A virtual
private cloud (VPC) is the logical division of a service provider's public
cloud multi-tenant architecture to support private cloud computing. This model
enables an enterprise to achieve the benefits of private cloud -- such as more
granular control over virtual networks and an isolated environment for
sensitive workloads -- while still taking advantage of public cloud resources.
The terms private cloud and virtual private cloud are sometimes
used incorrectly as synonyms. There is a distinct difference -- in a
traditional, on-premises private cloud model, an enterprise's internal IT
department acts as a service provider and the individual business units act as
tenants. With a VPC, a public cloud provider acts as the service provider and
the cloud's subscribers are the tenants.
How a virtual private cloud works
In a virtual private cloud model, the public infrastructure-as-a-service
(IaaS) provider is responsible for ensuring that each private cloud customer's
data remains isolated from every other customer's data both in transit and
inside the cloud provider's network. This can be accomplished through the use
of security policies requiring some -- or all -- of the following elements:
encryption, tunneling, private IP addressing or allocating a unique virtual
local area network (VLAN) to each customer.
A virtual private cloud user can define and directly manage
network components, including IP addresses, subnets, network gateways and
access control policies.
Benefits and challenges of virtual private clouds
As mentioned above, one of the biggest benefits of VPCs is that
they enable an enterprise to tap into some of the benefits of private clouds,
such as more granular network control, while still using off-premises, public
cloud resources in a highly scalable, pay-as-you-go model.
Another benefit of VPCs is enabling a hybrid cloud deployment.
An enterprise can use a VPC as an extension of its own data center without
dealing with the complexities of building an on-premises private cloud.
Despite the benefits of VPCs, they can also introduce some
challenges. For example, an enterprise might face some complexity when configuring,
managing and monitoring its virtual private network (VPN).
In addition, while VPCs offer an isolated environment within a
public cloud in which workloads can run, they are still hosted outside an
enterprise's own data center. This means that businesses in highly regulated
industries with strict compliance requirements might face limitations on which
kinds of applications and data they can place in a VPC.
Before it commits to a VPC, an enterprise should also verify
that all of the resources and services it wants to use from its chosen public
cloud provider are available via that provider's VPC.
Virtual private cloud providers
Most leading public IaaS providers, including Amazon Web
Services (AWS), Microsoft Azure and Google, offer VPC and virtual network
services.
Comments
Post a Comment