Design for private access
Combine VPN connectivity, private routing and DNS forwarding for internal platforms.
Back to projectsProduction design
Cloud Infrastructure / Networking
Cloud Networking, VPN, and DR Architecture
Designed private cloud access and DR-oriented networking patterns using VPN clusters, reverse proxies, DNS forwarding, and cloud-native routing, including multi-site connectivity for distributed retail locations.
Access pattern
Private access across cloud environments
A simplified access pattern from distributed clients through VPN and routing layers to private cloud services. It does not expose the physical network topology.
Connect sites & clients
VPN patterns for private access and distributed retail locations.
- OpenVPN
- WireGuard
Resolve & route
Private DNS, forwarding, reverse proxies and load balancing.
- DNS
- NGINX
- Traefik
Reach private services
Cloud-native routing and disaster-recovery-aware infrastructure.
- OCI
- AWS
The challenge
Internal platforms need secure access, predictable routing, and disaster-recovery-aware infrastructure across cloud environments.
The approach
Designed patterns across OCI and AWS, including private routing, VPN-based access, reverse proxies, DNS forwarding, Cloudflare routing, MDM-managed clients, and DR-oriented infrastructure.
My role
Designed and implemented cloud networking and access patterns for private infrastructure and production services.
Engineering decisions
Include recovery in network design
Account for DR-oriented infrastructure and multi-site connectivity across cloud environments.
Scope & delivery
- OCI compartments, VCNs, subnets, security lists, NSGs, and routing concepts.
- OpenVPN and WireGuard connectivity patterns behind network load balancers.
- Multi-site VPN architecture for distributed retail locations.
- Reverse proxy, private DNS, DNS forwarding, and internal routing patterns.
- Cloudflare WAF, DNS, load balancing, and routing concepts.