How the pieces fit together
Every service sits in its own network segment, and nothing in one reaches into another unless a rule says so. The public web server has no path into the internal networks at all - that is why a compromise of one of them stops there.
Static content, rendered from text files by a small Python application. No database, no content management system, no login, no upload. The server answers GET and HEAD and nothing else.
That is a deliberate answer to what came before: the attack surface of a CMS is not something to defend better, it is something to not have.
The status page is fed by a probe that runs on its own schedule and writes a file. The web server reads that file and measures nothing itself, so it needs no network access of its own.
Not an offering by Microsoft or AOL. MSN, MSN Explorer and AOL are trademarks of their respective owners.