My situation is like this: The firewall has a static public IP address (192.168.2.1), and a Web Server is connect to the firewall in the DMZ, the Application Server and the Database Server are connected to the firewall from the inside interface. All the IP addresses of the Web, Application, and the Database Servers are private IPs such as 192.168.2.x (where x = 2, 3, 4). Some web applications are deployed to this system (on Application Server such as http://www.MyWebSite.com).
This will be what I expected: a user launches the web browser and types in http://www.mywebsite.com, trying to access the web application. The DNS server will direct the request to the firewall (192.168.2.1). Once the firewall receives the request, it will forward the request to the web server. The web servers HTTP server will pass through the firewall and send the request to the application server, which in turn queries the database.
My questions are:
1) Can the firewall (which has a public static IP) direct the request to the web server (which has a private IP) in the DMZ? If so, how does it do it? Do I need to configure the firewall?
2) How does the HTTP server (installed on the web server) send the request passing through the firewall? Any special configuration? Or by default.
3) If the firewall comes with the VPN capability, can I remotely access the web server, the application server and the database server via this firewall?
4) Can I have the same web server to carry out both the caching and HTTP functions?
You will need to do a static mapping between a public static IP and the private ip address of the web interface and configure an ACL on the outside interface of the PIX to permit web traffic. Here is an example.
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...