
Targets IT professionals, including network engineers, DevOps engineers, and system administrators, with a Docker and Kubernetes lab built on Eve Energy for security and penetration testing.
The course flow outlines a six-part lab beginning with deploying a Linux host and network devices, then configuring networks, installing Docker and Kubernetes, and finalizing with F5 Big IP configuration.
Explore a Docker and Kubernetes lab overview focused on network and security concepts, offered for free.
Explore the Docker and Kubernetes network and security resources, using Ubuntu servers and Kali client, with at least 30 GB RAM for Nexus 9000v and Big IP Virtual Edition images.
Explore a flat 192.168.0/24 network topology used for docker-based cybersecurity labs, including python programming setups, attacker using Kali Linux, and normal user clients, with containers downloaded from docker hub.
Build a management network topology by linking a management switch to the router, assigning a default gateway for all lab hosts, and managing Linux servers, F5, and Cisco devices.
Download Linux images, upload them to the lab, and build Ubuntu and Kali Linux hosts; configure a management network with DHCP for SSH access.
Set up a Docker and Kubernetes lab by downloading and transferring Ubuntu and Kali Linux images, then organize them in the Eve Energy environment for lab nodes.
Deploy and configure network devices using Eve Energy, including Cisco F5, Arista, and Cisco Nexus 9000, to build a topology with Ubuntu and Kali servers.
Build an Arista switch for the docker and kubernetes network lab by downloading Arista software, converting vmdk to qcow2, and deploying in eve-ng.
Download the Nexus 9000 image, upload it to the lab, create a new Nexus 9000 node, and boot it connected to the management network.
Download and configure the F5 BIG-IP virtual edition (14.1.4.3) for a KVM-based lab, including upload, unzip, rename, and permission setup to power a ready network security lab.
Perform the initial switch configuration by canceling zero-touch provisioning, logging in as admin, setting hostname data, creating admin credentials, configuring the boot image, and saving the running configuration.
Configure Arista and Cisco Nexus 9000 switches for Docker and Kubernetes networking by setting up SVI and management interfaces, enabling IP routing, configuring routes and DNS, and then test connectivity.
Install docker on the prepared Linux hosts and configure the topology with a master and three workers, assigning dedicated hostnames to ensure the infrastructure is fully functional.
Set up user access by adding a user to the Docker group and verify, then configure and apply hostnames across the master and three worker nodes, validating changes after reconnect.
Test access to a containerized web app by pulling the image from Docker Hub, running the container, and verifying access from Kali Linux and client via Firefox on port 880.
Change the Docker cgroup driver by updating the configuration and restarting the system. Verify the Docker service is active and running with systemctl status docker.
Learn to deploy Kubernetes signing keys, configure repositories, and install essential Kubernetes tools across master and worker nodes, ensuring cluster readiness and disabling swapping.
Initialize the Kubernetes control plane on the master, configure the pod network CIDR and API server address, then join worker nodes and verify cluster status.
Deploy a flannel CNI to set up Kubernetes networking, verify pod and node readiness, and enable metrics to monitor cluster resource utilization.
Test a Kubernetes cluster by deploying four pods with a yaml manifest and verifying their distribution across worker nodes and ip addresses. Clean up by deleting the pods.
Configure and verify Kubernetes nodes communicate over the data network 192.168.10.0/24 by updating per-node IPs in the admin configuration and restarting services, then confirm with kubectl get nodes.
DESIGNED FOR REAL PRODUCTION ENVIRONMENT.
- DOCKER/KUBERNETES NODES WITH MULTIPLE INTERFACES
- SERVERS/NODES CONNECTED TO DATA CENTER SWITCHES
- EXTERNAL LOAD BALANCER/APPLICATION DELIVERY CONTROLLER
- FUTURE PROOF SECURITY/PENETRATION TESTING SIMULATION
This course is designed to assist you build your own Docker and Kubernetes Network & Security home lab
You will be guided to complete easy steps like downloading and installing necessary Software such as Arista vEOS, Cisco Nexus 900v, F5 BIG-IP Virtual Edition, Ubuntu and Kali Linux images.
This Network and Security Lab is designed for Containerization, Software Defined Networking (SDN), Security, Penetration Testing and Cloud & Data Center Networking
I will demonstrate the tuning and configuration of most of the components. Also will be doing some basic testing just to make sure we are doing everything right.
Arista Networks is a consistent leader in Data Center networking Solutions and open programmable switches. It is well known for its simple, easy to use programming and automation switch features. Its salable and design for cloud computing environments.
Cisco Nexus 9000 operating system is a consistent leader in Data Center networking Solutions and open programmable switches, derived from the Nexus 7000 code base with added VxLAN support and a major requirement for large-scale virtualization with ability to automate and extend the behavior of the switch, with multiple configuration APIs, direct access to the underlying BASH shell in the operating system, integration with orchestration tools such as OpenStack and Puppet/Chef, and the ability to add 64-bit Linux containers into the switch. All of these are valuable additions in large-scale environments where configuring networks using the CLI is impractical or too error-prone.
Target Audience
Network Engineers and Aspiring Network Engineers
DevOps Engineers and Aspiring DevOps Engineers
Docker/Kubernetes/Container Specialist
System Administrators
Security Engineers / Penetration Testers
Expectations
Lab is built using EVE-NG. We will not talk about how to install it.
We will not talk about network and linux basics
We will not talk about DevOps concepts and culture
We will not talk about Security / CyberSecurity
Nothing but to assist you build Docker and Kubernetes Lab
This is a FREE Udemy course and we have limited time of 2 hours
Sections
Introduction
Docker and Kubernetes Lab
Part 1: Deploying Linux Hosts
Part 2: Deploying Network Devices
Part 3: Network Configuration
Part 4: Installing Docker
Part 5: Installing Kubernetes
Part 6: Configuring F5 BIG-IP (Soon)
Completion