Hybrid cloud modernization platform

Real infrastructure. Secure cloud integration. Measurable outcomes.

TestedCloud is a hands-on hybrid cloud lab that connects an on-prem Intel NUC environment with Google Cloud services for secure event ingestion, serverless processing, analytics, monitoring, and technical validation.

Explore Architecture View Documentation
▣

On-Prem Infrastructure

Intel NUC, Ubuntu Server, Docker Compose, FastAPI, static UI, and NGINX.

⇄

Cloud Integration

Secure event publishing through Pub/Sub and authenticated Cloud Run delivery.

◇

Security & IAM

Cloudflare Access, API keys, OIDC, dedicated service accounts, and private resources.

▥

Analytics & Monitoring

BigQuery datasets, latency views, Looker dashboards, and operational alerts.

Architecture Overview

The TestedCloud Lab demonstrates an event-driven hybrid architecture. Selected events originate on-prem, move through Pub/Sub, are processed by Cloud Run, and land in BigQuery for analytics and dashboarding.

On-Prem Network

Intel NUC (Ubuntu 24.04)

Docker Services

testedcloud-api

FastAPI

testedcloud-ui

Web Interface

↓

NGINX Reverse Proxy

Port 443 (HTTPS)

Publish Events
HTTPS
OIDC Auth

Google Cloud Platform

Cloud Pub/Sub

Topic: testedcloud-events

↓

Dead Letter Queue

Topic: testedcloud-events-dlq

Push
OIDC
Push Delivery

Cloud Run

Cloud Run Service

testedcloud-consumer

Region: us-central1
Auth: Private (OIDC)

Processes Events

Business Logic
Validation

Write
Service Account
Permission

BigQuery & Analytics

BigQuery Dataset

testedcloud_events

  • hybrid_events (raw)
  • events_p50 (view)
  • events_p95 (view)

Looker Studio

Dashboards
Reports & Alerts

On-Prem Infrastructure

  • Intel NUC i3-7th, 8GB RAM
  • Ubuntu 24.04 LTS
  • Docker Compose Stack
  • NGINX Reverse Proxy
  • API-Key Authentication
  • Static IP + Cloudflare Tunnel
testedcloud.com
Protected
192.168.1.x (LAN)

Event Flow

1
Event generated on-prem (API / UI)
2
Published to Cloud Pub/Sub via REST API
3
Cloud Run receives event (push delivery)
4
Event processed and validated
5
Stored in BigQuery for analytics
6
Visualized in Looker Studio dashboards

Security & Access

  • Cloudflare Access + Tunnel
  • API Key Authentication
  • OIDC Authentication (Cloud Run)
  • Service Account Least Privilege
  • Private Services (no public IPs)
  • VPC Networking (Future)

Need more details?

Check the full documentation or explore the systems in detail.

View Documentation Explore Systems →
TestedCloud — Hybrid cloud modernization platform
Systems

Core Systems

The platform is organized into modular services that can be tested, secured, documented, and expanded independently.

▣

On-Prem Core

Ubuntu Server, Docker Compose, NGINX, FastAPI, frontend, and Cloudflare connectivity.

testedcloud-api · testedcloud-ui
⌘

Event Transport

Pub/Sub topic, push subscription, retries, and dead-letter handling.

testedcloud-events
▹

Serverless Processing

Cloud Run validates, transforms, and writes incoming events with a dedicated identity.

testedcloud-consumer
⌕

Data Platform

BigQuery tables and views support event inspection, latency metrics, and dashboards.

testedcloud_events
◇

Security Controls

Cloudflare Access, API keys, OIDC, least privilege, IAP, and private resources.

IAM · OIDC · Cloudflare
▥

Operations

Monitoring policies track Cloud Run failures, Pub/Sub backlog, and DLQ messages.

Alerts · Metrics · Runbooks
About

Built as a real engineering portfolio

TestedCloud demonstrates the ability to design, implement, secure, validate, monitor, document, and explain a realistic hybrid cloud system from end to end.

Engineering focus

The project combines on-prem infrastructure, networking, cloud-native services, IAM, private access, event-driven design, data analytics, and operational troubleshooting.

Platform roadmap

Future modules include TestedCloud Lab, TestedCloud Chat, industrial telemetry, hybrid routing, edge systems, and AI-assisted analytics.