Level 3 information security (等保三级) government cloud network topology integrating dual-layer perimeter defense, cryptographic evaluation (密评) zone, and VLAN-segmented core infrastructure. Internet and e-government external network users route through dedicated boundary firewalls, WAF, IDS/IPS, and load balancers into a hardened core protected by redundant firewalls and a cryptographic services layer. The architecture isolates compute (VMs, Kubernetes), encrypted storage, databases with HA replication, management, backup, and business DMZ across six VLANs, with centralized SOC, IAM, and audit systems ensuring compliance and threat visibility. This topology demonstrates zero-trust segmentation and cryptographic key lifecycle management required for government data protection standards. Fork and customize this diagram on Diagrams.so to adapt network policies, add additional security zones, or integrate your agency's specific compliance requirements.