server farm translation using a single public IP address. How to?

[network27]

Typically, the static command is designed for one to one mapping and is not suitable when comes to scalability. On PIX 515e version 7.2 firewall, by default any internal users can access external web servers (high to low).

However, for example, if I have 20000 servers on the internal network, that mean I have to create 20000 static commands? Is there another way to overcome this? I mean using 1 IP address to represent the entire server farm?

[Jon Marshall]

Hi

If each server was running a service that used a different port you could use one IP address and port forwarding.

Only other option is to use the one public IP address as Virtual IP address and then load balance to each indivdual server. You would need some sort of load balancer to do this.

Jon