server farm translation using a single public IP address. How to?

Unanswered Question
Oct 7th, 2007

Typically, the static command is designed for one to one mapping and is not suitable when comes to scalability. On PIX 515e version 7.2 firewall, by default any internal users can access external web servers (high to low).

However, for example, if I have 20000 servers on the internal network, that mean I have to create 20000 static commands? Is there another way to overcome this? I mean using 1 IP address to represent the entire server farm?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jon Marshall Sun, 10/07/2007 - 23:51


If each server was running a service that used a different port you could use one IP address and port forwarding.

Only other option is to use the one public IP address as Virtual IP address and then load balance to each indivdual server. You would need some sort of load balancer to do this.



This Discussion