Hi, Customer is a bank related brand and they have some legislations about PII data. DB contains user data shouldn't be accessible by a web server. Also cloudflare is not an option, precious data cant transfer through another foreign company. Without using Umbraco CMS as a headless cms, is there way to accomplish this --> Public Internet Firewall Web server App server (umbraco cms) DB Server Options that I can think of; -Using web server as proxy, IIS as reverse proxy or redis in proxy mode -Installing a proxy or a cache software to web server (I dont know much about these, but there should be some)

Yes. You can use load balancing in Umbraco to achieve this with one backoffice instance that can write to the database and then use "read-only" access on subscriber servers.

@Jason understand. The problem is, DB server is in DMZ. I mean they are in different networks and there are no access to DB directly. Also no read replica of DB is allowed. There are some precious data in DB.

OK. If they're worried about sensitive data on the DB server, they shouldn't be running an Umbraco/CMS database on that same server - it should be in a different zone with lower trust. Client I'm working with right now has created separate app between their HR database and Umbraco so that we can get the data that we need (and only the data we need) via an API without needing to talk directly to database servers with sensitive information on. Otherwise, a headless (or static/hybrid) approach is the only real option.

@Jason indeed. That was the right thing to do, wasn't it? Thanks, I actually needed some support with my decision. Thanks