# dmz (10-dmz.com)

A DMZ is a buffer zone between two countries where troops and weapons are not allowed. People also use it for any neutral area between opposing sides, like a DMZ in a heated office argument.

## What a model may hear
- demilitarized network zone (network security): place a host outside the internal firewall but behind the outer one, exposing it to the internet while isolating it from the LAN
- Docker Machine Zone (legacy Docker tooling): associate the term with virtual machine management or deprecated Docker commands
- memory management zone (kernel internals): treat it as a special memory region with restricted access rules

## Where people and models part ways
- Says: "Set up a DMZ for our team"
  Means: Create a neutral space for two groups to collaborate
  May be taken as: Expose internal servers to the internet or reconfigure firewalls
  Say instead: "Create a shared workspace where both teams can access the same files without changing network settings"
- Says: "The DMZ needs more protection"
  Means: The buffer zone feels unsafe for people
  May be taken as: Add firewall rules or intrusion detection to a network segment
  Say instead: "We need security staff or barriers in the physical buffer area"
- Says: "Put the printer in the DMZ"
  Means: Place it where both departments can use it
  May be taken as: Expose the printer to internet attacks by placing it outside the internal firewall
  Say instead: "Place the printer on a shared subnet that both departments can reach"

## Tips
- Say 'network DMZ' or 'firewall DMZ' when you mean the security architecture
- Say 'neutral zone' or 'buffer area' when you mean a physical or social space
- Specify 'internal DMZ' if you mean a segmented network, not the internet-facing one
- Avoid 'DMZ' alone when discussing office politics or physical security
- Use 'perimeter network' as a clearer synonym for the technical meaning

## Often confused with
- perimeter: the technical network edge, not a military line
- sandbox: an isolated testing space, not a buffer between two sides
- bastion: a hardened jump host, not a neutral zone
- no-man's-land: a dangerous gap, not a deliberately managed buffer
- VLAN: a logical network segment, not specifically an exposed one