Proposed Web ArchitectureProposed Web ArchitectureDecember 10, 2002

Eric Marshall

OverviewOverview

Network/Server InfrastructureLegacy Perimeter Network

Perimeterrouter

Internal Network

• Screened-Host Architecture• Exposed Bastion Hosts for

web and ftp services Firewall

Bastion Hosts

Network/Server InfrastructureNew Perimeter Network

Perimeterrouter

Bastion Hosts

Internal Network

• Screened-Net Architecture• If Bastion Hosts are

compromised, the internal network is still protected

• Cisco Pix Firewall– Best price/performance– Best compliments pre-existing

architecture

Pix router

Perimeter Network

Firewall

FeedbackFeedback

Proposed Web ArchitectureProposed Web Architecture

NOAA Confidential

Proposed FTP Architecture

Perimeterrouter

www.gfdl.noaa.gov

Internal Network

Pix router

Perimeter Network

Firewall

Intranet.gfdl.noaa.gov

• ~user/public_html

• ~user/intranet_html

Proposed FTP ArchitectureProposed FTP Architecture

NOAA Confidential

• Projects not directly related to NOMADS on the data1.gfdl.noaa.gov web server will be migrated to this architecture.

NOMADS Update

Web Page Look/FeelWeb Page Look/Feel