Azure Deployment Specifications

High-level Azure Deployment Networking Diagram

This diagram shows the overall wallet network topology of the Institutional Vault deployment:

graph TD
    Internet --> DNS[Azure DNS Zone]
    DNS --> Ingress[AKS Ingress / Load Balancer]

    subgraph Region[Azure Region]
      subgraph VNet[VNet 10.1.0.0/16]
        subgraph AKSSubnet[AKS Subnet 10.1.8.0/21]
          Ingress --> AKSCluster
          subgraph AKSCluster[AKS Cluster 10.2.0.0/16]
            WalletPods[Wallet Pods]
          end
        end

        subgraph DBSubnet[DB Subnet 10.1.0.0/24]
          Postgres[PostgreSQL Flexible Server]
        end

        WalletPods --> Postgres
      end
    end

Network and Firewall Ports

The table below summarizes the minimum network and firewall rules required for the Institutional Vault AKS deployment.

These ports should be reflected in any perimeter firewall, Azure NSG rules, and on-prem network controls used in the deployment.

Recommended Service and Infrastructure Sizing

The following tables summarize the recommended sizing derived from the Azure Terraform and Helm configuration.

Kubernetes Workload Sizing (per pod)

Azure Infrastructure Sizing