什么是网络中的 DMZ? [英] What is DMZ in networking?

问题描述

我必须配置一个托管在公司网络中的 Java 应用程序.那么什么是 DMZ 以及如何通过以公开服务?

I have to configure a Java application which is hosted in side a corporate network. So what is DMZ and how to get through to expose the services?

推荐答案

DMZ(网络):

在计算机安全领域，DMZ 或非军事区是一个物理或逻辑子网，它包含组织的外部服务并将其暴露给更大的不受信任的网络，通常是互联网.该术语通常被 IT 专业人员称为 DMZ.它有时被称为外围网络.DMZ 的目的是为组织的局域网 (LAN) 添加额外的安全层；外部攻击者只能访问 DMZ 中的设备，而不能访问网络的任何其他部分.

In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by IT professionals. It is sometimes referred to as a Perimeter Network. The purpose of a DMZ is to add an additional layer of security to an organization's Local Area Network (LAN); an external attacker only has access to equipment in the DMZ, rather than any other part of the network.

这篇关于什么是网络中的 DMZ?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！