We have two datacenters in two different locations with two redundant CSSs at each location. The two datacenters will be used to host our website and to provide load-balancing and load-sharing. We are using pix firewalls at each location to protect our website. Our security policy permits only private addresses to be configured behind the PIXs. The PIXs are NATing the public IP addresses on the outside to private IP addresses on the inside. Since the CSSs are located behind the firewalls, the VIPs are configured using private IP addresses. In order to configure Global Server Load-balancing (GSLB), the CSSs must be configured as the authoritative DNS servers for our sub-domain. In this case the CSSs will return an A record that contains a private IP address that is not addressable from the Internet (the VIP IP address). Do you have any suggestion on how to make GSLB work without having to extend the Public addresses beyond the PIXs to reach the outside interface on the CSS?
Thanks,
Bachir Najm
