New Architecture [DRAFT]

[0az]

As per internal comms, we have consensus on the following data flows for our architecture.

Serving Files

• User
  • External network hop
• Nginx
  • Nginx auth subrequest (Nginx docs)
  • Kube network roundtrip (possibly in-kernel)
  • Nginx rewrite to object store URL
  • Set headers, if necessary
  • Preserve params, if necessary
  • Nginx proxy_pass to rewritten object store URL
  • DO network request
  • DO network response with object
  • Network hop back to user

Sessions (Stripped down)

• User
• Nginx proxy_pass
• API Server
• Redis