ARCHITECTURE.md

HealthTensor Network Architecture

• Architecture is replicated in all environments
• Hosts in the private subnets may only be SSH'd into via the bastion host.
• Outgoing HTTP connections are proxied through the NAT in the public subnet.

            +-------------------------------------------------------------------+
            | VPC                                                               |
            | +-----------------------------+ +-------------------------------+ |
            | | Public Subnet 1: 10.50.0/24 | | Priv Subnet 1: 10.50.2.0/24   | |
            | | +-------------------------+ | | +---------------------------+ | |
            | | | Bastion                 | | | | RDS (Database)            | | |
            | | |                         | | | |                           | | |
   ssh     -|-|-|->                       | | | |                           | | |
            | | |                         | | | |                           | | |
            | | |                         | | | +---------------------------+ | |
            | | +-------------------------+ | +-------------------------------+ |
            | |                             | +-------------------------------+ |
            | | +-------------------------+ | |  Priv Net 2: 172.16.10.16/28  | |
            | | | NAT                     | | | +---------------------------+ | |
            | | |                         | | | | Machine Learning          | | |
  http[s] <-|-|-|-                        | | | |                           | | |
            | | |                         | | | |                           | | |
            | | |                         | | | |                           | | |
            | | +-------------------------+ | | +---------------------------+ | |
            | +-----------------------------+ +-------------------------------+ |
            +-------------------------------------------------------------------+