CEC Module - 4
CEC Module - 4
Cloud Infrastructure
Cloud Management
Cloud computing management is maintaining and controlling the cloud services and resources
be it public, private or hybrid. Some of its aspects include load balancing, performance, storage,
backups, capacity, deployment etc. To do so a cloud managing personnel needs full access to
all the functionality of resources in the cloud. Different software products and technologies are
combined to provide a cohesive cloud management strategy and process.
As we know Private cloud infrastructure is operated only for a single organization, so that can
be managed by the organization or by a third party. Public cloud services are delivered over a
network that is open and available for public use. In this model, the IT infrastructure is owned by
a private company and members of the public can purchase or lease data storage or computing
capacity as needed. Hybrid cloud environments are a combination of public and private cloud
services from different providers. Most organizations store data on private cloud servers for
privacy concerns, while leveraging public cloud applications at a lower price point for less
sensitive information. The combination of both the public and private cloud are known as Hybrid
cloud servers.
Cloud Networking
Cloud Networking is a service or science in which a company’s networking procedure is
hosted on a public or private cloud. Cloud Computing is source management in which more
than one computing resource shares an identical platform and customers are additionally
enabled to get entry to these resources to a specific extent. Cloud networking in a similar
fashion shares networking however it gives greater superior features and network features in
the cloud with interconnected servers set up under cyberspace.
1. Cloud Networking
Multi Cloud Networking comes with facilitating connectivity and traffic distribution over multiple
cloud service platforms with ensuring interoperability and security across diverse multi cloud
environments. The following are its functionalities:
Hybrid Cloud Networking comes with the integration of on-premises infrastructure with public
and private cloud environments. It provides seamless data flexibility with hybrid connectivity.
● Integration Of Environments: It develops a single network based architecture
linking public and private cloud environments with on premise infrastructure.
● Data Mobility: It helps with smoother transfer of workloads and data in between
on-premise and cloud environments. It facilitates resource optimization and agility.
1. On-Demand Self Service: Cloud computing provides required application, services,
and utility to clients. With a login key, they can begin to use besides any human
interplay and cloud service providers. It consists of storage and digital machines.
2. High Scalability: It requests grants of resources on a large scale besides any
6. Services in pay per use Model: Application Programming Interface is given to
breaches can compromise the sensitive data stored on the cloud. This risk is
mitigated through proper security measures, but there is always some level of
vulnerability.
3. Limited control: When you use a cloud network, you are dependent on the cloud
provider to manage and maintain the network infrastructure. This can limit your
control over the network and how it is managed.
4. Cost: Cloud networking can be expensive, particularly for large-scale enterprise
networks. The costs can add up quickly, especially when you factor in the ongoing
maintenance and support costs.
5. Lack of customization: Cloud networking solutions are typically pre-configured and
may not offer the level of customization that some organizations require. This can
limit your ability to tailor the network to your specific needs.
● Virtual Private Networking ( VPN ) In the Cloud: Setting the VPN services within
the cloud environments helps for securing remote access and transfer the data.
● Hub and Spoke Network Topology: Establishment of Hub and spoke technology
helps in centralizing the traffic management and in optimizing the resource utilization.
● Software-Defined Networking (SDN): On usage of SDN technologies facilitates in
dynamically managing and configuring the network infrastructure in cloud
environments for improving agility and scalability.
Usage of effective management tools facilitates centralized monitoring and controlling for having
optimized utilization of resources. Organizations can enhance the strengths of multiple clouds
for minimizing complexities and maximize the benefits of their cloud environments.
A Network Management System (NMS) in Cloud Computing is essential for maintaining the
performance, security, and reliability of cloud networks. It provides tools and functionalities to
monitor, configure, optimize, and secure network resources. Below are the key features
explained in detail:
● Real-time Traffic Monitoring: Continuously tracks data packets and network traffic to
ensure smooth operations.
● Latency and Throughput Analysis: Measures network delays, bandwidth usage, and
throughput to identify bottlenecks.
● Performance Metrics Collection: Gathers data on CPU utilization, memory usage, and
network congestion to optimize cloud network performance.
● Dynamic Load Balancing: Distributes traffic efficiently across multiple servers to prevent
overload.
2. Fault Management
● Automated Fault Detection: Identifies network issues such as packet loss, server
downtime, or connectivity failures.
● Event Logging and Alerts: Keeps records of network faults and sends real-time
notifications via email, SMS, or dashboards.
● Root Cause Analysis (RCA): Diagnoses the source of network issues to prevent
recurrence.
