To save space below, we'll use the following working names for the different pieces of hardware involved:
Main is the machine hosting most services.
Dynamic is the machine hosting member dynamic web sites and other services where we run arbitrary code written by members.
Shell is the "most anything goes" shell server.