Networking
Intermediate
What is Network Segmentation?
The practice of dividing a network into isolated segments to improve security, performance, and management.
Network segmentation limits the blast radius of security breaches by isolating different parts of the network. If an attacker compromises one segment, they cannot easily move to others. This is a fundamental security practice.
Implementation methods include VLANs, subnets, firewalls, and micro-segmentation (per-workload isolation). Common segments separate DMZ (public-facing servers), internal networks, guest WiFi, IoT devices, and database servers. Zero Trust networks take segmentation to the extreme.
