Hypertext Transfer Protocol - Enables clients (typically browsers) to request resources from HTTP server on port 80 by default - Requests resource with URL (uniform resource locator) - Server responds with either datea or error message - Data sent unencrypted and no authentication from client or server

- Defines the formats of the responses and requests to and from HTTP servers - Payload is usually HTML (Hypertext Markup Language).

- HTTP Servers connected to the internet and hosting websites - Main platforms are Microsoft Internet Information Server (IIS), Apache and nginx

- Private HTTP server allocated by rented as service from ISP - Typically unmanaged or management has an additional cost

Virtual Private Server - ISP Allocated VM within a physical server - Isolated by a hypervisor

Secure Sockets Layer/ Transport Layer Security - Developed to address security problems with HTTP - Encrypts TCP connections - When used with HTTP is called HTTP Secure (HTTPS)

HTTP Secure - Web server is installed with digital certificate from certificate authority (CA) - Proves identity of server, assuming client also trusts CA - Certificate is wrapper for public/private encryption key pair - Server and client use certificate to set up an encrypted tunnel - Sent of port 443

File Transfer Protocol - Used to perform administrative upload/downloads for servers and appliances - Port 21 used for commands and status, but not to transfer data

- Client sends PORT command specifying chosen data connection port - Server opens a connection between client port and port 20 on the server - Poses issues for some firewalls, as the server is initiating inbound connection

- Client opens data port - Sends PASV command to server control port - Server opens random high number port and sends to the client with PORT command

Trivial File Transfer Protocol - Connectionless, running over UDP port 69 - Not guaranteed delivery - Only suitable for small files - Only supports reading (GET) and writing(PUT) files. - Most commonly used by legacy network applications. - No security mechanisms

Secure FTP - Encrypted authentication and data transfer between client and server - Secure link is created using SSH over TCP port 22 - Command and data can then be sent over link without risk - Requires an SSH server that support SFTPs

- Means of securing FTP over SSL/TLS - Use AUTH TLS to upgrade insecure connection over port 21 to secure one. - This protects authentication credentials - Data connection can be encrypted using PROT command

Network Applications Flashcards by Peter Rusk

HTTP

Hypertext Transfer Protocol

Enables clients (typically browsers) to request resources from HTTP server on port 80 by default
Requests resource with URL (uniform resource locator)
Server responds with either datea or error message
Data sent unencrypted and no authentication from client or server

How well did you know this?

Not at all

Perfectly

HTTP Header

Defines the formats of the responses and requests to and from HTTP servers
Payload is usually HTML (Hypertext Markup Language).

How well did you know this?

Not at all

Perfectly

Web Servers

HTTP Servers connected to the internet and hosting websites
Main platforms are Microsoft Internet Information Server (IIS), Apache and nginx

How well did you know this?

Not at all

Perfectly

Dedicated Server

Private HTTP server allocated by rented as service from ISP
Typically unmanaged or management has an additional cost

How well did you know this?

Not at all

Perfectly

VPS

Virtual Private Server

ISP Allocated VM within a physical server
Isolated by a hypervisor

How well did you know this?

Not at all

Perfectly

Cloud Hosting (HTTP Server)

Website runs on cloud on several hardware computers, allowing more scalability if needed

How well did you know this?

Not at all

Perfectly

Shared Hosting (HTTP Server)

Website is hosted within private directory on shared server
Performance can be affected by other sites hosted on server because they all share resources

How well did you know this?

Not at all

Perfectly

SSL/TLS

Secure Sockets Layer/ Transport Layer Security

Developed to address security problems with HTTP
Encrypts TCP connections
When used with HTTP is called HTTP Secure (HTTPS)

How well did you know this?

Not at all

Perfectly

HTTPS

HTTP Secure

Web server is installed with digital certificate from certificate authority (CA)
Proves identity of server, assuming client also trusts CA
Certificate is wrapper for public/private encryption key pair
Server and client use certificate to set up an encrypted tunnel
Sent of port 443

How well did you know this?

Not at all

Perfectly

FTP

File Transfer Protocol

Used to perform administrative upload/downloads for servers and appliances
Port 21 used for commands and status, but not to transfer data

How well did you know this?

