I'd like to know what kind of design is better to set up a service like this Design.
Server 1, Server 2, Server 3 are behind a router of the customer and I would like them to be reachable from the internet.
Need suggestion to either use :
Thanks in advance
First Come, First Served ! You've got the solution accepted, and it's the same as epaniagua who brought a clear one.
Thanks a lot for the support.
Buying different public IPs (Public Subnet option) usually has a higher cost than using just one public IP. I would go with 1 public IP and will use Destination NAT to permit external users to reach the internal servers. Now, this option will only work if the communications are always initiated from the external users. External users will be contacting the SRX's public IP address and based on the destination port of the packets they will be redirected to a specific internal server (Port-Forwarding):
If having multiple Public addresses is not a problem, then you could use Static NAT. This will create a 1-to-1 mapping between your public addresses and your internal servers. In summary, anytime an external user contacts a specific public addresses it will be redirected to a specific internal server, no matter the destination port of the packets. Likewise, when an internal server initiate a connection to an external user, the packets from that server will be translated to the public address related to that server:
I hope this helps you.
Thanks a lot. This is typically what I was looking for. I'll apply the static NAT solution. Cause I think needs to perform traffic go through either sides.
Really appreciate your help.
What do you think is the best practice for such situation ? Should I bypass the customer router or is there a way to maintain it and still reach the servers ?
The router is just going to perform route lookup and I don't think there is any reason to bypass the Router.
However, it totally depends on your comfort whether to include the router or not. Because keeping a Router in between will include more administrative tasks.
Thanks a lot for these explanations.
Really helpful !