Network Infrastructure Concepts - CompTIA Security+ SY0-701 - 3.1

Understanding Air Gaps and Network Segmentation

The Concept of Air Gaps

• An air gap is a physical isolation between devices, preventing an attacker from moving between them if they gain access to one device.

• If devices on separate switches need to communicate, connectivity must be established through direct connections or intermediary switches.

Scenarios for Air Gaps

• Air gaps can be used in various configurations, such as separating web servers from database servers to enhance security.

• Managed service providers may implement air gaps by placing different customers on isolated switches to ensure data privacy and security.

Limitations of Physical Isolation

• While physical isolation enhances security, it requires multiple switches; for many customers, this approach does not scale well.

• VLAN technology allows segmentation within a single switch, reducing the number of physical devices needed while maintaining isolation.

Exploring Planes of Operation in Networking

Understanding the Three Planes

• In Software Defined Networking (SDN), there are three operational planes: data plane, control plane, and management plane.

• The data plane handles traffic forwarding and network address translation; it performs the core functions of switching and routing.

Role of Control Plane

• The control plane manages routing tables and dynamic updates necessary for directing traffic effectively across networks.

Management Plane Functions

• Configuration changes made via command line interfaces occur in the management plane, influencing how the control plane operates.

Visualizing Network Operations

Breakdown of Switch Functionality

• A physical switch's functionality can be divided into three planes: data (traffic flow), control (routing management), and management (configuration).

Block Diagram Representation

Infrastructure Setup with Load Balancers and Cloud Technologies

Overview of Infrastructure Components

• The application architecture includes an internet connection that interfaces with a load balancer.

• The load balancer distributes traffic to multiple web servers, specifically web server A and web server B.

• A database server is also part of the infrastructure, supporting the application's data management needs.

Utilizing Cloud Technologies

• With advancements in cloud technologies and Software Defined Networking (SDN), infrastructure can be rapidly deployed as needed.