Introduction to Cloud Network Architecture Assignment

Assignment Task

Pick a cloud provider of your choice for this part of the assignment.

• You can use the console or a CLI for this part of the lab.
• Make sure you take screenshots of each step of the exercise.
• Attach the screenshots to a Microsoft word doc and submit the file to this assignment space.

VPC and Subnets

• Create a VPC (or a VNet in Azure or a VCN in OCI) with a CIDR range of /16. Create three subnets - DMZ, WebAppServer and DBServer in this VPC.
• The DMZ subnet needs to be public and be able to host 64 private IP addresses.
• The DBServer subnet needs to be private and allow up to 128 IP addresses.
• The WebAppServer subnet needs to be private and allow up to 512 IP addresses.
• The DMZ subnet should only be able to receive and respond with HTTPS traffic from the internet.
• The WebApp server subnet should only allow incoming HTTPS traffic from the DMZ subnet.
• The WebAppServer subnet should be able to send HTTPS traffic out to the internet.
• The DBServer subnet should only allow incoming TCP connections on port 3306 (MySQL port) from the WebAppServer subnet.
• Define the route tables and the network firewall rules (as allowed by your cloud service provider) to achieve this network architecture.

Note

Any instance in a subnet that receives a request on some port must be able to send a response back out to the IP address where the request originated.

• Encapsulation in TCP/IP Launch a Linux Compute instance (or a VM in Azure) with a public IP address in a public subnet.
• Follow the cloud provider's instructions to SSH into the compute instance.
• Open two SSH sessions in two separate terminal windows.
• In one of the terminal windows execute "sudo tcpdump -nn port 80" (depending on the instance type you may have to install tcpdump).
• While the tcpdump command is running in one session, run "curl -I www.google.com" in the other (depending on the instance type you may have to install curl).

This Engineering has been solved by our PHD Experts at My Uni Paper.