# Design / Architecture question

**URL:** <https://forums.suse.com/t/design-architecture-question/14202>\
**Category:** General\
**Created:** [May 8, 2019, 11:27am UTC](https://forums.suse.com/t/design-architecture-question/14202 "2019-05-08T11:27:52Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![BKH](https://avatars.discourse-cdn.com/v4/letter/b/da6949/32.png) [@BKH](https://forums.suse.com/u/BKH)\
**Post date:** [May 8, 2019, 11:27am UTC](https://forums.suse.com/t/design-architecture-question/14202/1 "2019-05-08T11:27:52Z")

</div>

Hello, I am currently developing a software that requires strong security by regulation and I am little confused about the Rancher/Kubernetes design/architecture.

Assume I have two VLANs.  
VLAN1 - Management LAN (No public access. No internet)  
ServerA - Running Etcd, ControlPlane, Worker  
ServerB - Running Etcd, ControlPlane, Worker  
ServerC - Running Etcd, ControlPlane, Worker

## VLAN2 - Public LAN (Public access. Internet) ServerF - Running Etcd, ControlPlane ServerG - Running Etcd, ControlPlane ServerH - Running Etcd, ControlPlane ServerI - Running Worker ServerJ - Running Worker ServerK - Running Worker

ServerA~C will be a ‘local’ cluster running only Rancher in HA mode.  
ServerF~K will be a new cluster that will be created from Rancher and all custom/apps will be run here.

In this case, where should I place the Load Balancer? Should it be in VLAN1? or VLAN2?

My configuration is…  
VMWare vSphere with Rancher 2.0

Thank you very much for all the help.