What Is Network Segmentation?

Network segmentation splits a network into separate segments and restricts which segments can talk to one another, often via firewall or network policy rules. In a cluster this is usually done with network policies that default to deny and allow only intended flows between workloads. The aim is to contain lateral movement.

Why it matters

Segmentation means a compromised service cannot freely reach the rest of the system, shrinking the blast radius. It is a foundation of defense in depth for internal traffic.

Related guides