100G / 400G / 800G Ethernet
High-capacity Ethernet standards for extremely high-speed data transmission across modern network infrastructure.
4G LTE
Fourth-generation mobile technology providing high-speed wireless access to IP networks.
5G
Fifth-generation mobile technology providing higher capacity, lower latency, and faster wireless connectivity.
Access Control
Systems controlling authorized physical access to network facilities, equipment, and restricted areas.
Active Infrastructure
Powered infrastructure that processes, transmits, amplifies, or manages network signals.
Battery Backup
Batteries providing temporary electrical power during utility failures or power interruptions.
Biometric Access Control
Physical access control using fingerprints, facial recognition, iris patterns, or other biometric identifiers.
BMS (Building Management System)
System managing building functions including power, cooling, ventilation, lighting, and security.
Cabinet
Enclosed structure used to house, organize, and protect network or telecommunications equipment.
Cable Burial
Process of installing cables underground to protect them from physical and environmental damage.
Cable Construction
Construction activities required to create physical routes and infrastructure for communication cables.
Cable Installation
Process of placing, pulling, securing, and terminating cables along designated routes.
Cable Landing
Process of bringing a submarine cable ashore and connecting it with terrestrial infrastructure.
Cable Landing Point
Designated coastal location where a submarine cable reaches and enters terrestrial infrastructure.
Cable Landing Station (CLS)
Coastal facility connecting submarine cables with terrestrial telecommunications networks.
Cable Repair
Process of locating, accessing, and restoring damaged or broken communication cables.
Cable Route
Defined physical pathway followed by communication cables between network locations.
Carrier Ethernet
Carrier-grade Ethernet technology for transporting telecommunications services across provider networks.
Carrier Hotel
Neutral facility providing colocation and interconnection for multiple telecommunications carriers.
Carrier POP
Provider location housing network equipment for connecting customers and other networks.
CCTV
Video surveillance system used to monitor physical facilities, equipment, and restricted areas.
Coherent Optical Transmission
High-capacity optical transmission using advanced modulation, coherent detection, and digital signal processing.
Colocation
Facility service providing space, power, cooling, security, and connectivity for customer equipment.
Conduit
Protective pipe or pathway used to contain and protect communication cables.
Consortium
Group of organizations jointly financing, constructing, or operating shared network infrastructure.
Cooling Infrastructure
Systems and equipment designed to remove heat and maintain suitable operating temperatures.
Core Data Center
High-capacity facility supporting centralized computing, storage, networking, and critical digital services.
CRAC
Precision cooling unit controlling temperature and humidity in computer rooms.
CRAC (Computer Room Air Conditioner)
Precision air-conditioning system designed specifically for computer rooms and data centers.
CRAH
Computer-room air-handling unit circulating and cooling air through data center spaces.
CRAH (Computer Room Air Handler)
Air-handling unit using chilled water or other cooling systems to condition computer-room air.
Cross-Connect
Physical connection between network circuits, cables, or equipment within a telecommunications facility.
CWDM
Optical multiplexing technology combining multiple wavelengths over a single fiber using wider channel spacing.
Dark Fiber
Unused optical fiber without active transmission equipment, available for dedicated use.
Data Center
Facility housing servers, storage, networking equipment, power systems, and cooling infrastructure.
Data Center Facility
Physical building and supporting systems providing space, power, cooling, and security.
DCIM (Data Center Infrastructure Management)
Systems for monitoring, managing, and optimizing physical data center infrastructure.
Diesel Generator
Diesel-powered generator providing backup electricity during utility power failures.
Duct
Protected underground or building pathway used to carry communication cables.
DWDM
Optical multiplexing technology carrying many distinct wavelengths over a single fiber.
Earth Station
Ground facility equipped with antennas and electronics for satellite communications.
EDFA
Erbium-doped fiber amplifier boosting optical signals without electrical conversion.
Edge Data Center
Distributed data center located near users to reduce latency and improve service performance.
Environmental Monitoring
Monitoring of temperature, humidity, smoke, water, and other facility conditions.
Ethernet
Standard networking technology for transmitting data across local and wide-area networks.
Ethernet over Fiber
Transmission of Ethernet traffic using optical fiber as the physical transport medium.
Ethernet over Microwave
Transmission of Ethernet traffic using microwave radio links as the transport medium.
Facility Interconnection
Physical network connection between separate facilities, buildings, or telecommunications sites.
Fiber Distribution Frame (FDF)
Frame used to organize, terminate, splice, and manage optical fiber connections.
Fiber Infrastructure
Physical fiber cables, pathways, ducts, frames, and supporting infrastructure enabling optical connectivity.
Fiber Infrastructure Sharing
Shared use of fiber infrastructure by multiple operators to reduce deployment costs.
Fiber Optic Cable
Cable containing optical fibers that transmit information using light signals.
Fiber Optics
Technology transmitting information through optical fibers using light.
Fiber Pair
Two optical fibers typically used together for bidirectional communication.
Fiber Route
Physical path followed by an optical fiber cable between network locations.
Fiber Splicing
Process of permanently or temporarily joining two optical fibers.
Fiber-to-the-Building (FTTB)
Access architecture extending optical fiber to a building before internal distribution.
Fiber-to-the-Home (FTTH)
Access architecture extending optical fiber directly to customer premises.
Free Cooling
Cooling method using favorable outdoor conditions to reduce mechanical cooling requirements.
Generator
Electrical machine producing power for primary, standby, or emergency use.
GEO
Geostationary Earth orbit used by satellites providing wide-area communications coverage.
GPON
Gigabit Passive Optical Network technology providing fiber-based broadband access to multiple users.
HVAC
Heating, ventilation, and air-conditioning systems controlling facility environmental conditions.
Infrastructure Operator
Organization responsible for operating, maintaining, and managing network infrastructure.
Infrastructure Owner
Entity owning physical network infrastructure and associated facilities or assets.
Infrastructure Provider
Organization providing physical infrastructure, capacity, or facilities to network operators.
IP/MPLS
Network technology combining IP routing with label-based MPLS forwarding and traffic engineering.
IRU (Indefeasible Right of Use)
Long-term contractual right to use specified network infrastructure or capacity.
LEO
Low Earth orbit used by satellites providing relatively low-latency communications.
Liquid Cooling
Cooling technology using liquids to efficiently remove heat from high-density equipment.
Lit Fiber
Optical fiber equipped with active transmission equipment and providing operational connectivity.
Long-Haul Fiber
Long-distance fiber network connecting cities, regions, countries, or major network hubs.
Meet-Me Room (MMR)
Facility room where multiple carriers and networks establish physical interconnections.
Meet-Me Room Interconnection
Physical interconnection between carriers, networks, or customers within a meet-me room.
MEO
Medium Earth orbit used by satellites positioned between LEO and GEO.
Metro Fiber
Urban fiber network connecting access sites, data centers, carriers, and metropolitan facilities.
Micro duct
Small-diameter protective duct designed for installing and protecting fiber optic cables.
Microwave Backhaul
Wireless transport carrying traffic from access sites toward aggregation or core networks.
Microwave Link
Wireless communication path using microwave frequencies between network locations.
Microwave Radio
Radio equipment transmitting and receiving signals over microwave communication links.
Millimeter Wave
High-frequency radio technology enabling high-capacity wireless links over relatively short distances.
MPLS
Packet-forwarding technology using labels for traffic engineering, service separation, and quality management.
Multi-Mode Fiber (MMF)
Optical fiber supporting multiple propagation modes, commonly used for shorter-distance communications.
Network Infrastructure
Physical and technical assets required to build, connect, operate, and support networks.
Optical Amplifier
Device directly amplifying optical signals without converting them into electrical signals.
Optical Cross-Connect
Optical switching or connection system managing fiber paths between network elements.
Optical Distribution Frame (ODF)
Frame used to terminate, organize, splice, and manage optical fiber connections.
Optical Fiber
Glass or polymer medium carrying information as pulses of light.
Optical Line Terminal (OLT)
Central PON device connecting the optical access network to upstream networks.
Optical Network Unit (ONU)
Customer-side optical device connecting premises equipment to a PON network.
OTDR
Instrument measuring fiber length, loss, reflections, and fault locations.
OTN
Optical transport technology providing standardized framing, multiplexing, monitoring, and signal transport.
Passive Infrastructure
Non-powered infrastructure such as cables, ducts, towers, racks, buildings, and pathways.
Patch Panel
Panel providing organized termination and cross-connection of network cables.
PDU
Power distribution equipment supplying electrical power to multiple connected devices.
Physical Layer
Network layer responsible for transmitting signals across a physical communication medium.
Physical Security
Measures protecting network facilities, equipment, cables, and infrastructure from physical threats.
Point of Presence (POP)
Network location where provider equipment connects customers, access networks, or other networks.
Point-to-Multipoint Microwave
Wireless architecture connecting one central radio site with multiple remote endpoints.
Point-to-Point Microwave
Dedicated wireless connection between two specific network locations.
Power Distribution Unit (PDU)
Device distributing and managing electrical power among equipment within a rack or facility.
Power Infrastructure
Systems providing electrical generation, distribution, backup, and management for network facilities.
Power over Ethernet (PoE)
Technology delivering electrical power and data simultaneously over Ethernet cabling.
