Just LB or also Web Servers in Demilitarized Zone?
- by Bradford
In a load balanced environment, is it necessary to have all of the web servers in the DMZ? Or will just having the Load Balancer in the DMZ achieve the desired security? If it matters, the web server and application server are the same -- GF, Tomcat fronted by httpd on the same server, OAS, etc...
LB - WEB/APPLICATION - DB
Also, would the setup be different if it was
LB - Web Server - Application Server - DB
Thanks,
Bradford