MQSeries.net :: View topic - Datapower DMZ- Expose web service over the internet

uditara

Hi All,

This is part of POC activity related to expose Web Services to the Internet world using DMZ IP in WebSphere Datapower SOA Appliance (XI52).

We have two WebSphere Datapower XI52 Appliances in production environment with the Application Optimization feature in place for the services load balancing between two datapower boxes.

Now there is new requirement to host new web services application in datapower appliance and publish over the internet using DMZ IP to access from outside (public internet)...
This new web service will be load balance between two datapower boxes using Application Optimization feature....

I need some clarification on below mentioned points before moving forward with the correct approach :-

1) Network team will provide one DMZ IP and two Production IP's - DMZ and Production IP's are in different network segment.
2) I will configure the production ip's on Eth10 Interface on both datapower boxes..
3) For Datapower ETH10 interface - Standby Control - Virtual IP Address will be the DMZ IP.
5) Firewall will be open between DMZ IP and Production IP for new web services SOAP/HTTP listner port.
6) The web services will be expose to public internet using DMZ IP and this IP will be configure as application optimizer to distribute the load on both the boxes
6) The DNS name will be register to the DMZ IP.

The overall flow like it is -
Internet -----> Firewall---> DMZ IP (port 9443) ------> Firewall -----------------> Datapower ETH10 interface IP on both boxes.....

Kindly suggest the correct approach to publish the new web service over the internet using DMZ in WebSphere Datapower XI52 Appliances...