This project provides a Reference Implementation for migrating existing Java EE applications from on-premise to cloud-based deployments, as well as migration to a microservices-based architecture.
IBM® WebSphere Application Server in IBM® Bluemix® is a service that facilitates quick setup on a pre-configured WebSphere Application Server Liberty, Traditional Network Deployment, or Traditional WebSphere Java EE instance in a hosted cloud environment on Bluemix on a virtual machine guests with root access to the guest operating system.
Perhaps change the above paragraph to something like this:
IBM WebSphere Application Server for Bluemix is a service that returns guests (virtual machines) in a shared environment for consumers to deploy applications. A VPN protects the public service from generic port scans and other unsolicited network-based attacks. However, it is important to note that the service VPN you use to access your service instance might be shared between multiple Bluemix organizations and users. The virtual machines provide compute, memory, and I/O resources, which come from a shared pool of IaaS resources. Additionally the patterns above depicting collocation of tWAS with IHS and Liberty with IHS are intended for development and testing connivence, not production deployment. If you want to run your applications in a secure private environment as is typical for production deployment, contact your IBM Sales representative who can speak to our dedicated IBM WebSphere Application Server for Bluemix offering.
The following paragraph and the below it in the phase2.md file can be interpreted as endorsing a long standing security anti-pattern....placement WAS and it's JDK in a DMZ, as opposed to separation of the HTTP server refer to point 1 in http://www.ibm.com/developerworks/websphere/techjournal/1210_lansche/1210_lansche.html
Perhaps change the above paragraph to something like this:
IBM WebSphere Application Server for Bluemix is a service that returns guests (virtual machines) in a shared environment for consumers to deploy applications. A VPN protects the public service from generic port scans and other unsolicited network-based attacks. However, it is important to note that the service VPN you use to access your service instance might be shared between multiple Bluemix organizations and users. The virtual machines provide compute, memory, and I/O resources, which come from a shared pool of IaaS resources. Additionally the patterns above depicting collocation of tWAS with IHS and Liberty with IHS are intended for development and testing connivence, not production deployment. If you want to run your applications in a secure private environment as is typical for production deployment, contact your IBM Sales representative who can speak to our dedicated IBM WebSphere Application Server for Bluemix offering.