Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Virtualization Technical Specifications
- Operating System Architecture: Central Processing Units, Memory Management, Network Interfaces, and Storage Systems
- Hypervisor Mechanisms
- Management and Orchestration of Virtual Resources
- Host Environment and Guest Operating System Interactions
- Classification: Type 1 (Bare-Metal) and Type 2 (Hosted) Hypervisors
- Enterprise Platforms: Citrix XEN, VMware ESX/ESXi, Microsoft Hyper-V, and IBM Logical Partitioning (LPAR).
- Network Virtualization Frameworks
- Foundational Overview of the OSI Seven-Layer Model
- Operational Focus on the Network Layer
- Transmission Control Protocol/Internet Protocol (TCP/IP) Standards
- Detailed Analysis of Specific Protocol Layers
- Application Layer: Secure Sockets Layer (SSL) Protocols
- Network Layer: Transmission Control Protocol (TCP) Mechanics
- Internet Layer: IPv4 and IPv6 Addressing Schemes
- Link Layer: Ethernet Standards and Frame Structures
- Data Packet Composition and Handling
- Addressing Methods: IP Addressing and Domain Name System (DNS)
- Network Infrastructure Components: Firewalls, Load Balancers, Routers, and Network Adapters
- Implementation of Virtualized Network Segments
- Logical Grouping: Subnets and Security Zones.
- Practical Implementation Exercise:
- Navigation and configuration of ESXi clusters and the vSphere Client for administrative tasks.
- Provisioning and modifying virtual networks within an ESXi cluster; deploying guest operating systems from Virtual Machine Disk (VMDK) images; and establishing inter-VM connectivity.
- Applying configuration changes to an active virtual machine instance and capturing a state snapshot for audit or recovery purposes.
- Updating firewall policies within the ESXi environment via the vSphere Client.
2. Cloud Computing: Strategic Transition Framework
- Rapid and cost-effective deployment pathway for delivering public-sector solutions and products
- Resource Utilization and Sharing Models
- Advanced virtualization of existing virtualized infrastructures
- Operational Advantages for Public Sector Entities:
- Dynamic Resource Allocation and On-Demand Elasticity
- Agile lifecycle: Conceptualization, development, and deployment without dedicated physical infrastructure
- Efficient Continuous Integration/Continuous Deployment (CI/CD) workflows
- Operational Environment Isolation and Autonomous Vertical Management
- Enhanced Security Posture through Layered Defense Strategies
- Optimization of Operational Expenditures (OpEx) for government efficiency
- Dynamic Resource Allocation and On-Demand Elasticity
- On-Premise Cloud Architectures and External Cloud Service Providers
- Cloud Computing as a conceptual abstraction for scalable distributed systems
3. Cloud Service Delivery Models:
- Infrastructure as a Service (IaaS)
- Major Providers: AWS, Microsoft Azure, Google Cloud
- Selection of a Primary Provider for Advanced Study. AWS is recommended for standardization.
- Core Concepts: AWS Virtual Private Cloud (VPC), AWS Elastic Compute Cloud (EC2).
- Platform as a Service (PaaS)
- Major Providers: AWS, Microsoft Azure, Google Cloud, CloudFoundry, Heroku
- Core Concepts: AWS DynamoDB, AWS Kinesis, and managed data services.
- Software as a Service (SaaS)
- General Overview of Enterprise SaaS Applications
- Examples: Microsoft Office, Confluence, Salesforce, Slack
- Architectural Hierarchy: SaaS depends on PaaS, which depends on IaaS, which relies on foundational virtualization technologies
4. IaaS Cloud Implementation Project
- This project utilizes AWS as the designated IaaS provider
- Standardization of Operating Systems: CentOS/Red Hat Enterprise Linux (RHEL)
- Alternative: Ubuntu is acceptable; however, RHEL/CentOS is preferred for enterprise compatibility
- Provisioning of Individual AWS Identity and Access Management (IAM) accounts by the cloud administrator
- Independent Execution of Tasks by Each Participant
- Demonstration of autonomous infrastructure provisioning capabilities to highlight the operational agility of cloud computing
- Utilization of AWS Management Consoles (Web Interfaces) for task completion unless otherwise specified
- Configuration of a Public Virtual Private Cloud (VPC) in the us-east-1 Region
- Establishment of two Subnets (Subnet-1 and Subnet-2) across distinct Availability Zones
- Refer to https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenarios.html for architectural guidance.
