In public cloud environments, it is a common practice to use
a scale-out architecture (see the figure below) rather than larger,
higher performing VMs. This architecture (sometimes called a
sandwich deployment)
avoids a single point of failure and enables you to add or remove
firewalls as needed.