Skip to content
PAVEL GLUKHIKH
Menu

Architecture Library

Architecture Library

Reference architectures you can build from: each entry describes a complete design — topology, components, security model, tradeoffs, and the decisions behind them. Written from systems that actually run, not from vendor slideware.

Enterprise (existing on-prem estate plus one primary cloud provider)

Hybrid Cloud Landing Zone

Reference architecture for a hybrid cloud landing zone: account structure, identity federation, VPN/DX connectivity, policy guardrails, and cost visibility.

Mid-size (tens of services, 50–500 nodes, single platform team)

Observability Platform Architecture

Reference architecture for observability: metrics, logs, and trace pipelines, tiered storage, retention economics, alert routing, and dashboard governance.

Single plant to multi-site industrial enterprise

OT Network Reference Architecture

Purdue-informed OT network reference: zones and conduits, industrial DMZ, unidirectional gateway options, secure remote access, and sensor placement.

Lab to production (single HA cluster to small multi-cluster fleet)

Production Kubernetes Platform

Reference architecture for production Kubernetes: HA control plane, ingress, GitOps delivery, observability, backup, and multi-environment promotion.

Mid-size to enterprise (500–10,000 users, 1–3 buildings plus datacenter)

Secure Enterprise Campus Network

Reference architecture for a zoned campus and datacenter network: L3 core, firewall placement, NAC admission, and an isolated management plane.