From 67e57d8993c5a06d6628dc2ab4a5ea2de3f04721 Mon Sep 17 00:00:00 2001 From: Sheen Capadngan Date: Mon, 23 Jun 2025 19:00:45 +0800 Subject: [PATCH] doc: added mention of NAT --- docs/internals/architecture/cloud.mdx | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/internals/architecture/cloud.mdx b/docs/internals/architecture/cloud.mdx index 895c2fe9e..96244cb49 100644 --- a/docs/internals/architecture/cloud.mdx +++ b/docs/internals/architecture/cloud.mdx @@ -120,10 +120,13 @@ Application configuration and secrets are managed through AWS SSM Parameter Stor ### Network Architecture +- **VPC Design**: Dedicated VPC with public and private subnets across multiple Availability Zones +- **NAT Gateway**: All outbound traffic from private subnets routes through NAT Gateway for external connectivity - **Load Balancing**: Application Load Balancer with SSL termination and health checks - **Service Communication**: AWS Service Connect for internal service discovery - **Security Groups**: Restrictive firewall rules (port 8080 for main server, 4000 for license API) - **High Availability**: Multi-AZ deployment with automatic failover +- **Network Monitoring**: VPC Flow Logs with 365-day retention for traffic analysis ## Troubleshooting