to get a setup like this you need to do some sort of clustering. If the end sites are not updated by 3rd party it could easily be made by making the end servers read only. Maintainance (adding articles etc) can then be done on one server placed on a secure network. Once content is changed it can be synced to the end sites.