NAS)

Disk storage delivered as a service over a TCP/IP network, allowing multiple users to access and use it for file storage.

Storage Area Network (SAN)

A specialized type of local area network designed for high-speed data transfer and storage, typically using fiber optic cables.

Fiber Channel (FC)

A specialized hardware that provides high-speed storage area network connectivity, either as a dedicated network or over Ethernet.

iSCSI

The IP Small Computer System Interface, a low-cost storage solution that uses Ethernet switches but has a lower bandwidth limitation compared to fiber channel.

Jumbo Frames

Ethernet frames with a maximum transmission unit (MTU) size larger than the default 1500, requiring network configuration to support them.

InfiniBand

A high-performance computing technology that provides extremely fast data transfer rates and low latency, primarily used in large-scale data centers.

Virtual Firewalls and Routers

Software-based firewalls and routers that operate within a virtualized environment to connect and manage virtual servers.

Virtualization

The process of creating virtual versions of physical devices, such as routers, switches, and firewalls, to replicate their functionality without the need for physical hardware.

Virtual switches

Virtualized versions of physical switches used to connect and manage virtual servers on a network, providing features like layer two VLANs and trunking.

Virtual routers

Virtualized versions of physical routers used to route network traffic in a virtual environment, offering the same features as physical routers without the need for wiring.

Virtual firewalls

Virtualized versions of physical firewalls used to provide security and control network traffic in a virtual environment, offering the same features as physical firewalls without the need for wiring.

Virtual desktops

Desktop environments that are accessed remotely through a web browser, allowing users to use their devices to connect to a virtualized desktop infrastructure (VDI) for tasks like web browsing, document editing, and internet usage.

Software-defined networking (SDN)

A networking approach that uses software to centrally manage and configure physical and virtual network devices, allowing for easier administration and configuration changes across the network.

Voice over IP (VoIP)

A system that digitizes voice traffic and allows it to be transmitted over a network, treating it as data. It uses protocols like SIP (Session Initiation Protocol) to set up, maintain, and terminate calls, providing cost savings and enhanced services compared to traditional phone systems.

PBX (Private Branch Exchange)

A traditional phone system that connects internal phone lines within an organization and provides features like voicemail and caller ID.

Virtual PBX

A virtualized version of a PBX that allows organizations to outsource their telephone system to a cloud provider, utilizing VoIP to send data to the provider and access features like voicemail and messaging systems remotely.

Standard dial tone

The basic service required to make phone calls at an inexpensive rate.

Cloud computing

A combination of virtualization technologies that allow for different ways of accessing and storing data.

Private cloud

A cloud computing model where systems and users have access only to devices within the same private cloud or system, enhancing security.

Public cloud

A cloud computing model where systems and users can interact with devices on public networks, such as the internet and other cloud providers.

Hybrid cloud

A cloud computing model that combines both public and private clouds, allowing for a mix of public and private data and services.

Community cloud

A collaborative effort where infrastructure is shared between several organizations from a specific community, managed internally or by third parties.

NaaS (Network as a Service)

Outsourcing of network capabilities to a service provider, charged based on usage.

IaaS (Infrastructure as a Service)

Outsourcing of server and desktop infrastructure to a service provider, charged based on usage.

SaaS (Software as a Service)

Web-based applications that hide the details of how they work from the user, charged as a utility.

PaaS (Platform as a Service)

Development platform for companies that want to develop applications without maintaining their own infrastructure.

DaaS (Desktop as a Service)

Desktop environment accessible from the internet, provided as a cloud desktop or virtual desktop infrastructure.

Shadow PC

A specialized Desktop as a Service platform that focuses on providing users with a powerful gaming PC for remote access.

Virtual desktop services

Services that provide low power desktops for office workers.

Cloud computing

The practice of using a network of remote servers hosted on the internet to store, manage, and process data, rather than a local server or personal computer.

Elasticity

The ability of a cloud-based system to dynamically adjust resources allocated based on the actual amount of resources needed at any given point in time.

Scalability

The ability of a cloud-based system to handle a growing workload required to maintain good performance and efficiency for a software or application.

Multitenancy

The ability of a cloud-based system to serve multiple users or tenants on a shared infrastructure.

NaaS

Network as a Service, a cloud computing model where networking services are provided over the internet.

IaaS

Infrastructure as a Service, a cloud computing model where virtualized computing resources are provided over the internet.

SaaS

Software as a Service, a cloud computing model where software applications are provided over the internet.

PaaS

Platform as a Service, a cloud computing model where a platform for developing and deploying applications is provided over the internet.

DaaS

Desktop as a Service, a cloud computing model where virtual desktops are provided over the internet.

Public cloud

A cloud computing model where services are provided over a public network, accessible to anyone on the internet.

Private cloud

A cloud computing model where services are provided over a private network, accessible only to a specific organization.

Hybrid cloud

A cloud computing model that combines elements of both public and private clouds, allowing for greater flexibility and customization.

Community cloud

A cloud computing model where services are shared among a specific community or group of organizations with similar needs.

Vertical scaling

Also known as scaling up, it is the process of increasing the power of existing resources in a working environment to improve performance.

Horizontal scaling

Also known as scaling out, it is the process of adding additional resources to handle increased workload by distributing it across multiple machines.

Automated workflows and orchestration

The use of automated processes and coordination to manage and control the allocation and adjustment of cloud resources.

