[Internet]
|
|
|---------[ Public Server ]
|
|
[ Firewall ]
|
|
[Private LAN]
In above Design we have a few public servers. We moved them outside the firewall because they are very high intensity servers, firewall degrading performance and filling connection tables.
Question:
Currently if any Private LAN
(10.x.x.x) using NATing (one to many) if it wants to talk to Public Server
in DMZ.
Does it OK to do NAT on firewall for Public Server or we should configure Routing?
I can add 10.x.x.x
route in all Public server to hand off packet to Firewall.
What would be the best design in this case?
NAT
when inside server connect to outside server.