networking - 什么是网络中的 DMZ？

Question

我必须配置一个托管在公司网络中的 Java 应用程序。那么什么是 DMZ 以及如何通过以公开服务？

Answer 1

DMZ (network) :

In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by IT professionals. It is sometimes referred to as a Perimeter Network. The purpose of a DMZ is to add an additional layer of security to an organization's Local Area Network (LAN); an external attacker only has access to equipment in the DMZ, rather than any other part of the network.