Cloud computing essentials for managers / software engineers Training Course

Virtualization Details

1. Overview of Operating System Concepts: CPU, Memory, Network, Storage
2. Hypervisors
   1. The Supervisor of Supervisors
   2. The "Host" machine and "guest" Operating Systems
   3. Type-1 and Type-2 Hypervisors
   4. Citrix XEN, VMware ESX/ESXi, MS Hyper-V, and IBM LPAR.
3. Network Virtualization
   1. Introduction to the 7-Layer OSI Model
   2. Focus on the Network layer
   3. TCP/IP Model or Internet Protocol
4. Deep Dive into Specific Layers
   1. Application Layer: SSL
   2. Network Layer: TCP
   3. Internet Layer: IPv4/IPv6
   4. Link Layer: Ethernet
5. Packet Structure
   1. Addressing: IP Addresses and Domain Names
   2. Firewalls, Load Balancers, Routers, and Adapters
   3. Virtualized Networks
   4. Higher-order abstractions: Subnets and Zones.
6. Hands-on Exercise:
   1. Become familiar with the ESXi cluster and the vSphere client.
   2. Create or update networks in the ESXi Cluster, deploy guests from VMDK packages, and enable connectivity between guests within the ESXi cluster.
   3. Modify a running VM instance and capture a snapshot.
   4. Update firewall rules in ESXi using the vSphere client.

2. Cloud Computing: A Paradigm Shift

1. A rapid and cost-effective pathway to making products or solutions available globally
2. Resource Sharing
   1. Virtualization of virtualized environments
3. Key Benefits:
   1. On-demand resource elasticity
      1. Conceive, code, and deploy without the need for pre-provisioned infrastructure
      2. Rapid CI/CD pipelines
   2. Environment isolation and vertical autonomy
   3. Security through layering
   4. Expense optimization
4. On-premise Clouds and Cloud Providers
5. Cloud as an effective conceptual abstraction for distributed computing

3. Introduction to Cloud Solution Layers:

1. IaaS (Infrastructure as a Service)
   1. AWS, Azure, and Google
   2. Select one provider for subsequent modules. AWS is recommended.
      1. Introduction to AWS VPC, AWS EC2, and related services.
2. PaaS (Platform as a Service)
   1. AWS, Azure, Google, CloudFoundry, and Heroku
   2. Introduction to AWS DynamoDB, AWS Kinesis, and related services.
3. SaaS (Software as a Service)
   1. Brief overview
   2. Microsoft Office, Confluence, SalesForce, and Slack
4. SaaS builds upon PaaS, which builds upon IaaS, which in turn builds upon Virtualization

4. IaaS Cloud Hands-on Project

1. This project utilizes AWS as the IaaS Cloud Provider
2. Use CentOS/RHEL as the operating system for the remaining exercises
   1. Alternatively, Ubuntu is acceptable, but RHEL/CentOS are preferred
3. Obtain individual AWS IAM accounts from your cloud administrator
4. Each participant must complete the following steps independently
   1. The ability to provision entire infrastructure on demand best demonstrates the power of cloud computing
   2. Use AWS Wizards (AWS online consoles) to accomplish these tasks unless otherwise specified
5. Create a public VPC in the us-east-1 Region
   1. Set up two Subnets (Subnet-1 and Subnet-2) in two different Availability Zones
      1. Refer to https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenarios.html for guidance.
   2. Create three separate Security Groups
      1. SG-Internet
         1. Allows incoming traffic from the Internet on HTTPS 443 and HTTP 80
         2. No other incoming connections are permitted
      2. SG-Service
         1. Allows incoming traffic only from security group SG-Internet on HTTPS 443 and HTTP 80
         2. Allows ICMP only from SG-Internet
         3. No other incoming connections are permitted
      3. SG-SSH:
         1. Allows SSH:22 incoming connections only from a single IP that matches the public IP of the participant’s lab machine. If the lab machine is behind a proxy, use the public IP of the proxy.
6. Deploy an instance of an AMI for your chosen OS—preferably the latest RHEL/CentOS version available in AMIs—and host the instance in Subnet-1. Attach the instance to the SG-Service and SG-SSH groups.
7. Access the instance using SSH from your lab machine.
8. Install the NGINX server on this instance
9. Place static content of your choice (e.g., HTML pages, images) to be served by NGINX (on port 80 over HTTP) and define URLs for them.
10. Test the URL from the machine itself.
11. Create an AMI image from this running instance.
12. Deploy that new AMI and host the instance in Subnet-2. Attach the instance to the SG-Service and SG-SSH groups.
13. Run the NGINX server and verify that the access URL for the static content created in the previous step works.
14. Create a new “classic” Elastic Load Balancer and attach it to SG-Internet.
    1. Note the differences between the Application Load Balancer and the Network Load Balancer.
15. Create a routing rule to forward all HTTP 80 and HTTPS 443 traffic to an instance group comprising the two instances created above.
16. Using any certificate management tool (e.g., Java keytool), create a key pair and a self-signed certificate, and import the certificate into AWS Certificate Manager (ACM).

5. Cloud Monitoring: Introduction and Hands-on Project

1. AWS CloudWatch metrics
2. Navigate to the AWS CloudWatch dashboard for the instances
   1. Retrieve relevant metrics and explain their variability over time
      1. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/viewing_metrics_with_cloudwatch.html
3. Navigate to the AWS CloudWatch dashboard for the ELB
   1. Observe the ELB metrics and explain their variability over time
   2. https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-cloudwatch-metrics.html

6. Advanced Concepts for Further Learning

1. Hybrid Cloud—combining on-premise and public cloud environments
2. Migration: From on-premise to public cloud
   1. Application code migration
   2. Database migration
3. DevOps
   1. Infrastructure as Code
   2. AWS CloudFormation Templates
4. Auto-scaling
   1. Using AWS CloudWatch metrics to determine health