安全边界网络设计

Glossary

• IDPS: Intrusion detection and prevention system

Security zone

• External
• eDMZ: External demilitarized zone
• iDMZ: Internal demilitarized zone
• DMZ management network
• Corporate firewall protected zone
• Internal DRN(Domestic router network)

3-tiers Internet facing service design

Internet --> eDMZ --> iDMZ --> DRN

Internet --> external firewall --> web servers/external DNS/load balancer --> internal firewall --> application servers/load balancer --> internal firewall --> internal servers/database/internal DNS/load balancer