In this scenario, the company wants a way to secure the Web content from intruders. It moved the Web or streaming server inside the firewall and put an appliance configured as an accelerator outside the firewall.
The locations of the Web or streaming server and accelerator are not apparent to users. The user who sends a request thinks that the request is being sent directly to the Web server or streaming server.
When you deploy an accelerator outside the firewall, you must configure the firewall so that it allows requests from the accelerator to pass through the firewall to the Web server or streaming server, and then back to the accelerator.
The following illustration shows a single accelerator outside the firewall.
Although the host name is not accelerator-specific, you might need to change it when you deploy the appliance as an accelerator.
The following table shows the configuration of the host name and IP address on the accelerator for this scenario.
The accelerator takes the host name that was previously assigned to the Web or streaming server. |
||
After setup, you can change the Primary IP Address option (on the Network - Interfaces page) and the Host Name option (on the System - Host Name page) in the Appliance Manager.
The following acceleration rule maps the accelerator IP address, port, and host name settings to the Web server that the appliance accelerates.
With this configuration, any client can access the accelerator because no restrictions are set for the IP addresses that can access it. No client has to directly access the Web server or streaming server, which is on the other side of the firewall.
Copyright © 1994-2002, Network Appliance, Inc. All rights
reserved.
Part No. 210-00369
File: accel11.htm
Last updated: 11/12/02 12:13:53