Does it include security best practices?

Yes, it enforces the principle of least privilege for security groups and includes strategies for DDoS protection, WAF implementation, and rate limiting.

Can this help with Infrastructure as Code (IaC)?

Yes, the design patterns and architectural decisions provided by this skill serve as a direct blueprint for generating Terraform, CloudFormation, or Pulumi scripts.

What cloud providers does this skill support?

While grounded in general network engineering principles, the skill is specifically optimized for AWS and GCP services like VPCs, Route 53, and Cloud Load Balancing.

How does it handle high availability?

It provides patterns for multi-Availability Zone (AZ) subnet distribution, load balancing across instances, and DNS-level health checks to ensure seamless failover.

What common mistakes does this skill help avoid?

It mitigates common anti-patterns such as flat network structures (single subnets), overly permissive security rules, and the absence of automated instance health monitoring.

Cloud Network Topology Design

Name: Cloud Network Topology Design
Author: sethdford

bysethdford

•

Infraestructura en la Nube

Designs secure, scalable, and resilient cloud network architectures including VPCs, subnets, and traffic management.

This skill empowers Claude to architect production-grade network infrastructures by applying industry standards like TOGAF and cloud-specific best practices from AWS and GCP. It guides the creation of multi-tier subnet strategies, stateful security group configurations, and sophisticated traffic management through Application and Network Load Balancers. Ideal for architects and DevOps engineers, it ensures high availability through automated failover and DNS health checks while proactively mitigating security risks with DDoS protection and WAF strategies.

Características Principales

01Resilient DNS architecture with health checks and automated failover routing.

02Multi-tier VPC and subnet segmentation for public and private resources.

03Load balancing strategies for high-performance HTTP/HTTPS and TCP/UDP traffic.

04Stateful security group design based on the principle of least privilege.

059 GitHub stars

06Comprehensive DDoS protection and WAF application-layer security.

Casos de Uso

01Designing secure database environments with private subnets and NAT gateways.

02Architecting a highly available multi-tier web application on AWS or GCP.

03Implementing global traffic management and DDoS mitigation for enterprise APIs.

Características Principales

01Resilient DNS architecture with health checks and automated failover routing.

02Multi-tier VPC and subnet segmentation for public and private resources.

03Load balancing strategies for high-performance HTTP/HTTPS and TCP/UDP traffic.

04Stateful security group design based on the principle of least privilege.

059 GitHub stars

06Comprehensive DDoS protection and WAF application-layer security.

Casos de Uso

01Designing secure database environments with private subnets and NAT gateways.

02Architecting a highly available multi-tier web application on AWS or GCP.

03Implementing global traffic management and DDoS mitigation for enterprise APIs.