DMZ (Demilitarized Zone)
A Demilitarised Zone is a network segment positioned between an internal trusted network and an external untrusted network (typically the internet), used to host services that must be reachable from outside, web, email, DNS, while limiting the blast radius if those services are compromised. DMZ design is a long-standing perimeter-security pattern, complementary to modern Zero Trust approaches.
Categories: Internet and Routing
DMZ in context
Telecom networks depend on Internet-style routing (BGP, DNS, MPLS) for interconnect. Route hijacks and DNS abuse can degrade or intercept signaling, which is why RPKI and DNSSEC are now standard hardening for carrier networks.
To place DMZ in the wider telecom-security picture, review 3G, 3GPP, A5/1, A5/2, A5/3 and ASN — each entry cross-references back to this page so you can walk the topic in either direction.
Related terms
More from the TelcoSec Glossary
Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.