开发者

Access LAN files from DMZ

We have an application that stores files on a file server in our LAN. Now, they want a web application to make the files available on our public web server (in the DMZ). What's the best method for accessing those files from the web application?

The options I've considered are:

  1. FTP from the DMZ to the LAN server. (cheapest and easiest)
  2. A second file server in the DMZ and the files are pushed to it from the LAN. (Better performance and security开发者_C百科, but also more money)


Configure a reverse proxy in the DMZ which will talk to the web servers (web application) in the backend internal network. This should solve your problem as the real web application will be separated from the external world. Use firewalls, SSL, Client autentication for better security.


just avoid Demilitarized Zones (DMZ) all together! They're the "bluetooth" of networks

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