ADOP/C Hardened Two-Tier Network Architecture

This repository contains a hardened, 2-tiered implementation of the DevOps Platform

The CloudFormation templates in this repository implement the following network architecture:

Architecture

The architecture has been decomposed into the following fine-grained layers.

• Layer 1 - Base networking (VPC Flow Logs Role, VPC, Subnets)
• Layer 2 - Private Services (ADOP/C)
• Layer 3 - Public Proxy
• Layer 4 - OpenVPN
• Layer 5 - Lambda Backups

Pre

Pre-requisite CloudFormation scripts for;

• Allocating EIPs for VPN, NAT Gateway instance one and two.

Layer 1

Defines the base networking:

• VPC Flow Logs Role
• VPC
• Public networking
• Private networking

Layer 2

Provisions your ADOP/C instance in a private subnet.

Layer 3

Defines outer proxy service which supports the infrastructure.

Layer 4

Defines OpenVPN service which supports the infrastructure.

Layer 5

Defines the Lambda service which backs up the underlying EBS data.

Infrastructure Cost Breakdown

The following cost breakdown is based on the following assumptions. In reality the cost is likely to be a little bit higher:

• Default Instance types
• Daily snapshots based on 5% increments
• 200 MB of data in S3
• Web traffic is unaccounted for
• Elastic IPs are constantly assigned

We have used the AWS Simple Monthly Calculator to work out all the estimates.