IBM WebSphere: Deployment and Advanced Configuration

Edge Topology

Let's begin by reviewing basic network topology and components. A basic topology, as shown in Figure 23-1, consists of the following (we have left out devices such as routers and switches because they are not relevant to our discussion):

• Firewalls— There are normally two firewalls—an Internet-facing firewall, sometimes referred to as the domain firewall, and a rear firewall, referred to as the protocol firewall. The former generally only permits HTTP traffic on ports 80 and 443 (SSL) to come into the DMZ, and the latter ideally only permits traffic coming from the WAS HTTP plug-in (or other designated devices in the DMZ) on known ports/protocols to flow through to the backend “secure” zone.

• DMZ— The area in between the domain and ...