About This Architecture

Qantas ROP demonstrates a sophisticated multi-region GCP architecture spanning australia-southeast1 and australia-southeast2, integrating AWS workloads, SaaS vendors, and AI agents through private connectivity. Data flows from Apigee X API gateway through Cloud Run microservices (Saga Logic, Canonical Transform, MCP Server) into Cloud Firestore, Cloud Spanner, and BigQuery, with event-driven async processing via Cloud Pub/Sub and observability via Cloud Trace, Datadog, and Splunk. The design enforces zero-trust security using VPC Service Controls, Binary Authorization, Cloud KMS CMEK encryption, Workload Identity, and Service Mesh mTLS across all regions. This architecture solves multi-cloud governance, compliance, and real-time transaction processing for large-scale airline operations. Fork this diagram on Diagrams.so to customize region placement, add additional vendors, or adapt the Saga pattern for your domain-driven design. The use of Cloud Spanner for distributed transactions and Memorystore Redis for session state exemplifies handling high-concurrency, low-latency requirements across geographies.

People also ask

How do you design a multi-region GCP architecture that integrates AWS workloads, enforces zero-trust security, and handles distributed transactions at scale?

Qantas ROP uses Cloud Spanner for ACID transactions across regions, Cloud Run for stateless microservices with Saga orchestration, and VPC Service Controls with Binary Authorization for zero-trust enforcement. Multi-cloud connectivity via Cross-Cloud Interconnect and Private Service Connect ensures secure, low-latency integration with AWS and SaaS vendors.