# Different Keycloak cluster in DMZ and trust

**URL:** <https://forum.keycloak.org/t/different-keycloak-cluster-in-dmz-and-trust/11809>\
**Category:** Miscellanaeous\
**Created:** [October 30, 2021, 11:29am UTC](https://forum.keycloak.org/t/different-keycloak-cluster-in-dmz-and-trust/11809 "2021-10-30T11:29:00Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kostia](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/kostia/32/3788_2.png) [@Kostia](https://forum.keycloak.org/u/Kostia)\
**Post date:** [October 30, 2021, 11:29am UTC](https://forum.keycloak.org/t/different-keycloak-cluster-in-dmz-and-trust/11809/1 "2021-10-30T11:29:00Z")

</div>

Hi everyone. We have an idea to have different Keycloak clusters in DMZ and Trust network zones, so auth flows will not cross each other. Keycloak in the trust zone is going to be used for AD federation and Kerberos-based SSO and keycloak in DMZ for the services that live here. What are the possible drawbacks here? I will appreciate any advice, thanks 🙂