Cloud computing essentials for managers / software engineers Training Course

Virtualization Details

1. Overview of Operating System Concepts: CPU, Memory, Network, and Storage
2. Hypervisor
   1. The Supervisor of Supervisors
   2. "Host" machines and "guest" operating systems
   3. Type-1 and Type-2 Hypervisors
   4. Citrix XEN, VMware ESX/ESXi, MS Hyper-V, and IBM LPAR
3. Network Virtualization
   1. Introduction to the 7-Layer OSI Model
   2. Emphasis on the Network Layer
   3. The TCP/IP Model or Internet Protocol
4. In-Depth Look at Specific Layers
   1. Application Layer: SSL
   2. Network Layer: TCP
   3. Internet Layer: IPv4/IPv6
   4. Link Layer: Ethernet
5. Packet Structure
   1. Addressing: IP Addresses and Domain Names
   2. Firewalls, Load Balancers, Routers, and Adapters
   3. Virtualized Networks
   4. Higher-Order Abstractions: Subnets and Zones
6. Hands-On Exercise
   1. Become familiar with ESXi clusters and the vSphere client
   2. Create or update networks within an ESXi Cluster, deploy guests from VMDK packages, and enable connectivity between guests
   3. Modify a running VM instance and capture a snapshot
   4. Update firewall rules in ESXi using the vSphere client

2. Cloud Computing: A Paradigm Shift

1. A fast and cost-effective pathway to delivering products and solutions globally
2. Resource Sharing
   1. Virtualization within virtualized environments
3. Key Benefits
   1. On-Demand Resource Elasticity
      1. Ideate, Code, and Deploy without the need for traditional infrastructure
      2. Rapid CI/CD pipelines
   2. Environment isolation and vertical autonomy
   3. Security through layered defense
   4. Expense optimization
4. On-premise Cloud and Cloud Providers
5. Cloud as an effective conceptual abstraction for distributed computing

3. Introduction to Cloud Solution Layers

1. IaaS (Infrastructure as a Service)
   1. AWS, Azure, and Google
   2. Selection of a provider for further exploration (AWS is recommended)
      1. Introduction to AWS VPC, AWS EC2, and related services
2. PaaS (Platform as a Service)
   1. AWS, Azure, Google, CloudFoundry, and Heroku
   2. Introduction to AWS DynamoDB, AWS Kinesis, and related services
3. SaaS (Software as a Service)
   1. Brief overview
   2. Microsoft Office, Confluence, SalesForce, and Slack
4. The hierarchical relationship: SaaS builds on PaaS, which builds on IaaS, which builds on Virtualization

4. IaaS Cloud Hands-On Project

1. The project utilizes AWS as the IaaS Cloud Provider
2. Use CentOS/RHEL as the operating system for the exercise
   1. Ubuntu is an alternative option, though RHEL/CentOS is preferred
3. Obtain individual AWS IAM accounts from your cloud administrator
4. Each student must complete the following steps independently
   1. The ability to provision entire infrastructure on-demand is the strongest demonstration of cloud computing's power
   2. Use AWS Wizards and online consoles to accomplish these tasks unless otherwise specified
5. Create a public VPC in the us-east-1 Region
   1. Two Subnets (Subnet-1 and Subnet-2) located in two different Availability Zones
      1. Refer to https://docs.aws.amazon.com/vpc/latest/userguide/ for guidance
   2. Create three separate Security Groups
      1. SG-Internet
         1. Permits incoming traffic from the Internet on HTTPS (443) and HTTP (80)
         2. Blocks all other incoming connections
      2. SG-Service
         1. Allows incoming traffic only from the SG-Internet security group on HTTPS (443) and HTTP (80)
         2. Allows ICMP traffic only from SG-Internet
         3. Blocks all other incoming connections
      3. SG-SSH
         1. Permits SSH (port 22) incoming connections only from a single IP address matching the public IP of the student’s lab machine. If the lab machine is behind a proxy, use the proxy's public IP
6. Deploy an instance using an AMI for your chosen OS (preferably the latest RHEL/CentOS version available) and host it in Subnet-1. Attach the instance to the SG-Service and SG-SSH groups
7. Access the instance via SSH from your lab machine
8. Install the NGINX server on this instance
9. Deploy static content of your choice (HTML pages, images) to be served by NGINX on port 80 via HTTP, and define URLs for them
10. Test the URL from the machine itself
11. Create an AMI image from this running instance
12. Deploy the new AMI and host the instance in Subnet-2. Attach the instance to the SG-Service and SG-SSH groups
13. Run the NGINX server and verify that the access URL for the static content created in the previous step works correctly
14. Create a new "classic" Elastic Load Balancer and attach it to SG-Internet
    1. Note the differences between the Application Load Balancer and Network Load Balancer
15. Configure routing rules to forward all HTTP (80) and HTTPS (443) traffic to an instance group comprising the two instances created above
16. Using a certificate management tool (such as java keytool), create a key-pair and a self-signed certificate, then import the certificate to AWS Certificate Manager (ACM)

5. Cloud Monitoring: Introduction and Hands-On Project

1. AWS CloudWatch metrics
2. Navigate to the AWS CloudWatch dashboard for the instances
   1. Retrieve relevant metrics and analyze their variability over time
      1. Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/viewing_metrics_with_cloudwatch.html
3. Navigate to the AWS CloudWatch dashboard for the ELB
   1. Observe ELB metrics and explain their variability over time
   2. Reference: https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-cloudwatch-metrics.html

6. Advanced Concepts for Further Learning

1. Hybrid Cloud -- combining on-premise and public cloud environments
2. Migration: From on-premise to public cloud
   1. Application code migration
   2. Database migration
3. DevOps
   1. Infrastructure as Code
   2. AWS Cloud Formation Templates
4. Auto-scaling
   1. Using AWS CloudWatch metrics to determine system health