1 Reply Latest reply on Jan 18, 2017 3:09 PM by Russell Christopher

    How can we separate web server and vizql server in tableau

    Pradeep D

      HOW Tableau Server can be deployed  with the web server in the DMZ and the VizQL Server (responsible for communication with the database) behind the firewall. This further protects your data and further reduces the need for encryption. Can this be done by seperating the processes between primary and worker nodes? Does worker nodes work with primary server license or do they need additional license.

        • 1. Re: How can we separate web server and vizql server in tableau
          Russell Christopher

          This sort of deployment pattern is actually considered an "anti best practice" by our services team. In order to accomplish something like this you'll have to open many ports between the DMZ and your internal network so that the gateway component can talk to various parts of Tableau. To be blunt, "Don't do this". It is not a good idea

           

          Instead, put a reverse proxy in your DMZ. You can choose to terminate SSL there (or not), and open up a SINGLE port between your DMZ and internal network. It is safer, and easier.

           

          Hope that helps!

          2 of 2 people found this helpful