Introduces the fundamental concepts, purpose and applications of computer networks.
Explores different network classifications based on geographical coverage, purpose and architecture.
Introduces different physical and logical network structures and how network devices are organised.
Provides practical knowledge of the hardware used to build and connect computer networks.
Introduces the physical and wireless technologies used to transmit data across networks
Explains how network communication is structured using standard models and protocols.
Introduces Ethernet technology and the role of MAC addresses in local network communication
Develops practical understanding of IPv4 addressing and network identification
Teaches learners how to divide networks into smaller subnets and introduces IPv6 addressing.
Introduces network switching and provides practical skills for configuring and managing switches.
Teaches learners how to logically separate networks and carry traffic between network segments.
Introduces routing and explains how routers forward traffic between different networks.
Explores essential network services that support addressing, name resolution and internet connectivity.
Provides practical knowledge of wireless networks and access point configuration.
Introduces fundamental techniques for protecting networks, devices and network traffic.
Develops practical skills for managing, monitoring and troubleshooting computer networks.
Introduces modern networking technologies and the role of networking in cloud and virtualised environments.
Enables learners to apply their networking knowledge by designing, configuring, testing and documenting a complete network solution
1. Lesson Introduction
Traditional computer networks are commonly built using physical routers, switches, servers, cables, firewalls, and other equipment installed in offices or data centres.
Cloud computing changes how many of these resources are provided. Organizations can use computing, storage, applications, databases, and networking resources through cloud platforms instead of purchasing and maintaining all the underlying physical infrastructure themselves.
Cloud networking is the networking component of cloud computing. It involves connecting users, applications, servers, services, devices, and networks within cloud environments and between cloud environments and external networks.
Major cloud platforms such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud provide networking services that allow organizations to build private network environments, connect cloud resources, control traffic, configure security, and connect cloud systems to on-premises networks.
By the end of this lesson, the learner should be able to:
Define cloud computing.
Define cloud networking.
Explain why cloud networking is important.
Differentiate traditional networking from cloud networking.
Explain virtual networks.
Explain cloud regions and availability zones at a basic level.
Explain subnets in cloud environments.
Explain virtual routers and gateways.
Describe cloud Internet connectivity.
Explain security groups and network access controls.
Explain VPN connectivity to cloud networks.
Explain basic hybrid cloud networking.
Identify common cloud networking services.
Describe basic cloud networking use cases.
Design a simple cloud network.
Cloud computing is the delivery of computing resources and services over a network, commonly the Internet.
Cloud resources can include:
Computing power
Storage
Databases
Networking
Applications
Security services
Analytics
Development platforms
Instead of purchasing all infrastructure in advance, organizations can obtain resources from a cloud provider according to their requirements.
Cloud networking refers to the technologies and services used to connect and control communication between resources in a cloud environment and between cloud environments and external networks.
Cloud networking can connect:
Virtual machines
Cloud applications
Databases
Storage services
Containers
Users
Offices
Data centres
Mobile users
Internet users
A simple example is:
User
↓
Internet
↓
Cloud network
↓
Web server
↓
Database
Traditional networking normally depends heavily on physical infrastructure owned or controlled by an organization.
Examples include:
Physical routers
Physical switches
Physical servers
Network cables
Physical firewalls
On-premises data centres
Cloud networking uses virtualized and provider-managed infrastructure to create network environments and services.
| Traditional Networking | Cloud Networking |
|---|---|
| Physical infrastructure is prominent | Virtual resources are prominent |
| Organization often owns equipment | Provider operates underlying infrastructure |
| Hardware installation may take time | Resources can often be provisioned quickly |
| Capacity planning is important | Resources can often scale more easily |
| Physical location is important | Resources can be distributed across regions |
| Hardware maintenance is required | Provider handles much of the infrastructure |
Cloud networking does not eliminate physical networking. Cloud services still depend on physical data-centre networks; the difference is that customers interact with networking resources through cloud services and software-defined controls.
A virtual network is a logically isolated network environment created within a cloud platform.
Different cloud providers use different names for their virtual networking environments.
