Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are getting a new internet connection 100Mbps UP/DOWN and 4 Static IPs. Also on that connection there will be a webserver that hosts some websites for us. (Nothing too fancy).

The problem where we have in preparation to that connection is the wan setup. The idea we are considering is following:

Wan (ethernet) -> Switch -> Router/firewall -> internal network(300pcs)
                         -> Server (with UFW firewall)

And give the Router and the Server there own static IP.

Is this a good setup? Performance wise and security or do we need too put the server behind the Router.

What routers/switches do you recommend for this application?

share|improve this question

From security point of view, one firewall with 3 network interfaces will be enough for such a setup. You connect one interface to external network like Internet and connect another interface to the internal network, and connect the last one to the server(s) subnet which is called DMZ.

This way you can allow traffic to pass from external to DMZ and does not allow it to pass from external to internal network. Publicly accessible servers should be placed in the DMZ.

As for the products recommendations, this part is off-topic!

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.