Rack
Standard frame used to mount servers, networking, telecommunications, and power equipment.
Radio Link
Wireless communication path using radio frequencies between network locations.
Raman Amplification
Optical amplification technique using stimulated Raman scattering to extend transmission performance.
Real Estate
Land and property required for network sites, facilities, and infrastructure deployment.
RFID Access Control
Access control using radio-frequency identification cards, tags, or devices.
Right-of-Way (RoW)
Legal permission to use land or corridors for deploying and maintaining infrastructure.
ROADM
Reconfigurable optical device enabling flexible addition, removal, and routing of optical wavelengths.
Satellite Antenna
Antenna used to transmit or receive radio signals from communication satellites.
Satellite Communications
Communication services transmitting information between locations through satellites.
Satellite Earth Station
Ground facility equipped for transmitting and receiving communications through satellites.
Satellite Gateway
Ground-based gateway connecting satellite networks with terrestrial telecommunications networks.
Satellite Ground Station
Ground facility supporting satellite communications, control, telemetry, or data reception.
Satellite Infrastructure
Satellites, ground stations, antennas, gateways, and supporting systems enabling satellite connectivity.
SDH/SONET
Synchronous optical transport standards historically used for carrier-grade telecommunications networks.
Single-Mode Fiber (SMF)
Optical fiber supporting one propagation mode for high-capacity, long-distance transmission.
Site / Tower Site
Physical location hosting telecommunications towers, antennas, radios, power, and supporting infrastructure.
Spectrum
Range of radio frequencies allocated for wireless communications and other radio services.
Splicing
Process of joining two cables or optical fibers mechanically or permanently.
Structured Cabling
Standardized building cabling system designed for organized and scalable network connectivity.
Submarine Cable
Undersea communication cable carrying high-capacity traffic between countries and continents.
Submarine Cable System
Complete undersea network comprising cables, repeaters, landing stations, and terminal equipment.
TDM
Transmission method sharing a communication channel by assigning different time slots to signals.
Teleport
Large satellite communications facility providing earth-station, connectivity, and satellite services.
Terrestrial Fiber
Land-based optical fiber connecting cities, facilities, networks, and telecommunications infrastructure.
UPS
Power system providing continuous electricity during interruptions or fluctuations in primary supply.
UPS (Uninterruptible Power Supply)
System providing uninterrupted backup power and protecting equipment from electrical disturbances.
VSAT
Small satellite communication terminal providing connectivity through geostationary or other satellites.
XGS-PON
Passive optical network technology providing approximately 10 Gbit/s symmetric fiber access.

100G Ethernet
Ethernet technology providing 100 Gbit/s transmission capacity for high-performance network connections.
400G Ethernet
Ethernet technology providing 400 Gbit/s transmission capacity for high-capacity backbone and data center networks.
4G LTE
Fourth-generation mobile technology providing broadband wireless connectivity for users and network infrastructure.
5G
Fifth-generation mobile technology providing high capacity, low latency, and enhanced wireless connectivity.
800G Ethernet
Ultra-high-capacity Ethernet technology providing 800 Gbit/s transmission for modern backbone and data center networks.
Access Network
Network segment connecting end users or customer premises to aggregation or core networks.
Availability
Percentage of time a network service remains operational and accessible.
Backbone Network
High-capacity network forming the primary transport infrastructure between major network locations.
Backhaul Network
Network transporting aggregated traffic from access networks toward aggregation or core networks.
Bandwidth
Maximum data transmission capacity available on a network link or channel.
Carrier Ethernet
Carrier-grade Ethernet technology for delivering scalable connectivity services across telecommunications networks.
Carrier Network
Telecommunications provider network transporting connectivity services between customers, access networks, and core infrastructure.
Coherent Optical Transmission
Optical transmission technology using coherent detection and advanced modulation for high-capacity, long-distance communication.
Core Network
Central network layer providing high-capacity routing and connectivity between major network segments.
CWDM
Optical multiplexing technology combining multiple wavelengths over a single fiber with wide channel spacing.
Dedicated Internet Access (DIA)
Dedicated Internet connectivity providing guaranteed bandwidth and direct customer access without shared access capacity.
DOCSIS
Cable broadband technology enabling high-speed Internet access over hybrid fiber-coaxial networks.
DSL
Broadband access technology transmitting digital data over traditional copper telephone lines.
DWDM
Optical multiplexing technology carrying many wavelengths simultaneously over a single fiber.
EDFA
Optical amplifier using erbium-doped fiber to boost optical signals over long distances.
EPON
Ethernet-based passive optical network technology providing broadband access over optical fiber.
Ethernet
Standard networking technology for transmitting data across local, metropolitan, and wide-area networks.
Ethernet Access
Customer access service delivering Ethernet connectivity between premises and provider networks.
EVPN
BGP-based technology providing scalable Layer 2 and Layer 3 VPN services across IP/MPLS networks.
Fiber Optic Network
Network using optical fiber to transmit data over high-capacity, long-distance communication paths.
Fiber Optics
Transmission technology using light through optical fibers to carry digital information.
First Mile
Network segment connecting customers or access locations to the provider's aggregation infrastructure.
Fixed Wireless Access (FWA)
Wireless technology providing fixed-location broadband connectivity without requiring physical access cables.
Fronthaul Network
Transport network connecting radio units with centralized or distributed baseband processing systems.
FTTB
Fiber access architecture extending optical connectivity to a building before internal distribution.
FTTH
Fiber access architecture extending optical connectivity directly to customer premises.
GEO Satellite
Satellite operating in geostationary orbit, providing wide-area communications coverage from a fixed position.
GPON
Gigabit passive optical network technology providing shared fiber broadband access to multiple customers.
Internet Transit
Service providing connectivity to the broader Internet through another network's upstream connectivity.
IP/MPLS
Network architecture combining IP routing with MPLS forwarding for scalable traffic engineering and services.
Jitter
Variation in packet arrival times that can affect real-time applications and network performance.
Last Mile
Network segment connecting the provider's network directly to the end customer.
Latency
Time required for data to travel between two network endpoints.
Leased Line
Dedicated telecommunications circuit providing private, predictable connectivity between specified locations.
LEO Satellite
Low Earth orbit satellite providing relatively low-latency connectivity compared with higher-orbit satellites.
Long-Haul Network
Long-distance transport network connecting cities, regions, countries, or major network hubs.
Long-Haul Transport
High-capacity transmission service designed for transporting traffic across long geographical distances.
MEO Satellite
Medium Earth orbit satellite positioned between low Earth and geostationary orbits.
Metro Network
Network connecting sites and facilities across a metropolitan or urban geographic area.
Metropolitan Area Network (MAN)
Network spanning a city or metropolitan region and connecting multiple sites or local networks.
Microwave Backhaul
Wireless transport carrying aggregated access traffic toward regional or core network infrastructure.
Microwave Network
Network using microwave radio links to provide wireless transport between geographically separated locations.
Middle Mile
Intermediate network segment connecting access networks with aggregation, regional, or core networks.
Midhaul Network
Transport network connecting distributed radio units with centralized baseband processing locations.
Millimeter Wave
High-frequency wireless technology enabling very high-capacity connections over relatively short distances.
Mobile Backhaul
Transport network carrying mobile access traffic from cellular sites toward the core network.
MPLS
Label-based packet forwarding technology supporting traffic engineering, VPNs, and differentiated network services.
Network Capacity
Maximum traffic volume a network or link can reliably carry.
Network Interconnection
Physical or logical connection enabling traffic exchange between separate networks.
Network Link
Communication path connecting two network nodes or endpoints.
Network Resilience
Network's ability to maintain service despite failures, disruptions, or infrastructure damage.
Network Route
Path selected through a network for transporting traffic between source and destination.
Network Segment
Distinct portion of a network separated by technology, geography, function, or boundaries.
Optical Amplifier
Device amplifying optical signals directly without converting them into electrical signals.
Optical Transport Network
High-capacity optical infrastructure transporting aggregated digital traffic across long-distance networks.
OTN
Standardized optical transport technology providing framing, multiplexing, monitoring, and efficient signal transport.
Path Diversity
Use of physically or logically separate paths to reduce common failure risks.
Point-to-Multipoint
Network architecture connecting one central node with multiple distributed endpoints.
Point-to-Multipoint Microwave
Microwave architecture connecting one central radio site with multiple remote locations.
Point-to-Point Link
Dedicated communication connection between two specific network endpoints.
Point-to-Point Microwave
Dedicated microwave radio connection between two geographically separated network locations.
Protection Switching
Automatic traffic switching to a backup path after detecting a network failure.
QinQ
Ethernet VLAN stacking technology allowing multiple VLAN tags within Ethernet frames.
Raman Amplification
Optical amplification technique using stimulated Raman scattering to extend transmission reach.
Redundancy
Duplication of network resources or paths to maintain service during failures.
Regional Network
Network connecting cities, metropolitan areas, and major sites within a geographic region.
Regional Transport
Medium-distance network transport connecting metropolitan and long-haul network segments.
ROADM
Reconfigurable optical device enabling flexible adding, dropping, and routing of optical wavelengths.
Satellite Communications
Communication services transmitting data between locations through satellite-based links.
Satellite Earth Station
Ground facility transmitting and receiving communication signals through satellites.
