SaaS Infrastructure Architecture

Arbitex is an enterprise content security platform with a channel-agnostic inspection engine (5-tier DLP, policy engine, HMAC audit chain) and pre-built channel modules: AI Gateway, AppGuard, Email Relay, MCP Security, and File Inspector. The platform runs on Azure Kubernetes Service in the East US 2 region, behind Cloudflare’s global edge network.

The architecture is designed for encrypted-by-default operation, fine-grained network isolation, and cost-controlled scale-to-zero for pre-production and demo workloads. This page describes the customer-facing infrastructure model. It covers what services run where, how traffic flows, and what security boundaries exist between layers.

Five-Layer Architecture

The production stack is organized into five layers. Each layer has a distinct security and operational profile.

Layer 1 — Data

The data layer runs continuously and is the most expensive to provision. All data services use Azure Private Endpoints — there are no publicly reachable database or cache endpoints.

Component	Service	Notes
Database	Azure Flexible Server PostgreSQL	Two databases: platform and cloud. Zone-redundant standby for high availability. 128 GB auto-grow, 30-day geo-redundant backup. Private endpoint only.
Cache	Azure Cache for Redis	TLS enforced. No persistence to unencrypted disk. Three logical databases: platform (db=0), cloud (db=1), reserved for BYOK DEK cache (db=2). Private endpoint.
Secrets	Azure Key Vault	HSM-backed key storage. Managed identity authentication — no stored credentials. Private endpoint. Applications refuse to start if Key Vault is unreachable.
Static assets	Azure Files (ZRS)	Read-only share mounted into pods. Hosts GeoIP MMDB database (MaxMind GeoIP2 City, 118 MB) and Credential Intelligence database.
Object storage	Azure Files (ZRS)	Write access restricted to Platform API only. Stores document uploads. Daily snapshots.

Layer 2 — Compute

The compute layer uses AKS Standard tier with three node pool types. Web and GPU pools scale to zero when not in use, which is the primary cost-control mechanism in pre-production.

Pool	Node type	Scaling	Notes
System pool	B2s_v2 (burstable)	Always on	Runs Kubernetes system pods. Burstable credits accumulate while web/GPU pools are parked.
Web pool	D4ds_v5	Scale to zero	Runs Platform API, Cloud Portal, Outpost Proxy relay, and NGINX Ingress (2 replicas).
GPU pool	NC4as_T4_v3 (NVIDIA T4)	Scale to zero — Deallocate mode	Runs DeBERTa inference, intent classification, and embedding models. Deallocate mode preserves the node allocation, enabling 2–4 minute restarts vs. 8–25 minute cold provisioning.

Pod-to-pool mapping:

Pod	Pool
Platform API	Web
Cloud Portal	Web
Outpost Proxy (SaaS relay)	Web
NGINX Ingress (×2 replicas)	Web
DeBERTa / intent / embeddings	GPU
Alembic migration jobs	Web (Job)

Network policies (Calico) enforce default-deny between pod pairs. Each service pair that communicates has an explicit allowlist. Pod Security Standards (restricted profile) are enforced on all namespaces; the GPU namespace uses baseline (required for CUDA workloads).

Inference failure behavior: If the GPU pool is unavailable (parked or restarting), inference requests fail closed — requests are blocked rather than passing through without DLP scanning.

Layer 3 — Ingress and Networking

All external traffic enters through Cloudflare before reaching the AKS origin.

Internet → Cloudflare edge → NGINX Ingress → Pod

Cloudflare edge:

WAF with OWASP ruleset
Unmetered DDoS protection
CDN and bot management
Full (Strict) SSL mode — Cloudflare validates the origin certificate
DNS management for all public domains

Origin TLS (Cloudflare Authenticated Origin Pulls):

Cloudflare establishes mutual TLS to the AKS origin using the Cloudflare Origin CA certificate. This cryptographically ensures that traffic arriving at the origin came from Cloudflare, not arbitrary internet sources. IP allowlisting provides defense-in-depth.

