What is the recommended architecture for a public stack - can you put the Web component in the dmz with the rest of the stack behind the firewall?

asked 2017-02-27 02:37:46 -0500

Hi Guys,

What is the recommended architecture for a public facing stack - do/can you put the web components on their own dedicated box(es) in the dmz with the rest of the stack behind the firewall, or is the whole stack in the dmz?

In a multi-zone / multi-layer dmz, do you still separate the web components from the rest of the stack or is there some other architecture that is recommended?

Thanks in advance

Matt

edit retag flag offensive close merge delete