pk/atst
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

170614119 - Adds initial connection lists and architecture doc

Browse Source 
This adds the initial lists of transient connections (protocols, ports,
etc). Also adds listening services and hosts used.
This commit is contained in:
Rob Gil 2020-01-13 20:02:04 -05:00
parent b1345c0eb0
commit 7cb260a70d
2 changed files with 32 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
docs/ATATArchitecture.md Normal file
View File

32
docs/EdgeControls.md Normal file
View File

@ -0,0 +1,32 @@
# Edge Control
This document describes the expected connections and listening services.
## Transient Connections
| Service | Direction | Ports | Encrypted? | Ciphers |
| --------|-----------|-------|------------|--------------|
| Azure Container Registry | Egress | 443 | Yes | MSFT Managed |
| DOD CRL Service | Egress | 443 | Yes | DOD Managed |
| Azure Storage | Egress | 443 | Yes | MSFT Managed|
| Redis | Egress | 6380 | Yes | MSFT Managed|
| Postgres | Egress | 5432 | Yes | MSFT Managed|
# Listening Ports / Services
| Service/App | Port | Encrypted? | Accessible |
|-------------|------|------------|--------|
| ATAT App | 80, 443 | Both | Load Balancer Only
| ATAT Auth | 80, 443 | Both | Load Balancer Only
# Host List
## Dev
| Service| Host |
|--------|------|
| Redis | cloudzero-dev-redis.redis.cache.windows.net |
| Postgres| cloudzero-dev-sql.postgres.database.azure.com |
| Docker Container Registry | cloudzerodevregistry.azurecr.io |
## Production
| Service | Host |
|---------|------|
| Redis | |
| Postgres| |
| Docker Container Registry | |