Can you place just wfe servers in the extranet and not a DB server. Instead connect to internal DB server
Example for Configuring Extranet and Intranet Users to Access Intranet Servers and Internet Using a Reserved Public IP Address - NetEngine AR CLI-based Typical Configuration Examples - Huawei
![Active Directory Federation Services Extranet Smart Lock-out - The things that are better left unspoken Active Directory Federation Services Extranet Smart Lock-out - The things that are better left unspoken](https://dirteam.com/sander/wp-content/uploads/sites/2/2020/10/ExtranetLockout.jpg)