Andrey Lutsenko
8e2a4ac1b9
Переписаны docs/security под текущий этап: SSH/stats из SSH_ALLOWED, 80/443 для всех. Скрипт UFW дополнен правилом 8404.
36 lines
1.8 KiB
XML
36 lines
1.8 KiB
XML
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 420 340" role="img" aria-label="Периметр: 80/443 на HAProxy, 25 на KSMG">
|
|
<defs>
|
|
<marker id="arrow" markerWidth="8" markerHeight="6" refX="7" refY="3" orient="auto">
|
|
<polygon points="0,0 8,3 0,6" fill="#555"/>
|
|
</marker>
|
|
</defs>
|
|
<style>
|
|
.box { fill: #f6f8fa; stroke: #24292f; stroke-width: 1.5; }
|
|
.text { fill: #24292f; font: 13px system-ui, sans-serif; text-anchor: middle; }
|
|
.edge { stroke: #57606a; stroke-width: 1.5; fill: none; marker-end: url(#arrow); }
|
|
.label { fill: #57606a; font: 11px system-ui, sans-serif; text-anchor: middle; }
|
|
.title { fill: #24292f; font: bold 12px system-ui, sans-serif; text-anchor: middle; }
|
|
</style>
|
|
|
|
<text class="title" x="210" y="18">Интернет</text>
|
|
|
|
<line class="edge" x1="130" y1="28" x2="130" y2="52"/>
|
|
<text class="label" x="130" y="46">80/443</text>
|
|
<rect class="box" x="55" y="52" width="150" height="32" rx="5"/>
|
|
<text class="text" x="130" y="73">MikroTik DNAT</text>
|
|
<line class="edge" x1="130" y1="84" x2="130" y2="108"/>
|
|
<rect class="box" x="40" y="108" width="180" height="32" rx="5"/>
|
|
<text class="text" x="130" y="129">HAProxy .117</text>
|
|
<line class="edge" x1="130" y1="140" x2="130" y2="164"/>
|
|
<rect class="box" x="25" y="164" width="210" height="32" rx="5"/>
|
|
<text class="text" x="130" y="185">ACL → бэкенды .160.0/24</text>
|
|
|
|
<line class="edge" x1="290" y1="28" x2="290" y2="52"/>
|
|
<text class="label" x="290" y="46">25</text>
|
|
<rect class="box" x="215" y="52" width="150" height="32" rx="5"/>
|
|
<text class="text" x="290" y="73">MikroTik DNAT</text>
|
|
<line class="edge" x1="290" y1="84" x2="290" y2="108"/>
|
|
<rect class="box" x="230" y="108" width="120" height="32" rx="5"/>
|
|
<text class="text" x="290" y="129">KSMG .57</text>
|
|
</svg>
|