Fundamentals of DevOps and Software Delivery

Chapter 7. How to Set Up Networking

In Chapter 6, you learned how to split your deployments into multiple environments and how to split your codebase into multiple services. Both actions rely heavily on networking—namely, services need to be able to talk to other services over the network, and environments need to be isolated from one another so they can’t talk to each other over the network. In other words, networking plays two key roles: connectivity and security.

In this chapter, you’ll go deeper into networking, learning the high-level concepts you need in order to connect and secure your applications. In particular, this chapter will walk you through the concepts and examples shown in Table 7-1.

Table 7-1. Concepts and examples you’ll go through in this chapter

Concept	Description	Example
Public networking	Manage access to your apps over the public internet with public IPs and domain names.	Deploy servers with public IPs in AWS and register a domain name for them in Route 53.
Private networking	Run your apps in a private network to protect them from public internet access.	Create a VPC in AWS and deploy servers into it.
Network access	Learn how to securely access private networks by using SSH, RDP, and VPN.	Connect to a server in a VPC in AWS by using a bastion host and SSH.
Service communication	Securely connect apps in a microservice architecture.	Use Istio as a service mesh for microservices running in Kubernetes.

Let’s start with the first item, which ...