Internet Users

WAF / DDoS Protection

Public Subnet (DMZ)

- API Gateway / Load Balancer

- Reverse Proxy (Nginx/Apache)

Private App Subnet

- Vista App Servers (Concessions, POS, Ticketing APIs)

- Odoo Integration Middleware

Database Subnet (Isolated)

- Vista DB (SQL/Oracle)

- Encrypted Backups (AES-256)

Security & Monitoring

- SIEM / Log Management

- IDS/IPS

- IAM & Key Management (KMS)