Dual-application Nginx reverse proxy topology with layered security controls routing internet traffic through firewall and WAF to internal application servers. Internet users connect via a unified public IP:Port entry point, passing through firewall access controls and Web Application Firewall before reaching the Nginx reverse proxy on the application server. Nginx distributes requests to two backend applications—穿透式系统 (Application One) and 债务一体化系统 (Application Two)—both accessing a shared business database in the protected data layer. This architecture demonstrates defense-in-depth principles, separating public-facing infrastructure from internal application and data tiers while centralizing port forwarding and access control. Fork and customize this diagram on Diagrams.so to adapt security group rules, add database replication, or extend to multi-region deployments.