I am quite new to the DMZ concept and working on a project as part of my master thesis where Remote access is required for the Development environment. However, there is a functional requirement for minimum latecy in the connection since video playing slow or getting stuck is not acceptable. So I have this thought of moving DB server from internal network to the DMZ zone. Where all development tools that are running on Server 1 will sit next to Server 2 running the DB.
However there are the following issues that erupt from this:
- Data Redundancy
- Data is edited by both internal and external employees so the quality and real time access to current data is a must.
- And of course the biggest of all is that if DB server is compromised all the data on it will be compromised as well.
So my other thought is to move only the specific instances of the DB required during development process which will sit next to the Server 1 which is running the development tool. Though it doesn't the system fool proof, it reduces the risk of complete Db compromise.
Still, the question remains on maintaining data quality in the DB and the replication of data from the DB server inside the internal network to the DB server running in DMZ.
Can someone please give me any thoughts on this approach??? Considering factors like maintaining consistency of data, cost and performance and ultimately the security.
Thanks a lot in advance.