● Self-Healing Mechanisms: Uses AI-driven automation to resolve minor faults without
human intervention.
3. Configuration Management
● Intrusion Detection and Prevention Systems (IDPS): Identifies and blocks unauthorized
access attempts.
● Firewall and Access Control: Implements security policies to restrict access to sensitive
data and services.
● Data Encryption: Encrypts data in transit and at rest to protect it from cyber threats.
● Regulatory Compliance: Ensures adherence to industry regulations like GDPR, HIPAA,
and ISO 27001.
● AI and Machine Learning Integration: Predicts network issues and automates responses.
● Zero-Touch Provisioning (ZTP): Automates the setup and configuration of new network
devices.
● Integration with DevOps & CI/CD Pipelines: Supports automation tools like Ansible,
Terraform, and Kubernetes for cloud-native applications.
● Automated Workflows: Schedules routine tasks like patch updates, backups, and
network optimizations.
9. Multi-Tenancy Support
● Isolated Network Environments: Ensures secure and separate network spaces for
different cloud tenants.
● Resource Quotas & Usage Monitoring: Tracks resource usage and prevents tenants
from exceeding allocated bandwidth or storage.
● Custom Access Policies: Implements role-based access control (RBAC) and identity
management for multi-tenant environments.
● Billing and Usage Analytics: Provides detailed reports on network consumption for
accurate billing.
Large cloud vendors provide Network Management System (NMS) solutions to help enterprises
monitor, optimize, and secure their cloud networks. These products offer functionalities like
real-time traffic monitoring, fault detection, security management, and performance optimization
across cloud and hybrid infrastructures. Below is a detailed overview of NMS solutions from
major cloud providers:
Overview:
AWS Network Manager is a centralized network management solution that helps enterprises
monitor and manage their global cloud and on-premises networks. It is particularly useful for
AWS Transit Gateway users who need to track multiple VPC (Virtual Private Cloud) connections
across different regions.
Key Features:
Use Cases:
● Enterprises managing global hybrid networks with AWS and on-premises setups.
● Organizations needing automated fault detection and performance monitoring.
● Companies using AWS Transit Gateway to connect multiple VPCs and remote sites.
2. Microsoft Azure – Azure Network Watcher
Overview:
Azure Network Watcher is a cloud-based network performance monitoring and diagnostics tool
that helps organizations track the health and performance of their Azure cloud networks.
Key Features:
● Traffic Analytics: Monitors network traffic patterns using Azure Monitor and AI-driven
insights.
● Connection Troubleshooting: Identifies packet loss, latency issues, and connection
failures across virtual networks (VNets).
● Packet Capture: Captures and analyzes network packets to detect anomalies and
security threats.
● Topology Visualization: Provides a real-time visual representation of Azure network
resources and their interconnections.
● Network Security Monitoring: Tracks firewall rules and alerts on potential
misconfigurations.
Use Cases:
Overview:
Key Features:
Overview:
IBM Cloud Network Insights is a network analytics and security monitoring platform that
provides real-time insights into cloud network performance, security threats, and compliance
requirements.
Key Features:
● Real-Time Network Visibility: Monitors traffic flow, bandwidth usage, and potential
bottlenecks.
● AI-Driven Anomaly Detection: Uses machine learning to detect unusual traffic patterns
that may indicate security breaches.
● Multi-Cloud and Hybrid Cloud Support: Provides analytics for both IBM Cloud and
third-party cloud providers.
● DDoS Protection: Identifies and mitigates distributed denial-of-service (DDoS) attacks in
real time.
● Compliance & Audit Reports: Ensures network configurations meet industry standards
like ISO 27001, GDPR, and HIPAA.
Use Cases:
Overview:
Oracle Cloud Infrastructure (OCI) offers Network Monitoring tools that help enterprises track
network performance, detect faults, and optimize traffic across OCI-based infrastructure.
Key Features:
Use Cases:
● Enterprises using OCI for cloud workloads and requiring detailed network telemetry.
● Organizations needing advanced security monitoring and compliance enforcement.
● Businesses with highly regulated workloads, such as finance and healthcare, require
deep packet analysis.
Cloud-based Network Management Systems (NMS) are essential for monitoring, securing, and
optimizing cloud networks. The major cloud vendors—AWS, Azure, Google Cloud, IBM, and
Oracle—each provide specialized NMS solutions tailored to their ecosystems.
● AWS Network Manager is ideal for managing AWS-centric global networks.
