The request
“A DMZ web application security architecture with Internet to an edge router and external firewall, then a WAF, load balancer, two web servers, an application server, an internal firewall, two database servers and a domain controller.”
Then tryAdd a bastion host in the DMZ.Add a backup database server in the internal zone.
What is in this drawing
Read the decisions behind it.
01
Use of DMZ to isolate public-facing services
02
WAF for web attack protection
03
Internal firewall for backend segmentation
When building internet-facing web applications requiring defense in depth and compliance.
More like this