Satellite Gateway
Ground-based facility connecting satellite networks with terrestrial telecommunications networks.
Satellite Network
Network infrastructure using satellites, ground stations, and gateways for communication services.
SDH / SONET
Synchronous optical transport standards historically used for carrier-grade telecommunications transmission.
SD-WAN
Software-defined networking technology centrally managing connectivity across multiple WAN transport services.
Segment Routing
Source-routing technology encoding the desired packet path using a sequence of network segments.
Service Level Agreement (SLA)
Contract defining measurable service performance, availability, and operational commitments between provider and customer.
Single-Mode Fiber (SMF)
Optical fiber supporting one propagation mode for high-capacity, long-distance transmission.
SR-MPLS
Segment Routing implementation using MPLS labels to encode paths through an IP network.
SRv6
Segment Routing implementation using IPv6 addresses to encode network paths and services.
Terrestrial Fiber Network
Land-based optical network connecting cities, facilities, operators, and other terrestrial infrastructure.
Transmission Network
Network transporting aggregated signals between geographically separated network locations.
Transport Network
Network providing high-capacity connectivity between access, aggregation, regional, and core networks.
VLAN
Logical Layer 2 network segmentation using IEEE 802.1Q VLAN identifiers.
VPLS
Layer 2 VPN technology extending Ethernet connectivity across an MPLS provider network.
VSAT
Small satellite terminal providing broadband or dedicated connectivity through satellite networks.
Wi-Fi
Wireless LAN technology providing local network and Internet connectivity using radio frequencies.
XGS-PON
Symmetric passive optical network technology providing approximately 10 Gbit/s access capacity.

100G Ethernet
Ethernet technology providing 100 Gbit/s capacity for high-performance IP network connections.
400G Ethernet
Ethernet technology providing 400 Gbit/s capacity for high-capacity backbone and data center networks.
800G Ethernet
Ultra-high-capacity Ethernet technology providing 800 Gbit/s transmission for modern IP infrastructure.
Anycast
Addressing method allowing multiple geographically distributed nodes to share the same IP address.
Anycast Routing
Routing technique directing traffic toward the nearest or best available instance of an anycast service.
Authoritative DNS
DNS service providing definitive records for domains within its administrative authority.
Autonomous System (AS)
Network or group of networks operated under a common routing policy.
Autonomous System Number (ASN)
Unique numerical identifier assigned to an autonomous system for Internet routing
.Autonomous System Path (AS Path)
BGP attribute listing autonomous systems traversed by a route advertisement.
BGP
Interdomain routing protocol exchanging reachability information between autonomous systems.
BGP Communities
Optional BGP attributes used to classify routes and apply routing policies.
BGP Confederation
BGP technique dividing a large autonomous system into smaller internal sub-autonomous systems.
BGP Large Communities
Extended BGP attributes supporting larger community values for scalable routing policies.
BGP Monitoring
Monitoring BGP sessions, routes, announcements, withdrawals, and routing behavior.
BGP Prefix
IP address block advertised or received through the Border Gateway Protocol.
BGP Route Collector
System collecting BGP routing information from multiple networks for analysis and visibility.
BGP Route Reflector
BGP device redistributing routes between internal peers to reduce full-mesh requirements.
BGP Route Server
Centralized BGP service distributing routes between participating networks without becoming part of their paths.
BGP Routing
Exchange and selection of network reachability information using BGP policies and attributes.
BGP Routing Table
Collection of BGP-learned routes and associated attributes used for route selection.
BGP Session
Established BGP communication relationship between two BGP-speaking routers.
BGP-4
Fourth major version of BGP supporting CIDR and interdomain IPv4 routing.
Bilateral Peering
Direct peering relationship established between two autonomous systems.
BMP (BGP Monitoring Protocol)
Protocol providing detailed monitoring information about BGP routes and peer states.
Border Gateway Protocol (BGP)
Primary interdomain routing protocol used to exchange reachability information between autonomous systems.
Cache Server
Server storing frequently requested content locally to reduce latency and upstream traffic.
Carrier Ethernet
Carrier-grade Ethernet technology delivering scalable connectivity services across provider networks.
Carrier-Grade NAT (CGNAT)
Large-scale NAT deployed by providers to share public IPv4 addresses among many customers.
CDN Caching
Caching content at distributed CDN locations closer to users for faster delivery.
CGNAT
Provider-level network address translation allowing many customers to share limited public IPv4 addresses.
Cloud Network
Virtualized network infrastructure connecting cloud resources, services, users, and external networks.
Community Network
Network infrastructure collectively established or operated by a local community or organization.
Content Delivery Network (CDN)
Distributed network delivering content from geographically closer edge locations to improve performance.
Content Filtering
Network-based control that identifies and permits or blocks specific content.
Content Network
Network infrastructure optimized for distributing digital content toward end users.
Content Provider
Organization supplying digital content or services accessed through Internet networks.
DDoS Protection
Security service detecting, absorbing, and mitigating distributed denial-of-service attacks.
Deep Packet Inspection (DPI)
Technology examining packet contents and metadata to identify applications, protocols, or traffic patterns.
DNS
Hierarchical system translating domain names into IP addresses and other resource information.
DNS Anycast
Anycast architecture distributing DNS services across multiple geographically separated servers.
DNS Caching
Temporary storage of DNS responses to reduce lookup latency and DNS traffic.
DNS Filtering
DNS-based mechanism blocking or redirecting resolution requests for selected domains.
Domain Filtering
Network control allowing or blocking access based on domain names.
Dual-Stack
Network architecture operating IPv4 and IPv6 simultaneously on the same infrastructure.
Edge Caching
Storing frequently accessed content at network edges closer to end users.
Edge Computing
Processing data near users or devices instead of relying solely on centralized cloud infrastructure.
Edge Network
Distributed network infrastructure positioned close to users, devices, and content consumers.
Edge Server
Server deployed near users to provide low-latency computing, caching, or content delivery.
Enterprise Network
Private network connecting an organization's users, sites, applications, and services.
Ethernet
Standard Layer 2 networking technology used to connect devices across IP networks.
EVPN
BGP-based control-plane technology providing scalable Layer 2 and Layer 3 VPN services.
Global Server Load Balancing (GSLB)
Technology distributing client requests among geographically distributed servers or data centers.
HTTP Proxy
Intermediate server forwarding HTTP requests between clients and destination servers.
HTTP/2
HTTP version providing multiplexed streams, header compression, and improved web transport efficiency.
HTTP/3
HTTP version using QUIC over UDP to provide faster and more resilient web transport.
HTTP/HTTPS
Application protocols used for transferring web content, with HTTPS adding TLS-based security.
Internet Backbone
High-capacity interconnected networks forming major long-distance paths across the global Internet.
Internet Censorship
Government or organizational control restricting access to selected Internet content or services.
Internet Exchange Point (IXP)
Facility where independent networks interconnect directly to exchange Internet traffic.
Internet Filtering
Network mechanisms identifying and blocking or allowing selected Internet traffic or resources.
Internet Service Provider (ISP)
Organization providing Internet connectivity and related network services to customers.
Internet Transit
Service providing connectivity to destinations beyond a network's directly connected peers.
IP Address
Numerical identifier assigned to a network interface for IP communication.
IP Blocking
Blocking network traffic associated with specified IP addresses or address ranges.
IP Core Network
Central IP infrastructure providing high-capacity routing between major network segments.
IP Filtering
Network control allowing or blocking traffic according to IP addresses or protocols.
IP Network
Interconnected network infrastructure communicating using Internet Protocol.
IP Prefix
Contiguous range of IP addresses represented using CIDR notation.
IP Transit
Commercial service providing access to broader Internet destinations through an upstream network.
IP/MPLS
Network architecture combining IP routing with MPLS forwarding for scalable services and traffic engineering.
IPFIX
Standard protocol for exporting detailed IP flow information from network devices.
IPv4
Fourth version of the Internet Protocol using 32-bit network addresses.
IPv6
Sixth version of the Internet Protocol using 128-bit network addresses.
IRR (Internet Routing Registry)
Distributed databases containing routing policy and network registration information.
Lawful Interception
Authorized capability allowing designated authorities to obtain network communications under applicable legal procedures.
Load Balancing
Distribution of network or application traffic across multiple servers, links, or resources.
Looking Glass
Public service allowing users to view routing information from a network's perspective.
Mobile Core Network
Central mobile network infrastructure providing routing, authentication, mobility, and service connectivity.
MP-BGP
BGP extension supporting multiple address families, including IPv6 and VPN routing.
MPLS
Label-based forwarding technology supporting traffic engineering, VPNs, and differentiated services.
MRT (Multi-Threaded Routing Toolkit)
Toolkit and data format commonly used for storing and analyzing Internet routing information.
Multilateral Peering
Peering arrangement allowing multiple networks to exchange traffic through a shared peering platform.
NAT
Technology translating IP addresses between different address spaces.
National Internet
Internet infrastructure and services primarily operated, regulated, or interconnected within a country.
NetFlow
Flow-monitoring technology providing summarized information about network traffic and conversations.
Network Address Space
Defined range of IP addresses allocated for networks, services, or organizational use.
Network Address Translation (NAT)
Technology translating private or public IP addresses between network address domains.
Network Interconnection
Physical or logical connection enabling traffic exchange between separate networks.