Amazon Web Services (AWS)

A cloud computing platform that offers a wide range of services, including virtual servers, storage, databases, and more.

Microsoft Azure

A cloud computing platform provided by Microsoft that offers a variety of services, including virtual machines, storage, and databases.

Scaling out

Increasing the number of machines in a pool to improve redundancy and reduce downtime.

Multitenancy

A cloud computing architecture that allows customers to share computing resources in a public or private cloud while keeping their data isolated from other tenants.

Single tenancy

Traditional on-premise server environment where only one tenant (customer) uses a server located in their own data center.

Noisy neighbor effect

When one tenant's activities or resource usage negatively impact the performance or reputation of other tenants in a multitenancy solution.

Shared hosting

A multitenancy solution where multiple websites or applications share resources on a single server, potentially leading to resource allocation issues and reduced performance.

Cloud security vulnerabilities

Risks introduced by using multitenancy solutions, including the potential impact of one organization's actions on others, and the possibility of data remnants and virtual machine escapes.

Data remnants

Deleted files from a virtual machine that are left behind on the physical server's storage system, posing a risk to data confidentiality if recovered by an attacker.

Virtual machine escape

When an attacker breaks out of a virtual machine and interacts directly with the underlying hypervisor, potentially allowing them to access other tenant servers and data.

Mitigating VM escape

Hosting virtual servers on the same physical server based on their classification level to limit access to similar types of data.

Importance of virtualization and cloud knowledge for network technicians

As technology trends towards virtualization and cloud computing, network technicians should be familiar with concepts and tools like GNS3 for connecting virtual and physical machines.

GNS3

A network simulation tool that allows users to create virtual networks using virtual devices such as routers, switches, and virtual machines.

VyOS router

A virtual router that can be configured and managed within GNS3 as if it were a physical device.

Virtual devices

Devices such as routers, switches, and virtual machines that exist within GNS3 and are emulated as software.

Network Defense Appliance

A virtual machine within GNS3 that functions as a network security appliance.

Virtual network

A network created within GNS3 using virtual devices, allowing users to practice and simulate network configurations.

Console

A terminal within GNS3 that provides a command-line interface to configure and manage virtual devices.

Infrastructure as Code (IAC)

The ability to manage and provision infrastructure through code instead of manual processes.

Scripted automation and orchestration

The use of computer scripts to automate and coordinate the deployment and configuration of infrastructure components.

Security templates and policies

Configuration files that are applied to devices during deployment to enforce security settings and policies.

Orchestration

The process of coordinating the installation and configuration of multiple systems, often using automation scripts.

Machine learning

The use of algorithms and statistical models to enable computers to learn and make decisions without explicit programming.

Horizontal scaling

The process of adding more resources to a system, such as servers or devices, to handle increased demand or workload.

Elasticity

The ability of a system to automatically scale up or down resources based on demand, often seen in cloud environments.

Standardization

The practice of establishing consistent configurations and processes across infrastructure components to improve efficiency and maintainability.

Special Snowflake System

A system that is different from the standard configuration template used in an organization's infrastructure as code architecture, leading to configuration and supportability problems.

Consistency

The practice of maintaining uniformity and standardization in systems and configurations to ensure efficient and secure operations.

Virtual Private Network (VPN)

A secure connection established between an on-premise network and a cloud provider's global network, allowing for secure communication and access to resources.

Private-Direct Connection

A dedicated and secure connection between an on-premise data center or office network and a cloud provider's network, providing faster speeds and better performance compared to a VPN.

Data Center

A facility composed of network, computers, and storage used to organize, process, store, and disseminate large amounts of data.

Three-Tiered Hierarchy

A network architecture consisting of the core, distribution/aggregation layer, and access/edge layer, providing better performance, management, scalability, and redundancy.

Core Layer

The backbone of a network, merging geographically separated networks into one logical unit using high-speed and expensive routers.

Distribution/Aggregation Layer

The layer below the core layer, responsible for defining network boundaries and implementing access control lists and filters.

Access/Edge Layer

The layer below the distribution/aggregation layer, connecting endpoint devices such as computers, servers, and printers to the network.

Scalability

The ability of a system or network to handle increased workload or growing demands without compromising performance or functionality.

Software-defined networking (SDN)

A network architecture approach that enables centralized control and management of the network using software applications, allowing for virtualization and abstraction of physical devices.

Three-tiered model

A traditional network architecture consisting of three layers - access or edge layer, distribution or aggregation layer, and core layer - commonly found in most enterprises.

Spine and leaf architecture

An alternative network architecture used in data centers, where communication is focused within the data center itself. It consists of two layers - spine and leaf - with the leaf layer aggregating traffic from servers and connecting to the spine layer.

North-South traffic

Refers to communication traffic that enters or leaves the data center from a system residing outside of the data center, with Northbound traffic exiting the data center and Southbound traffic entering the data center.

East-West traffic

Refers to data flow within a data center, such as communication between servers in the data center, even if it goes between different leaf switches.

On-premise data center

A traditional private data infrastructure where an organization has its own data center located in the same building as its main office, housing servers and networking equipment used to support its operations.

Co-located data center

An arrangement where an organization places its servers and networking equipment in a data center owned by another company, renting space instead of building its own data center.

Cloud-based platform

Moving data and services into a cloud service provider's servers and data centers, such as Amazon Web Services or Microsoft Azure, rather than hosting them in on-premise or co-located data centers.