- Creation of three distinct Security Groups
- SG-Internet
- Permits inbound traffic from the public internet via HTTPS (Port 443) and HTTP (Port 80)
- Denies all other inbound connections to ensure strict access control
- SG-Service
- Permits inbound traffic exclusively from Security Group SG-Internet via HTTPS (Port 443) and HTTP (Port 80)
- Permits Internet Control Message Protocol (ICMP) traffic only from SG-Internet
- Denies all other inbound connections to maintain segmentation
- SG-SSH:
- Permits Secure Shell (SSH: Port 22) inbound connections only from the specific public IP address of the participant’s designated workstation. If the workstation operates behind a proxy, the proxy’s public IP must be specified.
- SG-Internet
- Establishment of two Subnets (Subnet-1 and Subnet-2) across distinct Availability Zones
- Deployment of an Amazon Machine Image (AMI) instance utilizing the selected operating system (preferably the latest RHEL/CentOS AMI available). Host the instance in Subnet-1. Associate the instance with both SG-Service and SG-SSH groups.
- Establish secure connectivity to the instance via SSH from the designated workstation.
- Installation and configuration of the NGINX web server on the instance
- Deployment of static digital assets (HTML, images) for service via NGINX on Port 80 (HTTP) and definition of corresponding Uniform Resource Locators (URLs).
- Verification of URL accessibility from the local instance.
- Generation of a custom AMI image from the configured running instance.
- Deployment of the newly created AMI in Subnet-2. Associate this instance with SG-Service and SG-SSH groups.
- Activation of the NGINX service and verification that the static content URLs established previously remain accessible.
- Creation of a "Classic" Elastic Load Balancer and association with SG-Internet.
- Distinguish functional differences between Application Load Balancers and Network Load Balancers.
- Configuration of routing rules to direct all HTTP (Port 80) and HTTPS (Port 443) traffic to the target group comprising the two previously created instances.
- Generation of a key pair and self-signed certificate using standard tools (e.g., Java keytool) and importation of the certificate into AWS Certificate Manager (ACM)
5. Cloud Monitoring: Overview and Practical Application
- Utilization of AWS CloudWatch for Metric Collection
- Access to AWS CloudWatch dashboards for compute instances
- Retrieval of performance metrics and analysis of temporal variability
- https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/viewing_metrics_with_cloudwatch.html
- Retrieval of performance metrics and analysis of temporal variability
- Access to AWS CloudWatch dashboards for the Elastic Load Balancer
- Observation of load balancer metrics and analysis of performance variability over time
- https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-cloudwatch-metrics.html
6. Advanced Concepts for Continued Professional Development
- Hybrid Cloud Architectures: Integration of On-Premise and Public Cloud Environments
- Migration Strategies: Transitioning from On-Premise to Public Cloud
- Migration of Application Codebases
- Migration of Data Repository Systems
- DevOps Methodologies
- Infrastructure as Code (IaC) Principles
- Implementation of AWS CloudFormation Templates
- Automated Scaling Mechanisms
- Leveraging AWS CloudWatch metrics to assess system health and trigger scaling actions
Requirements
No specific prerequisites are required to participate in this training program.
Target Audience
Software Engineers and Computer Scientists possessing a solid understanding of algorithmic principles and proficiency in at least one programming or scripting language, who have not previously engaged with Cloud Computing technologies.
21 Hours
Testimonials (1)
The trainer explains you very well.
