# Design

ARKSSPR has 2 different installations: Internal and DMZ. Depending on the need, only Internal installation or both installations can be made.

**Internal system**: It is used only for access by users in the internal network. Although not recommended, it can also be used for Internet access in environments where there is no physical DMZ network. With Internal ARKSSPR, users can manage their passwords and accounts, while administrators can manage ARKSSPR and report. The server does not have to be a domain member. The recommended configuration is to be a domain member.

**DMZ**: Designed for access by Internet users only. It directs incoming requests on the Internet to the Internal ARKSSPR server like a proxy and forwards the response to the user. It has no business logic. Even if you have administrative rights on ARKSSPR, administrative screens will not work. Access to the Internal system is required to open administrative screens. As with all servers in the DMZ network that open to the internet, the ARKSSPR DMZ Setup must not be a member of the domain.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.arksspr.com/master/planning/design.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.