6-layer platform · enterprise-scalable
From channel entry to infrastructure, a clean 6-layer architecture — HA, high-perf, scalable, for both SaaS and on-premise.
Platform Architecture
6 layers · channel to on-premise
LAYER 01
Channels
WhatsApp / Telegram / LINE / Messenger / Instagram / ZaloTracking links · lead attribution
LAYER 02
Edge
CDN · WAF / SSLAPI gateway: routing + rate-limitJWT / RBAC multi-tenant authRealtime WebSocket
LAYER 03
Admin Tiers
T1 Platform admin (tenant lifecycle / audit)T2 Tenant admin (staff / accounts / CRM)T3 Channel admin (data / agents / stats)T4 Agent admin (links / leads / attribution)T5 Agent workstation (chat / translate / assets)
LAYER 04
Services
CRM & lead pool · ticketingMessage hub · channel rotationAI translation (two-way multilingual)Node mgmt · risk & auditAnalytics (events / stats)
LAYER 05
Data
PostgreSQL multi-tenantRedis cache / Pub-SubElasticsearch searchObject storageMessage queue
LAYER 06
Infra
Kubernetes orchestrationCI/CD automationMonitoring (Prometheus)Logging (ELK Stack)On-premise enterprise
Multi-tenant & RBAC
3-tier backend · fully isolated
T1 Platform
Fooshun Ops
Super-admin view
- Tenant onboarding & quota
- Orders / risk / audit
- Nodes & translation quota
T2 Tenant
Company owners / admins
Self-managed, dept-based
- Staff / ports / accounts
- Chat audit / assets
- Balance / dashboards
T3 Agent
Frontline agents
See only assigned resources
- Unified multi-account inbox
- AI + assets
- Tags / settings
Deployment
SaaS · On-prem · API · 3 modes
| Dimension | SaaS | On-premise | API |
|---|---|---|---|
| Time to value | Same-day | 1-2 weeks | Per integration |
| Data residency | Platform cloud | Customer VPC | Customer side |
| Best for | 5-200 staff | 200+ / compliance | Integrations |
| Updates | Rolling | Versioned | API compat |
| SLA | 99.9% | 4h custom | 99.9% |
FAQ
Deployment FAQ
What env does on-premise need?
Recommended: K8s 1.26+ (3-node), PostgreSQL 14+, Redis 6+, Elasticsearch 8+, S3-compatible object storage. Single-host Docker Compose supported for POC.
Do you support SSO?
Enterprise supports OIDC, SAML 2.0, and LDAP/AD; works with Okta, Azure AD, Keycloak.
Does data leave the region?
On-premise data stays entirely in your VPC. SaaS offers China / HK / Singapore regions with strict tenant isolation.
Can it integrate with my CRM/ERP?
REST API + Webhooks for bulk import; supports Salesforce, HubSpot, WeCom, Lark, and more.
How to reduce account bans?
Business Nodes (10+ countries) distribute IPs/environments; each port has a fixed env; risk center alerts anomalies in real-time.