What is an Intronet?
An intronet is a strict, identity-enforced internal network perimeter. It operates on the assumption that external firewalls have already been breached.
The Anatomy of an Intronet
Unlike traditional flat intranets where trust is implicitly granted to any authenticated device, an intronet enforces micro-segmentation down to the individual workload and application level. Trust is never static.
| Feature | Legacy Intranet | Modern Intronet |
|---|---|---|
| Default Posture | Implicit Allow | Explicit Deny |
| Access Control | IP / Subnet | Cryptographic Identity (mTLS) |
| Lateral Movement | Unrestricted | Contained |
Common Mistake: Relying on VLANs
Many organizations attempt to build an intronet using legacy VLANs and internal hardware firewalls. This fails because VLANs do not authenticate identity; they merely separate broadcast domains. If an attacker spoofs an IP on a trusted VLAN, they bypass the control entirely.
Frequently Asked Questions
Does an intronet replace my external firewall?
No. Defense in depth requires both. The external firewall filters edge noise; the intronet stops advanced persistent threats (APTs) that bypass the edge.
What is the latency overhead?
By utilizing eBPF (Extended Berkeley Packet Filter), inspection happens at the kernel level, introducing less than 1 millisecond of latency per hop.