Cloud-based multi-layer security architecture with firewalled virtual network portions

A system, comprising:

• one or more processors, executing computer instructions, to implement a plurality of virtual networks:
• a virtual network, of the plurality of virtual networks, being associated with a web platform and comprising:
• a plurality of firewalls to filter network traffic between portions of the virtual network,
• the portions of the virtual network including:
• a web application firewall (WAF) portion, connected to a first firewall, of the plurality of firewalls, to receive network traffic from a device and establish a reverse proxy with one or more other portions of the virtual network to route the network traffic from the device;
• a web server portion, connected to the first firewall and a second firewall, of the plurality of firewalls, to receive web traffic from the WAF portion via the first firewall and generate an application request;
• an application server portion, connected to the second firewall and a third firewall, of the plurality of firewalls, to receive the application request from the web server portion, via the second firewall, and generate a database request;
• a database server portion, connected to the third firewall to receive the database request from the application server portion, via the third firewall, and provide information from a database server of the database server portion;
• an active directory portion to perform authentication of one or more access requests associated with the virtual network;
• and
• a fourth firewall of the plurality of firewalls,
• the web server portion, the application server portion, and the database server portion connecting to the active directory portion through the fourth firewall.

A method, comprising:

• receiving, by a device of a group of devices of a virtual network, a product order,
• the product order relating to a take-out or delivery of a product;
• routing, by a device of the group of devices of the virtual network, the product order to a web application firewall (WAF) portion of a production virtual network,
• the WAF portion being associated with selectively filtering received network traffic;
• routing, by a device of the group of devices of the virtual network, the product order from the WAF portion to a customer portal web server of a web portion of the production virtual network via a first firewall of the production virtual network,
• the first firewall being associated with selectively filtering received network traffic;
• routing, by a device of the group of devices of the virtual network, an application request associated with the product order from the customer portal web server to an application server of an application portion of the production virtual network via a second firewall of the production virtual network,
• the application request being generated by the customer portal web server based on the product order,
• the second firewall being associated with selectively filtering received network traffic;
• routing, by a device of the group of devices of the virtual network, a database request associated with the application request from the application server to a database server of a database portion of the production virtual network via a third firewall of the production virtual network,
• the database request being generated by the application server based on the application request,
• the third firewall being associated with selectively filtering received network traffic;
• and
• routing, by a device of the group of devices of the virtual network, one or more access requests associated with the virtual network to an active directory portion of the production virtual network,
• the active directory portion performing authentication of the one or more access requests associated with the virtual network,
• the web portion, the application portion, and the database server connecting to the active directory portion through a fourth firewall of the production virtual network,
• the fourth firewall being associated with selectively filtering received network traffic.