About This Architecture
Azure IMS Dev Environment deploys a production-grade network topology across eastus with AKS v1.33.2 fronted by Application Gateway (AGIC), OpenVPN VM for hybrid access, and dual load balancers routing traffic to system and user node pools. Data flows from Internet through public IPs to the Application Gateway or Kubernetes load balancers, then into the AKS cluster via Azure CNI networking, while outbound traffic routes through a NAT Gateway for consistent egress. The architecture isolates workloads across dev-vnet (10.0.0.0/16) subnets, secures secrets in Key Vault, and integrates PostgreSQL Flexible Server, Azure Cache for Redis, and MongoDB Atlas for stateful services. Fork this diagram on Diagrams.so to customize node pool sizing, add peering to vnet-eastus, or adjust NSG rules for your compliance requirements. Reserved subnets (dev-private-subnet2, dev-private-subnet3) enable future expansion without redesign.