Reference

Security

The servers and firewalls by site and subnet, every flow split at the devices it traverses.

JSON · Open in the playground

security cluster_0 aws-paris (cloud) cluster_1 dmz (10.0.1.0/24) cluster_2 db (10.0.2.0/24) cluster_3 paris-dc1 (on-prem) cluster_4 erp (192.168.10.0/24) n16 web01 ×3 n17 web02 e0 https/443 n17->e0 e3 tcp/1521, via paris-aws-1 n17->e3 e0->n16 n16s2 web01 ×3 e4 tcp/5432 n16s2->e4 n19 db01 e4->n19 n16s3 web01 ×3 e1 tcp/1521, via paris-aws-1 n16s3->e1 n31 erp01 n22 fw01 e2 tcp/1521 n22->e2 e1->n22 e2->n31 e3->n22

view security: edge invoicing.billing -> stripe : https/443 dropped, stripe is neither selected nor liftable via on

view security: edge invoicing.billing -> invoicing.analytics : tcp/5432 dropped, invoicing.analytics is neither selected nor liftable via on

Nodes 5

ResourceKindFrame
web01serverdmz
web02serverdmz
db01serverdb
fw01firewallparis-dc1
erp01servererp

Edges 5

FromToPortsLayersCarriesThrough
web02web01https/443flowcustomer
web01fw01tcp/1521flowinvoiceparis-aws-1, fw01
fw01erp01tcp/1521flowinvoiceparis-aws-1, fw01
web02fw01tcp/1521flowinvoiceparis-aws-1, fw01
web01db01tcp/5432flowcustomer, invoice