📡
Poydevor kurs

Tizim administratorligi

Tarmoq asoslaridan Windows/Linux server, monitoring, backup, avtomatlashtirish, konteynerizatsiya va cloud'gacha — barcha keyingi yo'nalishlar (DevOps, Kiberxavfsizlik, Tarmoq muhandisligi) uchun majburiy poydevor.

100 soatDavomiyligi
11 modul+ yakuniy loyiha
Boshlang'ichDaraja
Offline / OnlineFormat
🔑
Pererekvizit: yo'q — kurs noldan boshlanadi. Kompyuter bilan asosiy ishlash ko'nikmasi yetarli.
Dastur

11 modul — tarmoqdan cloud'gacha

Har bir modul laboratoriya ishi va mini-loyiha bilan mustahkamlanadi.

  • OSI va TCP/IP modellari, Ethernet, MAC/IP manzillash
  • IPv4 subnetting, CIDR, DNS va DHCP
  • Switching: VLAN, trunking, STP, EtherChannel
  • Marshrutizatsiya asoslari, NAT, ACL, firewall/VPN/proxy
  • Amaliyot: Cisco Packet Tracer / GNS3 — 3 bo'limli ofis tarmog'i loyihasi
  • Gipervizor turlari: Type 1 (bare-metal) vs Type 2 (hosted)
  • Proxmox VE — VM/LXC yaratish, storage (LVM-Thin, ZFS), tarmoq, backup/snapshot
  • Klaster yig'ish va live migration, HA asoslari
  • VMware ESXi va Hyper-V bilan qiyosiy tanishuv
  • Loyiha: Proxmox'da 3 VM (Linux, Windows, monitoring) + VLAN + avtomatik backup
  • Active Directory: foydalanuvchilar, OU, guruhlar, ikkinchi Domain Controller, FSMO
  • DHCP, DNS, NAT, NTP, Windows Firewall, IIS, WSUS
  • Fayl/print server, Storage (iSCSI, DFS), Shadow Copies
  • Group Policy (GPO): parollar siyosati, cheklovlar, dasturlarni tarqatish
  • PowerShell asoslari, Windows Server Backup, Event Viewer
  • 44 soat / 22 dars
  • Ubuntu Server LTS / AlmaLinux — terminal, fayl tizimi (FHS), vim/nano
  • Foydalanuvchilar, ruxsatlar (chmod/chown), paket menejerlari (apt/dnf)
  • Tarmoq xizmatlari: SSH, DNS (bind9), DHCP, Web (Apache/Nginx), DB (MySQL), NFS/Samba
  • Disk boshqaruvi (LVM, RAID), systemd, cron, log boshqaruvi
  • Firewall (ufw/firewalld), SSH hardening, Fail2ban, bash skriptlash
  • Yakuniy loyiha: LAMP/LEMP stack + firewall + avtomatik backup
  • 56 soat / 28 dars
  • Zabbix — server/agent, host/item/trigger, alert (Telegram bot), SNMP monitoring
  • Prometheus + Grafana — Node Exporter, PromQL, dashboard va alert
  • ELK Stack va markazlashgan log serveri, log retention siyosati
  • Yakuniy loyiha: Zabbix + Grafana real-time dashboard, ELK bilan log markazlashtirish
  • CIA triad, tahdid turlari (malware, phishing, DDoS)
  • Firewall/Proxy — pfSense, Kerio Control, Fortigate; IDS/IPS (Snort/Suricata)
  • VPN (Site-to-Site, Remote Access), server hardening, patch management
  • MFA, least privilege, Wazuh SIEM asoslari, incident response
  • Pentest kirish: Kali Linux, Nmap, Nessus/OpenVAS
  • 3-2-1 qoidasi, Full/Incremental/Differential backup
  • Veeam Backup & Replication, BorgBackup (Linux), Proxmox Backup Server
  • Windows Server Backup — System State, Bare Metal Recovery
  • DR reja: RTO/RPO, runbook, offsite/cloud backup (rclone), DR testlash
  • Git — versiya nazorati, GitHub/GitLab
  • PowerShell va Bash skriptlash, Python (avtomatlashtirish + REST API)
  • Ansible — playbook, roles, Galaxy; Terraform asoslari (IaC)
  • CI/CD kirish — GitLab CI pipeline
  • Loyiha: Ansible playbook orqali bir nechta serverga avtomatik joylashtirish
  • Docker: image/container, Dockerfile, Docker Compose
  • Volume/Network, Docker Registry, xavfsizlik (Trivy scan)
  • Kubernetes asoslari: Minikube, kubectl, Deployment/Service
  • Scaling, ConfigMap/Secret, Ingress va Helm bilan tanishuv
  • MySQL / PostgreSQL o'rnatish, foydalanuvchi va huquqlar (GRANT/REVOKE)
  • Backup/restore (mysqldump, pg_dump), replikatsiya (Master/Slave)
  • MS SQL Server va SSMS, backup strategiyalari
  • Indekslash, performance va xavfsizlik, Point-in-Time Recovery
  • IaaS / PaaS / SaaS, on-premise vs cloud
  • AWS — EC2, S3, VPC, Security Groups, IAM (least privilege, MFA)
  • Azure — Virtual Machines, Storage, Azure AD; Yandex Cloud bilan tanishuv
  • Hybrid cloud, migratsiya asoslari, xarajatlarni boshqarish (billing alert)
Bonus

Qo'shimcha mavzular — bozor talablari asosida (2026)

Vakansiya talablari tahlili asosida aniqlangan bo'shliqlarni yopish uchun qo'shilgan mavzular.

⚙️

Skriptlash — chuqurlashtirish

PowerShell remoting, AD avtomatlashtirish; Python (paramiko, requests, log tahlili).

☁️

Cloud — sertifikatga yo'naltirilgan

Azure AZ-104 yo'nalishi (Entra ID, Hybrid AD), Microsoft 365 administratorligi, AWS SAA.

✉️

Korporativ pochta

Exchange Online/M365 mailbox boshqaruvi, SPF/DKIM/DMARC, anti-spam.

🏢

Enterprise-virtualizatsiya

VMware vCenter/HA/DRS, Hyper-V SCVMM va failover clustering, SAN/iSCSI/FC.

🧩

IaC va DevOps ko'nikmalari

Ansible (roles, vault), Terraform asoslari, Git bilan konfiguratsiya boshqaruvi.

📋

Ish jarayoni ko'nikmalari

Jira/ServiceNow/GLPI, ITIL asoslari, runbook va RCA hisobotlari, texnik ingliz tili (B1+).

🎓 Yakuniy loyiha

Real korporativ infratuzilma qurish

To'liq korporativ infratuzilma: Proxmox + Windows Server + Linux + Docker; monitoring — Zabbix + Grafana + Alert; backup — PBS + BorgBackup + DR Plan; avtomatlashtirish — Ansible Playbook. Yakunida sertifikat topshirish va portfolio tayyorlash.

Sertifikatlar

Tavsiya etilgan sertifikatlar

Ustuvorlik tartibida — poydevordan senior yo'nalishgacha.

1 CompTIA Network+ / Security+ 2 RHCSA (Linux) 3 AZ-104 (Azure Administrator) 4 VCP / AZ-800 (Enterprise)

Tizim administratorligi kursiga yozilish

Keyingi guruh boshlanishidan xabardor bo'lish uchun konsultatsiyaga yoziling.