Network Reachability
Ability of one network or prefix to be reached through available routing paths.
Network Topology
Structural arrangement describing how network nodes and links are interconnected.
Network-Level Blocking
Blocking communication at the network layer using addresses, routes, protocols, or filtering policies.
Origin Server
Server hosting the original content delivered through a CDN or proxy.
Paid Peering
Peering arrangement where one network pays another for direct traffic exchange.
Peering
Direct traffic exchange between networks without using an intermediate transit provider.
Private Peering
Direct interconnection between networks through a dedicated physical or logical connection.
Public Peering
Network interconnection through a shared Internet Exchange Point fabric.
QinQ
VLAN stacking technology allowing one VLAN tag to encapsulate another VLAN tag.
QoS
Techniques prioritizing and managing traffic to provide defined performance characteristics.
QUIC
Secure transport protocol built over UDP, providing multiplexing, encryption, and reduced connection latency.
RADB
Internet Routing Registry database containing routing policies and related network information.
Recursive DNS
DNS service resolving client queries by querying authoritative DNS servers when necessary.
ROA (Route Origin Authorization)
RPKI object specifying which autonomous system is authorized to originate an IP prefix.
Route Advertisement
Announcement of network reachability information to neighboring routing systems.
Route Filtering
Applying policies to accept, reject, or modify selected routing advertisements.
Route Monitoring
Continuous observation of routing announcements, withdrawals, paths, and reachability changes.
Route Policy
Rules controlling route acceptance, advertisement, modification, and selection.
Route Propagation
Process by which routing information spreads between interconnected autonomous systems.
Route Server
BGP-based system distributing routes among participating networks without forwarding their traffic.
Routing Domain
Set of networks or routers operating under a common routing administration or policy.
RPKI
Public-key infrastructure validating authorization for autonomous systems to originate specific IP prefixes.
Segment Routing
Source-routing technology encoding desired packet paths using an ordered sequence of network segments.
Settlement-Free Peering
Direct traffic exchange between networks without payments for exchanged traffic.
sFlow
Packet-sampling technology providing scalable statistical monitoring of network traffic.
SNI Filtering
Traffic filtering based on the Server Name Indication field in TLS handshakes.
SNMP
Network management protocol used to monitor and manage network devices and interfaces.
SR-MPLS
Segment Routing implementation using MPLS labels to encode packet forwarding paths.
SRv6
Segment Routing implementation using IPv6 addresses to encode paths and network services.
TCP/IP
Core Internet protocol suite providing addressing, routing, transport, and application communication.
Tier 1 ISP
ISP with global reachability and settlement-free peering, requiring no paid Internet transit.
Tier 2 ISP
ISP combining customer services, peering, and purchased transit for broader Internet reachability.
Tier 3 ISP
Access-focused ISP primarily serving end users while purchasing upstream connectivity.
TLS
Cryptographic protocol providing encryption, authentication, and integrity for network communications.
TLS Inspection
Security technique decrypting and analyzing TLS traffic before re-encrypting it toward destinations.
Traffic Classification
Process of identifying network traffic according to applications, protocols, addresses, or other characteristics.
Traffic Engineering
Techniques optimizing traffic paths and resource utilization across a network.
Traffic Filtering
Network control allowing, blocking, or modifying traffic according to defined policies.
Traffic Inspection
Analysis of network traffic to identify applications, threats, protocols, or policy violations.
Transit Provider
Network provider offering connectivity to broader Internet destinations through its network.
Transparent Proxy
Proxy that intercepts traffic without requiring explicit client proxy configuration.
URL Filtering
Security or policy mechanism allowing or blocking access based on requested URLs.
VLAN
Logical Layer 2 segmentation method separating Ethernet traffic into virtual networks.
VXLAN
Network virtualization technology encapsulating Layer 2 traffic over Layer 3 IP networks.
Web Application Firewall (WAF)
Security system protecting web applications by filtering and inspecting HTTP and HTTPS requests.

A Record
DNS record mapping a domain name to an IPv4 address.
AAAA Record
DNS record mapping a domain name to an IPv6 address.
Anycast
Addressing technique using the same IP address across multiple geographically distributed nodes.
Authoritative DNS
DNS service providing definitive answers for domains within its managed zones.
Autonomous System (AS)
Network or collection of networks operating under one routing administration and policy.
Autonomous System Number (ASN)
Unique identifier assigned to an autonomous system for Internet routing.
AXFR
DNS protocol operation transferring an entire zone from primary to secondary server.
BGP
Interdomain routing protocol exchanging reachability information between autonomous systems.
BGP Anycast
Anycast addressing implemented through BGP advertisements from multiple geographically distributed locations.
CNAME Record
DNS record defining an alias that points to another domain name.
Country-Code Top-Level Domain (ccTLD)
Two-letter top-level domain assigned to a country or territory.
DNS
Hierarchical naming system translating domain names into IP addresses and other resource information.
DNS Anycast
Anycast architecture allowing multiple DNS servers worldwide to provide the same service address.
DNS Caching
Temporary storage of DNS responses to reduce lookup time and query traffic.
DNS Cookies
EDNS-based mechanism helping protect DNS servers against certain spoofing and denial-of-service attacks.
DNS Delegation
Process assigning authoritative responsibility for a domain or subdomain to specific nameservers.
DNS Filtering
Blocking or modifying DNS queries based on domains, policies, or security classifications.
DNS Firewall
DNS-based security system blocking malicious, unwanted, or policy-violating domain queries.
DNS Forwarding
Sending DNS queries to another resolver instead of resolving them locally.
DNS Load Balancing
Distributing DNS responses among multiple servers or service endpoints.
DNS Monitoring
Continuous observation of DNS availability, performance, records, and resolution behavior.
DNS Namespace
Hierarchical naming structure containing domains, subdomains, and DNS labels.
DNS over HTTPS
DNS transport method encapsulating DNS queries and responses within HTTPS connections.
DNS over QUIC
DNS transport method carrying DNS queries over the encrypted QUIC protocol.
DNS over TCP
DNS transport method using TCP, commonly required for larger responses and zone transfers.
DNS over TLS
DNS transport method encrypting DNS queries and responses using TLS.
DNS over UDP
Traditional DNS transport method using UDP for efficient query and response exchange.
DNS Propagation
Informal term describing the distribution of DNS record changes across caches and resolvers.
DNS Query
Request asking a DNS resolver or server for information about a domain name.
DNS Record
Structured DNS data associating a domain name with specific information or services.
DNS Recursion
Process where a resolver obtains complete DNS answers on behalf of clients.
DNS Resolution
Process translating domain names into IP addresses or other DNS information.
DNS Resource Record
Standard DNS data structure containing a name, type, value, and associated metadata.
DNS Response
Message containing an answer, authority information, or error resulting from a DNS query.
DNS Root
Top of the DNS hierarchy from which all top-level domains descend.
DNS Traffic Management
Techniques controlling DNS responses to optimize routing, availability, performance, or geographic distribution.
DNS Zone
Administrative portion of the DNS namespace managed by authoritative nameservers.
DNS Zone File
Text-based representation containing DNS records defining a zone's authoritative information.
DNSKEY Record
DNSSEC record containing a public key used for validating digitally signed DNS data.
DNSSEC
Security extensions adding cryptographic authentication and integrity protection to DNS data.
DNSSEC Key
Cryptographic key used to sign or validate DNSSEC-protected information.
DNSSEC Signing
Process digitally signing DNS records to provide DNSSEC authentication and integrity.
DNSSEC Validation
Process verifying DNSSEC signatures and establishing authenticity of DNS responses.
DoH (DNS over HTTPS)
Encrypted DNS transport carrying queries and responses through HTTPS.
Domain Delegation
Assignment of authoritative DNS responsibility for a domain or subdomain to nameservers.
Domain Name
Human-readable hierarchical identifier representing an Internet resource or service.
Domain Name Lifecycle
Sequence of states a domain passes through from registration to expiration or deletion.
Domain Name Registrar
Accredited organization providing domain registration and management services to registrants.
Domain Name System (DNS)
Global hierarchical system translating domain names into IP addresses and other Internet resources.
Domain Registration
Process of obtaining and maintaining rights to use a domain name.
Domain Registry
Central database and administrative system maintaining registrations for a top-level domain.
Domain Transfer
Process moving domain management from one registrar to another.
DoQ (DNS over QUIC)
Encrypted DNS transport using QUIC for secure, low-latency query exchange.
DoT (DNS over TLS)
Encrypted DNS transport using TLS to protect DNS queries and responses.
DS Record
DNSSEC record linking a delegated zone to its parent's cryptographic trust chain.
Dynamic DNS (DDNS)
Service automatically updating DNS records when associated IP addresses change.
EDNS
DNS extension mechanism enabling larger messages and additional query or response information.
EDNS Client Subnet (ECS)
EDNS extension allowing resolvers to send partial client network information to authoritative servers.
Enterprise DNS
DNS infrastructure operated to support an organization's internal and external naming requirements.
EPP
Standard protocol used by registrars and registries to provision and manage domain names.
Extensible Provisioning Protocol (EPP)
XML-based protocol for automated registration and management of domain names and number resources.
Generic Top-Level Domain (gTLD)
Top-level domain category including domains such as .com, .org, and .net.
