# Managing a unique DMZ

**URL:** <https://forum.ansible.com/t/managing-a-unique-dmz/45023>\
**Category:** Get Help\
**Tags:** receptor, ansible, awx, network\
**Created:** [December 23, 2025, 7:31pm UTC](https://forum.ansible.com/t/managing-a-unique-dmz/45023 "2025-12-23T19:31:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![zane](https://avatars.discourse-cdn.com/v4/letter/z/c4cdca/32.png) [@zane](https://forum.ansible.com/u/zane)\
**Post date:** [December 23, 2025, 7:31pm UTC](https://forum.ansible.com/t/managing-a-unique-dmz/45023/1 "2025-12-23T19:31:49Z")

</div>

My team and I have encountered a unique issue when trying to find a solution for managing a unique DMZ -  
We have a L7 gateway between us and the DMZ, that only supports http/ws  
It also only accepts json/xml payloads (when coming into our network)

We’ve looked at receptors (doesn’t work for us from what we’ve seen)

We’ve also looked at ansible-pull that doesn’t use json/xml payloads even when cloning with https

Our leading idea is to implement our own “ansible-pull” mechanism that works with jsons

How would you guys tackle that?

---

<div class="post-metadata">

**Author:** ![U880D](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/u880d/32/10032_2.png) [@U880D](https://forum.ansible.com/u/U880D)\
**Post date:** [December 24, 2025, 12:51pm UTC](https://forum.ansible.com/t/managing-a-unique-dmz/45023/2 "2025-12-24T12:51:46Z")

</div>

> [@zane](#):
>
> We have a Layer7 API Gateway between us and the DMZ, that only supports HTTP/WebSocket (WS). It also only accept JSON/XML payloads … We’ve also looked at `ansible-pull` that doesn’t use JSON/XML payloads even when cloning with HTTPS. … How would you guys tackle that?

I am not sure if I got the description right or what actually the problem could be in your case with something like

```auto
ansible-pull --inventory "$(hostname)," --url "https://git.example.com/repo.git" 

```

But could be the following approach on/from the Remote Node an option for you?

```auto
ansible-playbook --inventory "$(hostname)," <(curl --silent https://raw.gitusercontent.example.com/repo/refs/heads/main/src/main.yml)

```

With this, one is able to run an Ansible playbook or other scripts out of a Remote Version Control System (VCS) like Git.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [January 23, 2026, 12:52pm UTC](https://forum.ansible.com/t/managing-a-unique-dmz/45023/3 "2026-01-23T12:52:29Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.