I am creating a web application which needs to make direct connections to internal resources (e.g. database servers), but will also need to be accessed from the internet.
The web app exposes web services, and also does rendering of the HTML UI (ASP.NET MVC).
My plan is to install the application on our internal network, and expose the HTTPS port to the internet via a reverse proxy server which sits in the DMZ.
Is this a secure way to expose the web application? Or am I falling into some sort of trap?