GeoDNS
DNS technique returning different answers based on the geographic location of requesting clients.
Hidden Primary DNS
Primary DNS server not publicly listed in NS records, typically protected behind secondary servers.
IANA Protocol Registries
Registries maintained by IANA containing standardized Internet protocol parameters and identifiers.
Internet Assigned Numbers Authority (IANA)
Organization coordinating global DNS root, IP address, and protocol parameter assignments.
Internet Corporation for Assigned Names and Numbers (ICANN)
Organization coordinating global Internet identifiers, including domain names and IP addressing policies.
Internet Number Registry
Registry system maintaining records of allocated Internet number resources.
Internet Number Resource
Internet identifier resource including IP address blocks and autonomous system numbers.
Internet Numbering
System for allocating and managing IP addresses and autonomous system numbers globally.
Internet Routing Registry (IRR)
Distributed databases storing routing policies and network registration information.
IP Address
Numerical identifier assigned to a network interface for Internet Protocol communication.
IP Address Allocation
Process distributing blocks of IP addresses from registries to organizations or networks.
IP Address Assignment
Process assigning specific IP addresses to interfaces, devices, networks, or customers.
IP Address Delegation
Process transferring administrative responsibility for an IP address block to another organization.
IPv4
Internet Protocol version using 32-bit addresses and supporting approximately 4.3 billion address values.
IPv4 Address
32-bit numerical identifier used to identify an interface or network in IPv4.
IPv6
Internet Protocol version using 128-bit addresses to provide vastly expanded address space.
IPv6 Address
128-bit numerical identifier used to identify an interface or network in IPv6.
ISP DNS
DNS resolver or authoritative service operated by an Internet Service Provider.
IXFR
DNS protocol operation transferring only changed zone records between DNS servers.
Local Internet Registry (LIR)
Organization receiving Internet number resources from an RIR for assignment to customers.
MX Record
DNS record specifying mail servers responsible for receiving email for a domain.
National Internet Registry (NIR)
Registry managing Internet number resources within a specific country or territory.
NOTIFY
DNS mechanism informing secondary servers that a zone may have changed.
NS Record
DNS record identifying authoritative nameservers responsible for a DNS zone.
NSEC
DNSSEC record providing authenticated proof that specific DNS names or types do not exist.
NSEC3
DNSSEC mechanism providing authenticated nonexistence proofs using hashed DNS names.
PTR Record
DNS record mapping an IP address to a domain name for reverse DNS.
Public DNS
DNS service publicly accessible to Internet users and applications.
RDAP
Standard protocol providing structured registration data for Internet number and domain resources.
Recursive DNS
DNS service that resolves client queries by querying other DNS servers as needed.
Recursive Resolver
DNS server receiving client queries and performing recursive resolution to obtain answers.
Regional Internet Registry (RIR)
Organization managing Internet number resources within a specific geographic region.
Registration Data
Information associated with registered domain names or Internet number resources.
Registry-Registrar Model
Domain management model separating central registry operations from customer-facing registrar services.
Root Server
DNS server providing referrals to authoritative servers for top-level domains.
Root Server Architecture
Distributed system of DNS root-server instances providing global access to root-zone information.
Root Server System
Globally distributed infrastructure serving authoritative DNS information for the root zone.
Root Zone
Top-level DNS zone containing delegations to all recognized top-level domains.
Root Zone File
File containing DNS delegations and related records for top-level domains.
Root Zone Management
Administrative process controlling changes to the DNS root zone.
Root Zone Operator
Organization responsible for operating and maintaining DNS root-zone service infrastructure.
Route Origin Authorization (ROA)
RPKI object authorizing an autonomous system to originate a specified IP prefix.
RPKI
Cryptographic infrastructure validating authorization for autonomous systems to originate IP prefixes.
RRSIG Record
DNSSEC record containing a digital signature covering DNS resource records.
Secondary DNS
Authoritative DNS service obtaining zone data from a primary server.
SIG(0)
DNS mechanism using digital signatures to authenticate specific DNS messages and transactions.
SOA Record
DNS record defining authoritative zone information, including serial number and timing parameters.
Split-Horizon DNS
DNS configuration providing different answers depending on the requesting network or client.
TLD Registry
Registry maintaining authoritative registration data for a top-level domain.
TLD Registry Operator
Organization operating the registry and technical infrastructure for a top-level domain.
Top-Level Domain (TLD)
Highest domain level beneath the DNS root, such as .com, .org, or .uk.
TSIG
Shared-secret mechanism authenticating DNS transactions between trusted DNS servers.
TXT Record
DNS record containing arbitrary text, commonly used for verification, email policies, and security information.
WHOIS
Traditional query service providing registration information for domain names and Internet number resources.
Zone Transfer
Process copying DNS zone information between authoritative DNS servers.

AI Infrastructure
Computing infrastructure optimized for training, deploying, and operating artificial intelligence workloads.
Ansible
Automation platform for configuring, deploying, and managing servers, applications, and infrastructure.
API
Interface enabling software applications to communicate and exchange data or functionality.
API Gateway
Service managing, routing, securing, and monitoring API requests between clients and backend services.
Auto Scaling
Automatic adjustment of computing resources according to workload demand.
Availability Zone
Isolated data center location within a cloud region, designed to limit failure impact.
AWS Lambda
Serverless computing service executing code in response to events without managing servers.
Backup
Copy of data retained for restoration after deletion, corruption, or system failure.
Backup Replication
Copying backup data to another location for improved durability and disaster recovery.
Bare Metal Server
Physical server dedicated to one customer without virtualization overhead.
BGP
Interdomain routing protocol exchanging reachability information between autonomous systems.
Block Storage
Storage providing persistent fixed-size volumes directly attached to virtual or physical compute resources.
Business Continuity
Strategies and capabilities maintaining critical business operations during disruptions.
Cassandra
Distributed NoSQL database designed for high availability, scalability, and fault tolerance.
Ceph
Distributed storage platform providing scalable object, block, and file storage.
CI/CD
Automated practices continuously integrating, testing, and deploying software changes.
Cloud Computing
On-demand delivery of computing, storage, networking, and software resources over networks.
Cloud Connectivity
Network connectivity linking cloud environments with users, enterprises, and other networks.
Cloud Exchange
Interconnection platform enabling private connectivity among cloud providers and network participants.
Cloud Infrastructure
Computing, storage, networking, and facility resources supporting cloud services.
Cloud Interconnect
Dedicated network connection between customer infrastructure and cloud provider infrastructure.
Cloud Management Platform
Software platform for managing, monitoring, automating, and governing cloud resources.
Cloud Orchestration
Automated coordination of multiple cloud resources, services, and workflows.
Cloud Region
Geographic cloud deployment containing multiple isolated availability zones.
Cloud Router
Virtual routing service connecting cloud networks and external network environments.
Cloud Service
Computing capability delivered remotely through cloud infrastructure.
Cloud-init
Initialization technology configuring virtual machines during their first boot.
Cloud-Native
Approach designing applications specifically for scalable, resilient, cloud-based environments.
Cloud-Native Architecture
Architecture using containers, microservices, automation, and distributed cloud infrastructure.
Cluster Infrastructure
Shared infrastructure supporting multiple coordinated computing nodes operating as a cluster.
CNI (Container Network Interface)
Standard interface connecting containers to networking infrastructure.
Compute Infrastructure
Physical and virtual resources providing processing capacity for applications and services.
Compute Resource
Allocated processing capacity such as CPU, memory, or GPU resources.
Container
Lightweight isolated environment packaging an application and its dependencies.
Container Network
Networking infrastructure connecting containers with each other and external systems.
Container Orchestration
Automated deployment, scaling, networking, and lifecycle management of containers.
Container Runtime
Software responsible for creating, running, and managing containers.
Containerd
Industry-standard container runtime managing container lifecycle and image operations.
Containers
Portable isolated application environments sharing the host operating system kernel.
Continuous Data Protection (CDP)
Backup approach continuously capturing data changes for granular recovery.
CPU
Central processing unit executing instructions and general-purpose computing workloads.
CRI-O
Lightweight container runtime implementing Kubernetes Container Runtime Interface requirements.
Data Center
Facility housing computing, storage, networking, power, and cooling infrastructure.
Data Replication
Process copying data across systems or locations for availability and resilience.
Database as a Service (DBaaS)
Managed cloud service providing databases without requiring customers to operate underlying infrastructure.
Database Cluster
Group of interconnected database nodes working together as a coordinated system.
Database Clustering
Technique distributing database workloads across multiple coordinated nodes.
Database Replication
Process synchronizing database data across multiple servers or locations.
Dedicated Server
Physical server exclusively allocated to a single customer or workload.
Direct Cloud Connection
Dedicated network connectivity between customer infrastructure and cloud services.
Direct Connect
Dedicated private connectivity service connecting customer networks directly to cloud infrastructure.
Disaster Recovery (DR)
Processes and infrastructure for restoring services after major disruptions or failures.
Disaster Recovery as a Service (DRaaS)
Cloud-based service providing infrastructure and capabilities for disaster recovery.
Disaster Recovery Orchestration
Automated coordination of recovery procedures across infrastructure and applications.
Distributed Storage
Storage system distributing data across multiple interconnected nodes.
