Deployment patterns to use the same confluence instance on intranet and internet

Johan Ferner

Hello,

My organization uses Confluence internally. It has the following setup:

• Users login using crowd connected to Microsoft AD
• Anonymous access can see almost everything

Now we would like to expose parts of this instance on the internet (includes putting the confluence instance in a DMZ). If a user accesses our confluence site from the internet we would like the following setup:

• Anonymous access restricted to specific spaces - for public documentation etc.
• Users can login using crowd connected to Microsoft AD and
  
  • can see everything if employee
  • can see specified spaces if partner (not employee)

Is it possible to mix these policys on the same confluence instance based on IP adress?

Thanks in advance,

Johan

Johan Ferner

This was put on hold by my organization.

After thinking about this for a while I would buy a second confluence instance and export/import spaces because of security concerns. That way I am assured that only public information is available on the internet.