Networking

Data Center Microsegmentation Architecture

Network Design diagram · made in Skemio

Network diagram showing Internet connecting through an Edge Firewall down to Core Switches, then into a virtualized server host with isolated web and database VMs.
Network diagram showing Internet connecting through an Edge Firewall down to Core Switches, then into a virtualized server host with isolated web and database VMs.

What it shows

  • Traditional L3 subnets allow unrestricted host-to-host traffic by default.
  • Hypervisor firewalls isolate workloads even on the identical Layer 2 broadcast domain.
  • Zero Trust policies block compromised web servers from reaching databases directly.

The takeaway

Enforce security at the virtual NIC level, not just the physical network perimeter.

More network design diagrams