🏗️ Technical Architecture & System Design (Ch.5)
Microservices mesh | Zero-trust security | OT/IT convergence | Enterprise integration
Enterprise Integration Map
External
EPA eGRID/EFH
ISO/RTO (CAISO, ERCOT)
Weather (Solcast, DTN)
Suppliers (EPD Portals)
API Gateway
Kong / AWS API GW
10K req/sec per region
OAuth 2.0 + mTLS
Routing: /telemetry /control /esg
Microservices (K8s)
TIS — Go/Node
COS — Temporal.io
CES — Python 3.12
SVS — Rust
RES — Java 21
▼ Event Bus: Apache Kafka (3-region replication, 7-day retention)
Hot Data
InfluxDB 2.x (90 days)
1M+ points/sec
Continuous downsampling
Config & Assets
PostgreSQL 16
Neo4j (graph topology)
ACID + JSONB
Audit & Logs
ScyllaDB (Cassandra)
WORM S3 Glacier
7-year retention
Cold Archive
S3 / Iceberg
Parquet format
Query-able metadata
▼ Edge & OT Layer (Per Facility)
DMZ
Data diode (Owl/Waterfall)
Unidirectional flow
Protocol termination
Edge Gateway
Dell Edge 5200
TPM 2.0, mTLS outbound
24-72h store-forward
Field Devices
Inverters (Modbus/SunSpec)
BESS (CAN/Modbus)
Relays (DNP3/IEC 61850)
Purdue Model Security Zones
L5 EnterpriseSSO, EDR, DLP
L4 ESG PlatformZero-trust, mTLS, Istio
L3.5 DMZWAF, DDoS, API GW
L3 EdgeData diode, no inbound
L2 SCADAVLAN, no internet
L1 Field ControlHardwired interlocks
Service Latency Budget
Telemetry → Dashboard<5 sec
Control Command<2 sec
AGC Signal Response<500ms
Month-End Calculation<4 hr
Audit Query (1 year)<30 sec
Facilities11
Avg CFE72.3%
Total Gen438 MW
Alerts6