Enterprise 12-Server Topology & Deployment Explorer

Interactive Architecture & Topology Map

This visual map organizes your 12 enterprise servers into 5 distinct architectural tiers. Click on any server card below to view its functional role, network configuration, clustering state, and setup prerequisites.

Filter Tier:

Clustered / Sync Active Active/Passive Node Load Balanced Farm

Perimeter / Bastion Zone External HTTPS & Administrative Entry Point

NLB Cluster Node 1

TGS-GW-01

RD Gateway / Reverse Proxy

Port: 443 / HTTPS 10.0.10.11

NLB Cluster Node 2

TGS-GW-02

RD Gateway / Reverse Proxy

Port: 443 / HTTPS 10.0.10.12

Management Bastion

TGS-JMP-01

Secure Admin Jump Box

Admin Isolated Zone 10.0.10.50

Internal Network Boundary (Firewall Enforced)

Tier 1: Identity Services Active Directory, DNS, SYSVOL Replication

Primary Domain Controller

TGS-DC-01

AD DS / DNS / Global Catalog

Domain: tgs.local 10.0.20.11

Secondary Domain Controller

TGS-DC-02

AD DS / DNS / Global Catalog

Active/Active Sync 10.0.20.12

Tier 2: Compute & App Sessions Remote Desktop Session Host Collection

Session Host 01

TGS-RDS-01

RDS App Compute / UPD Target

Load Balanced Farm 10.0.30.21

Session Host 02

TGS-RDS-02

RDS App Compute / UPD Target

Load Balanced Farm 10.0.30.22

Session Host 03

TGS-RDS-03

RDS App Compute / UPD Target

Load Balanced Farm 10.0.30.23

Tier 3: Distributed Storage DFS-N & DFS-R Replicated Shares

DFS Target 1

TGS-FS-01

Multipurpose Sync

10.0.40.31

DFS Target 2

TGS-FS-02

Multipurpose Sync

10.0.40.32

DFS Target 3

TGS-FS-03

Multipurpose Sync

10.0.40.33

Tier 4: Database Infrastructure SQL AlwaysOn / Failover Cluster Instance

SQL Cluster Node 1

TGS-SQL-01

WSFC / SQL Instance

10.0.50.41

SQL Cluster Node 2

TGS-SQL-02

WSFC / SQL Standby

10.0.50.42

Architecture Resource & Tier Distribution

Breakdown of server roles and high-availability pairing across the environment.

Redundancy Guarantee:

Every tier features minimum N+1 redundancy. Storage uses 3-way mesh replication to protect against dual-node failure.

Connection Routing:

Clients connect exclusively through rdg.tgs.local. Direct RDP to internal session hosts or database nodes is strictly dropped by perimeter firewalls.

High Availability & Dynamic Failover Simulator

Test the environment's resilience! Toggle key nodes "OFFLINE" to observe how Network Load Balancing (NLB), DFS Referral Tracking, and Windows Server Failover Clustering (WSFC) automatically reroute operational traffic.

Simulate Server Outage

RD Gateway Cluster Status

TGS-GW-01 (Primary NLB Node) TGS-GW-02 (Secondary NLB Node)

DFS Storage Cluster Status

TGS-FS-01 (DFS Target 1) TGS-FS-02 (DFS Target 2) TGS-FS-03 (DFS Target 3)

SQL Cluster Availability

TGS-SQL-01 (Primary Instance) TGS-SQL-02 (Failover Partner)

RD Gateway Entry VIP (`rdg.tgs.local`)

HEALTHY (100% Capacity)

Both Gateway nodes are actively responding to inbound SSL requests on Port 443. Load is evenly distributed across TGS-GW-01 and TGS-GW-02 via Network Load Balancing.

Enterprise Storage Namespace (`\\tgs.local\corporate`)

FULLY REPLICATED (3/3 Nodes)

DFS Namespace referral target is actively directing user requests across all three full-mesh replication nodes. User profiles and FSLogix containers are completely synchronized.

SQL Virtual Network Name (`TGS-SQLCluster`)

PRIMARY ONLINE (TGS-SQL-01)

SQL Server Failover Instance is running on primary node TGS-SQL-01. Synchronous data replication is maintaining zero data loss protection on TGS-SQL-02.

Dynamic Telemetry & Referral Log ● LIVE

[SYSTEM INIT] Cluster health check passed. All 12 server endpoints responding.

Step-by-Step Implementation & Configuration Guides

Select a functional tier below to view verbatim technical deployment instructions, PowerShell installation commands, and clustering configurations.

Tier 1: Active Directory & Core Services Deployment (`TGS-DC-01` & `TGS-DC-02`)

Your Domain Controllers provide core authentication, DNS name resolution, and Group Policy replication.

