Unit 21
Chapter 15
Virtualization
You should know the following:
-
-
- What a VMM is
- What a hypervisor is
- Critical security considerations
-
Hypervisors
Type 1
Bare metal
VMware, Xen, KVM, ESXi, Hyper-V
Type 2
Installed on top of an OS
VirtualBox, VMware Player/Workstation
Security and Management Issues
Avoiding VM Sprawl
VM Escape Protection
Cloud Models
SaaS
PaaS
Iaas
Public
Private
Community
Hybrid
VDI / VDE
VMware View/Horizon
Network Considerations
Special DNS Resolution: Virtual Domain Routing
Special NAT: Routing from Inside a Cloud to Outside
Cloud Access Security Brokers (CASBs)
Managed Security Service Providers (MSSPs)
Security as a Service
Set Up Your Local VMM
We’ll be using virtual machines (VMs) in this class, on the open-source VirtualBox platform. Here’s what you need to do, assuming you’re on Windows:
-
-
-
- Download and install 7zip so you can handle .7z files. As with all software, download it from the source, not from a mass download site.
https://www.7-zip.org/download.html - Download and install Oracle VirtualBox. Select the version for “Windows Hosts”, of course.
https://www.virtualbox.org/wiki/Downloads - Go to a site you’ll learn to love, OSBoxes:
https://www.osboxes.org/
Click on “VM Images”, then select “VirtualBox Images”.
Download Ubuntu: plain, vanilla Ubuntu, not “Ubuntu MATE” or anything else. Just Ubuntu. - Now watch this video, and do as the narrator does, EXCEPT:
–>**Put your virtual machines, each in a separate folder, in C:\Users\Public\VirtualBox VMs **
- Download and install 7zip so you can handle .7z files. As with all software, download it from the source, not from a mass download site.
-
-
Containers
Instead of virtualizing an entire OS, why not virtualize a single application? This involves capturing all the necessary files, executables, libraries etc. and packaging them up in a Container.
See this page for more information:
http://localhost/2019/01/04/virtualization-2-0-containers-vs-virtual-machines/
Type 1 Hypervisors, Type 2 Hypervisors, Docker Containers, Emulators like QEMU, etc.