Docker
Platform for building, packaging, deploying, and running containerized applications.
Edge Computing
Processing workloads closer to users or devices to reduce latency and network traffic.
Elasticity
Ability to automatically increase or decrease resources according to workload demand.
Envoy
High-performance programmable proxy commonly used in microservices and service meshes.
EVPN
BGP-based technology providing scalable Layer 2 and Layer 3 network virtualization.
ExpressRoute
Microsoft Azure service providing private connectivity between customer networks and Azure.
Fault Tolerance
Ability of systems to continue operating despite component failures.
Fibre Channel
High-speed networking technology primarily used for connecting servers to storage systems.
File Storage
Storage system providing files through hierarchical directories and shared file protocols.
Function as a Service (FaaS)
Cloud model executing individual functions without requiring server management.
Functions
Small executable units designed to perform specific tasks within application or serverless environments.
GitOps
Operational approach managing infrastructure and deployments through Git-based workflows and automation.
GlusterFS
Distributed file system providing scalable storage across multiple servers.
GPU
Processor optimized for highly parallel workloads such as graphics and artificial intelligence.
GPU Cluster
Group of interconnected GPU-equipped servers providing distributed accelerated computing.
GPU Passthrough
Technique directly assigning a physical GPU to a virtual machine.
GPU Virtualization
Technology allowing multiple virtual machines or workloads to share GPU resources.
Grafana
Open-source platform for visualizing and analyzing metrics, logs, and observability data.
HCI
Hyper-converged infrastructure integrating compute, storage, networking, and virtualization.
Helm
Kubernetes package manager simplifying application deployment and lifecycle management.
High Availability (HA)
Architecture designed to minimize service downtime through redundancy and failure recovery.
Hybrid Cloud
Cloud architecture combining private infrastructure with public cloud resources.
Hyper-Converged Infrastructure (HCI)
Infrastructure integrating compute, storage, networking, and virtualization into software-defined systems.
Hypervisor
Software layer creating and managing virtual machines on physical hardware.
InfiniBand
High-performance networking technology providing low-latency, high-bandwidth interconnects for computing systems.
Infrastructure as a Service (IaaS)
Cloud model providing virtualized compute, storage, and networking resources on demand.
Infrastructure as Code (IaC)
Practice defining and managing infrastructure using machine-readable configuration files.
Infrastructure Automation
Automated provisioning, configuration, scaling, and management of infrastructure resources.
IPsec
Network-layer security protocol suite providing encryption, authentication, and integrity for IP traffic.
iSCSI
Protocol transporting SCSI storage commands over IP networks.
Istio
Service mesh platform providing traffic management, security, and observability for microservices.
Knative
Kubernetes-based platform supporting serverless workloads and event-driven applications.
Kubernetes
Open-source platform automating deployment, scaling, and management of containerized applications.
Kubernetes Cluster
Group of Kubernetes nodes collectively running and managing containerized workloads.
Kubernetes Networking
Networking mechanisms connecting Kubernetes pods, services, nodes, and external networks.
KVM
Linux-based hypervisor technology providing hardware-assisted virtual machine virtualization.
Load Balancing
Distribution of workloads across multiple servers or resources to improve performance and availability.
Managed Database
Database service where the provider manages infrastructure, maintenance, backups, and operations.
Managed Hosting
Hosting service where infrastructure operations, maintenance, monitoring, and support are provider-managed.
Managed Service
Service operated and maintained by a provider on behalf of customers.
MariaDB
Open-source relational database management system compatible with MySQL.
Microservices
Application architecture dividing functionality into independently deployable services.
Microsoft Hyper-V
Microsoft virtualization platform for creating and managing virtual machines.
MicroVM
Lightweight virtual machine optimized for fast startup and strong workload isolation.
MongoDB
Document-oriented NoSQL database designed for flexible schemas and horizontal scalability.
MPLS
Label-based networking technology supporting traffic engineering and virtual private networks.
Multi-Cloud
Architecture using cloud services from multiple independent cloud providers.
Multi-Tenancy
Architecture allowing multiple customers to share infrastructure while maintaining logical isolation.
MySQL
Widely used open-source relational database management system.
Network Virtualization
Abstracting physical networking resources into programmable logical network environments.
NFS
Network protocol allowing systems to access remote files as locally mounted storage.
NoSQL
Database category designed for flexible data models and scalable distributed workloads.
Nutanix
Enterprise infrastructure platform providing hyper-converged computing, storage, and virtualization capabilities.
NVIDIA CUDA
Parallel computing platform enabling applications to use NVIDIA GPUs for accelerated processing.
NVIDIA GPU
Graphics processor technology widely used for accelerated computing and artificial intelligence workloads.
NVIDIA NVLink
High-speed interconnect technology linking NVIDIA GPUs and computing processors.
NVMe
High-performance storage protocol designed for solid-state drives using PCI Express.
NVMe-oF
Technology transporting NVMe storage commands across network fabrics.
Object Storage
Storage architecture managing data as objects with metadata and unique identifiers.
Observability
Capability to understand system behavior using metrics, logs, traces, and events.
OpenFaaS
Open-source platform for deploying and running serverless functions.
OpenShift
Red Hat Kubernetes platform providing enterprise container management and application services.
OpenStack
Open-source platform for building and managing private and public cloud infrastructure.
OpenTelemetry
Open-source framework for collecting and exporting metrics, logs, and distributed traces.
OpenTofu
Open-source infrastructure-as-code tool compatible with Terraform configurations.
Overlay Network
Logical network built over an underlying physical or IP network.
Physical Server
Dedicated physical computing machine providing processor, memory, storage, and networking resources.
Platform as a Service (PaaS)
Cloud model providing application development and deployment platforms without managing underlying infrastructure.
PostgreSQL
Advanced open-source relational database supporting complex data models and SQL workloads.
Private Cloud
Cloud infrastructure dedicated to one organization with controlled access and management.
Prometheus
Open-source monitoring system collecting and querying time-series metrics.
Proxmox VE
Open-source virtualization platform supporting virtual machines and containers.
Public Cloud
Cloud infrastructure operated by providers and shared among multiple customers.
Pulumi
Infrastructure-as-code platform allowing infrastructure definitions using general-purpose programming languages.
RAID
Storage technology combining multiple drives to improve performance, capacity, or fault tolerance.
Rancher
Platform simplifying management and operation of multiple Kubernetes clusters.
RDMA
Networking technology enabling direct memory access between systems with very low latency.
Recovery Point Objective (RPO)
Maximum acceptable amount of data loss measured by elapsed time.
Recovery Time Objective (RTO)
Target maximum time required to restore a service after disruption.
Redis
In-memory data store commonly used for caching, sessions, queues, and real-time applications.
Resource Pool
Collection of computing resources allocated and managed as a shared pool.
S3
Object storage service and API model widely used for scalable cloud data storage.
SD-WAN
Software-defined technology centrally managing WAN connectivity across multiple transport networks.
Serverless
Cloud execution model where providers manage servers and infrastructure automatically.
Serverless Computing
Computing model executing application code without customers managing underlying servers.
Service Mesh
Infrastructure layer managing communication, security, and observability between microservices.
SMB
Network file-sharing protocol commonly used for accessing files and resources across networks.
Snapshot
Point-in-time copy of data, storage volumes, or virtual machine state.
Software as a Service (SaaS)
Cloud model delivering complete software applications through networks without local infrastructure management.
Software-Defined Data Center (SDDC)
Data center architecture virtualizing and centrally managing compute, networking, storage, and security.
Software-Defined Networking (SDN)
Networking architecture separating control functions from forwarding infrastructure through programmable software.
Software-Defined Storage (SDS)
Storage architecture abstracting storage management from underlying physical hardware.
SQL
Structured query language used to manage and retrieve data from relational databases.
Storage as a Service (STaaS)
Cloud model providing storage capacity and services on demand.
Terraform
Infrastructure-as-code tool for provisioning and managing infrastructure through declarative configurations.
Virtual Machine (VM)
Software-defined computer running an operating system within virtualized hardware resources.
Virtual Private Server (VPS)
Virtualized server providing dedicated logical resources within shared physical infrastructure.
Virtualization
Technology creating logical computing resources independently from underlying physical hardware.
VMware vSphere
Enterprise virtualization platform for managing virtual machines and data center infrastructure.
VPN
Encrypted or private logical network connection established across shared or public networks.
VXLAN
Network virtualization technology encapsulating Layer 2 traffic over Layer 3 networks.
Web Hosting
Service providing server resources for storing and delivering websites and web applications.
Xen
Open-source hypervisor technology for running and isolating virtual machines.
ZFS
Advanced filesystem and storage platform providing data integrity, snapshots, pooling, and replication.

5G MEC
Edge computing integrated with 5G networks to provide low-latency processing close to mobile users.
Anycast
Addressing method allowing multiple distributed nodes to share the same IP address.
API Gateway
Service managing, routing, securing, and monitoring API requests between clients and backend services.
API Protection
Security measures protecting APIs against unauthorized access, abuse, attacks, and excessive traffic
.API Security
Practices protecting APIs through authentication, authorization, encryption, validation, and threat detection.
Application Delivery
Technologies and services delivering applications reliably and efficiently to users.
Application Delivery Controller (ADC)
Network device or software managing application traffic, load balancing, security, and availability.