Not at all

Perfectly

Active FTP

Client sends PORT command specifying chosen data connection port
Server opens a connection between client port and port 20 on the server
Poses issues for some firewalls, as the server is initiating inbound connection

How well did you know this?

Not at all

Perfectly

Passive FTP

Client opens data port
Sends PASV command to server control port
Server opens random high number port and sends to the client with PORT command

How well did you know this?

Not at all

Perfectly

TFTP

Trivial File Transfer Protocol

Connectionless, running over UDP port 69
Not guaranteed delivery
Only suitable for small files
Only supports reading (GET) and writing(PUT) files.
Most commonly used by legacy network applications.
No security mechanisms

How well did you know this?

Not at all

Perfectly

SFTP

Secure FTP

Encrypted authentication and data transfer between client and server
Secure link is created using SSH over TCP port 22
Command and data can then be sent over link without risk
Requires an SSH server that support SFTPs

How well did you know this?

Not at all

Perfectly

Explicit TLS (FTPES)

Means of securing FTP over SSL/TLS
Use AUTH TLS to upgrade insecure connection over port 21 to secure one.
This protects authentication credentials
Data connection can be encrypted using PROT command

How well did you know this?

Not at all

Perfectly

Implicit TLS (FTPS)

Negotiates SSL/TLS tunnel before exchange of FTP commands
Uses Port 990
Tricky to use with firewall

SMB

Server Message Block

Provides File/Print Sharing Services over windows network
Allows hows to share directories and printers to other machines.
Typically run over Port 445

Port 9100

Referred to as standard TCP/IP port, Appsocket, or JetDirect
Establishes TCP connection to transfer raw Page Description Language (PDL) and Printer Job Language (PJL)
Most common PDLs are PS and PCL

IPP

Internet Printing Protocol

Adapted form of HTTP that uses port 631 and can be implemented as secure protocol (IPPS)
Provides better support for status messaging than port 9100

WSD/AirPrint

Allow device to advertise service capabilities over network
Windows and Mac hosts can add device using play and play and manage it with status updates

SQL

Structured Query Language

- Used to operate relational databases

SMTP

Simple Mail Transfer Protocol

Specifies how mail is delivered from one system to another.
Server SMTP server finds IP of recipient server using domain name of recipient email address
Recipient servers are registered in DNS for MX and A records
Tries to send message several times and delivers non-delivery report(NDR if it failed.

SMTPS

Secure SMTP

- Works much like HTTPS with certificate on server and negotiations between client and server

Port 25

Used to relay messages between SMTP servers

- If security is required STARTTLS command can be used to set up secure connection

Port 587

- Used by mail clients to submit messages for delivery by SMTP server - Servers configured for 587 should use STARTTLES and require authentication to send

POP

Port Office Protocol - Allows user client email software to access mailbox server - Establishes connection to POP server on port 110 - User is authenticated and contents are downloaded to local PC - Generally speaking, messages are deleted from mailbox server when they are downloaded - Can be secured with TLS using port 995

IMAP

Internet Mesage Acces Protocol - Supports permanent connections to mailbox server and connecting multiple clients to mailbox at same time. - Also allows client to manage mailbox on server - Port 143. - Secure TLS connection on port TCP/993

POTS

Plain old telephone service | - Legacy, analog voice service

PBX

Private Branch Exchange - Automated switchboard allowing single connection point for orgs voice lines - Provides full phone system functionality over digital digital trunk line

SIP

Session Initiation Protocol - One of most widely uses session control protocols - SIP endpoints are end user device, like IP handsets or client server web conference software - Each device or user is assigned unique SIP Uniform Resource Code Example: SIP:jaime@515support.com Runs over UDP 5060 unsecured and 5061 secured.

RTP

Real-time Transport Protocol - Manages delivery of data in real time - Uses UDP, but with some of the reliability features of TCP - Works closely with RTP Control Protocol - RTCP monitors session and send quality reports which can be used to modify session and aid QoS

VoIP Phones

- Use VLAN tagging to ensure SIP control and RTP media protocols can be segregated from normal traffic.

Main Web Server Platforms

- Apache, Microsft Internet Information Server(IIS) and nginx