Skip to content
← Systems Foundations

Learning bite

Public, private, and hybrid cloud

Separate cloud operating characteristics from where infrastructure sits or who can reach an application.

Documentation reviewed2026-10-26 · 4 min read
  1. Why
  2. Predict
  3. Try
  4. Inspect
  5. Explain
  6. Save evidence

Predict before you try

Would a local source repository plus an unrelated public landing page establish hybrid cloud?

Try it: Connect the machine to an operating model →
On this page

Connect the machine to an operating model

You have compared virtualization, VMs, containers, and the Linux machine lifecycle. Now ask who supplies infrastructure and how consumers obtain it. No cloud account or provisioning is needed for this module.

Cloud computing includes on-demand access, network access, pooled resources, elasticity, and measured service. Virtualization can support this model, but one manually operated VM does not by itself establish a cloud.

Deployment modelDefining boundary
PublicInfrastructure offered for use by the general public through a provider
PrivateCloud infrastructure dedicated to one organization; it can be operated on or off premises
HybridDistinct cloud environments joined by mechanisms that support moving or coordinating data/applications
CommunityInfrastructure shared by organizations with common requirements; included for completeness

These are simplified deployment distinctions grounded in NIST's cloud definition↗.

Unpack the cloud characteristics

On-demand self-service means a consumer can obtain resources through the service without a person manually handling every request. Resource pooling means the provider assigns shared capacity to consumers. Elasticity is the ability to expand or release capacity as demand changes. Measured service means usage is accounted for, supporting monitoring and often billing. Network access connects consumers to these capabilities.

Virtualization is one possible underlying mechanism; it is not the whole operating model. An administrator manually creating a single VM in an office may be doing useful virtualization without providing the self-service, pooling, and measurement expected of a cloud.

Work a classification example: an organization offers its own teams a self-service compute portal, quotas, and metered pooled capacity in a data center operated for that organization. That fits a private-cloud proposal even if an external company operates the hardware. If an unrelated provider offers infrastructure to the public, that is a public-cloud model even when the chosen workload has only private network access.

Avoid name-based shortcuts

A public-cloud service can have private network access. A private cloud can host a public website. “Public” describes the cloud deployment model, not whether every workload or storage object is open to everyone.

An on-premises rack is not automatically a private cloud; explain its provisioning and operating capabilities. Likewise, your OrbStack learning machine is a local environment, not evidence that you have built a private cloud.

Using more than one provider is generally described as multi-cloud. Hybrid emphasizes integration across distinct environments; the two labels can overlap. An unrelated laptop plus a public website does not demonstrate a working hybrid application.

Apply the distinctions to MicroBank

These are proposed environments, not claims about an existing MicroBank deployment:

ChoiceWhat you need to explain
Local learning profileWho operates the machine, which processes run, network reachability, and retained data
Public-cloud proposalHow compute/data services are obtained, who can reach them, and who operates each component
Organization private-cloud proposalSelf-service capacity, pooled resources, quotas/measurement, and responsibility boundaries
Hybrid proposalA real application/data integration requirement across distinct cloud environments and its failure behavior

Do not classify the local OrbStack machine as private cloud just because its address is private. Do not choose hybrid merely because the diagram has more boxes. A public name such as microbank.learnwithsk.dev describes how a client addresses an endpoint; it does not establish the cloud model or reveal every backend.

Make and check a decision

Write a three-sentence MicroBank proposal: who uses it, how capacity is obtained, and who operates it. For this foundations checkpoint, the observed environment is your local Linux learning machine and its small fixtures. The full application placement is still a design.

For a future provider-operated environment, distinguish the proposed cloud model from service choices such as VM, managed runtime, or database. Those change the division of operating work, which the next bite examines.

Would a local source repository plus an unrelated public landing page establish hybrid cloud? No. Explain the distinct cloud environments and application/data integration if you claim hybrid. Would a public URL prove its database is publicly reachable? No. Audience, endpoint exposure, and deployment model are separate questions.

Checkpoint

Classify a proposed environment using its ownership, access, and provisioning behavior. Explain why “runs in a VM,” “uses a private IP,” and “runs in our office” do not each determine a cloud model. Continue to service models to decide which responsibilities remain yours.

Apply this to MicroBank

Classify one proposed MicroBank environment by who supplies capacity and how it is provisioned. Your manually managed OrbStack machine is a local lab. A later public-cloud proposal needs an explicit operating boundary. Describe a hybrid design only when there are distinct cloud environments and a real integration requirement; a local Git checkout beside a cloud diagram is insufficient.

Keep this observation in the MicroBank readiness project.

Prove what you learned

Inspect the result

Save the component/owner decision, a denied or failed path, and the missing verification.

Explain it in your own words

Explain why your observation supports the stated outcome, and name one thing it does not prove.

Try a small variation

Change one design requirement and revise only the affected decisions; state the trade-off.

Your evidence should show

  • Record the context/revision or label the work as a paper or prepared fixture.
  • Compare the prediction with the actual result from “Connect the machine to an operating model”.
  • Save the component/owner decision, a denied or failed path, and the missing verification.
  • Explain the transfer challenge and retain the same verification question.
Hint

Separate runtime, identity, network, data, messaging and recovery ownership.

Answer guide: compare after predicting

No. Explain the distinct cloud environments and application/data integration if you claim hybrid. Would a public URL prove its database is publicly reachable

Compare this with your actual observation. A paper answer is useful reasoning practice; record execution separately.

Recall the source-derived MicroBank component map and cloud service responsibility model. Revisit the previous lesson.

Save the prediction, result and explanation ↓

Your notes and evidence

Record observations, questions, or links to your work. Keep credentials out of your notes.

Loading saved progress…

Back up or restore this path

Progress and notes stay in this browser. A backup contains only this learning path.