Server Virtualization

Server Virtualization

Server Virtualization is key concept of cloud. This enables a lot of opportunities and also decrease the work-load of IT engineers. 

Let's suppose we have a server infrastructure, to deploy our web application on it, we must allocate resources, install operating system, required libraries/tools  etc. And do same things every time when  we transfer it to other physical server or location. 

And it is major hurdle to transfer application from this server to another one. Not only that but if our server has a lot of resources than it normally use, then it would cost us a lot of money too. We want to make sure that our application portable so that it will able to work on another computer/server as well.

Therefore hypervisor technology came into play. Hypervisor adds abstraction layer between server (host) and to the virtual machines (VM). Hypervisor allocates resources (CPU,RAM,Storage etc.) for virtual machines (VM). Thanks to this technology we can now run multiple operating systems, applications on one physical server/computer. 

Here are some hypervisor examples from  various companies :  KVM, Microsoft Hyper-V, and VMware vSphere.

Here are some benefits of using hypervisor technology :

  •  Virtual Machines are portable
  •  Lower costs
  •  Improved scalability
  •  Better resource utilization
  •  Quick deployment times







Comments

Post a Comment

Popular posts from this blog

Identity Access Management - How to create user in IAM ?!

Image
Introduction IAM stands for Identity and Access Management. IAM is essential component of AWS allows you to create and manage access of user, role, application and control authentication/authorization. There are 4 essential components of IAM :  Users - are individuals or applications want to access to your AWS resources. Groups - are collection of users. By this you can assign permissions to group instead individual users. Roles - are special access type in IAM that allows user/resource to access another resource via temporary credentials. For example EC2 instance can access to DynamoDB or S3 bucket resources without using permanent credentials. This is possible only via Role which is great security point of view. Policies - are JSON documents that define permissions. In policies we define what actions are allowed or should be denied. This can be attached to users, groups, roles. Hands on IAM exercises :  Login to your AWS account and search for IAM :  After clicking IAM icon, you wil
Read more

EC2 - User data

Image
User data Functionality in EC2 service is important and very handy tool. This allows us to execute script right after EC2 instance creation phase. By that we can execute,install any program we want or update, upgrade operating system on that virtual machine. User data functionality will run once just after completion of the instance creation sequence.  First we need to create an EC2 instance with extra steps. Choose Amazon Linux OS so we don't have to install aws-cli tool which we will need in the next steps.    Click to advanced options and add script below also tick the metadata options as well. With new metadata service it is not possible to send request to metadata service without secret key. That is why we need to use old metadata service for the demonstration purposes. Script is at the end of the page !!! We need one more thing to do, since by default all the ports are closed state. We need to add firewall allow line to open port 80 to serve our page to the public web. Click
Read more

IAM - Roles

Image
IAM Roles Roles in AWS has special meaning. With this functionality you can define different variety of roles and assign it users or your application/service can use them. Roles are specifically important for AWS security. Because roles use temporary credentials with services. So that we don't need to use own permanent credentials to do some operations. If somehow hackers got access to AWS infrastructure they won't able to access our cached permanent  credentials. Here are some of advantages of using roles : Reduced Risk of Credential Exposure Least Privilege Principle Cross-Account Access  Let's create a role and assign it to the user  Click to "IAM" , "Roles" and then "Create role" button.  We need ARN (we talked about this in the previous post) of the user. Copy 12 digit unique ID. During role creation select "AWS account" since we are planning to add this role to user. Enter the ID we got from previous step. This ID defines our us
Read more