i want to build an internet facing website that interact with internal resource such as referential data.
We have a DMZ zone and intranet zone. When users logs in to the website, the http web server in dmz makes a connection with the intranet zone via a messaging service , the business logic application server in the intranet zone responds to the request.
However we have an internal team raising concern that the connection between DMZ and intranet is risky, instead they suggested that we do it this way. Place an request service in DMZ, when user logs in, the service puts a request row in this service store, in the intranet zone, create a poling service that monitor any request being placed in the DmZ, if found, pushes only information related to the login user to the Dmz via a file rsync from intranet. In this way , no direct connection is allowed to initiated directly from external, and safer. However, as file copy is slow, this will hit performance on the webpage, imaging client logs in and wait for file to be generated , encrypted and copied, then decrypted, read and presented ! That addes so much complexity to front end server to read files instead of JMS service call.
What do you think of the proposed solution? and is there alternative than file copy but not compromising the security?