Examples include:
Amazon Virtual Private Cloud (VPC)
Azure Virtual Network (VNet)
Google Cloud Virtual Private Cloud (VPC)
A virtual network can provide:
IP address ranges
Subnets
Routing
Security controls
Internet connectivity
Private connectivity
Cloud networks use IP addresses just like traditional networks.
For example:
10.0.0.0/16
This address space can be divided into smaller subnets.
Example:
10.0.1.0/24 → Web servers
10.0.2.0/24 → Application servers
10.0.3.0/24 → Database systems
Subnetting remains important in cloud networking because it helps organize resources and control traffic.
A subnet is a logical subdivision of a network address range.
A cloud virtual network can contain multiple subnets.
For example:
Virtual Network: 10.0.0.0/16
Subnet 1: 10.0.1.0/24
Subnet 2: 10.0.2.0/24
Subnet 3: 10.0.3.0/24
Different subnets can be used for different workloads.
Cloud environments can be designed with different levels of network exposure.
A public-facing subnet may contain resources that need Internet connectivity, such as certain web-facing components.
A private subnet can be used for resources that should not receive direct inbound Internet connections.
For example:
Internet
↓
Public subnet
↓
Application
↓
Private subnet
↓
Database
This design can reduce unnecessary exposure of sensitive systems.
Cloud providers operate infrastructure in different geographic locations known as regions.
A region represents a geographic area containing cloud infrastructure.
Organizations may choose a region based on:
User location
Application requirements
Availability
Data requirements
Performance
Cost
Service availability
For example, an organization serving users in East Africa may evaluate cloud regions based on network latency and available services.
Within some cloud regions, providers divide infrastructure into separate availability zones or similar isolated locations.
These provide physical separation within a region.
Organizations can distribute workloads across multiple availability zones to improve resilience.
For example:
Application Server A → Zone 1
Application Server B → Zone 2
If one zone experiences a problem, the other may continue providing service depending on the application's design.
Cloud networks use routing to determine where network traffic should go.
A routing table may contain information such as:
| Destination | Target |
|---|---|
| 10.0.1.0/24 | Local |
| 10.0.2.0/24 | Internal route |
| 0.0.0.0/0 | Internet gateway |
The exact implementation varies by cloud provider, but the underlying networking concept is similar to traditional routing.
Cloud providers provide logical networking components that perform functions traditionally associated with physical network devices.
These may include:
Virtual routers
Internet gateways
NAT gateways
VPN gateways
Transit gateways
Load balancers
The customer configures these services through a cloud management interface or APIs rather than physically installing the equipment.
An Internet gateway provides a path between a cloud network and the Internet where supported and correctly configured.
For example:
Cloud server
↓
Cloud virtual network
↓
Internet gateway
↓
Internet
Security rules and routing must still permit the required traffic.
Network Address Translation, or NAT, allows systems in a private network to communicate outward through a shared public connection without necessarily exposing them to direct inbound Internet connections.
A common architecture is:
Private server
↓
NAT gateway
↓
Internet
This can be useful when private systems need to download updates or access external services while remaining inaccessible to unsolicited inbound Internet connections.
Many cloud platforms provide security controls that regulate traffic to cloud resources.
For example, a security rule could allow:
TCP 443 → HTTPS
while blocking unnecessary inbound traffic.
Security groups are commonly associated with cloud compute resources and provide a logical method of controlling network traffic.
Cloud networks can also use network-level access control mechanisms.
These can control:
Source addresses
Destination addresses
Ports
Protocols
Direction of traffic
The exact implementation differs between cloud platforms.
Cloud firewalls provide network traffic filtering and security controls without requiring the organization to install a physical firewall appliance inside the cloud provider's infrastructure.
They can help control:
Internet traffic
Application traffic
Internal traffic
Remote access
Suspicious connections
Cloud firewall capabilities vary between providers and service types.
A VPN can connect an organization's physical network to a cloud environment.
Example:
Office Network
↓
Office Router/Firewall
↓
VPN Tunnel
↓
Cloud Virtual Network
↓
Cloud Servers
This is commonly used in hybrid cloud environments.
Hybrid cloud networking connects on-premises infrastructure with cloud infrastructure.
