Section 12: Cloud and Datacenter Flashcards
Hypervisor / VMM (Virtual Machine Monitor)
▪ Specialized software that enables virtualization through the emulation of the physical hardware
Examples of Hypervisors
▪ VMWare ESXi
▪ Microsoft Hyper-V
▪ Virtual Box
▪ VMWare Workstation
Examples of Hypervisors
▪ VMWare ESXi (Freeware)
▪ Microsoft Hyper-V
▪ Virtual Box (Freeware - Open Source)
▪ VMWare Workstation
Type 1 Hypervisor
Sits directly on top of the hardware. (AKA Bare Metal Hypervisor)
Removes the overhead of an OS
Type 2 Hypervisor
Runs on top of the OS
NAS
▪ Network Attached Storage - Disk storage as a service over TCP/IP
SAN
▪ Storage Area Network
● Specialized LAN designed for data transfer/storage
● Transfers data at block level with special protocol
● Fibre Channel (FC)
o Special purpose hardware providing 1-16 Gbps
● Fibre Channel over Ethernet (FCoE)
o Removes need for specialized hardware
o Runs over your Ethernet networks
● iSCSI (IP Small Computer System Interface)
o Lower cost, built using Ethernet switches (<10 Gbps)
o Relies on configuration allowing jumbo frames over the network
VoIP
▪ Digitizes voice traffic so that it can be treated like other data on the network
▪ Uses the SIP (Session Initiation Protocol) to setup, maintain, and tear down calls. Once setup, uses RTP (Real Time Protocol).
Private Cloud
Systems and users only have access with other devices inside the same private cloud or system
Public Cloud
Systems and users interact with devices on public networks, such as the Internet and other clouds
Hybrid Cloud
Combination of private and public
Community Cloud
Collaborative effort where infrastructure is shared between several organizations from a specific community with common concerns
Models of Cloud Computing
▪ Network as a Service (NaaS)
▪ Infrastructure as a Service (Iass)
▪ Software as a Service (SaaS)
▪ Platform as a Service (PaaS)
NaaS
Network as a Service
Allows outsourcing of the of a network to a service provider (Route 53, VPC)
IaaS
Infrastructure as a Service
Allows outsourcing of the infrastructure of the servers or desktops to a service provider (Amazon Web Services (AWS), Microsoft’s Azure)
SaaS
Software as a Service
User interacts with a web-based application (MS Office, Google Docs)
PaaS
Platform as a Service
Provides a development platform for companies that are developing applications without the need for infrastructure (Pivotal, OpenShift, Apprenda)
DaaS
Desktop as a Service
Provides a desktop environment that is accessible through the Internet in the form of a cloud desktop or virtual desktop environment (Virtual Desktop Infrastructure - VDI) (Shadow PC, Amazon Workspaces)
Cloud Computing Elasticity
▪ Attempts to match the resources allocated with the actual amount of resources needed at any given point in time
▪ Elasticity is focused on meeting the sudden increases and decreases in the workload
o Short-term addition or subtraction of resources
Cloud Computing Scalability
▪ Handles the growing workload required to maintain good performance and efficiency for a given software or application
o Long-term planning and adoption
Cloud Computing Vertical Scaling (Scaling Up)
▪ Increasing the power of the existing resources in the working environment (Scalability)
Cloud Computing Horizontal Scaling (Scaling Out)
▪ Adding additional resources to help handle the extra load being experienced (Elasticity)
▪ Scaling out provides more redundancy and results in less downtime
Cloud Computing Multitenancy
▪ Allowing customers to share computing resources in a public or private cloud
● Better storage/access
● Better use of resources
● Lower overall cost
▪ BMP - Set up virtual servers in the cloud with proper failover, redundancy, and elasticity
● Complex passwords
● Strong authentication
● Strong encryption
● Strong policies
Cloud Computing Virtual Machine (VM) Escape
▪ Vulnerability - Occurs when an attacker breaks out of one of the isolated VMs and begins to directly interact with the underlying hypervisor
▪ Mitigation - Host virtual servers on the same physical server as other VMs in the same network
SDN (Four Parts)
Software-Defined Networking
▪ Enables the network to be intelligently and centrally controlled, or programmed, using software applications
▪ Application Layer - Focuses on the communication resource requests or information about the network as a whole
▪ Control Layer - Uses the information from the applications and decides how to route a data packet on the network
▪ Infrastructure Layer - Contains the network devices that receive information about where to move the data and then performs those movements.
- Provides a layer of abstraction between the devices and the control and data flow that happen on the network
▪ Management Plane - Used to monitor traffic conditions and the status of the network
Spine and Leaf Architecture