1.3 Designing the Cloud

Physical servers can be migrated to virtual servers. What is the process for virtualizing network devices?

Network function virtualization (NFV)

Where are these devices managed from?

The hypervisor

Where does the virtual web server, a database server, load balancers, virtual switches/routers/firewalls, etc. run inside?

Virtual Private Cloud (VPC)

Large environments and VPCs

Common to have different VPCs for different application instances/different parts of the company

What do you need to connect multiple VPCs?

A Transit Gateway: a “cloud router” which allows connection/communication between VPCs

How do you secure a connection to the VPCs?

Access the cloud through a VPN

What do you need if you want any user in the world to be able to connect to the VPCs?

Virtual Private Cloud Gateway / Internet Gateway

What do you need if you want devices on the VPC to communicate outbound to the internet?

VPC NAT Gateway: Network address translation so private cloud subnets can connect to external resources by translating to a public IP address. External resources cannot access the private cloud

What do you need to connect two different VPCs from different cloud providers?

VPC Endpoint

What are security measures that cloud providers include that you can layer on top of your VPC?

Security groups and lists: effectively a firewall for the cloud. Control inbound/outbound traffic flows Define port numbers or addresses to your security group

Which security measure applies to all the devices on the subnet?

Network security list

What does VNIC stand for?

Virtual Network Interface Cards

Which security measure applies to a specific VNIC?

Network security groups: Different rules for devices in the same IP subnet