2.2 - Virtualization and Cloud Computing Concepts

Question 1

Iaas

Answer 1

• Infrastructure as a service
• Outsource your equipment
• aka Hardware as a service (Haas)
• Cloud provider will give you a system that has a CPU, storage, networking connectivity
• You are still responsible for OS on up (effectively be responsible for data security).
• Ex: you could choose to encrypt data
• Ex: A webserver provider gives you a server but nothing else, you still have to load the OS and applications and then you pay to have the system running in the cloud

Question 2

Saas

Answer 2

• Software as a service
• Central management of data and applications all in the cloud
• 3rd party manages software and application
• On demand software, just have to log in
• don’t have to maintain etc.
• No local installation
• Ex: email, payroll

Question 3

Paas

Answer 3

• Platform as a Service
• middle ground b/n Iaas and Saas
• Get a platform that you can use to create your own application
• You’re provided: OS, Infrastructure, some virtualization services (building blocks to write your own custom applications)
• Usually 3rd party hosted, so they have access to all of your applications, data, and anything that makes up application
• Think of it like the 3rd party is giving you the tools to create a modular application, you don’t have to build it from scratch
• Advantages: Speeds up development and allows customization to your needs
• Ex: SalesForce.com

Question 4

Xaas

Answer 4

• Anything as a Service
• Broad description of all cloud models
• Any type of service provided over the cloud
• Usually describes a set of services on a public cloud
• Often describes a flexible consumption (pricing) model, pay for what you’re using instead of a large up front fee or ongoing licenses
• Anything you’re doing in house, you could potentially outsource
• Ex: IT becomes more of an operating model and less of a cost-center model

Question 5

On Premise model

Answer 5

• You’re in charge of:
  1. Networking
  2. Storage
  3. Servers
  4. Virtualization
  5. OS
  6. Middleware
  7. Runtime
  8. Data
  9. Application

Question 6

Iaas model

Answer 6

• Cloud provider in charge of:
  1. Networking
  2. Storage
  3. Servers
  4. Virtualization
• You’re in charge of:
  5. OS
  6. Middleware
  7. Runtime
  8. Data
  9. Application

Question 7

Paas model

Answer 7

• Cloud provider in charge of:
  1. Networking
  2. Storage
  3. Servers
  4. Virtualization
  5. OS
  6. Middleware
  7. Runtime
• You’re in charge of:
  8. Data
  9. Application

Question 8

Saas model

Answer 8

• Cloud provider in charge of:
  1. Networking
  2. Storage
  3. Servers
  4. Virtualization
  5. OS
  6. Middleware
  7. Runtime
  8. Data
  9. Application

Question 9

Cloud billing

Answer 9

• Can be a flat fee
• Can be based on use (more data, more cost)
• Still need staff to manage cloud, may be a dev team, prob have operational support

Question 10

MSP

Answer 10

• Managed Service Provider
• Handle many aspects of technology for clients
• May also be a cloud service provider (but not all cloud service providers are MSPs)

Question 11

MSP Support

Answer 11

• Role of the MSP
• Network connectivity management
• backups and disaster recovery
• Growth management and planning

Question 12

MSSP

Answer 12

• Managed Security Service Provider
• Niche of MSP
• Focus on IT Security
• Ex: Firewall management
• Ex: Patch management, security audits
• Ex: Emergency response

Question 13

On premise cloud

Answer 13

• Your applications are on local hardware
• Your servers are in your data center in your building
• “on prem”
• Everything located in our building (ex: HVAC, servers etc.)

Question 14

Off-premise cloud

Answer 14

• Your servers are not in your building
• They may not even be running your hardware
• Usually a specialized computing environment
• Usually has lots of redundancy built in

Question 15

Public Cloud

Answer 15

• Available to anyone over the internet

Question 16

Community model

Answer 16

• Several organizations that share the same goal might pool resources and share to create their own cloud services

Question 17

Private Cloud

Answer 17

• Internal, in own data center

- Only you have access to

Question 18

Hybrid

Answer 18

• mix of public and private

Question 19

Cloud Computing

Answer 19

• Instantly available computing power
• Massive data storage capacity
• Fast implementation
• Changed the costs involved in deployment

Question 20

Disadvantages of Cloud computing

Answer 20

• Latency (if the cloud is far away)
• Limited bandwidth
• Difficult to protect data
• Requires Internet/network connectivity

Question 21

Edge Computing

Answer 21

• Over 30 B IoT devices on the internet
• Devices with very specific functions
• When process application data on an edge server
• Close to the user
• Don’t have to go to the internet (don’t have to worry about latency, connectivity)
• Speed should be at the local speed of network
• All collecting data on your network (that feed into decisions)
• Ex: Climate control, garage door opener.

Question 22

Fog

Answer 22

• A distributed cloud architecture
• Extends the cloud
• A cloud that close to your data
• Cloud + IoT
• Might want to take some data into the cloud and leave some locally
• This means we can keep sensitive data on local network and only send non sensitive into the Fog

Question 23

Diagram of Fog

Answer 23

1. Cloud / Data Centers
2. Fog/ Nodes (ex: Realtime data processing, data caching). Could gather other car user’s info to aggregate for example. Data can move from Fog into the Cloud.
3. IoT - cars, power lines, wind turbines
   - This set up allows for an efficient cloud computing experience.

