图表
·
工作室
导入 · draw.io
← 返回画廊
画廊
/
架构与系统
/
导入 · draw.io
架构与系统
扩展
导入 · draw.io
根据 .drawio 源文件重绘。
极简浅色
极简浅色
新标签页打开
下载
相关图表
全部架构与系统 →
PUBLIC INGRESS ZONE
Developer Workstation
Identity: dev_alice (mTLS)
Unauthorized Attacker
Bypass Attempt (No Key)
CORPORATE GOVERNANCE ZONE
CI/CD Paved Road Pipeline
Build: Signed Artifact & Policy Check
Privileged Security Gate
Policy: OPA Signature & Vulnerability Scan
Boundary Firewall & WAF
Status: × BLOCKED
Centralized Audit Log Service
Storage: Immutable SIEM Audit Trail
ISOLATED PRODUCTION RUNTIME
Production API Gateway
Status: ADMITTED [TLS 1.3 Strict]
Isolated Core Database
Access: Paved Road Only (KMS Encrypted)
Security Operations Center
Monitoring: Real-time Alerting Active
GIT PUSH
PROVENANCE [SIGNED]
✓ PASS
BYPASS
AUDIT LOGGED
Authorized Paved Road
Blocked Bypass Attempt
Paved Road Node
Attacker Node
Firewall Blocked
Action / Status Chip
paved-road-animated
安全之路 · 动画