How can I connect my PI server to an external OPC-UA Server trought a DMZ via internet?

HI, I need to connect my PI server to an external OPC-UA Server.

In my side I have an PI Server and the other side an OPC UA Server. For best security practice, Do I need to use a PI OPC UA connector in LAN and a proxy in the DMZ? or Is there a PI relay connector to use in the DMZ?