feedback on architecture diagram

[ltalirz]

This comes from discussing the architecture diagram on https://azure.github.io/az-hop/ with an IT professional from a customer

• If possible, it would be useful to use color to indicate not just what is optional, but also what is part of the public/locked-down scenario to make the security aspect easier to understand

• For every component outside the hpcvnet box that is connected via a line to a component inside, we should indicate whether the connection can be made via a private endpoint in the lockdown scenario

• The rationale for drawing components outside or inside the hpcvnet box is not 100% clear to me (e.g. why does the box in the bottom left memtion CycleCloud?). I guess the rationale is that prepackaged services are drawn outside the box (but bastion & vpn gateway are also services? + they also have associated public IPs that are not drawn)

• Some aspects of the drawing are outdated

  • My = Mariadb
  • Lustre & connected services are optional

• The connection to the enterprise firewall could mention expressroute (?)

@xpillons if you have a visio diagram of the drawing, it might make sense to add it to the repo as well so people can adapt it to their specific deployment for talks with IT security

[xpillons]

Yes good point, I will make the visio file available

[xpillons]

@ltalirz please check the visio file here https://github.com/Azure/az-hop/blob/main/docs/files/azhop-public.vsdx

[ltalirz]

Thanks a lot @xpillons ! I won't make it this week but will check back next week