Get in Touch

Course Outline

1. Virtualization Fundamentals

  1. Overview of Operating System Concepts: CPU, Memory, Network, and Storage
  2. Hypervisors
    1. The "Supervisor of Supervisors"
    2. Understanding the "Host" machine and the "guest" OS
    3. Distinguishing between Type-1 and Type-2 Hypervisors
    4. Key platforms: Citrix XEN, VMware ESX/ESXi, Microsoft Hyper-V, and IBM LPAR
  3. Network Virtualization
    1. Brief introduction to the 7-Layer OSI Model
    2. Focus on the Network Layer
    3. The TCP/IP Model or Internet Protocol
  4. Deep Dive into Key Layers
    1. Application Layer: SSL
    2. Transport Layer: TCP
    3. Internet Layer: IPv4/IPv6
    4. Link Layer: Ethernet
  5. Packet Structure and Networking Components
    1. Addressing mechanisms: IP Addresses and Domain Names
    2. Essential components: Firewall, Load Balancer, Router, and Network Adapter
    3. Concepts of Virtualized Networks
    4. Higher-order abstractions: Subnets and Availability Zones
  6. Hands-on Exercise:
    1. Familiarization with the ESXi cluster and the vSphere client.
    2. Creating and updating networks within an ESXi Cluster, deploying guests from VMDK packages, and enabling inter-connectivity between guests in the ESXi cluster.
    3. Modifying a running VM instance and capturing snapshots.
    4. Updating firewall rules in ESXi using the vSphere client.

2. Cloud Computing: A Paradigm Shift

  1. A rapid and cost-effective pathway to make products or solutions available globally.
  2. Resource Sharing
    1. Virtualization of already virtualized environments
  3. Key Benefits:
    1. On-demand resource elasticity
      1. Seamlessly move from Ideation to Code to Deployment without managing infrastructure
      2. Rapid CI/CD pipelines
    2. Environment isolation and vertical autonomy
    3. Enhanced security through layered architecture
    4. Expense optimization
  4. On-premise Cloud solutions versus Cloud Providers
  5. Cloud computing as an effective conceptual abstraction for distributed computing

3. Introduction to Cloud Solution Layers

  1. IaaS (Infrastructure as a Service)
    1. Major providers: AWS, Azure, Google Cloud
    2. Selection of one Provider for continued study. AWS is recommended.
      1. Introduction to AWS VPC, AWS EC2, etc.
  2. PaaS (Platform as a Service)
    1. Providers: AWS, Azure, Google, CloudFoundry, Heroku
    2. Introduction to AWS DynamoDB, AWS Kinesis, etc.
  3. SaaS (Software as a Service)
    1. Very brief overview
    2. Examples: Microsoft Office, Confluence, Salesforce, Slack
  4. The dependency chain: SaaS builds on PaaS, which builds on IaaS, which ultimately builds on Virtualization

4. IaaS Cloud Hands-on Project

  1. This project utilizes AWS as the IaaS Cloud Provider.
  2. Use CentOS/RHEL as the operating system for the remainder of the exercise.
    1. While Ubuntu is acceptable, RHEL/CentOS are preferred.
  3. Obtain individual AWS IAM accounts from your cloud administrator.
  4. Each student must complete these steps independently.
    1. The ability to carve out your own entire infrastructure on-demand demonstrates the true power of cloud computing.
    2. Utilize AWS Wizards and the AWS online consoles to accomplish these tasks unless specified otherwise.
  5. Create a public VPC in the us-east-1 Region.
    1. Set up two Subnets (Subnet-1 and Subnet-2) in two different Availability Zones.
      1. Refer to https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenarios.html for guidance.
    2. Create three separate Security Groups.
      1. SG-Internet
        1. Allows incoming traffic from the Internet on HTTPS (443) and HTTP (80).
        2. No other incoming connections are allowed.
      2. SG-Service
        1. Allows incoming traffic only from the SG-Internet security group on HTTPS (443) and HTTP (80).
        2. Allows ICMP traffic only from SG-Internet.
        3. No other incoming connections are allowed.
      3. SG-SSH:
        1. Allows SSH port 22 incoming connections only from the single IP address matching the public IP of the student’s lab machine (or the public IP of the proxy if the lab machine is behind one).
  6. Deploy an instance of an AMI corresponding to your chosen OS (preferably the latest RHEL/CentOS versions available in AMIs) and host the instance on Subnet-1. Attach the instance to the SG-Service and SG-SSH security groups.
  7. Access the instance using SSH from your lab machine.
  8. Install the NGINX server on this instance.
  9. Upload static content of your choice (HTML pages, images) to be served by NGINX on port 80 over HTTP, and define URLs for them.
  10. Test the URL directly from that machine.
  11. Create an AMI image from this running instance.
  12. Deploy the new AMI and host the instance on Subnet-2. Attach the instance to the SG-Service and SG-SSH security groups.
  13. Run the NGINX server and validate that the access URL for the static content created in step (i) works correctly.
  14. Create a new "classic" Elastic Load Balancer and attach it to SG-Internet.
    1. Note the differences between Classic Load Balancer, Application Load Balancer, and Network Load Balancer.
  15. Create a routing rule to forward all HTTP (80) and HTTPS (443) traffic to an instance group comprising the two instances created above.
  16. Using any certificate management tool (e.g., java keytool), create a key-pair and a self-signed certificate, then import the certificate to AWS Certificate Manager (ACM).

5. Cloud Monitoring: Introduction and Hands-on Project

  1. AWS CloudWatch metrics.
  2. Navigate to the AWS CloudWatch dashboard for the instances.
    1. Retrieve relevant metrics and explain their variability over time.
      1. Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/viewing_metrics_with_cloudwatch.html
  3. Navigate to the AWS CloudWatch dashboard for the ELB.
    1. Observe ELB metrics and explain their variability over time.
    2. Reference: https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-cloudwatch-metrics.html

6. Advanced Concepts for Further Learning

  1. Hybrid Cloud -- combining on-premise and public cloud.
  2. Migration: From on-premise to public cloud.
    1. Application code migration.
    2. Database migration.
  3. DevOps.
    1. Infrastructure as Code.
    2. AWS CloudFormation Templates.
  4. Auto-scaling.
    1. Utilizing AWS CloudWatch metrics to determine system health.

Requirements

There are no specific prerequisites required to enroll in this course.

 21 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories