After showing the principles of AWS networking with VPC and Routing, it’s time to dive into VPC network security introducing ACL, Security Groups Flow Logging, and Best Practices. When you start using a cloud provider it’s important to keep in mind some security concepts that must keep in mind: Security of the cloud: AWS is […]
With IAM identity-based policies, you can specify allowed or denied actions. For some actions, you can specify the resources and conditions under which actions are allowed or denied. Amazon VPC supports specific actions, resources, and condition keys. Administrators can use AWS JSON policies to specify who has access to what. That is, which principal can perform actions on what resources, […]
In the previous study note, we focused mainly on how AWS is organized from the infrastructure side and how you can organize your account(s) with users, groups, roles, and permissions. Now it’s time to dive into the Networking and Security network elements that AWS made available to isolate and connect IaaS infrastructure with managed services. […]
Let’s continue with my study notes giving a brief look at how the Amazon Web Service is built and how it organizes tenant, services, permissions, etc. Global infrastructure organization Amazon Web Service is a multisite, multi-datacenter Public Cloud Provider spread across the world. At the root of the service, there are the regions and edge […]
Here starts a series of posts focused on AWS Solution Architect Certifications (Associate and Professional). This is an important change of path of my knowledge to cover the “new side” of the IT: The cloud. In the past, I was focusing mainly on the private cloud and sometimes I was involved in some hybrid-cloud projects. […]
Objective 10.1: Compare and Contrast Tools Available for Troubleshooting Capture and trace uplink, vmknic, and physical NIC packets The pktcap-uw tool is an enhanced packet capture and analysis tool that can be used in place of the legacy tcpdump-uw tool. The pktcap-uw tool is included by default in ESXi 5.5 and later versions. This article […]
Objective 8.1: Differentiate single and Cross-vCenter NSX deployments Understand the benefits/use cases for Cross-vCenter NSX Use Case: To overcome scale limits of vCenter Server To accommodate products that require dedicated or multiple vCenter Server systems, such as Horizon View or Site Recovery Manager To separate environments, for example by business unit, tenant, organization, or environment […]
Configure and Manage DHCP/DNS/NAT Understand proper use and addition of a DHCP IP Pool NSX Edge supports IP address pooling and one-to-one static IP address allocation. Static IP address binding is based on the vCenter managed object ID and interface ID of the requesting client. NSX Edge DHCP service adheres to the following guidelines: Listens […]
Objective 6.1: Configure and Manage Logical Load Balancing Describe and understand when to use the two topologies for load balancing NSX edge LB enables net traffic to pass through multiple paths to a specific destination, to optimal resource optimization. It handles traffic up to L7, mapping eternal (or public) IP address to a set of […]
Objective 5.4: Configure and Manage Logical Routers Dynamic routing provides the necessary forwarding information between layer 2 broadcast domains, thereby allowing you to decrease layer 2 broadcast domains and improve network efficiency and scale NSX extends this intelligence to where the workloads reside for doing East-West routing. This allows more direct virtual machine to virtual […]
Utilizzando il sito, accetti l'utilizzo dei cookie da parte nostra. Using this site you accept cooking utilization. maggiori informazioni more Informations
Questo sito utilizza i cookie per fornire la migliore esperienza di navigazione possibile. Continuando a utilizzare questo sito senza modificare le impostazioni dei cookie o cliccando su "Accetta" permetti il loro utilizzo. This site uses cookies to provide the best browsing experience possible. By continuing to use this website without changing your cookie settings or clicking "Accept" allow their use.