Hi Moiz,

Looks good overall.

My only minor clarification is that the HAProxy configuration that you've
shown is only one way to set up CF, and not necessarily what people use in
production. For example, on slide 8, the outbound NAT function might be an
AWS NAT instance or service separate from HAProxy. [1] The flow you've
drawn is still correct, it just might traverse a discrete component. (And
more generally, load balancing is often delegated up to a hardware
component like an F5 appliance.)

Beyond GoRouter, we're working on an OSS project to enable direct container
networking. [2] Deepa Kalani from Plumgrid worked with on it for a period,
too.

1 - https://docs.cloudfoundry.org/concepts/security.html
2 -
https://www.cloudfoundry.org/vision-future-container-networking-cloud-foundry/