There is only one database node in the cluster. The node hides behind the GW. All ordinary clients are not allowed to directly access the database node except the administrator by some specific or provisional method.

Firewall Without DBTwin Active-Active Database Cluster Diagram