Linux Networking Fundamentals and AWS Basics: A Practical Guide for Beginners

Introduction

Networking is the backbone of modern cloud computing. Whether you are a System Administrator, Cloud Engineer, or aspiring DevOps professional, understanding networking concepts is essential for designing, deploying, and troubleshooting infrastructure effectively.

This guide covers the core networking concepts every beginner should know, including the OSI Model, subnetting, security groups, Network Address Translation (NAT), firewalls, AWS Virtual Private Cloud (VPC) architecture, essential Linux networking commands, and Nginx web server installation. By understanding these fundamentals, you will build a strong foundation for working with Linux servers and cloud platforms such as AWS.

1. Understanding the OSI Model

The Open Systems Interconnection (OSI) Model is a conceptual framework that explains how data travels across a network. It consists of seven layers, each responsible for a specific networking function.

Application Layer

Provides network services directly to end-user applications.
Protocols: HTTP, HTTPS, FTP, SMTP.

Presentation Layer

Handles data formatting, encryption, and compression.
Protocols: SSL, TLS.

Session Layer

Establishes, manages, and terminates communication sessions.
Uses APIs and sockets.

Transport Layer

Ensures reliable or fast data delivery between systems.
Protocols: TCP, UDP.

Network Layer

Responsible for routing and logical addressing.
Protocols: IP, ICMP.

Data Link Layer

Handles communication between devices on the same network.

Physical Layer

Transmits raw bits through cables, wireless signals, and networking hardware.

2. Subnetting

Subnetting is the process of dividing a large network into smaller, manageable networks called subnets.

CIDR (Classless Inter-Domain Routing)

CIDR notation represents IP address ranges efficiently.

Example:

192.168.1.0/24

Subnet Mask

Defines the network portion and host portion of an IP address.

Example:

255.255.255.0

Private IP Address

Used within internal networks and not directly accessible from the internet.

Examples:

10.0.0.0/8
172.16.0.0/12
192.168.0.0/16

Public IP Address

Accessible over the internet and assigned by Internet Service Providers (ISPs).

3. Security Groups

Security Groups act as virtual firewalls in AWS and control traffic to and from EC2 instances.

Key Features

Controls inbound traffic.
Controls outbound traffic.
Stateful by design.
Easy to manage and modify.

4. Types of NAT

Network Address Translation (NAT) translates private IP addresses into public IP addresses for internet communication.

Static NAT

One private IP mapped to one public IP.

Dynamic NAT

Private IPs are mapped dynamically from a pool of public IP addresses.

PAT (Port Address Translation)

Multiple devices share a single public IP address using different port numbers.

5. Firewall and Network Security

A firewall protects systems from unauthorized access and malicious traffic.

VPN (Virtual Private Network)

Creates an encrypted tunnel for secure communication over public networks.

Inbound Rules

Common inbound rules include:

Protocol	Port
HTTP	80
HTTPS	443
SSH	22

Elastic IP

A static public IP address provided by AWS.

Static IP

An IP address that remains unchanged.

Dynamic IP

An IP address assigned automatically and may change over time.

6. AWS VPC Architecture

Amazon Virtual Private Cloud (VPC) allows users to create isolated virtual networks within AWS.

Components of AWS VPC

VPC

A logically isolated network in AWS.

Public Subnet

Hosts resources that require internet access.

Private Subnet

Hosts internal resources that should not be directly accessible from the internet.

Internet Gateway

Allows communication between the VPC and the internet.

NAT Gateway

Provides outbound internet access for resources located in private subnets.

Route Table

Defines how network traffic is routed.

VPC Peering

Enables communication between two separate VPCs.

7. Essential Linux Networking Commands

Ping Command

Tests connectivity between systems.

ping google.com

Traceroute Command

Displays the path taken by packets.

traceroute netflix.com

Nslookup Command

Finds the IP address of a domain.

nslookup google.com

Curl Command

Transfers data from web servers.

curl https://www.google.com

Wget Command

Downloads files from the internet.

wget https://example.com/file.zip

Netstat Command

Displays active network connections.

netstat -tunlp

SS Command

Modern replacement for netstat.

ss -tunlp

8. Installing Nginx on Ubuntu

Step 1: Update Package Repository

sudo apt update

Step 2: Install Nginx

sudo apt install nginx -y

Step 3: Verify Nginx Status

sudo systemctl status nginx

Press:

Ctrl + C

to exit.

Step 4: Enable Nginx Service

sudo systemctl enable nginx

Step 5: Create a Simple HTML Page

Move to the web directory:

cd /var/www/html

Open the file:

sudo nano index.html

After adding your HTML code, save and exit:

Ctrl + X
Y
Enter

Step 6: Restart Nginx

sudo systemctl restart nginx

Step 7: Configure Security Group

Allow the following inbound rules:

HTTP → Port 80
HTTPS → Port 443

Verify Access

Open a web browser and access:

http://<Public-IP>

If configured correctly, your webpage will be displayed.

Conclusion

Mastering Linux networking fundamentals and AWS networking concepts is essential for building a successful career in Cloud Computing, DevOps, Site Reliability Engineering (SRE), and System Administration. Understanding the OSI model, subnetting, VPC architecture, security groups, NAT, and Linux networking tools provides a solid foundation for designing secure, scalable, and highly available cloud infrastructure.

As you continue your cloud journey, these concepts will serve as the building blocks for advanced topics such as Kubernetes, Infrastructure as Code (IaC), CI/CD pipelines, and cloud security.

Command Palette