Question 24

Designing the Cloud

Answer 24

• On- demand computing power
• Elasticity - Scale up or down as needed
• Applications also scale, access from anywhere
• Planning is key

Question 25

Thin Client

Answer 25

- Instead of a full blown computer - Local device allows you to connect a keyboard, mouse, screen which then connects to desktop in the cloud (so it doesn't need a lot of cpu or memory) - Has just enough computing power to connect to a desktop in the Cloud - This has a big network requirement since everything happens across the wire - aka VDI (Virtual Desktop Infrastructure - aka Daas (Desktop as a Service)

Question 26

Virtualization

Answer 26

- Allows us to run many different OS on the same device 1. Infrastructure 2. Hypervisor (Management OS that allows all the OS that sit on top of it) 3. Individual Guest OS / Virtual Machines - In this configuration, virtualization is 'expensive' b/c it has to run each guest operating system - solution: containerization

Question 27

Containerization

Answer 27

- Contains everything you need to run an application - Code and dependencies - Standardized unit of software 1. infrastructure 2. Host Operating System 3. Docker 4. Individual apps sit on top of it (Apps in individual contains, apps can't see other containers). They are moveable to create additional instances - Container software like docker. So don't need separate guest OS. - Relatively light way to deploy, uses the host kernel

Question 28

Virtualized vs Container

Answer 28

- Virtualized: Individual Guest OS (relatively expensive) | - Containerized: 1 container software and individual apps

Question 29

Microservices

Answer 29

- Microservices uses APIs - Takes individual pieces of application and breaks them out into individual services - Usually an API gateway that manages the pathway b/n the client and the microservices - If need to add a new feature, just need to add a new microservice - Can just scale the microservices that you need - Resilient - outages are contained (entire app doesn't fail) - Allows much tighter data security controls

Question 30

Monolithic Architecture

Answer 30

- One large application that does everything (b/n the DB and the client) - Contains all the decision making processes (user interface, business logic, data input / output) - Creates additional complexity, code challenges (esp if need to update only one part of it) - Not very efficient - Opposite of microservices

Question 31

Serverless Architecture

Answer 31

- Allows you to take the OS out of the picture - Preform individual task based on the functions that are called by the application - Faas

Question 32

Faas

Answer 32

- Function as a Service - Applications are separated into individual, autonomous functions - Developer still creates the server-side logic - runs in a stateless compute container - Often run by a third party - Allows us to have compute container only as needed (built and torn down as people are using the server) - Can be event triggered and ephemeral (could only run for one event)

Question 33

Stateless Compute Container

Answer 33

- Processors that are designed to respond to our API requests - part of Faas

Question 34

VPC

Answer 34

- Virtual Private Cloud - a pool of resources created in a public cloud - As you build more apps, might build more VPCs to contain them, effectively creating different clouds for each app - Challenge - getting all of users (wherever they may be) to access each instance that could be running in any cloud - Provide access through Transit Gateway

Question 35

Transit Gateway

Answer 35

- "Router in the cloud" - Connect VPCs with a transit gateway and users to VPCs - Provides us with connectivity we need to connect all users

Question 36

Resource Policies

Answer 36

- Assigning permissions to cloud resources - Not very easy, everything is in constant motion - In Azure, you can configure which resources can be provisioned by users and in what region - In Amazon, you can specify the resource and what actions can be taken in an IP range - In Amazon, you can specify a list of users who can access a resource

Question 37

SIAM

Answer 37

- Service Integration and Management - Could have different types of clouds in use (amazon, azure, rack space) - Use SIAM to manage this - Multisourcing creates the need for SIAM - All clouds work differently (ex: deploying, monitoring) - SIAM allows you to bring all these into a single view and provides a signal business facing IT org

Question 38

Multisourcing

Answer 38

- Part of SIAM | - Deploying applications to multiple providers (Amazon, azure, etc..)

Question 39

Infrastructure as Code

Answer 39

- Describe the infrastructure in code - Define servers, network, and applications as code - Modify the infrastructure and create versions (same way you version application code) - Ex: all: hosts: mail.example.com: children: webservers: hosts: foo.example.com: bar.example.com: dbservers: hosts: one.example.com: two.example.com: - can then reuse the code (description) to build other application instances, which will be identical - important concept for cloud computing (build a perfect version each time!)

Question 40

SDN

Answer 40

- Software Defined Networking - Networking devices have two functional planes of operation: control plane and date plane - Control plane - handles management, config of device - Data plane handles the actual operation - Ex: Router, control plane, allows you to configure and set up router, and data plane which performs the actual router forwarding - Allows you to configure device without affecting what happens when forwarding - It's agile, important for cloud computing - Centrally managed ("single pane of glass") - Programmatically configured, no human intervention - Open standards / vendor neutral

Question 41

SDN Security

Answer 41

- Ex: you have multiple webservers you want to talk to each other and go to a load balancer which can access the internet and you wan to protect your data - You could install an SDN (Software Defined Networking software) as an internal firewall for the webservers and another one b/n the load balancer and the internet - all software based

Question 42

SDV

Answer 42

- Software Defined Visibility - Need to monitor traffic to secure the data - allows us to install and monitor next gen firewalls, web app firewalls, SIEM (Security Information and Event Management) - Data is encapsulated and encrypted - VXLAN (Virtual Extensible LAN) and SSL / TLS - has to understand new technologies - picture a lot of graphs and charts that allow us to monitor traffic

Question 43

VXLAN

Answer 43

- Virtual Extensible LAN

Question 44

VM sprawl Avoidance

Answer 44

- Deploying instances in cloud is easily - Need to consider recovering instances - Need to deprovision when no longer needed. - Don't want to get to a point where you don't know which VMS are related to which applications (really difficult to deprovision) - Need a formal process for provisioning and deprovisioning - Should be able to track every virtual object from creation to deprovisioning

Question 45

VM Escape Protection

Answer 45

- Virtual machine is self-contained - Attack type allows someone on a VM to gain access to another VM - Significant exploit b/c VMs should not share access - rare (one example Pwn2Own competition)