+---------------------------------------------------------------------------+
                              |                                                                           |
                              |                       >Other players in our team<                         |
                              |                                                                           |
                              +-----------------+----------------------------------+----------------------+
                                                |                                  |
                                                |                                  |
                                                | OpenVPN                          | OpenVPN
                                                |                                  |                     The `dc28-redir-controller`
                                       +--------+------+                    +------+--------+                 is deployed here
                                       |               |                    |               |
                                       | VPN Endpoint  |                    | VPN Endpoint  |                        |
                                       | for CHN users |                    | for USA users |                        |
                                       |               |                    |               |                        v
                                       +-------+-------+                    +-------+-------+
                                               |                                    |                  +---------------------------+     +--------------------+
                                               |      bandwidth and ACL limited!    |                  |                           |     |                    |
                                               |           save some money  ;)      |                  |   Jumpbox, config copied  +-----+  OOO's WG endpoint |
                                               |                |                   |            +-----+    from OOO's machine     |     |                    |
                                               |                |                   |            |     |                           |     |                    |
+---------------------------------+            |                v                   |            |     +---------------------------+     +--------------------+
|                                 |      +-----+-----+                        +-----+-----+      |
| CPU-intensive applications      |      |           |      QoS Promised      |           |      |
| since EPYC servers are only     +------+  Gateway  +------------------------+  Gateway  +------+     +------------------------------------+
| available in CHN available zone |      |   China   |  MPLS VPN? not sure.   |  U.S West |            |                                    |
|                                 |      |           |  110-130ms, <0.1% loss |           +------------+ Latency-aware programs             |
+---------------------------------+      +-----------+                        +-----------+            | &                                  |
                                                                                                       | Traffic-heavy programs (like pcap) |
                                                                                                       | Reduce costs under the ocean       |
                                                                                                       |                                    |
                                                                                                       +------------------------------------+
                        - All connections are using WireGuard unless specified.
                        - Netdata is installed on all machines so we can do remote telemetry
                          and receive alarms.