AWS Networking and Server building fundamentals -VPC and EC2

Developers gain skills to identify root causes in network and infrastructure and implement system-wide improvements, not just application tweaks.

Build and configure a network and cyber infrastructure by installing Sabah OS and server software, configuring IP and DNS, mapping domains, and testing with ping, traceroute, and Wireshark.

Build a WordPress blog system by configuring web and db servers in public and private subnets, using network address translation and troubleshooting tools for secure internet access.

Explore how physical networks map to aws regions and availability zones, create a vpc and subnets, and launch ec2 instances like t2.micro to build scalable infrastructure.

Aws networking and server building fundamentals guide you to configure a WordPress blog system on EC2, design VPC subnets, assign IP addresses, set firewalls, DNS, and MariaDB.

Set the IP address range before creating a VPC, distinguish public and private IPs, and learn to choose ranges, 32-bit addresses, and apply IP notation and subnet masks.

Learn how global ip addresses are distributed from the global authority to regional bodies like APNIC and then to internet service providers, servers, and organizations.

Create a free VPC in the AWS console, sign up for an account, and select a region. Then divide the network into smaller networks as shown.

Divide a VPC into subnets to enhance facility separation and security. Use public subnets for internet-facing resources and private subnets for databases, then configure route tables during subnet creation.

Learn how to connect a public subnet to the internet by creating and attaching an internet gateway to a VPC, then configure route tables to forward traffic to the gateway.

Explore how a VPC region uses a public subnet and an internet gateway. A public route table directs 10.0.0.0/16 traffic and routes other destinations to the internet gateway.

Launch an aws ec2 linux t2.micro in a vpc with a public subnet, assign a public ip and private ip, configure security group and key pair, and verify status.

Set the ssh connection source to your pc's ip address to restrict access to the instance and improve security; avoid 0.0.0.0 and update the source when your ip changes.

Stop, restart, and delete an EC2 instance, understanding that stopping halts compute costs while storage continues. Public IP may change, and there is no method to restore a deleted instance.

Learn how to connect to an ec2 instance via ssh by confirming its public ip address and using an rsa key, with windows and mac steps.

Learn how to set secure permissions on your SSH key file to enable connecting to an EC2 instance, using a command that makes the key readable only.

Preserve an elastic IP, then allocate and associate it with your EC2 instance to fix a public IP that would otherwise change after a restart.

Explore how IP addresses enable routing and how port numbers bind applications, with SSH port 22 as an example. Understand fixed versus random ports and TCP versus UDP behavior.

Learn to restrict connections with firewall packet filtering based on ip address and port, and use security groups with inbound and outbound rules to control access.

launch an instance on a public subnet, assign both public and private ip addresses, and connect to the instance via ssh from a terminal.

Install the apache http server on an instance, connect via ssh, install updates, start the httpd service, and verify the running process and port for http access.

Set firewall by configuring an EC2 security group to allow inbound port 80, enabling browser access to the web server.

Learn how domain names resolve to IP addresses using DNS, enabling domain-based access to Sabah and explaining top-level domains, registries, and name resolution.

Register an original domain name, create a Route 53 hosted zone, and configure DNS to map the domain to an IP address, enabling name resolution through Route 53.

Build a virtual server, patch and configure a web server, open port 80 with a security group, and connect via IP or DNS name while exploring name resolution.

Explore the http mechanism and what http is. Requests and responses share three parts: a line, headers (including hostname), and a body; responses add a status line and date header.

Inspect http mechanisms with browser dev tools to examine request and response headers, status codes, content types, cookies, user agent, and the use of get and post methods.

Learn how to use telnet to issue http requests, connect to a host on port 80, and view the http response header and body, contrasting with browser access.

Explore the http protocol overview using browser dev tools, examine client-server communication with telnet, and secure web applications, then build a private network isolated from the internet.

Discover the merit of private subnets for security: they are not exposed to internet, and without a public IP private subnets cannot access internet; public subnets can access private subnets.

Create three private subnets within a chosen availability zone, assigning 10.0.2.0/24 to the private subnet, and verify the main route table settings to ensure no internet access.

Launch Linux in a private VPC subnet with no public IP, create key pair, and configure a MariaDB/MySQL security group for web and db servers; test connectivity with ICMP ping.

Learn how to connect to a DB server via a springboard web server using SSH, SCP, and proper key permissions, with Windows and Mac workflows.

Explain how private subnets are not internet accessible and host hidden db servers, and how a web server in a public subnet enables access from local.

Create a NAT gateway in a public subnet, assign an elastic IP, and update the route table to send internet traffic (0.0.0.0/0) through the NAT gateway.

Learn how to verify NAT gateway connectivity by logging into the DV server, connecting to the internet via HTTP, and validating HTTP responses to confirm gateway status.

Delete a NAT gateway to avoid charges tied to usage, time, or data transfer. If you need it again, re-create it and update the growth table when iterating NAT gateways.

Discover how a private subnet connects to the internet without a gateway, and learn to install MariaDB, WordPress, and operate a blog server.

Configure the server, install the database on a private subnet, and deploy WordPress on a public subnet. Set WordPress to use the database and connect from public to private subnet.

Install MariaDB on the db server, set the root password, create a WordPress database and user, grant privileges from any host, and enable MariaDB to start on boot.

Install WordPress on a web server by updating PHP to 5.6+ and installing MariaDB with necessary libraries, verify the connection, then download, extract, and configure WordPress files.

Install and configure WordPress on an EC2 instance, set up php and httpd, enter database credentials, customize site title and admin user, and access the WordPress administrator page.

We place the web server in the public subnet with no gateway and the database in a private subnet, with the database accessing the internet via a NAT gateway.

Explore tcp/ip basics: public and private IPs, port numbers, DNS and HTTP, and the four-layer model enabling web connectivity.

Explore UDP and TCP transport mechanisms, highlighting UDP's fast, unreliable delivery and DNS use cases, alongside TCP's reliable, ordered delivery and the three-way handshake with sequence and ack.

this lecture explains the tcp/ip transport mechanism, contrasts udp and tcp, and describes tcp's three-way handshake, sequence numbers, and acks for reliable delivery.