Infrastructure architecture

Connected systems.
Explicit boundaries.

This diagram combines the retained core platform inventory with documented subsystem relationships. It does not claim that every component was running simultaneously or remains online today.

PHYSICAL PLATFORM
Dell PowerEdge R710 · Proxmox VE

Retained platform inventory: Proxmox VE 9.2.3

pfSense

VM 100
vmbr0 + vmbr1

DC01

VM 200 · Windows Server
AD DS / DNS / DHCP

WS01

VM 300
Domain workstation

Linux01

VM 400 · Ubuntu
SSSD / VLAN 30

HVHOST01 → APP01

Documented nested Hyper-V subsystem, managed through SCVMM on VMM01.

Windows Admin Center

Administrative-laptop management over controlled remoting paths.

Azure Arc

Published hybrid evidence for HVHOST01 and VMM01; one SQL Developer instance.

Additional documented components · placement varies

Management, nested workloads, identity and endpoints

These documented components complement the four-guest Proxmox inventory above. They are not necessarily separate Proxmox guests, co-located on the same server, or simultaneously powered on.

HVHOST01 / APP01

Windows Server Hyper-V host with documented APP01 nested workload. HVHOST01 platform placement is not asserted here.

VMM01

System Center Virtual Machine Manager management server; the recorded management role does not establish guest placement.

SYNC01

Identity synchronization environment from a documented Cloud Sync configuration; distinct from later DC01-based configurations.

macOS Monterey

Cross-platform client and administration lab; physical versus virtual placement is not established in this diagram.

Windows Admin Center

Management interface documented on an administrative laptop; it is not a separate Proxmox VM claim.

Microsoft Entra ID / Microsoft 365 / Azure Arc

Cloud identity, productivity administration and hybrid management; these are cloud services or integrations, not additional local virtual machines.

Hybrid identity snapshot

Scoped identity provisioning

DC01 / Active Directory

Dedicated Cloud Sync OU; AD remains authoritative for tested objects.

SYNC01 / provisioning agent

The retained project architecture names SYNC01 as the agent host.

Microsoft Entra ID

Selected users, groups, attributes, and password hashes synchronized.

Agent placement is a historical project fact, not a live assertion. Later DC01-based synchronization discussed outside the repository is not used to overwrite this documented architecture.
Read the hybrid identity case study →