1. Promote Primary Domain Controller (`TGS-DC-01`)

Install Active Directory Domain Services (AD DS) and DNS Server roles.
Promote the server to establish a new forest root domain (e.g., tgs.local).

2. Promote Secondary Domain Controller (`TGS-DC-02`)

Install AD DS and DNS roles via PowerShell or Server Manager.
Promote the server as an additional domain controller to the existing tgs.local domain.

3. Verify SYSVOL Replication Health

Windows Server uses DFS Replication (DFSR) for SYSVOL sync. Confirm health on both nodes:

# PowerShell Verification Command
Get-DfsrState -ComputerName "TGS-DC-01", "TGS-DC-02"

Check Event Viewer under DFS Replication logs for Event ID 4602 and 4614.

Network Allocation & Firewall Port Matrix

Use these tables to configure internal firewall security groups and IP subnets across your 12 servers.

Complete Server Host Inventory

Hostname	Subnet / IP	Role / Feature	Clustering / Replication Mode
TGS-DC-01	10.0.20.11	Active Directory / DNS	Active/Active Sync with DC-02
TGS-DC-02	10.0.20.12	Active Directory / DNS	Active/Active Sync with DC-01
TGS-FS-01	10.0.40.31	File Services	DFS Target 1 (Full Mesh DFS-R)
TGS-FS-02	10.0.40.32	File Services	DFS Target 2 (Full Mesh DFS-R)
TGS-FS-03	10.0.40.33	File Services	DFS Target 3 (Full Mesh DFS-R)
TGS-GW-01	10.0.10.11	Remote Access Gateway	RD Gateway NLB Cluster Node 1
TGS-GW-02	10.0.10.12	Remote Access Gateway	RD Gateway NLB Cluster Node 2
TGS-RDS-01	10.0.30.21	Application Compute	RDS Session Host 1
TGS-RDS-02	10.0.30.22	Application Compute	RDS Session Host 2
TGS-RDS-03	10.0.30.23	Application Compute	RDS Session Host 3
TGS-JMP-01	10.0.10.50	Management Bastion	Isolated Admin Jump Box
TGS-SQL-01	10.0.50.41	Database Server	SQL FCI Cluster Node 1
TGS-SQL-02	10.0.50.42	Database Server	SQL FCI Cluster Node 2

Required Inter-Tier Firewall Port Matrix

Source Zone	Destination Target	Port / Protocol	Traffic Purpose
External Clients	TGS-GW-01 / 02	443 / TCP (HTTPS)	RD Gateway Encrypted Client Tunnel
RD Gateways	TGS-RDS-01 / 02 / 03	3389 / TCP & UDP	Proxied RDP Desktop Sessions
Domain Controllers	TGS-DC-01 ↔ TGS-DC-02	135, 445, 88, 389, 53	AD DS Replication, Kerberos, DNS, SYSVOL DFSR
File Servers	TGS-FS-01 ↔ 02 ↔ 03	5722 / TCP & 445	DFS Replication Mesh RPC & SMB Traffic
RDS Session Hosts	TGS-FS-01 / 02 / 03	445 / TCP (SMB)	User Profile Disks (UPD) & FSLogix Storage Mounts
RDS & App Hosts	TGS-SQL-01 / 02	1433 / TCP & 5022	SQL Database Access & AlwaysOn Sync Mirroring

Architecture Visualizer 12-Server Infrastructure Mesh

End-to-End System Connectivity & Network Flow Diagram

Full architectural map showing how clients, load balancers, perimeter gateways, internal session compute, identity services, storage mesh, and SQL database clusters interconnect.

🌐 Layer 1: External Client & Admin Ingress Zone

💻 Remote Desktop & Web Clients Public Internet

Standard users establishing remote application sessions.

Target URL: https://rdg.tgs.local (Port 443)

🔑 Administrative Workstations Secured Admin Subnet

Systems Engineers & IT Administrators accessing management tools.

Target VIP: TGS-JMP-01 (10.0.10.50 via RDGW)

▼ Inbound TLS 1.3 Tunnel (Port 443 / HTTPS Encrypted) ▼

🛡️ Layer 2: Perimeter Gateway & NLB Cluster (Subnet: 10.0.10.0/24)

NLB Virtual Cluster VIP 10.0.10.10 (rdg.tgs.local)

● Active Load Balancing (Port 443)

TGS-GW-01 10.0.10.11

RD Gateway / SSL Reverse Proxy Node 1

RD CAP/RAP Enforced

TGS-GW-02 10.0.10.12

RD Gateway / SSL Reverse Proxy Node 2

RD CAP/RAP Enforced

TGS-JMP-01 10.0.10.50

Administrative Bastion Host

RSAT Tools / PowerShell Console

🔥 INTERNAL ENTERPRISE FIREWALL BARRIER

RDP Target: Port 3389 SMB Profiles: Port 445 SQL Data: Port 1433 AD/DNS: 135/88/389

