Cloud Networking
Cloud networking provides the virtual network infrastructure — VPCs, subnets, gateways, load balancers, peering, and DNS — that connects workloads within a cloud provider and to external networks, replacing physical cables and appliances with software-defined constructs.
itCloud computing | OpenSkills.info
Intro
Cloud Networking
Cloud networking connects workloads, users, offices, the internet, and managed cloud services. You build it from software-defined networks, addresses, routes, gateways, traffic filters, name resolution, and traffic-distribution services.
The cloud changes how you operate these familiar networking ideas. You declare network resources through an API. The provider implements them on shared infrastructure. You can create or remove a network in minutes, but speed does not remove the need for careful design.
Your central question is always the same: Which traffic should travel from this source to that destination, through which path, under which controls?
Start with the packet path
A useful mental model has five checks:
- Name: How does the source resolve a service name to an address?
- Route: Which route matches the destination, and what is its next hop?
- Policy: Which filters allow or deny the flow?
- Translation or distribution: Does a gateway translate the address, or does a load balancer select a healthy target?
- Return path: Can the response travel back through a compatible route and policy?
When an application times out, trace these checks in order. “The network is down” is rarely precise enough to help.
Virtual networks are isolation and routing scopes
Cloud providers offer a virtual network, often called a VPC or VNet. It gives your resources a private addressing and routing scope. You divide that address space into subnets and place network interfaces or managed services in those subnets.
A subnet is an IP prefix, not a security boundary by itself. A route table decides where matching traffic goes. A firewall rule, security group, or network access rule decides which traffic may pass. Providers attach these controls to different scopes, so you must learn the exact evaluation model of your chosen platform.
Continue the course
This section is part of the paid course.
See pricing to subscribe, or log in if you already have access.
Where this skill leads
Relevant careers
See how this topic contributes to broader role-level skill maps.
Sources
- https://csrc.nist.gov/pubs/sp/800/145/final
Supports
- Cloud computing as configurable network access to a shared resource pool
- Cloud service models, deployment models, and essential characteristics
- https://datatracker.ietf.org/doc/html/rfc1918
Supports
- Private IPv4 address ranges and their enterprise scope
- Address reuse, overlap, renumbering, filtering, and private DNS constraints
- https://datatracker.ietf.org/doc/html/rfc4632
Supports
- CIDR prefix notation and route aggregation
- Longest-prefix route selection and the IPv4 default route
- https://docs.aws.amazon.com/vpc/latest/userguide/vpc-subnet-basics.html
Supports
- AWS VPC and subnet scope
- IPv4 and dual-stack VPC addressing
- Main route tables, security groups, network ACLs, and internet gateways
- https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html
Supports
- Route tables as destination and target rules
- Public, private, isolated, peered, and hybrid routing paths
- https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat.html
Supports
- Outbound connections from private IPv4 subnets through address translation
- Return traffic without unsolicited inbound connection initiation
- https://docs.aws.amazon.com/vpc/latest/userguide/infrastructure-security.html
Supports
- Stateful security groups and stateless network ACLs
- Private subnets, minimum routes, private service access, and VPC Flow Logs
- https://learn.microsoft.com/en-us/azure/networking/design-guide/overview
Supports
- Virtual networks, subnets, IP planning, and traffic filters
- Hybrid connectivity, internet ingress, private access, DNS, load balancing, and monitoring
- https://learn.microsoft.com/en-us/azure/networking/networking-overview
Supports
- Azure connectivity, load balancing, content delivery, security, DNS, and hybrid services
- Private Link, VPN Gateway, and ExpressRoute roles
- https://learn.microsoft.com/en-us/azure/networking/design-guide/hub-spoke
Supports
- Hub-and-spoke shared services and workload isolation
- Routing variants, hybrid connectivity, scaling, cost, and failure tradeoffs
- https://docs.cloud.google.com/vpc/docs/vpc
Supports
- Google Cloud VPC and subnet scope
- System-generated routes, firewall rules, and internet-access requirements
- https://docs.cloud.google.com/architecture/network-architecture
Supports
- Enterprise network connectivity and service networking blocks
- Public and private DNS, load balancing, private service connectivity, and flow logs
- https://docs.cloud.google.com/architecture/framework/reliability/observability
Supports
- Metrics, logs, and traces for reliability
- VPC Flow Logs, proactive troubleshooting, alerting, and logging cost controls
- https://csrc.nist.gov/pubs/sp/800/207/final
Supports
- No implicit trust based only on physical or network location
- Resource-focused protection with authentication and authorization
