# Cloud Infrastructure Rollout The MVE cloud rollout provisions the multi-cloud, hybrid infrastructure required to support the 7 Phase 1 subsidiaries. The rollout follows a phased approach — starting with the primary cloud (AWS), then extending to secondary clouds (Azure, GCP), on-premises infrastructure (Sangfor HCI), and edge deployments (ATTOM Edge). ## Cloud Rollout Architecture Cape Town
EKS, RDS, ElastiCache, MSK"] end subgraph Phase2Cloud["Phase 2 — Secondary Clouds"] AZURE["Azure South Africa North
Johannesburg
AKS, Azure AD B2C, Cosmos DB"] GCP["GCP africa-south1
Johannesburg
GKE, BigQuery, Vertex AI"] end subgraph Phase3OnPrem["Phase 3 — On-Premises"] SANGFOR["Sangfor HCI
3-5 Node Clusters
SKE, Local Storage, Data Sovereignty"] end subgraph Phase4Edge["Phase 4 — Edge"] ATTOM["ATTOM Edge
Micro Data Centers
UPS, Cooling, CCTV, IoT"] end subgraph GlobalServices["Global Services"] CF["Cloudflare
CDN, WAF, DDoS, DNS, LB"] end subgraph DR["Disaster Recovery"] AWSDR["AWS eu-west-1
DR Region"] GCPDR["GCP europe-west1
DR Region"] end CF --> AWS CF --> AZURE CF --> GCP AWS --> AWSDR GCP --> GCPDR AWS --> SANGFOR SANGFOR --> ATTOM `} /> ## Rollout Phases ### Phase 1 — AWS af-south-1 (Cape Town) — Weeks 1–3 The primary production cloud. All 9 MVP microservices are deployed here first, with full Kubernetes orchestration, managed databases, and event streaming. ### Phase 2 — Azure South Africa North and GCP africa-south1 — Weeks 3–6 Secondary clouds provide workload distribution, specialized services, and multi-cloud resilience. ### Phase 3 — Sangfor HCI — Weeks 6–10 On-premises hyper-converged infrastructure for data sovereignty compliance and edge processing. Each country deployment gets a 3–5 node Sangfor HCI cluster. ### Phase 4 — ATTOM Edge Micro Data Centers — Weeks 10–14 Edge deployments for last-mile operations, IoT data collection, and ultra-low-latency services in areas with limited cloud connectivity. ## Disaster Recovery Configuration ## Rollout Timeline ## Service Parity Across Clouds ## Network Architecture All cloud regions, Sangfor HCI clusters, and ATTOM Edge sites are interconnected through a layered network architecture: - **Cloudflare** — Global CDN, WAF, DDoS protection, and DNS-based load balancing across all cloud regions - **Cloud VPN/Peering** — Site-to-site VPN tunnels between AWS, Azure, and GCP regions with encrypted transit - **Sangfor VPN** — IPSec VPN tunnels from each Sangfor HCI cluster to the nearest cloud region - **ATTOM Connectivity** — 4G/5G primary with fiber backup connecting edge sites to the nearest Sangfor HCI cluster - **Data Localization** — Cloudflare data localization suite ensures request routing respects data sovereignty requirements