Skill · Cloud · Design a cloud environment without depending on the provider
Design a cloud environment's private network: addressing, a regional network attached in several zones, routing and default-deny filtering
Design a cloud environment's private network: addressing plan, a regional network and subnets attached in several zones, route tables, a NAT egress gateway with a default route and default-deny filtering, knowing that the model differs from one provider to another.
Start lesson 1The Cloud domain
- 4 lessons
- ~3 h 25 of reading
- 4 quizzes
- 0 proof lab
The path
Where it comes from, where it leads
What you need to know first, where you stand on this skill, and what it opens next. Your status is computed in your browser, from what you have read and passed.
Before · 1 prerequisite
Recommended before · 2
This skill, for you
Design a cloud environment's private network: addressing, a regional network attached in several zones, routing and default-deny filtering
Computing
It unlocks · 4 skills
- Defend a cloud architecture in review, with written decisions and measurements
- Choose a data service, managed or self-managed, and connect it privately, replication and failover included
- Expose a private application through load balancer, health check, DNS, TLS and edge
- Choose the interconnection and network pattern of a hybrid environment: VPN, dedicated link, BGP, DMZ and hub-spoke
The path through the foundations From the most upstream foundation to this skill: what is in place, what remains to read.
Lessons
How to learn it
4 lessons, about ~3 h 25, in program order. Each lesson ends with its quiz.
The program
4 lessons · ~3 h 25
- 1Réseau cloud : de l'adressage au filtrage par défaut (in French)· 20 min
- 2VPC, VNet et sous-réseaux : créer votre réseau privé cloud (in French)· 35 min
- 3Tables de routage et gateways : diriger le trafic réseau (in French)· 115 min
- 4Sécurité réseau : Security Groups, NACL et pare-feu cloud (in French)· 35 min
Beyond the lessons
Assess, practise, pass the proof
Reading a lesson confirms nothing. A skill is confirmed by a passed quiz, practised in a guided lab, and put to the test by a challenge or a mission; an imported lab result is not verified by the site.
Assess yourself
4 quizzes
At the end of the lessons: passed at 70%, they confirm the skill.
Practice
2 guided labs
Proof
No proof
Neither a challenge nor a mission with a proof yet.
Going further
- Connectivité hybride : VPN, interconnexions dédiées et BGP (in French)
- Patterns réseau cloud : DMZ, Hub-Spoke et Transit Gateway (in French)
Reference pages: they support the skill without teaching it, and do not count in your journey.
Prepare the environment
- Feint: learn, develop and test the cloud without a cloud account
- Installing Feint: verified release, Homebrew, mise or container
- Wiring the official Scaleway, Outscale and Exoscale CLIs
To do before the labs: these pages do not teach the skill, they set up what you need to practice it.
Placement test
Preparing the questions…
Your answers in detail
For each question asked: your answer, the correct answer, its explanation and the page to reread.
Around it
Who requires it, who teaches it
Required by
Taught by
Same block · Design a cloud environment without depending on the provider
- Choose a workload's service and deployment model and split responsibilities
- Estimate a cloud architecture's monthly cost from dated price lists
- Choose a workload's compute model and size it from measurements
- Choose a workload's storage family and class from access, measured performance, durability and cost
- Choose a data service, managed or self-managed, and connect it privately, replication and failover included
- Choose the interconnection and network pattern of a hybrid environment: VPN, dedicated link, BGP, DMZ and hub-spoke