📘Cisco DevNet Associate (200-901 DEVASC)
Definition:
A firewall is a security device (hardware or software) that controls network traffic entering or leaving a system based on defined rules.
Role in Application Deployment:
- Protects servers and applications from unauthorized access.
- Blocks malicious traffic (like attacks) while allowing legitimate traffic.
- Can operate at different levels:
- Network-level firewall: Filters based on IP addresses, ports, and protocols.
- Application-level firewall: Filters based on application data (like HTTP requests).
Example in IT environment:
- A web application deployed on a server is protected by a firewall that only allows HTTP (port 80) and HTTPS (port 443) traffic. Any other traffic, like SSH from unknown IPs, is blocked.
Key Points for Exam:
- Firewall = security gatekeeper for traffic.
- Protects applications and servers from attacks.
- Can filter by network or application rules.
2. DNS (Domain Name System)
Definition:
DNS is like the “phone book” of the internet. It converts human-friendly domain names (like example.com) into IP addresses that computers use to communicate.
Role in Application Deployment:
- Helps users access applications using a domain name instead of an IP address.
- Can be used to direct traffic to different servers (DNS load balancing).
- Supports features like subdomains (
app.example.com) for different services.
Example in IT environment:
- Your company hosts an application at
app.company.com. The DNS system maps this domain to the server IP192.168.1.10. When users enter the domain in their browser, DNS resolves it to the correct server.
Key Points for Exam:
- DNS = translates domain names → IP addresses.
- Essential for users to reach your application.
- Can help with traffic distribution and redundancy.
3. Load Balancer
Definition:
A load balancer is a device or software that distributes incoming traffic across multiple servers to ensure no single server is overloaded.
Role in Application Deployment:
- Increases availability: If one server fails, traffic is redirected to others.
- Improves performance: Multiple servers handle requests simultaneously.
- Supports scaling: As traffic grows, more servers can be added.
Types of Load Balancing:
- Layer 4 (Transport Layer): Distributes traffic based on IP and port (TCP/UDP).
- Layer 7 (Application Layer): Distributes traffic based on HTTP data, like URLs, cookies, or headers.
Example in IT environment:
- A website has three servers hosting the same application. The load balancer ensures users are evenly distributed across these servers, so no single server becomes slow or crashes.
Key Points for Exam:
- Load balancer = traffic manager across servers.
- Improves availability, performance, and scalability.
- Can operate at network layer (L4) or application layer (L7).
4. Reverse Proxy
Definition:
A reverse proxy is a server that sits between clients and backend servers. It receives client requests and forwards them to the appropriate backend server.
Role in Application Deployment:
- Provides security: Hides backend server details from clients.
- Offers load balancing: Can distribute requests across servers.
- Enables caching: Frequently accessed data is stored to reduce server load.
- Supports SSL termination: Handles HTTPS encryption so backend servers don’t need to.
Difference from Load Balancer:
- Both can distribute traffic, but a reverse proxy also enhances security and performance, while a load balancer focuses mainly on traffic distribution.
Example in IT environment:
- Users access
app.example.com. The reverse proxy receives the request, forwards it to one of several backend servers, caches static content, and encrypts/decrypts HTTPS traffic. The backend servers never directly see the client requests.
Key Points for Exam:
- Reverse proxy = intermediary server for requests.
- Provides security, caching, SSL termination, and load distribution.
- Clients don’t directly access backend servers.
5. How They Work Together in Application Deployment
Imagine an IT environment with a deployed web application:
- DNS maps
app.example.comto the load balancer IP. - Firewall protects the servers by allowing only HTTP/HTTPS traffic through.
- Load balancer distributes incoming requests evenly to multiple backend servers.
- Reverse proxy sits in front of backend servers, handling SSL, caching, and security.
Together, these components ensure your application is:
- Secure (firewall + reverse proxy)
- Fast and scalable (load balancer + reverse proxy caching)
- Accessible via domain name (DNS)
✅ Exam Tips:
- Know the definition, role, and example of each component.
- Understand the differences between load balancer and reverse proxy.
- Remember the flow: DNS → Firewall → Load Balancer → Reverse Proxy → Server.
- Focus on security, performance, and accessibility aspects for deployment scenarios.
