170614119 - Adds initial connection lists and architecture doc
This adds the initial lists of transient connections (protocols, ports, etc). Also adds listening services and hosts used.
This commit is contained in:
parent
b1345c0eb0
commit
7cb260a70d
0
docs/ATATArchitecture.md
Normal file
0
docs/ATATArchitecture.md
Normal file
32
docs/EdgeControls.md
Normal file
32
docs/EdgeControls.md
Normal file
@ -0,0 +1,32 @@
|
|||||||
|
# Edge Control
|
||||||
|
This document describes the expected connections and listening services.
|
||||||
|
|
||||||
|
## Transient Connections
|
||||||
|
| Service | Direction | Ports | Encrypted? | Ciphers |
|
||||||
|
| --------|-----------|-------|------------|--------------|
|
||||||
|
| Azure Container Registry | Egress | 443 | Yes | MSFT Managed |
|
||||||
|
| DOD CRL Service | Egress | 443 | Yes | DOD Managed |
|
||||||
|
| Azure Storage | Egress | 443 | Yes | MSFT Managed|
|
||||||
|
| Redis | Egress | 6380 | Yes | MSFT Managed|
|
||||||
|
| Postgres | Egress | 5432 | Yes | MSFT Managed|
|
||||||
|
|
||||||
|
# Listening Ports / Services
|
||||||
|
| Service/App | Port | Encrypted? | Accessible |
|
||||||
|
|-------------|------|------------|--------|
|
||||||
|
| ATAT App | 80, 443 | Both | Load Balancer Only
|
||||||
|
| ATAT Auth | 80, 443 | Both | Load Balancer Only
|
||||||
|
|
||||||
|
# Host List
|
||||||
|
## Dev
|
||||||
|
| Service| Host |
|
||||||
|
|--------|------|
|
||||||
|
| Redis | cloudzero-dev-redis.redis.cache.windows.net |
|
||||||
|
| Postgres| cloudzero-dev-sql.postgres.database.azure.com |
|
||||||
|
| Docker Container Registry | cloudzerodevregistry.azurecr.io |
|
||||||
|
|
||||||
|
## Production
|
||||||
|
| Service | Host |
|
||||||
|
|---------|------|
|
||||||
|
| Redis | |
|
||||||
|
| Postgres| |
|
||||||
|
| Docker Container Registry | |
|
Loading…
x
Reference in New Issue
Block a user