[Internet] | | |---------[ Public Server ] | | [ Firewall ] | | [Private LAN]
In above Design we have a few public servers. We moved them outside the firewall because they are very high intensity servers, firewall degrading performance and filling connection tables.
Currently if any
Private LAN (10.x.x.x) using NATing (one to many) if it wants to talk to
Public Server in DMZ.
Does it OK to do NAT on firewall for Public Server or we should configure Routing?
I can add
10.x.x.x route in all Public server to hand off packet to Firewall.
What would be the best design in this case?