Roadmap & trạng thái Todos
Tổng hợp các yêu cầu khách hàng và task đã làm / đang làm / kế tiếp.
✅ Đã hoàn tất
- ✓ Monorepo Go workspace với 72 microservices, shared packages (
logger,dbconnector,rbac,errorhandler,events,tracing,geoip). - ✓ IAM JWT + RBAC + MFA TOTP + refresh rotation + service principals.
- ✓ API Gateway reverse proxy + auth forward + healthz toàn stack.
- ✓ Compute service runtime Docker (flavors, console exec, logs, build cache, preview env).
- ✓ Object storage S3-compatible với path-traversal + ETag MD5.
- ✓ Event-driven billing qua RabbitMQ với DLQ + retry.
- ✓ 7 vulnerability CRITICAL/HIGH (command injection, path traversal, file perm) đã fix — xem Bug-fix & Security Report.
- ✓ Observability: OpenTelemetry → Jaeger, Prometheus, Grafana.
- ✓ Lotus Console (Next.js) với các trang GCP-style.
- ✓ DDoS analytics dashboard + RBAC mapping (phase 1+2+3).
- ✓ Tài liệu kiến trúc 14 file trong
docs/architecture/. - ✓ Bộ integration test (auth, IAM, compute, storage, network, database, AI/ML, management, security, new services, pentest).
- ✓ Bộ load test k6 (gateway, compute, DB, network, security, all-services, new-services).
- ✓ Security scan automation (
tests/security/run-security-scan.sh). - ✓ Chuyển
Yeu cau khach hang/(DBStack & GHN) sang Markdown (INDEX.md + EXTRACTED.md). - ✓ Bộ HTML docs trực quan (file này).
- ✓ Light/Dark mode với contrast WCAG AA cho HTML docs.
⚙️ Đang làm / khuyến nghị tiếp theo
- ! Service mesh (Istio/Linkerd) cho mTLS service-to-service.
- ! Circuit breaker pattern (resilience4j-equivalent cho Go).
- ! gRPC nội bộ thay HTTP cho hot path.
- ! Versioned migrations (golang-migrate) thay AutoMigrate.
- ! Redis cache middleware ở gateway.
- ! JSON Schema validation cấp request.
- ! Per-user + per-endpoint rate limit.
- ! JWT key rotation (JWKS multi-key).
- ! Centralized log aggregation (Loki/ELK).
- ! SOAR engine — hoàn thiện playbook runtime (đã có blueprint).
🗺 Lộ trình kế tiếp
- · Mobile app (Android/iOS) read-only console v1.
- · Desktop CLI/installer (Windows/macOS/Linux) cho cloud-cli.
- · Browser extension auto-snippet (giống GCP Cloud Shell quick action).
- · Marketplace plug-in cho 3rd party (kiểu AWS Marketplace).
- · Chaos engineering (Litmus / Chaos Mesh) đưa vào CI nightly.
- · GraphQL gateway song song REST.
- · API v2 với cursor pagination + ETag chuẩn.