Cloud Networking Fundamentals

A virtual network (VNet) is a private network created within a cloud provider's infrastructure. It allows you to create a secure and isolated network environment for your cloud resources, such as virtual machines and containers.

A subnet is a smaller, more manageable segment of a VNet. It allows you to group related resources together, such as virtual machines that are part of the same application, and to apply security policies to those resources.

A public IP address is assigned by the cloud provider and is accessible from the internet. This allows resources within the VNet to be accessed from the internet. A private IP address is assigned by the user and is only accessible within the VNet. This allows resources within the VNet to communicate with each other, but they cannot be accessed from the internet.

A network security group (NSG) is a security policy that controls the flow of traffic in and out of a VNet. It allows you to specify which ports and protocols are allowed to be used, and which IP addresses are allowed to access the VNet.

A route table contains a list of routes that determine how traffic is forwarded within a VNet. This allows you to control how traffic is routed between different subnets and resources within the VNet. A network interface card (NIC) is a virtual network adapter that connects a virtual machine to a VNet. It allows the virtual machine to communicate with other resources within the VNet and with resources on the internet.

A load balancer is a device that distributes traffic across multiple virtual machines. This helps to improve the performance and availability of your applications by ensuring that traffic is evenly distributed across all of the virtual machines in your pool.

A VPN gateway allows you to create a secure connection between your on-premises network and your VNet. This allows you to access resources in your VNet from your on-premises network, and vice versa. A NAT gateway allows you to access the internet from your VNet. This allows resources in your VNet to communicate with resources on the internet, but it does not allow resources on the internet to access resources in your VNet.

A firewall is a security device that protects your VNet from unauthorized access. It allows you to control which traffic is allowed to enter and leave your VNet, and it can be used to block malicious traffic, such as viruses and malware.

A private DNS zone is used to resolve DNS queries within a VNet. This allows resources within the VNet to communicate with each other using domain names, rather than IP addresses. A public DNS zone is used to resolve DNS queries from the internet. This allows resources on the internet to access resources in your VNet using domain names, rather than IP addresses.

A traffic manager is a device that distributes traffic across multiple endpoints. This helps to improve the performance and availability of your applications by ensuring that traffic is evenly distributed across all of the endpoints in your pool.

A bastion host is a virtual machine that is used to access other resources in a VNet. It is typically placed in a public subnet and is used to provide secure access to resources in the VNet from the internet. A jump box is a physical server that is used to access other resources in a VNet. It is typically placed in a private subnet and is used to provide secure access to resources in the VNet from on-premises networks.

A service endpoint is a network interface that allows virtual machines in a VNet to access Azure services without having to go through the public internet. This helps to improve the performance and security of your applications by reducing the latency and exposure to threats.

A peering connection allows you to connect two VNet's together. This allows resources in one VNet to communicate with resources in the other VNet, as if they were in the same VNet. A VPN connection allows you to connect your VNet to an on-premises network. This allows resources in your VNet to communicate with resources on your on-premises network, as if they were in the same network.

A virtual WAN is a network that connects multiple VNet's together across different regions. This allows resources in one VNet to communicate with resources in another VNet, regardless of their location. Virtual WANs are used to create global networks that span multiple regions.