الشبكات
في هذه الصفحة 9 موضوعات
نص الدروس والتمارين باللغة الإنجليزية، بينما تبقى واجهة الموقع وعناوين الدروس بالعربية.
نظرة عامة
الموضوعات
- CIDR
- التوجيه (Routing)
- VPC/VNet
- الشبكات الفرعية (Subnets)
- NAT
- VPN
- نقاط النهاية الخاصة (Private Endpoints)
تعلّم أولًا
4 ساعة تدريب (تقدير)
مخرجات التعلم
- Plan IP address space with CIDR so environments, regions, and on-premises networks don't overlap.
- Design VPC/VNet layouts with public and private subnets, routing, and NAT.
- Connect cloud to on-premises (site-to-site VPN, dedicated connections) and choose by bandwidth, latency, and resilience.
- Expose services privately with private endpoints and keep data paths off the public internet.
الدروس
المختبر والتمارين
Lab
ARC-013-LAB1 · Larkspur network design
Outcomes: 1–4 · Time: ~4 h (one provider; verify service names before recording)
- Gather existing ranges: data center, stores, head office.
- Produce the address plan for prod, non-prod, hub, and DR, with growth headroom.
- Design the VPC/VNet topology: hub-and-spoke, subnets per tier per zone, routing, NAT.
- Design hybrid connectivity to the data center hosting the ERP.
- Add private endpoints for each data store and document the DNS approach.
- Write the connectivity failure modes with detection and behavior.
Acceptance: no overlapping ranges; no data store reachable from the internet; connectivity failure mode documented.
Exercises (case-based; six exercises)
| ID | Outcome | Task |
|---|---|---|
| ARC-013-EX01 | 1 | The data center uses 10.0.0.0/16 and stores use 10.50.x.x/24 each. Allocate prod, non-prod, and hub blocks that avoid overlap and leave growth. |
| ARC-013-EX02 | 1 | How many addresses does a /24 give and what do you subtract for reservations? Explain why subnet sizing for containers needs care. |
| ARC-013-EX03 | 2 | Sketch a three-zone VPC layout with public, application, and data subnets and state which route each subnet has. |
| ARC-013-EX04 | 2 | Cost review: NAT data transfer is high. Name two design changes that reduce it. |
| ARC-013-EX05 | 3 | Choose between VPN and a dedicated connection for the ERP link and state when you would revisit. |
| ARC-013-EX06 | 4 | A private endpoint was created but the application still connects over the public address. Diagnose and fix. |
أظهر الحلول
- EX01 Example: prod region 10.100.0.0/16, non-prod 10.101.0.0/16, hub 10.102.0.0/20, DR reserved 10.110.0.0/16; none overlap 10.0.0.0/16 or 10.50.0.0/16. Record in the plan.
- EX02 256 addresses, minus a few reserved per subnet by the provider (verify before recording). Containers can consume one address per pod/task, so use larger subnets.
- EX03 Public: route to internet gateway; application: default route to NAT in same zone; data: local only, no default route.
- EX04 Use private endpoints for storage and other cloud services; cache or pull artifacts internally; reduce chatty outbound calls.
- EX05 Start with dual VPN (low volume, fast to deliver); revisit when nightly volume, latency need, or availability target exceeds what VPN gives; keep VPN as a backup afterwards.
- EX06 DNS still resolves the public address; enable private DNS for the endpoint or add a private zone; then disable public access on the service to prove the path.
Workplace evidence: a network design you produced or reviewed for a hybrid environment.
Outcome coverage: all outcomes covered by exercises and the lab.
الاختبار
Outcomes: O1 CIDR planning · O2 VPC/VNet layout, routing, NAT · O3 hybrid connectivity · O4 private endpoints.
اختبار ذاتي لك: لا توجد درجات، ولا يُحفظ أو يُرسل أي شيء. اختر إجابة ثم تحقق منها، ويمكنك المحاولة مرة أخرى كما تشاء.
الجزء العملي
Network design review of the ARC-013-LAB1 address plan, topology, hybrid link, and failure-mode notes plus exercises ARC-013-EX01 to EX06. Pass: quiz at least 8/10, at least five of six exercises correct, no overlapping ranges, and no data store reachable from the internet.
أخطاء شائعة
Overlapping CIDRs that block future peering; single VPN tunnel as the only ERP link.
التقييم
Network design review.
دليل من بيئة العمل
A network design you produced or reviewed for a hybrid environment.
الصلة بالمسار الوظيفي
Network security (ARC-018) and HA/DR (ARC-019).