Application Delivery Network (ADN)
Network infrastructure optimized for reliable, secure, and high-performance application delivery.
Application Delivery Platform
Integrated platform providing application acceleration, traffic management, security, and availability services.
BGP
Interdomain routing protocol exchanging reachability information between autonomous systems.
BGP Anycast
BGP-based technique advertising the same IP prefix from multiple geographically distributed locations.
BGP Communities
BGP attributes used to classify routes and influence routing policies.
BGP Traffic Engineering
Techniques using BGP policies and attributes to control traffic paths and distribution.
Bot Management
Technology identifying, analyzing, and controlling automated Internet traffic.
Bot Protection
Security mechanisms detecting and mitigating malicious or unwanted automated traffic.
Cache Hierarchy
Layered caching architecture where content is stored at multiple levels based on proximity and demand.
Cache Hit Ratio
Percentage of requests successfully served from cache without contacting the origin.
Cache Invalidation
Process removing or marking cached content as outdated.
Cache Miss
Cache request requiring retrieval because the requested content is unavailable or expired.
Cache Node
Distributed infrastructure node storing and serving cached content to nearby users.
Cache Server
Server storing frequently requested content to reduce latency and origin traffic.
Cache-Control
HTTP mechanism controlling browser and intermediary caching behavior.
Caching Proxy
Proxy server that stores responses and serves subsequent requests from cache.
CDN Caching
Caching content across distributed CDN nodes closer to users.
CDN Provider
Organization operating a distributed network for accelerating content and application delivery.
Container Network Interface (CNI)
Standard interface enabling containers to connect to networks and obtain network configuration.
Containers
Lightweight isolated application environments sharing the host operating system kernel.
Content Cache
Cached copy of content stored closer to users for faster delivery.
Content Delivery
Process of delivering digital content efficiently from infrastructure to end users.
Content Delivery Network (CDN)
Distributed network delivering content from geographically closer locations to improve performance.
Content Distribution
Process distributing digital content across multiple geographically distributed infrastructure locations.
Content Localization
Delivering content from locations or systems optimized for specific geographic users.
DDoS Mitigation
Techniques detecting, absorbing, filtering, and reducing distributed denial-of-service attack traffic.
DDoS Protection
Security service protecting networks and applications against distributed denial-of-service attacks.
Distributed Caching
Caching content across multiple geographically distributed nodes.
Distributed Infrastructure
Infrastructure deployed across multiple locations to improve performance, scalability, and resilience.
Distributed Security
Security controls deployed across distributed network and computing environments.
Distributed Tracing
Observability technique tracking requests across multiple distributed application components.
DNS
Hierarchical naming system translating domain names into IP addresses and other resource information.
DNS Anycast
Architecture distributing DNS services across multiple geographically separated servers using shared addresses.
DNS Load Balancing
Distributing DNS responses among multiple service endpoints or servers.
DNS Traffic Steering
Controlling DNS responses to direct users toward selected service locations.
Docker
Platform for building, packaging, deploying, and running containerized applications.
Edge Application
Application deployed near users to provide low-latency processing and services.
Edge Cache
Cache located near users for faster content delivery and reduced origin traffic.
Edge Caching
Storing frequently requested content at geographically distributed network edges.
Edge Cloud
Cloud computing infrastructure deployed close to users, devices, or network access points.
Edge Computing
Processing data closer to users or devices to reduce latency and network traffic.
Edge Data Center
Small-scale data center deployed near users or access networks for low-latency services.
Edge Functions
Serverless functions executed at distributed edge locations close to users.
Edge Infrastructure
Distributed computing, networking, storage, and security resources deployed near network edges.
Edge Location
Geographic infrastructure location providing distributed computing, caching, or network services.
Edge Network
Distributed network infrastructure positioned close to users, devices, and content consumers.
Edge Node
Distributed computing or networking node providing services near end users.
Edge Platform
Platform providing computing, networking, storage, security, and application capabilities at the network edge.
Edge Point of Presence (Edge PoP)
Network point of presence positioned close to users for low-latency services.
Edge Routing
Routing traffic through distributed edge locations based on performance, proximity, or policy.
Edge Runtime
Execution environment designed to run applications or functions at distributed edge locations.
Edge Runtime Platform
Platform providing standardized environments for executing workloads across distributed edge locations.
Edge Security
Security controls deployed near users and network edges to protect applications and traffic.
Edge Service
Digital service delivered or processed from infrastructure positioned near users.
Edge Site
Physical location hosting edge computing, networking, or application infrastructure.
Edge Workers
Lightweight programmable workloads executed at distributed edge locations.
EDNS Client Subnet (ECS)
DNS extension providing partial client network information to improve geographically optimized responses.
Envoy
High-performance programmable proxy commonly used for traffic management and service meshes.
ETag
HTTP response identifier used to validate cached content and detect resource changes.
EVPN
BGP-based technology providing scalable Layer 2 and Layer 3 network virtualization.
Fault Tolerance
Ability of systems to continue operating despite component failures.
Forward Proxy
Proxy acting on behalf of clients when accessing external servers.
Function as a Service (FaaS)
Cloud model executing individual functions without requiring users to manage servers.
GeoDNS
DNS technique returning different responses based on client geographic location.
Geo-Routing
Routing traffic according to geographic location or regional network policies.
Global Load Balancing
Distribution of application traffic across geographically distributed infrastructure.
Global Server Load Balancing (GSLB)
Technology directing users among geographically distributed servers based on availability and performance.
High Availability
Architecture designed to minimize service downtime through redundancy and rapid failure recovery.
HTTP
Application-layer protocol used for transferring web resources between clients and servers.
HTTP Proxy
Intermediate server forwarding HTTP requests between clients and destination servers.
HTTP/2
HTTP version providing multiplexing, header compression, and improved web transport efficiency.
HTTP/3
HTTP version using QUIC to provide secure, multiplexed, low-latency web transport.
HTTPS
HTTP secured using TLS to provide encryption, authentication, and integrity.
Intelligent Traffic Management
Automated optimization of traffic routing based on performance, availability, capacity, and policy.
Internet Exchange Point (IXP)
Facility where independent networks interconnect directly to exchange Internet traffic.
IP Routing
Process selecting paths for forwarding IP packets toward their destinations.
IPv4
Internet Protocol version using 32-bit addresses.
IPv6
Internet Protocol version using 128-bit addresses.
ISP Edge Cache
Cache operated by an ISP near subscribers to accelerate frequently requested content.
Istio
Service mesh platform providing traffic management, security, and observability for microservices.
K3s
Lightweight Kubernetes distribution designed for resource-constrained and edge environments.
Kubernetes
Platform automating deployment, scaling, and management of containerized applications.
Kubernetes at Edge
Deployment of Kubernetes clusters and workloads across geographically distributed edge locations.
Latency
Time required for data to travel between network endpoints.
Latency-Based Routing
Routing traffic toward endpoints offering the lowest measured network latency.
Layer 4 Load Balancing
Load balancing based primarily on transport-layer information such as IP addresses and ports.
Layer 7 Load Balancing
Load balancing using application-layer information such as HTTP requests and URLs.
Load Balancing
Distribution of traffic across multiple servers or resources to improve availability and performance.
Mobile Edge Computing
Computing infrastructure deployed near mobile users within or alongside cellular networks.
MPLS
Label-based networking technology supporting traffic engineering and virtual private networks.
Multi-Access Edge Computing (MEC)
Edge computing architecture placing applications and processing resources within mobile access networks.
Network Failover
Automatic switching to an alternate network path or resource after failure.
Network Functions Virtualization (NFV)
Architecture implementing network functions as software on virtualized computing infrastructure.
Network Proximity
Degree of network or geographic closeness between users and service infrastructure.
Network Resilience
Ability of a network to maintain services despite failures or disruptions.
NFV
Technology virtualizing network functions traditionally implemented on dedicated hardware.
Open RAN Edge
Edge computing infrastructure supporting disaggregated and programmable radio access network components.
OpenShift
Enterprise Kubernetes platform providing container management and application deployment capabilities.
OpenTelemetry
Framework for collecting and exporting metrics, logs, and distributed traces.
Origin Protection
Techniques preventing unauthorized direct access or attacks against application origin servers.
Origin Server
Server hosting the original content delivered through CDN or edge infrastructure.
Origin Shield
Intermediate caching layer protecting origin servers by consolidating cache requests.
Origin Shielding
Technique using an intermediate cache layer to reduce traffic reaching origin servers.
Point of Presence (PoP)
Network location where provider equipment connects users, networks, or services.
Prometheus
Monitoring system collecting and querying time-series metrics from infrastructure and applications.
Proximity-Based Routing
Routing technique directing traffic toward infrastructure closest to the requesting user.
QUIC
Secure transport protocol built over UDP, supporting multiplexing, encryption, and low-latency connections.
Rate Limiting
Technique restricting request frequency to protect services and control resource consumption.
Real User Monitoring (RUM)
Monitoring technique measuring application performance from actual users and devices.
Reverse Proxy
Proxy positioned before servers, forwarding client requests to backend services.
Round-Trip Time (RTT)
Time required for a packet to travel to a destination and return.
Secure Edge
Edge infrastructure combining distributed processing with integrated security controls.
Segment Routing
Source-routing technology encoding desired packet paths using ordered network segments.
