All blueprints

Production Blueprint · Industry-standard pattern

A three-tier network: public, private and isolated subnets

The standard shape of a production web application in the cloud: only the load balancer faces the internet, the application runs in a private subnet, and the database sits in a subnet with no route out. Names are given for AWS and Azure.

DNSCDN / WAFLoad balancerSubnetsSecurity groups / NSGsNAT gatewayBastionDatabase

Sign in free to read this blueprint

Here is what's inside:

  • The network layers
  • A request's journey
  • What each layer is for
  • Where it goes wrong
  • The interview talk track
  • What I'd improve next

Want to see what a full blueprint looks like first? Read: .NET 8 + Angular 20 on Azure Windows VMs