Networking Flashcards
Features of Virtual Network
known as vnet
Fundamental to Azure - every feature relies on vNet
secure comms between VMs and internet (and each other ?)
within a single region and single subscription
auto created when VM created
Subscription can have more than 1 vNET
Setup Virtual Network
address space assigned
segmented by subnets (assists resource grouping and Network Security Groups (NSG’s)
Benefits of Virtual Network
Scaling
HA via peering (load balancer, VPN gateway)
Isolation - subnets , security groups
What is Peering
connect 2 or more vNets via MS private backbone
low latency / high bandwidth
What is Load Balancer used for ?
manage traffic, good MS description
“new inbound flow to backend pool instances”
one access point
health probes to confirm VMs are healthy
What is typically Load Balanced ?
Internet traffic
Internal networks
Port Forwarding ?
Outbound Traffic ?
What is a VPN Gateway
used to send encrypted traffic from azure vNet to on-prem DC over internet
key part of secure hybrid cloud
What does a VPN Gateway require ?
Azure vNET with VPN Gateway (on a Azure Gateway subnet)
Secure Tunnel (VPN tunnel)
On Prem Gateway to connect to - this must accept encrypted traffic
known as “Site to Site Connection”
can also have “Multi Site Connections”
What is an Application Gateway ?
routing decisions based on properties of http requests (e.g. URL, host header)
e. g. http://videos - one VM pool
http: //images - separate VM pool
Benefits of Application Gateway
auto scaling
end to end encryption
zone redundancy ??
multi-site hosting (100 sites supported).
What is a Content Delivery Network (CDN) ?
distributed network of servers which will deliver web content close to users physical location via use of Edge Servers
results in better performance (prevents multiple round trips)
Scaling, Distribution
How does CDN work ?
via a series of caching / data validation
edge nodes have an expiry dates - following which they will request a master copy from Origin server.
What is an Express Route ?
private secure connection from on-prem to Azure Cloud
high bandwidth / low latency
public internet not utilised