Everything about DMZ (computing)
Subnetwork of a system exposed to external world
In computer security, a DMZ or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external-facing services to an untrusted, usually larger, network such as the Internet. The purpose of a DMZ is to add an additional layer of security to an organization's local area network (LAN): an external network node can access only what is exposed in the DMZ, while the rest of the organization's network is protected behind a firewall. The DMZ functions as a small, isolated network positioned between the Internet and the private network. Wikipedia →
🧠Start here: a 6-step reading path
- Read the overview: DMZ (computing)A 5-minute orientation
- Pick up a classic book: The Road To Microservice ArchitectureThe most-reprinted book on the subject
- Go sideways: Port forwardingA closely related topic
- Go sideways: Bastion hostA closely related topic
đź“– Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
- No matching papers found.
đź“š Books worth reading
The Road To Microservice ArchitectureRaymond Pairan
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
đź”— Related topics
- Port forwarding In computer networking, port forwarding or port mapping is an application of network address translation (NAT) that redirects a communication request from…
- Bastion host A bastion host is a special-purpose computer on a network specifically designed and configured to withstand attacks, so named by analogy to the bastion…
- Endian Firewall Endian Firewall is an open-source router, firewall and gateway security Linux distribution developed by the South Tyrolean company Endian. The product…
- Jump server A jump server, jump host or jump box is a system on a network used to access and manage devices in a separate security zone. A jump server is a hardened…
- Tunneling protocol In computer networks, a tunneling protocol is a communication protocol that allows for the movement of data from one network to another. They can, for…
- Proxy server In computer networking, a proxy server is an intermediary server application between a client requesting a resource and the server then providing that…
- Screened subnet In network security a screened subnet refers to the use of one or more logical screening routers as a firewall to define three separate subnets: an external…
- Internet security Internet security is a branch of computer security focused on the Internet. It includes browser security, web application security, and network security…