● Azure Network Watcher excels in Azure VNet diagnostics and security monitoring.
● Google Network Intelligence Center is best for AI-driven network analytics and hybrid
cloud environments.
● IBM Cloud Network Insights offers AI-powered security insights and compliance tracking.
● Oracle OCI Network Monitoring provides deep packet inspection and strict security
controls.
The cloud service lifecycle is the process that cloud providers use to design,develop, deploy,
and manage cloud services. It involves a set of stages that a cloud service goes through, from
ideation and planning to retirement. The cloud service lifecycle typically consists of the following
stages:
1. Service strategy: This is the initial stage where the provider identifies and evaluates potential
cloud services. They consider factors like market demand,competition, and organizational goals.
2. Service design: In this stage, the provider determines the technical and functional
requirements of the service, and the resources needed to develop and implement it. They also
design the architecture and infrastructure of theservice.
3. Service transition: This stage involves the deployment of the service to the cloud
environment. The provider tests the service and ensures that it meets the required standards,
security protocols, and quality expectations.
4. Service operation: This is the stage where the provider delivers the service to the users,
monitors it for performance, and maintains it as required. They also provide customer support
and manage service disruptions and other incidents.
5. Service improvement: In this stage, the provider continuously reviews and evaluates the
service for optimization and improvement. They use feedback from users to identify areas for
improvement and make necessary changes to enhance the service's performance, reliability,
and availability.
6. Service retirement: This is the final stage in the life cycle, where the provider decides to retire
the service when it is no longer needed or viable. They ensure that user data is safely
transferred or deleted, and take any other necessary measures to close the service down.
The cloud service lifecycle helps providers to manage their services effectively and ensure that
they meet customer needs and organizational goals.
The Cloud Service Lifecycle is the process of delivering and managing cloud services over their
entire life cycle. It consists of four phases: Service Strategy,Service Design, Service Operation,
and Service Retirement.
1. Service Strategy: In this phase, the business goals and objectives of the cloud service are
identified, and a plan is created to meet those goals and objectives. The service provider should
determine the target market, the pricing model, the service level agreement (SLA), and the key
performance indicators (KPIs) for the service.
2. Service Design: In this phase, the service provider designs the cloud service to meet the
identified business goals and objectives. This includes determining the technical requirements,
the architecture of the service, and the processes for managing the service. In this phase, the
service provider must consider the security, privacy, and compliance requirements of the
service.
3. Service Operation: In this phase, the cloud service is made available to the customers. The
service provider must monitor the service to ensure it is performing as expected and meet the
SLA and KPIs. The service provider must also provide customer support and resolve any issues
that arise.
4. Service Retirement: In this phase, the service provider determines when to retire the cloud
service. This may be due to changes in business requirements, or the service may have
reached its end of life. The service provider must ensure that customers are given adequate
notice and have a plan to migrate to a new service. The service provider should also ensure that
data is properly disposed of according to the security and privacy policies.
The Cloud Service Lifecycle is an iterative process, and each phase feeds into the next.
Continuous improvement is essential, and the service provider should regularly evaluate and
improve the service to ensure it meets the business goals and objectives.
Consider a cloud-based software-as-a-service (SaaS) product that allows users to manage their
email marketing campaigns. The following is an overview of the service lifecycle:
1. Plan: In this phase, the service provider defines the scope and requirements of the SaaS
product, identifies potential customers, and creates a plan for developing and launching the
service.
2. Develop: This phase involves the development and testing of the SaaSproduct. The service
provider develops the software and the infrastructure necessary to host and deliver the service.
Quality assurance tests are performed to ensure that the software functions as expected and
meets the requirements defined in the planning phase.
3. Deploy: In this phase, the SaaS product is launched to the public. The serviceprovider makes
the software available to customers and provides access to the necessary infrastructure to host
and manage the service. The software is delivered through the cloud, and customers can
access the service from anywhere with an internet connection.
4. Operate: In this phase, the service provider operates the SaaS product and provides ongoing
support to customers. The provider monitors the performance of the service, troubleshoots any
issues that arise, and ensures that the service is available and functional for customers.
5. Optimize: In this phase, the service provider continually improves the SaaS product to meet
the changing needs of customers. The provider collects feedback from customers and uses it to
inform future updates and enhancements to the service.
6. Retire: In this phase, the service provider retires the SaaS product. This may happen if the
product is no longer profitable or if it is replaced by a newer,better version. The provider may
give notice to customers, offer alternatives or migration plans, and provide support during the
transition period.