This is getting a bit out of our territory but I'm doing some resarch and could use some help.
We have an opportunity to significantly improve our physical web server architecture. I'm guessing most of us don't spend the time we used to wrenching in the server room, but I'm wondering what you think is the optimal web server architecture.
We've been floating ideas like front facing read-only load balanced servers with a production machine behind the firewall. We've also talked about keeping the front facing machines read/write to keep the CMS access from off campus. While we all agree on the need for reliability and failover, the struggle seems to be between security and ease of access for content providers.
Where do you come down in that debate and, without going into lurid details of your server architecture, how does your institution handle it.