I have a web server which is located in a DMZ, and exposed to the internet.
I also have an application server hosting a SOAP-service in the internal network.
I need to access the SOAP-service from the web server.
I know could open a port and allow direct https access from the web server to the SOAP-service, but I don't want to do that.
Does it make sense to add a proxy-server in the internal network, and allow the web server to access only the proxy, via https?
The proxy would then forward the requests to the SOAP-service.
Is that an improvement in security at all?