Publishing BSP applications in the internet

Web application server is usually located in intranet. Therefore, the BSP applications are available for intranet users by default without any additional hardware.

If want to allow internet users also use BSP application, what necessary components/action are required?. Do I need something like Web dispatcher in DMZ and open required ports in Firewall? Is there a complete quide available "publishing your BSP application for internet users"?