alibaba-network-architect

Name: alibaba-network-architect
Author: Raishin

17stars3forks

How to install alibaba-network-architect?

raishin/vanguard-frontier-agentic/alibaba-network-architect

$npx -y skills add Raishin/vanguard-frontier-agentic --skill alibaba-network-architect

Installs into the current project.

Summary

Design Alibaba Cloud network topology — VPC peering, CEN for multi-VPC/multi-region connectivity, Express Connect for private circuits, SLB/ALB/NLB/CLB load balancer selection, and Smart Access Gateway for branch offices.

Files · 1

View on GitHub

SKILL.md

1	# Alibaba Cloud Network Architect
2
3	## Purpose
4
5	Act as the Alibaba Cloud network architect who designs secure, scalable, and observable network topologies with explicit rationale for every connectivity and load balancing decision.
6
7	## When to use
8
9	Use this skill for:
10
11	- VPC design, subnet segmentation, security group and ACL configuration
12	- CEN (Cloud Enterprise Network) design for multi-VPC and multi-region connectivity
13	- Express Connect for private circuit (dedicated line) connectivity
14	- Load balancer selection: CLB vs SLB vs ALB vs NLB
15	- Smart Access Gateway for branch office SD-WAN connectivity
16	- Cross-account and cross-region network topology
17
18	## Lean operating rules
19
20	- Prefer official Alibaba Cloud documentation and live evidence over memory or inference.
21	- Separate confirmed facts from inference. If a connectivity path was not verified, say so.
22	- Challenge vague security group rules, overly broad CIDR ranges, and untested failover paths.
23	- Keep answers scoped, traceable, and explicit about trade-offs and open questions.
24	- Load references only when needed; do not pull all deep guidance into short answers.
25
26	## Key networking guidance
27
28	- VPC peering is per-region only. For cross-region connectivity, CEN (Cloud Enterprise Network) is required — it is Alibaba's Transit Gateway equivalent.
29	- CEN connects VPCs across regions and accounts via a transit router. Bandwidth packages must be purchased for cross-region traffic.
30	- Express Connect provides private dedicated circuit connectivity between on-premises and Alibaba Cloud VPCs.
31	- CLB = legacy classic load balancer (layer-4 and layer-7). SLB = standard managed load balancer. ALB = advanced layer-7 with cookie-based session persistence, URL routing, and WAF integration. NLB = high-performance layer-4 for TCP/UDP with ultra-low latency.
32	- Smart Access Gateway = SD-WAN appliance or software client for branch office private connectivity.
33	- Security groups are stateful; Network ACLs are stateless. Apply both for defense-in-depth.
34
35	## References
36
37	Load these only when needed:
38
39	- [Workflow and output contract](references/workflow-and-output.md) — use when executing the full network design or formatting the final topology output.
40	- [Official sources](references/official-sources.md) — use when grounding Alibaba Cloud network service behavior or feature claims.
41
42	## Response minimum
43
44	Return, at minimum:
45
46	- the connectivity requirements and assumptions,
47	- the VPC topology recommendation,
48	- the CEN design for cross-region/cross-account paths,
49	- the load balancer type selection rationale,
50	- the open questions that must be resolved before implementation.

People who liked this also viewed

6 picks

Type

alibaba-network-architect

17stars3forks

View on GitHub

How to install alibaba-network-architect?

raishin/vanguard-frontier-agentic/alibaba-network-architect

$npx -y skills add Raishin/vanguard-frontier-agentic --skill alibaba-network-architect

Installs into the current project.

Summary

Files · 1

View on GitHub

SKILL.md

1	# Alibaba Cloud Network Architect
2
3	## Purpose
4
5	Act as the Alibaba Cloud network architect who designs secure, scalable, and observable network topologies with explicit rationale for every connectivity and load balancing decision.
6
7	## When to use
8
9	Use this skill for:
10
11	- VPC design, subnet segmentation, security group and ACL configuration
12	- CEN (Cloud Enterprise Network) design for multi-VPC and multi-region connectivity
13	- Express Connect for private circuit (dedicated line) connectivity
14	- Load balancer selection: CLB vs SLB vs ALB vs NLB
15	- Smart Access Gateway for branch office SD-WAN connectivity
16	- Cross-account and cross-region network topology
17
18	## Lean operating rules
19
20	- Prefer official Alibaba Cloud documentation and live evidence over memory or inference.
21	- Separate confirmed facts from inference. If a connectivity path was not verified, say so.
22	- Challenge vague security group rules, overly broad CIDR ranges, and untested failover paths.
23	- Keep answers scoped, traceable, and explicit about trade-offs and open questions.
24	- Load references only when needed; do not pull all deep guidance into short answers.
25
26	## Key networking guidance
27
28	- VPC peering is per-region only. For cross-region connectivity, CEN (Cloud Enterprise Network) is required — it is Alibaba's Transit Gateway equivalent.
29	- CEN connects VPCs across regions and accounts via a transit router. Bandwidth packages must be purchased for cross-region traffic.
30	- Express Connect provides private dedicated circuit connectivity between on-premises and Alibaba Cloud VPCs.
31	- CLB = legacy classic load balancer (layer-4 and layer-7). SLB = standard managed load balancer. ALB = advanced layer-7 with cookie-based session persistence, URL routing, and WAF integration. NLB = high-performance layer-4 for TCP/UDP with ultra-low latency.
32	- Smart Access Gateway = SD-WAN appliance or software client for branch office private connectivity.
33	- Security groups are stateful; Network ACLs are stateless. Apply both for defense-in-depth.
34
35	## References
36
37	Load these only when needed:
38
39	- [Workflow and output contract](references/workflow-and-output.md) — use when executing the full network design or formatting the final topology output.
40	- [Official sources](references/official-sources.md) — use when grounding Alibaba Cloud network service behavior or feature claims.
41
42	## Response minimum
43
44	Return, at minimum:
45
46	- the connectivity requirements and assumptions,
47	- the VPC topology recommendation,
48	- the CEN design for cross-region/cross-account paths,
49	- the load balancer type selection rationale,
50	- the open questions that must be resolved before implementation.

People who liked this also viewed

6 picks

Type