Virtual Network Concepts

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or

Already have an account? Sign In »

Time
21 hours 25 minutes
Difficulty
Intermediate
CEU/CPE
21
Video Transcription
00:00
>> Hey Cybrarians, welcome back to
00:00
the Linux+ course here at Cybrary.
00:00
I'm your instructor, Rob Goelz.
00:00
In today's lesson, we're going to be
00:00
covering virtual network concepts.
00:00
Upon completion of the lesson here,
00:00
we're going to understand networking concepts that
00:00
are used in virtualization and the cloud.
00:00
We're going to determine how NAT, bridging, local,
00:00
and dual-homed concepts are
00:00
used and we're going to explain
00:00
an overlay network and how overly networks
00:00
are used in software-defined networking.
00:00
Local networks, a host-only or local adapter
00:00
is used in a self-contained network.
00:00
Well, what does that mean?
00:00
Well, what this means is that network only
00:00
lives inside of a host system
00:00
where the virtual machines run.
00:00
We can have multiple virtual machines,
00:00
but our network just lives inside of
00:00
>> our physical system.
00:00
>> There is no egress,
00:00
there's no external network access.
00:00
Why would you do this?
00:00
Well, two reasons.
00:00
One is for speed,
00:00
all of the traffic is just
00:00
traveling through physical memory on
00:00
the host where this lives and
00:00
security that traffic can't leave,
00:00
can't travel out of the host
00:00
and so we might need to do this for testing
00:00
a security product or maybe if we're
00:00
doing malware analysis or something like that,
00:00
we may want to have it just locally on
00:00
our machine and not going anywhere else.
00:00
Now, network address translation,
00:00
also commonly referred to as NAT,
00:00
is set up on virtual network adapters
00:00
and also on home networks through ISPs.
00:00
Within that, there's only one public IP address
00:00
that goes to the outside world.
00:00
All of the internal address is sometimes referred to
00:00
as private IP addresses are translated.
00:00
When traffic is going out,
00:00
the source address that we're
00:00
coming from is changed to the public IP
00:00
so it looks like it all comes from
00:00
that same one public IP address.
00:00
Then when traffic comes back in,
00:00
the destination address is changed to the private IP.
00:00
The traffic comes into the public IP address,
00:00
and it gets changed to the private
00:00
IP address and winds up
00:00
on the machine on the other side
00:00
of the network address translation.
00:00
Now, a dual-homed system has
00:00
an active connection in two different networks.
00:00
Why would we do this?
00:00
Well, there are a number of reasons.
00:00
One is for redundancy.
00:00
We can have it connected to two of
00:00
the same type of networks really,
00:00
we can aggregate the connection or have it there in
00:00
an active-passive situation for failover,
00:00
>> for redundancy.
00:00
>> Or we could be trying to connect to networks.
00:00
We can turn this host into a bridge or a proxy.
00:00
Which brings us to the concept of bridged networks,
00:00
flashback to Lesson 3.9,
00:00
where we talked about bridging.
00:00
A Linux system that's connected to
00:00
>> two separate networks,
00:00
>> can be configured as a bridge and a
00:00
>> bridged adapter makes
00:00
>> a virtual machine look like
00:00
any other system on a non-virtual network.
00:00
It gets an IP address in the same sub-net and it can be
00:00
seen on that network by
00:00
any other systems that are living on the network.
00:00
Now the last concept we're going to talk
00:00
about here is a little bit difficult.
00:00
We're going to go slow through this.
00:00
An overlay network is what is
00:00
used in software-defined networking and what that is,
00:00
is we just start layering
00:00
one network on top of the other.
00:00
SDN allows applications and
00:00
software to control network infrastructure.
00:00
Software-defined
00:00
networking controls the network information.
00:00
We generally just have a dumb switch and then we
00:00
use software-defined networking to program the switch
00:00
to set it up to have maybe virtual switch or we
00:00
could change it into being a gateway or a router.
00:00
An SDN has a controller program and is seen
00:00
as a logical switch in most cases.
00:00
An overlay network is simply a method of
00:00
network virtualization.
00:00
That's what we're talking about here.
00:00
It's a type of virtualization specific to
00:00
networking and it is used in an SDN.
00:00
What we see with this is that networks are
00:00
split into separate channels and then
00:00
packets are encapsulated like our pills
00:00
here and sent through a tunnel channel.
00:00
Underlying network hardware is just a carrier.
00:00
Like I said, the switches are done,
00:00
they're just providing electronics really.
00:00
They don't know what's being sent across it,
00:00
all that is managed in software.
00:00
In this lesson, we covered
00:00
network concepts used in virtualization.
00:00
We talked about how NAT, bridging, local,
00:00
and dual-homed networks and concepts are used.
00:00
Then finally we covered
00:00
overlay networks and how they work at a high level.
00:00
Thanks so much for being here and I look forward
00:00
to seeing you in our next lesson.
Up Next