ThreatModel cluster_internet Internet cluster_dmz DMZ cluster_gateway_zone Gateway_Zone cluster_intranet Intranet cluster_command_zone Command_Zone External Client 1 πŸ‘€ External Client 1 External Firewall πŸ”₯ External Firewall External Client 1->External Firewall test1 Protocol: HTTPS Data: Web Traffic πŸ”’ Encrypted External Client 2 πŸ‘€ External Client 2 External Client 2->External Firewall test Protocol: HTTP Data: Web Traffic External Client 3 πŸ‘€ External Client 3 External Client 3->External Firewall Client 3 to External Firewall Protocol: FTP Data: File Transfer External Client 4 πŸ‘€ External Client 4 External Client 4->External Firewall Client 4 to External Firewall Protocol: SFTP Data: File Transfer πŸ”’ Encrypted External Client 5 πŸ‘€ External Client 5 External Client 5->External Firewall Client 5 to External Firewall Protocol: DNS Data: DNS Query External Client 6 πŸ‘€ External Client 6 External Client 6->External Firewall Client 6 to External Firewall Protocol: SMTP Data: Mail Traffic External Client 7 πŸ‘€ External Client 7 External Client 7->External Firewall Client 7 to External Firewall Protocol: RTSP Data: Video Stream External Client 8 πŸ‘€ External Client 8 External Client 8->External Firewall Client 8 to External Firewall Protocol: MQTT Data: IoT Data Protocol Break Device πŸ–₯️ Protocol Break Device External Firewall->Protocol Break Device External Firewall to Protocol Break Device Protocol: HTTPS Data: Web Traffic πŸ”’ Encrypted Internal Firewall πŸ”₯ Internal Firewall Protocol Break Device->Internal Firewall Protocol Break Device to Internal Firewall Protocol: HTTPS Data: Web Traffic πŸ”’ Encrypted Gateway Load Balancer πŸ–₯️ Gateway Load Balancer Internal Firewall->Gateway Load Balancer Internal Firewall to Gateway Load Balancer Protocol: HTTPS Data: Web Traffic πŸ”’ Encrypted Switch πŸ”€ Switch Internal Firewall->Switch Internal Firewall to Switch Protocol: Ethernet Data: General Traffic App Server 1 πŸ–₯️ App Server 1 Gateway Load Balancer->App Server 1 Gateway Load Balancer to App Server 1 Protocol: HTTPS Data: API Request πŸ”’ Encrypted App Server 2 πŸ–₯️ App Server 2 Gateway Load Balancer->App Server 2 Gateway Load Balancer to App Server 2 Protocol: HTTPS Data: API Request πŸ”’ Encrypted App Server 3 πŸ–₯️ App Server 3 Gateway Load Balancer->App Server 3 Gateway Load Balancer to App Server 3 Protocol: HTTPS Data: API Request πŸ”’ Encrypted App Server 1->Switch App Server 1 to Switch Protocol: Ethernet Data: General Traffic App Server 2->Switch App Server 2 to Switch Protocol: Ethernet Data: General Traffic App Server 3->Switch App Server 3 to Switch Protocol: Ethernet Data: General Traffic Internal Operator 1 πŸ‘€ Internal Operator 1 Internal Operator 1->Switch Internal Operator 1 to Switch Protocol: Ethernet Data: General Traffic Internal Operator 2 πŸ‘€ Internal Operator 2 Internal Operator 2->Switch Internal Operator 2 to Switch Protocol: Ethernet Data: General Traffic System Administrator πŸ‘€ System Administrator System Administrator->Switch System Administrator to Switch Protocol: Ethernet Data: General Traffic Central Server πŸ–₯️ Central Server System Administrator->Central Server System Administrator to Central Server Protocol: SSH Data: SSH Traffic πŸ”’ Encrypted πŸ” Authenticated Authentication Server πŸ–₯️ Authentication Server System Administrator->Authentication Server System Administrator to Authentication Server Protocol: LDAPS Data: Authentication Request πŸ”’ Encrypted πŸ” Authenticated Switch->Central Server Switch to Central Server Protocol: HTTPS Data: Server Request πŸ”’ Encrypted πŸ” Authenticated ↔️ Bidirectional Central Server->Authentication Server Central Server to Authentication Server Protocol: LDAPS Data: Authentication Request πŸ”’ Encrypted πŸ” Authenticated Application Database πŸ—„οΈ Application Database Command Machine πŸ–₯️ Command Machine Command Machine->Switch Command Machine to Switch Protocol: Ethernet Data: General Traffic