NGINX Ingress:

Two replicas with PodDisruptionBudget (minAvailable=1) and anti-affinity across nodes — eliminates single-pod traffic SPOF
Per-path body limits: 1 MB for chat completions, 25 MB for document upload paths
WebSocket support for streaming paths (proxy_buffering off)
mTLS enforcement for Outpost traffic (/outpost/* paths)

Outpost mTLS:

Hybrid Outpost deployments authenticate to the Gateway using client certificates issued at Outpost registration time. NGINX enforces ssl_verify_client on for /outpost/* paths. The Platform API middleware verifies the full certificate chain against the Cloud CA — not just issuer presence.

Layer 4 — CI/CD

Component	Detail
Platform	GitHub Actions
Registry	Azure Container Registry (ACR Basic)
Authentication	OIDC federation — no stored Azure credentials in GitHub
Trigger	Manual (`workflow_dispatch`) — both build and deploy are button presses

Build pipeline: lint → test → Trivy image scan → docker build → push to ACR. Critical and high Trivy findings block deployment.

Deploy pipeline: select image tag → helm upgrade → smoke test → git tag.

All base images are pinned by SHA256 digest. No curl in production images (Python health checks instead).

Layer 5 — Monitoring and Observability

Component	Detail
Metrics	Azure Monitor + Container Insights
Logs	JSON structured logs to stdout → Log Analytics (90-day active, 2-year archive)
AKS diagnostics	API server audit logs → Log Analytics (supports SOC 2 CC7)
Alerting	13 alert rules across all layers

Key alerts:

Alert	Condition
Pod crash loop	>3 restarts in 10 min
Key Vault CSI mount failure	Pod in `CreateContainerConfigError` state
Cert expiry warning	Any certificate <14 days to expiry
Inference GPU OOM	GPU memory >90%
API 5xx spike	>10 5xx errors in 5 min
Demo still running	Web+GPU pools occupied >4 hours

Domain Routing

All public domains are managed in Cloudflare DNS. All records are proxied through Cloudflare (orange cloud on — no direct IP exposure).

Domain	Routes to	Service
`api.arbitex.ai/v1/*`	Platform API `:8100`	AI proxy — customer requests
`api.arbitex.ai/outpost/*`	Outpost Proxy `:8300`	Hybrid Outpost communication
`admin.arbitex.ai`	Admin console	Customer admin console
`arbitex.ai`	Vercel	Marketing site (static)
`docs.arbitex.ai`	Static host	This documentation site

Arbitex maintains a separate administrative plane for internal operations, isolated from customer-facing infrastructure. See Security Overview — Staff admin plane isolation.

Deployment Model

SaaS deployment

In the SaaS deployment model, the Arbitex control plane and data plane both run in the Arbitex-managed Azure environment. Customer prompts and completions pass through the Gateway in the Arbitex AKS cluster. DLP scanning runs on the GPU pool within the same cluster.

Customers access the Gateway at api.arbitex.ai/v1 using their API key. The Arbitex admin console at admin.arbitex.ai provides admin configuration.

Hybrid Outpost deployment

In the Hybrid Outpost model, the Arbitex control plane remains Arbitex-managed (SaaS), but the data plane — prompt inspection and policy enforcement — runs in a container in the customer’s own environment.

The Outpost communicates with the Cloud control plane to receive configuration (policy packs, compliance bundles, API keys) and to write audit events. The Outpost is resilient to control plane outages: it caches configuration locally and continues enforcing policy when the Cloud is unreachable.

Outpost registration and certificate issuance are managed by the Cloud control plane. Each Outpost receives a unique client certificate from the Cloud CA at registration time. This certificate is used for mTLS authentication on all /outpost/* requests.

See Deployment guide for Outpost setup and network requirements.

Cost Model

The infrastructure is designed for scale-to-zero pre-production operation.

State	Monthly cost
Parked (no active workloads)	~$966
Demo session (4-hour active window)	~$966 + ~$6/session

Layer	Parked cost
L1 Data	$720
L2 Compute	$133
L3 Ingress	$75
L4 CI/CD	$8
L5 Monitoring	$30

The $720/month data layer cost reflects zone-redundant PostgreSQL HA (which bills at 2× compute on v5-series instances) and four Azure Private Endpoints (~$35/month). This layer cannot scale to zero — the database and cache must remain available for all services.