network-architecture

Design foundational cloud network architectures with VPC, CIDR, and NAT strategies.

28|3|Updated Feb 22, 2026
One-click install
npx skills add https://github.com/oborchers/fractional-cto --skill network-architecture
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: network-architecture
Source: https://github.com/oborchers/fractional-cto/tree/main/cloud-foundation-principles/skills/network-architecture
Command: npx skills add https://github.com/oborchers/fractional-cto --skill network-architecture

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical challenge of designing robust, scalable, and cost-effective cloud network architectures, preventing costly re-architecting later in the development lifecycle.

Core Features & Use Cases

  • VPC and Subnet Design: Establishes baseline subnet tiers (public, private, database) and guides the addition of specialized tiers (cache, warehouse, messaging) for optimal isolation and security.
  • CIDR Planning: Provides a strategy for allocating IP address ranges to prevent overlaps and facilitate future VPC peering and multi-environment isolation.
  • Cost-Optimized NAT: Guides decisions on NAT gateway implementation (single vs. multi-AZ) based on cost and redundancy needs.
  • Private Connectivity: Details the setup of private endpoints to secure and optimize access to cloud provider APIs.
  • DNS and API Gateway Strategy: Outlines best practices for internal and external DNS resolution and API gateway routing for clear traffic separation.
  • Use Case: When setting up a new SaaS product, use this Skill to define the foundational VPC structure, ensuring that application servers, databases, and external services can communicate securely and efficiently, while also planning for future growth and potential multi-region deployments.

Quick Start

Use the network-architecture skill to design a VPC with public, private, and database subnets across three availability zones.

Frequently Asked Questions about network-architecture

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design a VPC with public, private, and database subnets across multiple availability zones?

Design a VPC by establishing baseline subnet tiers for public, private, and database isolation across availability zones. This approach ensures optimal security and separation of application servers, databases, and external services within your cloud network architecture.

What is the best way to plan CIDR blocks to prevent IP overlaps in multi-environment cloud deployments?

Plan CIDR blocks by allocating specific IP address ranges to prevent overlaps and facilitate future VPC peering. This strategy ensures proper multi-environment isolation and allows seamless private connectivity between different cloud network tiers.

Does this network architecture approach support AWS, GCP, and Azure cloud providers?

Yes, this network architecture approach provides provider-specific translations for AWS, GCP, and Azure. It guides the setup of VPC structures, private connectivity endpoints, and security group configurations tailored to each cloud provider's unique networking model.

How do I configure DNS and API Gateway routing for internal and external traffic separation?

Configure DNS and API Gateway routing by outlining best practices for internal and external DNS resolution. This establishes clear traffic separation, routing external requests through the API gateway while maintaining secure internal communication paths.

When should I choose a single NAT gateway versus multi-AZ NAT gateways for cost optimization?

Choose between single and multi-AZ NAT gateways based on your specific cost and redundancy requirements. A single NAT gateway optimizes cost, while multi-AZ configurations provide higher availability and fault tolerance for your cloud network architecture.