It is common knowledge that any servers exposed to the internet needs to be placed in a DMZ. However, a web application sometimes need to get user input and updates to backend database tables etc. How and where would you place the database server. In the DMZ, or allow database connections through the DMZ firewall back to the internal network where the database server is housed.?
What if this database server needs to be accessed also from internal users, eg maybe they need to query who has registered at the website..etc.. How would you design where to place this DB server? thanks