Service Mesh Topology

Internal reference document — depth 5

Snapshots are taken hourly and replicated to the secondary availability zone.

Log rotation is configured for 7 days with gzip compression after the first 24 hours.

Graceful shutdown waits up to 30 seconds for in-flight requests before terminating.

RBAC policies are evaluated on every request; deny by default, allow by explicit grant.

Outbound traffic must route through the egress proxy at proxy.internal:3128.

The key derivation function uses PBKDF2 with 210 000 iterations and a 32-byte salt.