SI200: STACKIT™ - Architecturing NEW

Agenda:

• STACKIT™ architecture fundamentals
  • Region / Zone / Availability Zone concept
  • Tenant / project structure
  • Identity & Access Management (IAM)
    
    
• Network & connectivity
  • Virtual Datacenter (VDC) concepts
  • Network architecture: VNETs, subnets, routing, security groups
  • Peering & VPN (on-premises and cloud)
    
    
• Compute services
  • Virtual machines
  • Managed Kubernetes / Gardener
  • Workload patterns: stateless, stateful, batch
    
    
• Storage services
  • Object storage (S3-compatible)
  • Block storage (Cinder)
  • Backup & restore strategies
    
    
• Databases
  • DBaaS (PostgreSQL, MySQL, MongoDB, Redis)
  • HA and DR concepts
    
    
• Managed Kubernetes
  • Cluster setup & management
  • Network layer: CNI, load balancer, ingress
  • Storage integration (PVC, CSI)
    
    
• Service mesh & API gateway
  • Overview of ingress controllers (e.g. NGINX, Traefik)
  • Service-to-service security (mTLS)
    
    
• Application services
  • Message queues (Kafka, RabbitMQ)
  • Monitoring & logging
    
    
• Identity & Access Management
  • Roles, policies, federation (AD/LDAP)
    
    
• Security controls
  • Network security (firewall, NSG, WAF)
  • Data encryption (at rest / in transit)
    
    
• Monitoring & observability
  • Prometheus / Grafana / OpenTelemetry
  • Logging with ELK/Stackit Logging
    
    

Objectives:

The course ST200 STACKIT™ – Architecturing aims to provide participants with a sound overview of the architecture principles and core services of the STACKIT™ Cloud and to enable them to professionally design and implement cloud architectures. After the training, participants will be able to use network, compute, storage and database services as well as managed Kubernetes, security controls and monitoring/observability solutions in STACKIT™ in such a way that workloads can be operated securely, scalably and stably.

Target audience:

The course ST200 STACKIT™ – Architecturing is aimed at IT architects, cloud engineers and technical decision-makers who are responsible for the planning, setup and operation of cloud infrastructures. It is also suitable for DevOps teams and system administrators who want to deepen their knowledge in the areas of network, compute, storage, databases and Kubernetes. IT security officers and technical project managers also benefit, as the training provides practical guidance on how applications and workloads can be operated securely, scalably and efficiently in the STACKIT™ Cloud.

Prerequisites:

To be able to follow the learning pace and course content of the training ST200 STACKIT™ - Architecturing effectively, participants should be familiar with the fundamentals of the STACKIT™ Cloud platform (Compute, Storage, Managed Services, Security).

We recommend attending the following course in advance:

Description:

The course ST200 STACKIT™ – Architecturing provides a comprehensive overview of the architecture principles and services of the STACKIT™ Cloud. The focus is on fundamental concepts such as regions, zones and availability zones as well as the tenant and project structure and identity & access management (IAM).

A central component of the course ST200 STACKIT™ – Architecturing is the topic of network & connectivity: Participants learn about the concepts of the virtual datacenter (VDC), gain insights into network architectures with VNETs, subnets, routing and security groups and find out how peering and VPN connections are implemented to link on-premises environments with the cloud.

Building on this, the compute services are presented – from virtual machines based on OpenStack to managed Kubernetes with Gardener through to different workload patterns such as stateless, stateful or batch-oriented applications. In addition, the course covers the storage services, including object storage (S3-compatible), block storage (Cinder) as well as strategies for backup and restore.

In the area of databases, various DBaaS offerings such as PostgreSQL, MySQL, MongoDB and Redis are considered, supplemented by high availability and disaster recovery concepts.

One focus is on managed Kubernetes: Participants learn about cluster setup and management, the use of CNIs, load balancers and ingress as well as the integration of storage via PVCs and CSI. In addition, topics such as service mesh & API gateway are covered, including an overview of ingress controllers such as NGINX or Traefik and service-to-service security using mTLS.

Furthermore, application services are presented, including message queues with Kafka and RabbitMQ as well as central functions for monitoring and logging. Identity & access management is also explored in greater depth, with a focus on roles, policies and federation via AD/LDAP.

The course ST200 STACKIT™ – Architecturing is rounded off by security controls such as network security (firewall, NSG, WAF) and data encryption both at rest and in transit as well as comprehensive topics relating to monitoring & observability with Prometheus, Grafana,OpenTelemetry and logging solutions such as the ELK stack or STACKIT™ Logging.