# best design for dmz ?

**URL:** <https://forum.ansible.com/t/best-design-for-dmz/37697>\
**Category:** AWX Project\
**Tags:** kubernetes\
**Created:** [February 25, 2023, 9:52am UTC](https://forum.ansible.com/t/best-design-for-dmz/37697 "2023-02-25T09:52:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![FERREIRA\_CHRISTOPHE](https://avatars.discourse-cdn.com/v4/letter/f/58956e/32.png) [@FERREIRA\_CHRISTOPHE](https://forum.ansible.com/u/FERREIRA_CHRISTOPHE)\
**Post date:** [February 25, 2023, 9:52am UTC](https://forum.ansible.com/t/best-design-for-dmz/37697/1 "2023-02-25T09:52:33Z")

</div>

hello I wonder about the design of the infra for a dmz,  
It is possible from the controller to send jobs to another kubernetes cluster which only requires the apiserver between the controller and the remote  
Or the automation mesh with receptor nodes with workers vm only receptor port needed

what is the best and more secure ?

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [March 17, 2023, 5:53pm UTC](https://forum.ansible.com/t/best-design-for-dmz/37697/2 "2023-03-17T17:53:00Z")

</div>

Yes you can use the container groups feature within AWX for this purpose

[https://docs.ansible.com/automation-controller/latest/html/administration/containers\_instance\_groups.html#container-groups](https://docs.ansible.com/automation-controller/latest/html/administration/containers_instance_groups.html#container-groups)

You may also look into execution nodes, see a demo and explanation here [https://youtu.be/cWV52qZ0sVk](https://youtu.be/cWV52qZ0sVk)

AWX Team