Cloud Flashcards
Scalability
Handles the growing workload required to maintain good performance and efficiency for a given software or application
Virtual Scaling (Scaling up)
Increasing the power of the existing resources in the working environment
Horizontal Scaling (Scaling Out)
Adding additional resources to help handle the extra load being experienced
Elasticity
Attempts to match the resources allocated with the actual amount of resources needed at any given point in time
Platform as a Service (PaaS)
Somewhere between SaaS and IaaS. A typical PaaS solution would deploy servers and storage network infrastructure (as per IaaS) but also provide a multi-tier web application/database platform on top.
Desktop as a Service (Daas)
Means of provisioning virtual desktop infrastructure (VDI) as a cloud service. VDI allows a client browser to operate an OS desktop plus software apps. This removes the need for an organization to deploy and maintain client PCs and software installs.
What Is Infrastructure as Code?
Provisioning architecture in which deployment of resources is performed by scripted automation and orchestration. (cloud)
Orchestration
Automation of multiple coordinated steps in a deployment process.
Examples of host-based hypervisors
VMware Workstation
Oracle® Virtual Box
Parallels® Workstation.
Type II hypervisor
Is itself installed onto a host operating system.
Type I hypervisor
(bare-metal)
Installed directly onto the computer and manages access to the host hardware without going through a host OS.
Network functions virtualization (NFV)
- A way to virtualize routers, firewalls, and load balancers
- Extract network functions from hardware they ran on
- Packaged as virtual machines (VMs)
Virtual Network Function (VNF)
- Run as VMs on standard server platforms.
- Less epxensive and more flexible than specialized hardware
- Specifies and deploys instances of each virtual appliance
- Software implimentations of network functions
NFV Infrastructure
(Virtual Network Function)
- Harware and virtual resources necessary for deploying, managing, and executing VNFs
Management and Orchestration (MANO) vnf
- Oversees the lifecycle management of the VNFs
- Orchestrates the resources across the NFVI
Fibre Channel
-High speed communications protocol for SANs.
-1 to 128GFC (Gbps)
Channel over Ethernet (FCoE)
-Fibre Channel packets over Ethernet cabling
-Allowing for a mixed use Ethernet network with LAN and SAN
-Requires special 10/40/100G adapters that combine the function of NIC and HBA,
-San
Internet Small Computer System Interface (iSCSI)
-SAN
-IP tunneling protocol that enables the transfer of SCSI data over an IP-based network
-Inexpensive alternative to Fibre Channel
North-South traffic
Traffic that flows into and out of a data center.
East-West traffic
Communication between the different components of a data center.
Private Cloud
Systems and users only have access with other devices inside the same private cloud or system
Community Cloud
Collaborative effort where infrastructure is shared between several organizations from a specific community with common concerns
Virtual Machine (VM) Escape
Occurs when an attacker breaks out of one of the isolated VMs and begins to directly interact with the underlying hypervisor
Infrastructure as Code (IaC)
Enables managing and provisioning of infrastructure through code instead of through manual processes
Private-Direct Connection
Extends preexisting, on-premise data center into the provider’s network to directly connect to your virtual private cloud network.
Virtual Network Computing (VNC) Port 5900
*Designed for thin client
*Virtual Desktop Infrastructure (VDI)
Virtual Desktop Infrastructure (VDI)
Hosts a desktop environment on a centralized server
Core Layer
*Cloud Three Tiered Hierarchy
*Most powerful equipment
*Merge geographically separate networks to one logical
*Min of 2 routers in a redundant config
Distribution/Aggregation Layer
*Cloud Three Tiered Hierarchy
*Implement ACLs and filters
*Define policies for network at large
*L3 Switches
Access/Edge Layer
*Cloud Three Tiered Hierarchy
*L2 switches
Software-Defined Networking (SDN)
Network centrally controlled, or programed, using software applications
Application Layer
SDN
*Rsource request
*Info about the network as a whole
Control Layer
SDN
*Uses info from the applications and decides how to route a data packet
*How traffic is
-Prioritized
-Secured
-Forwarded to
| Controls traffic
Infrastructure Layer
|SDN
*SDN
*Contains devices that receive info about where to move the data and then move it
*Can be physical and/or virtual
Management Plane
*SDN
*Monitor traffic and status
Spine and Leaf Architecture
*Alternative to three tiered cloud architecture
*Leaf: Access switches
*Spine: Interconnect all leaf layer switches
*Faster/less latency that 3 tier
Software-Defined Wide Area Network (SD-WAN)
Allows any combination of transport services to securely connect users to applications.
North Traffic
Data leaving
South Traffic
Data entering
