Skip to main content

Platform Architecture Overview

Architecture Overview​

SignalSync is built on a modern, cloud-native architecture designed for scalability, security, and reliability.
The high-level architecture shows how SignalSync delivers enterprise-grade performance through a simple no-code experience.

SignalSync implements a microservices-based architecture where specialized services work together to deliver comprehensive business process management capabilities. This approach ensures that each component can scale independently, updates can be deployed without system-wide disruptions, and failures in one area don't cascade to others.

SignalSync Architecture

Core Architectural Principles​

Separation of Concerns Each microservice handles a specific business capability (workflows, integrations, notifications, reporting), making the system easier to maintain, update, and scale.

API-First Design All services communicate through well-defined APIs, enabling seamless integration with external systems and third-party applications.

Event-Driven Processing Asynchronous event processing through Apache Kafka ensures responsive user experiences while handling complex background operations efficiently.

Cloud-Native Infrastructure Containerized deployment using Docker ensures consistent environments across development, testing, and production, with automatic scaling based on demand.

Key Components​

Gateway Layer​

WAF protects the platform at the edge, blocking malicious traffic and attacks before they reach SignalSync infrastructure. nginx serves as the single entry point for all external traffic, providing SSL termination, DDoS protection, and intelligent request routing to internal services. This centralized gateway ensures consistent security policies and simplified certificate management.

Application Services​

SignalSync Core Service The primary service for web application users, handling authentication, user management, and core business operations. Built with NestJS/TypeScript for high performance and developer productivity.

Graphical Workflow Engine (GWE) Service Executes BPMN workflows, manages process state, and orchestrates complex business logic across multiple services. Java/Spring Boot provides enterprise-grade reliability and scalability.

Rule Chains Service Handles integrations with external systems, business rule execution, and data transformations using Apache Camel's proven integration patterns.

Notification Service Manages all system notifications with template management and delivery tracking.

API Service Dedicated service for external integrations and partner applications, providing API key authentication, per-customer rate limiting, and secure access to SignalSync capabilities.

Service Discovery​

Eureka Service Registry enables microservices to discover and communicate with each other dynamically, with built-in health checking, load balancing, and automatic failover capabilities.

Data Layer​

Each microservice maintains its own PostgreSQL database, ensuring true service isolation, independent scaling, and simplified data model evolution. This database-per-service pattern prevents shared database contention and improves fault isolation.

Event Streaming​

Apache Kafka provides a high-throughput event streaming platform for asynchronous processing, enabling real-time data pipelines, system integration, and decoupled service communication.

Observability Stack​

Comprehensive monitoring through Grafana (visualization), Prometheus (metrics), Tempo (tracing), and Loki (logs) ensures complete visibility into system health, performance, and user activity.

Communication Patterns​

SignalSync uses multiple communication patterns optimized for different scenarios:

Synchronous (Request-Response)​

Used for user-facing operations requiring immediate responses, such as form submissions, data queries, and workflow initiation. Typical response times: 50-200ms.

Asynchronous (Event-Driven)​

Used for background processing, notifications, and complex integrations that don't require immediate user feedback. Events are processed reliably with automatic retry logic.

Integration (API-Based)​

External systems connect through RESTful APIs with OpenAPI/Swagger documentation, supporting both real-time and batch integration patterns.

Security Architecture​

Multi-Layer Security​

Network Security

  • SSL/TLS encryption for all external communication
  • Private Docker network isolates internal services
  • No direct external access to microservices or databases
  • DDoS protection through global rate limiting

Authentication & Authorization

  • Session-based authentication for web users with JWT tokens
  • API key authentication for external applications
  • Role-based access control (RBAC) with fine-grained permissions
  • OAuth2/OpenID Connect support for enterprise single sign-on

Data Security

  • Encryption at rest for sensitive data
  • Encrypted database connections
  • Secure credential storage with industry-standard hashing
  • Encrypted backups with retention policies

API Security

  • Per-customer rate limiting prevents abuse
  • Request validation and sanitization
  • API key rotation capabilities
  • IP whitelisting (optional)

Scalability & Performance​

Horizontal Scaling​

Add more service instances as demand increases. Eureka automatically load-balances requests across available instances, with no manual configuration required.

Vertical Scaling​

Increase container resources (CPU, memory) for individual services based on workload characteristics and performance requirements.

Database Optimization​

Connection pooling, query optimization, and database indexing ensure consistent sub-second response times even under heavy load.

Caching Strategy​

Multi-level caching (in-memory, distributed) reduces database load and improves response times for frequently accessed data.

High Availability​

Service Redundancy Multiple instances of critical services eliminate single points of failure, with automatic failover when instances become unhealthy.

Health Monitoring Continuous health checks detect and remove failing instances from the load balancer rotation, ensuring requests only reach healthy services.

Circuit Breakers Prevent cascading failures by temporarily blocking calls to failing services, allowing them time to recover while maintaining system stability.

Disaster Recovery Automated database backups, point-in-time recovery capabilities, and documented recovery procedures ensure business continuity.

Monitoring & Observability​

Real-Time Dashboards​

Grafana dashboards provide instant visibility into system health, performance metrics, error rates, and business KPIs.

Distributed Tracing​

Tempo captures end-to-end request flows across all microservices, enabling rapid identification of performance bottlenecks and errors.

Centralized Logging​

Loki aggregates logs from all services with powerful search and filtering capabilities, correlating logs with traces for comprehensive troubleshooting.

Alerting​

Prometheus evaluates alert rules continuously, sending notifications to administrators when thresholds are exceeded or anomalies are detected.

Deployment Models​

SignalSync supports flexible deployment options to meet your organization's requirements:

Cloud Deployment (Standard)
  • Hosted at signalsync.cloud with automatic updates and maintenance
  • No infrastructure management required
  • 99.9% uptime SLA
  • Automatic scaling and monitoring
On-Premise Deployment
  • Full control over infrastructure and data location
  • Suitable for air-gapped or highly regulated environments
  • Requires internal infrastructure and DevOps capabilities
Hybrid Deployment
  • Core platform in cloud, sensitive data on-premise
  • Suitable for organizations with specific compliance requirements
  • Flexible data residency options

Benefits of This Architecture​

For Business Users

  • Fast, responsive user interface (sub-second response times)
  • High availability ensures system is always accessible
  • Transparent updates with no downtime

For Administrators

  • Comprehensive monitoring and alerting
  • Clear audit trails for compliance
  • Granular access control and security

For IT Teams

  • Easy integration with existing systems
  • Scalable to enterprise workloads
  • Modern tech stack with strong community support

For Organizations

  • Lower total cost of ownership
  • Reduced operational overhead
  • Enterprise-grade reliability and security