IBM Cloud - MacKittipat/note-developer GitHub Wiki

IBM Cloud

VPC

  • A virtual private cloud (VPC) is a secure, isolated virtual network that combines the security of a private cloud with the availability and scalability of IBM's public cloud
  • Each VPC is deployed to a single region. Within that region, the VPC can span multiple zones.

Subnet

  • Subnets are networks created within a VPC
  • Subnets are a fundamental mechanism within VPC used to allocate addresses to individual resources (such as Virtual server instances)
  • Subnets are bound to a single zone, however, they can reach all other subnets within a VPC, across a region
  • By default, subnets do not have access to the public internet

Access Control Lists (ACLs)

  • A virtual firewall, control the traffic to and from a subnet

Security Group

  • A virtual firewall, control the traffic at the virtual server instance level

Public gateway

  • A public gateway enables a subnet and all its attached virtual server instances to connect to the internet
  • A public gateway only provides virtual server instances outbound connectivity
  • Floating IP addresses and public gateways are independent objects. If a virtual server instance is assigned both a public gateway and floating IP address, the floating IP address always takes precedence on a virtual server instance

Floating IP

  • Floating IP addresses are IP addresses that are provided by the system and are reachable from the public internet
  • Floating IP address provides virtual server instances outbound and inbound connectivity