• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Jeanne Boyarsky
  • Ron McLeod
  • Paul Clapham
  • Liutauras Vilda
Sheriffs:
  • paul wheaton
  • Rob Spoor
  • Devaka Cooray
Saloon Keepers:
  • Stephan van Hulst
  • Tim Holloway
  • Carey Brown
  • Frits Walraven
  • Tim Moores
Bartenders:
  • Mikalai Zaikin

Showing Firewalls in Deployment Diag.

 
Ranch Hand
Posts: 52
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
I'm considering showing 2 "<<device>> Firewalls" in my Deployment Diagram to represent what is "inside" the DMZ. Ex. Outer firewall -> Web Servers -> Inner Firewall -> Application Servers -> ... as opposed to a single firewall and just labeling the Web Servers as inside the DMZ. It clearly makes it more obvious with the first approach. However, it seems to me that you can set-up a DMZ with a single Router/Firewall in the "real world". I understand that this is just an assignment for the OCMJEA Part 2, so I would argue for clarity, however it should reflect reality (the whole point of a diagram). There is also a cost issue that doesn't seem to come up in the requirements, but does in the real world.

Your thoughts about how to depict this?
 
author & internet detective
Posts: 41860
908
Eclipse IDE VI Editor Java
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Assumptions are your friend. Seriously, you can document in the assumptions that you assumed cost was more important than security or vice versa and how it impacted your deisgn.
 
Roy Pozarelli
Ranch Hand
Posts: 52
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Jeanne thanks for your reply. I'm aware of documenting assumptions. Could you address the real issue that I was trying to bring up. That being the issue of having a "more clear diagram" vs. "real world" issues. I can see being "knocked" on either side of that debate (this won't work in the real world vs. the diagram is not clear). Could you please speak to that side of the issue that I first posed? TIA.
 
Jeanne Boyarsky
author & internet detective
Posts: 41860
908
Eclipse IDE VI Editor Java
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Roy,
Sorry, I thought I did. Either decision is valid for that example. It depends on the requirements and domain of the system.

For the more general question (that I didn't pick up on), I tried to keep my diagram to the simplified end of things and use the assumptions to document why those seemed like acceptable choices.
 
Consider Paul's rocket mass heater.
reply
    Bookmark Topic Watch Topic
  • New Topic