الشبكات: VPCs والشبكات الفرعية

في هذا الدرس

design a network where only the entry points are public.

الموضوعات المخطط لها

• A VPC (VNet) is your private network; subnets divide it by tier and AZ.
• Public subnets host load balancers; private subnets host applications and databases.
• Internet access for private subnets goes outward only through a NAT gateway.
• Security groups (firewalls) allow traffic by rule: the database accepts connections only from the app's group.
• Use private endpoints to reach managed services without the public internet.