Example:
Company Office
↓
Internet/VPN
↓
Cloud Network
The company may keep some systems in its own data centre while moving other applications to the cloud.
For example:
On-premises → Accounting system
Cloud → Website
Cloud → Backup
Both environments communicate through controlled network connections.
A site-to-site VPN connects two networks.
Example:
Head Office Network
↓
VPN
↓
Cloud Network
Users at the office may access approved cloud resources as if they were communicating with another connected network, subject to routing and security configuration.
Employees may need secure access to cloud applications and systems from outside the organization's office.
Security measures may include:
VPN
Multi-factor authentication
Identity management
Conditional access
Device security
Encryption
Network access should be granted only according to business requirements.
A load balancer distributes network or application traffic across multiple servers or service instances.
Example:
Users
↓
Load Balancer
↙ ↓ ↘
Server 1 Server 2 Server 3
Benefits may include:
Improved availability
Better distribution of traffic
Scalability
Fault tolerance
DNS translates domain names into IP addresses or other service destinations.
For example:
may resolve to an appropriate cloud-hosted service.
Cloud providers may offer managed DNS services that integrate with cloud applications and networking.
Traditional DHCP concepts remain relevant in cloud networking, but cloud providers often manage IP address assignment differently from a typical office LAN.
Cloud networking platforms may automatically assign private IP addresses to virtual resources.
Administrators can often configure addressing behavior and reservations according to the provider's capabilities.
A virtual machine, or VM, is a software-defined computer running on physical infrastructure.
A cloud VM may have:
Private IP address
Public IP address, where required
Network interface
Security rules
Route configuration
Example:
VM-01
Private IP: 10.0.1.10
Subnet: 10.0.1.0/24
Containers are lightweight environments used to run applications.
Cloud platforms can provide networking for containers so that:
Containers communicate with each other.
Applications communicate with databases.
Users access applications.
Services communicate across different environments.
Container networking becomes particularly important when organizations operate many application components.
Cloud networks require security just like traditional networks.
Important controls include:
Identity and access management
Firewalls
Security groups
Network segmentation
Encryption
VPNs
Monitoring
Logging
Secure configurations
Multi-factor authentication
Cloud security is a shared responsibility: the provider secures the underlying cloud infrastructure, while customers remain responsible for many aspects of their own configurations, identities, applications, and data depending on the service being used.
Cloud platforms provide monitoring services that can help administrators observe:
Network traffic
Resource usage
Connection problems
Security events
Application performance
Server health
Monitoring helps identify unusual activity and performance problems.
Cloud network logs may contain information about network activity.
Examples include:
Connection attempts
Accepted traffic
Rejected traffic
Source addresses
Destination addresses
Ports
Protocols
Logs can support:
Troubleshooting
Security investigations
Auditing
Performance analysis
Organizations can connect to cloud resources through:
Public Internet
VPN
Dedicated/private connectivity
Site-to-site connections
Cloud-to-cloud connections
Hybrid network connections
The appropriate method depends on security, performance, cost, and availability requirements.
An organization may use services from more than one cloud provider.
For example:
Cloud A → Application
Cloud B → Backup
Cloud C → Analytics
Networks may need to connect these environments securely.
This introduces additional considerations such as:
Routing
Security
Identity
Performance
Cost
Monitoring
Interoperability
Cloud networking relies heavily on software-defined approaches.
Instead of physically changing a switch or router every time a network needs modification, administrators can configure many networking functions through:
Web consoles
APIs
Command-line interfaces
Infrastructure-as-code tools
This allows network resources to be created and modified programmatically.
Infrastructure as Code, or IaC, allows infrastructure configurations to be defined using code or configuration files.
For example, administrators can define:
Virtual networks
Subnets
Routes
Security rules
Virtual machines
Other resources
This can make deployments more consistent and repeatable.
Cloud networking can support changing workloads.
Resources can often be configured without installing physical hardware.
Virtual network resources can often be created quickly.
Organizations can deploy applications across geographic locations supported by the provider.
The cloud provider manages much of the underlying infrastructure.
Cloud networking can be managed through APIs and automation tools.
Many cloud services depend on reliable connectivity.
