Azure Virtual Network– Securing Using VPC - NareshIT

In this blog, you learn about the Virtual Network in Azure. You will learn how you secure the application through the AVM. And let's first realize what we mean by virtual networks. We provide complete Azure training for all Azure certifications. Naresh I Technologies also is the number one computer training institute in Hyderabad and among the top five computer training institutes in India.

So why do we Need Virtual Networks?

They are like a communication channel between the resources that we host in the cloud. We have no actual switches or routers over the cloud. Like, we host a website server and the database server. They need interaction and do it through the virtual network. It's the medium of "interaction." And we know this medium as the Virtual network.

What do we do through the virtual network?

Through it, the two resources on the cloud can interact with each other.

What is a Virtual Network?

The event is the Azure Virtual Network, and it represents the network on the cloud. It logically isolates the Azure cloud that you subscribe to while signing up.

Let us forget the definition for some time and have a look at the simple meaning. Suppose two computer wants to interact. It cannot be without permission. You can grant or cancel the "permissions" in the VNet settings. And once you add the permissions, you add the computers to the network and are ready to move forward. It's what we are doing in today's world.

If you want to get an Azure certification, you need to learn VNet, and you can contact us for your Azure training. Both AWS and Azure are trending. And hence, it can be an option for you for your bright future ahead.

The Virtual Network divide into components.

The virtual network components are as follows:

•         Network Security Groups
•         Subnets

What do we mean by the Subnets?

We can divide each of the virtual networks into subparts, and we know them as subnets.

We can further divide the subnets into the below sections:

•         Private Subnets- There is no internet in this network.
•         Public Subnet- This network has internet access.

Let's look at one of the examples and find out how we can make use of VNet.

Suppose a single virtual network comprises subnets, and each of them has a server.

Subnet A: It's a "web server," and public subnet as the website is accessible through the internet

Subnet B: It's a database server, and it should connect to a web server. However, it does not require internet, and thus it's a private subnet.

You end up wondering where you can set all these, what we allow, and whatnot. We have the second component in the picture, and that is the Network Security Groups.

Network Security Groups

All the connections get set here. Like which ports we open and which we close by default. The below blog will explain the complete steps of how we can "set" all these, and you will find it quite simple to configure these all by the end of this blog.

However, first, let's have a look at the architecture of the VNet.

•         We have a virtual network that works as the containers for the subnets.
•         We have the cloud instance, which we add to the subnet.
•         We also have the configuration properties which we need to configure.
• Below are the complete procedure explaining how the VNet works.
•         At first, we make the virtual network.
•         Then we create the subnets.
•         Then we associate each of the subnets to the virtual machine, which we also know as the cloud instances.
•         Now we attach the subnet to the relevant NSG.
•         Now we configure the NSG properties, and we are ready.

Let's have a look at a Demo now:

Demo:

We deploy two servers within the Virtual Network. The first is the database server, and the second is the website server, and these two require interacting with each other. Let's see how we can architect this.

Step 1: At first, we make an NSG. Now move to the Azure Dashboard. And we tap on the plus sign and then search for the Network Security Group.

Step 2: Now we see the create NSG screen. We need to fill in some details. We need to enter the name and select the subscription. Then we need to name the resource. Since we are creating the new, we pick the "credit new" radio button. Create the Resource group in this step. Keep all the resources in the same group, as that will be easier for you.

Step 3: We now create the Virtual Network. Now follow these instructions. Tap on the three horizontal lines. Now select the virtual network from the drop-down. Now click on Add. Add the name for the virtual network. And, pick the use existing for the resource group, and mention the name. And click on create.

Step 4: Now, we create the two subnets. And we already know what they mean. Follow these steps. Name the subnets and then select the subnet from the list on the right side.

Step 5: Now, create two subnets on the next screen. You need to follow the same steps for the "web server" as well as the database. Now you attach the relevant NSGs.

Step 6: Now you have set up the network. The next step is to configure the Network Security Groups and server creation within this VNet. Let's first make the "webserver."

Select the virtual machine from the list and click on Add.

Step 7: On the next screen, you select the OS. We are selecting Ubuntu OS. And now click on create. First, you need to enter all the "basic" configuration settings. You require entering name, Disk type (SSD), the username (nareshIT), selecting the Authentication type, password, and subscription, and finally click the "OK" button.

Step 8: You need to select the size and select the smallest size. Now click "ok." The second step is complete.

Step 9: In the next step, you select the virtual network to deploy the virtual machine. And next, you "select" the subnet.

Step 10: Now select the NSGs. You need to "select" the none in this case. It is because we have already done and attached the NSG. You need to do the same process for the DB server as well.

Step 11: Next, you need to set the inbound security rules. Click on the inbound security rule, and click on Add.

 Now you need to add the connection property. Add name and service as custom. Now click "ok."

For website access, you need HTTP and HTTPS. You require SSH for server configuration. Now you will see the Ubuntu default page if you want to connect to the "webserver."

Go to the SSH window.

And you can now see the DB NSG as well. It shows SSH and MySQL.

It completes our tutorial.

You can contact Naresh I Technologies for your Azure online training. We provide Azure training in Hyderabad and USA, and in fact, you can contact us from any part of the world through our phone or online form on our site. Just fill it out and submit it, and one of our customer care executives will be contacting you. And what else do you get:

• You have the freedom to choose from Azure online training and classroom training.
• Chance to study from one of the best faculties and one of the best Azure training institutes in India
• Nominal fee affordable for all
• Complete training
• You get training for tackling all the nitty-gritty of Azure.
• Both theoretical and practical training.
• And a lot more is waiting for you.

You can contact us anytime for your Azure training and from any part of the world. Naresh I Technologies caters to one of the best Azure training in India.

Follow us for More Updates: https://bit.ly/NITLinkedIN