Installation of SAP Front end server

Hi Team, I would like to have a suggestion on implementing the SAP Front end server as we are planning to implement the SAP Fiori into the existing setup of On-Premise(S4 HANA 1511). The infra is internet-----IPS--------Firewall-------AAA---------router---------core SW---------access--------users

SAP cluster is at core SW And what we need to do is just set a FIORI front end server between Firewall and AAA server, as a DMZ server, to provide interface to internet.

Can you suggest the installation options or procedures for SAP Front end server in the existing infra. Looking forward to hear from you.