Poorly designed or unused resources can increase costs.
Cloud networking can become complex as environments grow.
Incorrect firewall, identity, or network settings can expose systems.
Organizations may become dependent on a particular provider's technologies.
Troubleshooting can require understanding both traditional networking and cloud-specific services.
Consider an organization hosting an online learning platform.
The design could include:
Internet
↓
Load Balancer
↓
Web/Application Servers
↓
Private Network
↓
Database
Additional components could include:
Firewall/security controls
Monitoring
Logging
Backup
VPN for administrators
Separate development environment
This architecture separates public-facing services from sensitive backend systems.
Learners should identify the purpose of:
Virtual network
Subnet
Route table
Internet gateway
NAT gateway
Firewall
Security group
VPN gateway
Load balancer
DNS service
Design a simple cloud network for a small organization.
Requirements:
Website
Application server
Database
Administrator access
Internet users
The design should include:
Virtual network
Public subnet
Private subnet
Routing
Security controls
Internet access
Explain why each component is required.
Design a network connecting:
Office LAN → VPN → Cloud Network
The office contains:
10 computers
1 router
1 firewall
1 switch
The cloud contains:
Web server
Application server
Database
Identify:
IP networks
VPN connection
Routing
Security controls
Internet connectivity
Given the following requirements:
Website must be publicly accessible.
Database must not be directly accessible from the Internet.
Administrators require secure remote access.
Users must authenticate securely.
Design appropriate network security controls.
Using a cloud provider's educational/free-tier environment where available, explore the concepts of:
Virtual network
Subnet
Security rule
Route
Virtual machine
Network interface
Do not create paid resources without understanding the provider's current pricing and billing requirements.
What is cloud computing?
What is cloud networking?
What is a virtual network?
Give two examples of cloud virtual networking services.
What is a cloud subnet?
What is a cloud region?
What is an availability zone?
Explain cloud routing.
What is an Internet gateway?
What is a NAT gateway?
What is a security group?
Explain the purpose of a cloud firewall.
What is a VPN?
What is hybrid cloud networking?
What is a load balancer?
Explain the role of DNS in cloud networking.
Give four advantages of cloud networking.
Give four challenges of cloud networking.
Why is network security important in cloud environments?
Differentiate public and private cloud subnets.
A company wants to move its online business application from an on-premises server to the cloud.
The application consists of:
Website
Application server
Database server
Administrative users
Prepare a cloud network design that includes:
Virtual network.
Public subnet.
Private subnet.
Routing.
Internet connectivity.
Security controls.
VPN for administrators.
DNS.
Monitoring.
Backup strategy.
Explain why each component is included.
Cloud computing
Cloud networking
Virtual network
VPC
VNet
Subnet
Region
Availability zone
Route table
Internet gateway
NAT gateway
Virtual machine
Security group
Firewall
VPN
Hybrid cloud
Load balancer
DNS
Network interface
Infrastructure as Code
Software-defined networking
Cloud networking provides the networking foundation for applications and services hosted in cloud environments.
Important concepts include:
Virtual networks
Subnets
IP addressing
Routing
Gateways
Security groups
Firewalls
VPNs
Hybrid connectivity
Load balancing
DNS
Monitoring
Network logging
Cloud security
Cloud networking builds upon traditional networking concepts. Therefore, understanding IP addressing, subnetting, routing, VLANs, firewalls, and network security makes it much easier to understand cloud networking.
More learning will be delivered through Senior ICT Academy Campus by either a physical instructor or an online instructor.
Learners can use practical sessions to explore virtual networks, subnets, routes, security rules, VPN concepts, cloud servers, and hybrid network designs.
Campus: https://campus.seniorictacademy.com/
Design a secure cloud network for an online learning platform.
The platform requires:
Public website
Application server
Private database
Administrator access
Internet users
Backup
Monitoring
Your design must show:
Virtual network.
Public subnet.
Private subnet.
IP address ranges.
Route configuration.
Internet connectivity.
Security controls.
Administrator VPN access.
Database protection.
Monitoring and logging.
Finally, explain how your cloud network differs from hosting the same application entirely on a physical server in an organization's local server room.