nwdiag — bank network zones

nwdiag {
  network edge { fw1; lb1; }
  network app  { lb1; web1; web2; api1; api2; }
  network cardholder {
    address = "10.20.0.0/24"
    api1; api2; vault [address = "10.20.0.50"];
  }
  network backoffice {
    address = "10.30.0.0/24"
    crm; ledger; reporting;
  }
}