DMZ

A DMZ is a buffer network segment that sits between the internet and an organization's internal network. Public-facing servers like web and mail servers live there so that if one is compromised, the attacker still faces another firewall before reaching internal systems. It is a classic example of layered perimeter defense.