⚙️ Layer 3: Internal Tiered Server Infrastructure

Tier 1: Identity & Directory 10.0.20.0/24

TGS-DC-01 10.0.20.11

Active Directory DS / DNS / Kerberos

TGS-DC-02 10.0.20.12

Secondary DC / Active Replicated Sync

⇄ Bi-Directional SYSVOL & AD Replication (DFSR / RPC)

Tier 2: Application Compute 10.0.30.0/24

TGS-RDS-01 10.0.30.21

RDS App Compute Host 1

TGS-RDS-02 10.0.30.22

RDS App Compute Host 2

TGS-RDS-03 10.0.30.23

RDS App Compute Host 3

⬇ Session Broker Load Balanced Farm Allocation

Tier 3 & Tier 4: Storage & DB 10.0.40.0 / 10.0.50.0

DFS Replication Mesh (3 Nodes) Port 5722 / 445

FS-01 FS-02 FS-03

Namespace: \\tgs.local\corporate

SQL AlwaysOn / WSFC Cluster Port 1433 / 5022

SQL-01 (Primary) SQL-02 (Standby)

Virtual VIP Name: TGS-SQLCluster

🔄 Continuous Full-Mesh Data & Log Mirroring

Active Connectivity Explanation:

Viewing All Network Paths: HTTPS (443) traffic enters via the RD Gateway NLB cluster VIP. Gateways proxy RDP sessions (3389) to RDS hosts. RDS hosts mount profiles over SMB (445) from DFS storage targets and query database records from the SQL Failover Cluster Instance (1433).

Interactive Architecture & Topology Map

TGS-GW-01

TGS-GW-02

TGS-JMP-01

TGS-DC-01

TGS-DC-02

TGS-RDS-01

TGS-RDS-02

TGS-RDS-03

TGS-FS-01

TGS-FS-02

TGS-FS-03

TGS-SQL-01

TGS-SQL-02

Architecture Resource & Tier Distribution

High Availability & Dynamic Failover Simulator

Simulate Server Outage

🚪 RD Gateway Entry VIP (rdg.tgs.local)

📁 Enterprise Storage Namespace (\\tgs.local\corporate)

🗄️ SQL Virtual Network Name (TGS-SQLCluster)

Step-by-Step Implementation & Configuration Guides

Tier 1: Active Directory & Core Services Deployment (`TGS-DC-01` & `TGS-DC-02`)

1. Promote Primary Domain Controller (`TGS-DC-01`)

2. Promote Secondary Domain Controller (`TGS-DC-02`)

3. Verify SYSVOL Replication Health

Tier 2: DFS Shared Data Tier (`TGS-FS-01`, `TGS-FS-02`, `TGS-FS-03`)

Step 1: Install Roles Across All 3 File Servers

Step 2: Create Identical Local Folder Paths

Step 3: Configure DFS Multipurpose Replication Group

Step 4: Configure Domain DFS Namespace (DFS-N)

Tier 3: Remote Access & Security (`TGS-GW-01`, `TGS-GW-02`, `TGS-JMP-01`)

RD Gateway Clustering (`TGS-GW-01` & `TGS-GW-02`)

Management Jump Box Configuration (`TGS-JMP-01`)

Tier 4: RDS Session Host Farm (`TGS-RDS-01`, `TGS-RDS-02`, `TGS-RDS-03`)

1. Install Session Host Role

2. Configure Session Collection & Load Balancing

3. Profile Storage Mapping (FSLogix / UPD)

Tier 5: SQL High Availability Cluster (`TGS-SQL-01` & `TGS-SQL-02`)

1. Prerequisites & Windows Failover Cluster (WSFC)

2. SQL Failover Cluster Instance (FCI) or Always On

3. Application Connection Strings

Network Allocation & Firewall Port Matrix

Deployment Order Summary & Verification Checklist

1. Deploy Domain Controllers (`TGS-DC-01` / `02`)

2. Configure File Servers & DFS Storage Cluster (`TGS-FS-01` to `03`)

3. Setup SQL High Availability Cluster (`TGS-SQL-01` / `02`)

4. Provision Administrative Bastion Jump Box (`TGS-JMP-01`)

5. Deploy RD Gateway Cluster (`TGS-GW-01` / `02`)

6. Build RDS Session Host Farm (`TGS-RDS-01` to `03`)

End-to-End System Connectivity & Network Flow Diagram

Host Title

RD Gateway Entry VIP (`rdg.tgs.local`)

Enterprise Storage Namespace (`\\tgs.local\corporate`)

SQL Virtual Network Name (`TGS-SQLCluster`)