NHN Cloud Associate key terms

A virtual machine running on NHN Cloud compute infrastructure, created from an image and a flavor, with its own virtual CPU, memory, disk, and network interface. It can be stopped, restarted, resized, or snapshotted.

A predefined hardware specification for an instance that sets the number of vCPUs, amount of memory, and sometimes local disk size. Choosing a flavor determines the compute capacity and pricing tier of the instance.

A template containing an operating system and optional preinstalled software used to boot new instances. NHN Cloud provides public images and lets you register private images captured from existing instances or uploaded volumes.

A physically separated data center region within a larger region, connected by low-latency links but isolated against local failures. Distributing instances across zones improves resilience of an application.

A geographic area grouping one or more availability zones and the services offered there. Resources such as instances and volumes are created inside a region and generally cannot be moved across regions without export or replication.

A public and private SSH key combination registered in NHN Cloud and injected into a Linux instance at boot. The private key held by the user is required to log in, replacing password authentication for that instance.

A stateful virtual firewall applied to instance network interfaces that allows or blocks inbound and outbound traffic by protocol, port range, and source or destination address. Rules are evaluated to decide whether a connection is permitted.

A public IP address that can be associated with an instance or load balancer and reassigned to another target when needed. It lets a service keep a stable public endpoint while the underlying instance changes.

A service that distributes incoming traffic across multiple backend instances or members to improve availability and throughput. NHN Cloud offers load balancers with listeners, health checks, and several distribution algorithms.

A periodic probe a load balancer sends to backend members to confirm they can serve traffic. Members failing consecutive checks are removed from rotation until they respond successfully again.

A Virtual Private Cloud is an isolated virtual network you define with your own IP address range, subnets, and routing. Instances and other resources inside it communicate privately and can reach the internet through gateways.

A subdivision of a VPC address range associated with an availability zone, where instances and network interfaces are placed. Subnets separate resources logically and can be public or private depending on routing.

A set of rules that decides where network traffic from a subnet or gateway is forwarded based on destination address. It connects subnets to internet gateways, NAT devices, or peering connections.

A VPC component that provides outbound and inbound internet connectivity for resources in public subnets. Traffic must also be permitted by routing and security rules to reach or leave the internet.

A managed service that lets instances in private subnets initiate outbound internet connections without exposing them to inbound traffic. It translates private source addresses to a public address for the return path.

A stateless subnet-level filter that permits or denies traffic entering or leaving a subnet based on ordered rules. It complements security groups, which operate at the instance network interface level.

A block storage device attached to an instance and formatted with a filesystem by the operating system. Volumes persist independently of the instance lifecycle and can be detached, reattached, or snapshotted.

A point-in-time copy of a volume or instance used for backup or to create new resources. Restoring a snapshot produces a volume or image representing the data at the moment it was taken.

A scalable storage service that stores data as objects in buckets, accessed over HTTP APIs rather than mounted as a disk. It suits backups, static content, and large unstructured datasets with high durability.

A container in object storage that holds objects and defines access policies, versioning, and lifecycle rules. Names must be unique within the service and are used in the endpoint path or hostname.

A lightweight, isolated runtime environment packaging an application with its dependencies, sharing the host operating system kernel. NHN Cloud runs containers through Kubernetes clusters or container registry services.

A managed control plane plus worker nodes that schedules and runs containerized workloads. NHN Cloud provisions the master components and lets users manage node pools and add-ons.

A group of worker nodes in a Kubernetes cluster that share the same instance flavor and scaling configuration. Pools can be scaled or upgraded independently to match workload needs.

The smallest deployable unit in Kubernetes, containing one or more containers that share networking and storage. Pods are scheduled onto nodes and are replaced rather than repaired when they fail.

A service for storing, versioning, and distributing container images by repository and tag. Clusters pull images from the registry when starting pods, so access credentials and image tags must be managed.

A policy that automatically adds or removes instances or nodes based on metrics such as CPU utilization or a schedule. It keeps capacity aligned with demand while controlling cost.

A managed relational database service that handles provisioning, patching, backup, and failover for engines such as MySQL, PostgreSQL, and MariaDB. Users connect to an endpoint rather than administering the host directly.

A running database server provisioned by a managed database service, with its own endpoint, storage, and configuration. It can be restarted, backed up, and scaled through the console or API.

A read-only copy of a primary database that receives changes asynchronously and serves read queries. It offloads reporting or read-heavy traffic but may lag behind the primary by some replication delay.

A stored copy of database or volume data used to recover from failure or human error. Managed services support automated and manual backups, with retention settings and restore to a new instance.

A service that collects metrics, logs, and events from cloud resources and raises alarms when thresholds are crossed. It helps diagnose performance problems and trigger automated responses.

An organizational unit in NHN Cloud that groups resources, members, and permissions, and often maps to a billing boundary. Access to resources is granted per project through role assignments.

Identity and Access Management controls who can perform which actions on which resources through roles and policies. It underpins least-privilege access across projects and services.

A category of instance specifications grouped by workload profile, such as general purpose, compute-optimized, or memory-optimized. The type narrows which flavors are appropriate for a given application.

An address assigned to an instance network interface inside a VPC subnet, used for internal communication. It is not directly reachable from the internet unless routing and gateways allow it.

A connection between two VPC networks that lets resources communicate using private addresses without traversing the public internet. Routing entries and security rules must permit the traffic on both sides.