Serverless Computing
Computing model executing application code without customers managing underlying servers.
Service Availability
Degree to which a service remains operational and accessible when required.
Service Mesh
Infrastructure layer managing communication, security, and observability between distributed services.
Software-Defined Networking (SDN)
Networking architecture separating control functions from forwarding infrastructure through programmable software.
Software-Defined WAN (SD-WAN)
Software-controlled WAN architecture dynamically managing multiple network connections and traffic policies.
SR-MPLS
Segment Routing implementation using MPLS labels to encode forwarding paths.
SRv6
Segment Routing implementation using IPv6 addresses to encode paths and network services.
Synthetic Monitoring
Proactive monitoring using simulated transactions to measure service availability and performance.
TCP
Connection-oriented transport protocol providing reliable, ordered delivery of application data.
Telco Edge
Edge infrastructure deployed within telecommunications networks close to subscribers and access networks.
Telco Edge Computing
Computing resources deployed within telecom networks to provide low-latency services.
Telco Edge Site
Telecommunications facility hosting computing and networking resources near mobile or fixed subscribers.
Time to First Byte (TTFB)
Time between initiating a request and receiving the first byte of the response.
TLS
Cryptographic protocol providing encryption, authentication, and integrity for network communications.
TLS 1.3
Modern TLS version providing stronger security and faster secure connection establishment.
TLS Offloading
Moving TLS processing from application servers to dedicated network or edge infrastructure.
TLS Termination
Process where an intermediary decrypts and terminates TLS connections before forwarding requests.
Traffic Engineering
Techniques optimizing traffic paths and resource utilization across a network.
Traffic Routing
Process directing network traffic toward selected destinations through available paths.
Traffic Steering
Dynamic control of traffic paths based on performance, availability, geography, or policy.
UDP
Connectionless transport protocol providing low-overhead datagram delivery without guaranteed reliability.
VXLAN
Network virtualization technology encapsulating Layer 2 traffic over Layer 3 IP networks.
WAF
Security technology protecting web applications by inspecting and filtering HTTP and HTTPS traffic.
Web Application Firewall (WAF)
Security system protecting web applications by filtering malicious HTTP and HTTPS requests.
Web Cache
Caching system storing web resources closer to clients for faster subsequent delivery.
WebAssembly (Wasm)
Portable binary execution format enabling high-performance code execution across different environments.
WebAssembly System Interface (WASI)
Standard interface providing WebAssembly modules controlled access to operating-system-like capabilities.
Zero Trust Edge
Security architecture applying continuous verification and least-privilege access across distributed edge environments.

ABAC
Access control based on attributes of users, resources, actions, and environmental conditions.
Access Control
Mechanisms controlling who or what can access resources and perform specific actions.
ACME
Protocol automating certificate issuance and renewal, commonly used with publicly trusted TLS certificates.
Adaptive Authentication
Authentication that dynamically adjusts security requirements according to user, device, location, and risk.
AES
Symmetric encryption standard widely used to protect data confidentiality.
Anomaly Detection
Identifying unusual behavior or activity that may indicate security threats.
Anti-Phishing
Technologies and controls designed to detect and prevent phishing attacks.
Anti-Spam
Techniques for identifying, filtering, and blocking unwanted or malicious email messages.
Anycast
Networking method allowing multiple distributed servers to share the same IP address.
API Authentication
Verifying the identity of clients or applications requesting access to APIs.
API Authorization
Determining which authenticated API clients can access specific resources or operations.
API Gateway
Security and traffic-control component managing API requests between clients and backend services.
API Protection
Security mechanisms protecting APIs from unauthorized access, abuse, attacks, and excessive traffic.
API Security
Practices protecting APIs through authentication, authorization, encryption, validation, and monitoring.
Asymmetric Encryption
Encryption using separate public and private keys for secure communication and authentication.
Attribute-Based Access Control (ABAC)
Access decisions based on attributes associated with users, resources, actions, and context.
Authentication
Process of verifying the identity of a user, device, or system.
Authorization
Process determining whether an authenticated entity is permitted to perform an action.
Behavioral Analysis
Analyzing behavior patterns to identify suspicious or potentially malicious activity.
Behavioral Analytics
Using behavioral data to detect anomalies, threats, fraud, or unauthorized activity.
BGP
Interdomain routing protocol exchanging reachability information between autonomous systems.
Bot Detection
Identifying automated clients and distinguishing legitimate bots from malicious automation.
Bot Management
Technology identifying, classifying, and controlling automated Internet traffic.
Bot Protection
Security mechanisms preventing malicious bots from abusing applications, accounts, or resources.
CAPTCHA
Challenge mechanism designed to distinguish human users from automated systems.
Certificate Authority (CA)
Trusted entity that issues and manages digital certificates.
Certificate Lifecycle Management
Processes for issuing, deploying, renewing, monitoring, and retiring digital certificates.
Certificate Revocation
Process invalidating a digital certificate before its normal expiration date.
Certificate Revocation List (CRL)
Signed list identifying digital certificates that have been revoked by a certificate authority.
Certificate Transparency (CT)
Public logging system enabling monitoring of certificates issued by trusted certificate authorities.
Content Filtering
Security process inspecting and blocking content according to defined policies.
CRL
Certificate Revocation List containing certificates that have been revoked.
Cryptographic Key
Secret or public value used by cryptographic algorithms to encrypt, decrypt, or authenticate data.
Cyber Incident
Security event that compromises or threatens information systems, networks, or data.
Cybersecurity
Practices protecting systems, networks, applications, and data from cyber threats.
Data Encryption
Transforming readable data into protected ciphertext using cryptographic algorithms.
DDoS
Distributed Denial-of-Service attack overwhelming services with excessive traffic or requests.
DDoS Mitigation
Techniques detecting, filtering, absorbing, and reducing distributed denial-of-service attack traffic.
DDoS Protection
Security services designed to protect networks and applications against DDoS attacks.
Deep Packet Inspection (DPI)
Examining packet contents beyond headers to identify applications, threats, or policy violations.
Digital Certificate
Cryptographic credential binding an identity to a public key.
Digital Forensics
Investigating digital evidence to determine what happened during security incidents.
Digital Signature
Cryptographic mechanism providing authenticity, integrity, and non-repudiation for digital data.
DKIM
Email authentication mechanism using cryptographic signatures to verify message-domain association and integrity.
DMARC
Email authentication policy framework combining SPF and DKIM with reporting and enforcement.
DNS
Hierarchical naming system translating domain names into IP addresses and other resource information.
DNS Filtering
Blocking or redirecting DNS queries associated with malicious, unwanted, or restricted domains.
DNS Security
Technologies and practices protecting DNS infrastructure, queries, responses, and domain information.
DNSSEC
DNS security extensions providing authentication and integrity for DNS responses.
DNSSEC Signing
Cryptographically signing DNS records to enable DNSSEC validation and authenticity.
DNSSEC Validation
Verifying DNSSEC signatures to authenticate DNS responses and detect tampering.
DoH (DNS over HTTPS)
DNS resolution transported through HTTPS, providing encryption and improved privacy.
Domain Blocking
Preventing access to specified domains based on security, policy, or regulatory requirements.
Domain Name System (DNS)
Distributed naming system translating human-readable domain names into network resource information.
Domain-based Message Authentication, Reporting & Conformance (DMARC)
Email authentication framework defining policies for SPF, DKIM, message alignment, and reporting.
DomainKeys Identified Mail (DKIM)
Email authentication method using domain-based cryptographic signatures to verify message integrity.
DoQ (DNS over QUIC)
DNS transport protocol using QUIC to provide encrypted and low-latency DNS communication.
DoT (DNS over TLS)
DNS transport protocol securing DNS queries and responses with TLS encryption.
DPI
Deep Packet Inspection examines packet contents for security, classification, and policy enforcement.
ECC
Elliptic Curve Cryptography provides public-key security using elliptic curve mathematics.
EDR
Endpoint Detection and Response continuously monitors endpoints for threats and supports investigation and response.
Email Filtering
Process identifying, classifying, and blocking unwanted, malicious, or suspicious email messages.
Email Security
Technologies protecting email systems against phishing, malware, spam, spoofing, and unauthorized access.
Encryption
Cryptographic process transforming data into an unreadable form to prevent unauthorized access.
End-to-End Encryption
Encryption ensuring only communicating endpoints can decrypt transmitted information.
FIDO2
Authentication standard enabling strong passwordless authentication using public-key cryptography.
Forward Proxy
Proxy acting on behalf of clients when accessing external servers or services.
Fraud Analytics
Analyzing transactions and behavioral data to identify patterns associated with fraudulent activity.
Fraud Detection
Identifying suspicious transactions or behaviors that may indicate fraudulent activity.
Fraud Prevention
Controls designed to detect, block, and reduce fraudulent activities before losses occur.
Hardware Security Module (HSM)
Tamper-resistant hardware protecting cryptographic keys and performing sensitive cryptographic operations.
HMAC
Message authentication mechanism combining a cryptographic hash function with a secret key.
HSM
Hardware Security Module securely storing cryptographic keys and performing protected cryptographic operations.
HTTPS
HTTP secured with TLS, providing encryption, authentication, and data integrity.
dentity and Access Management (IAM)
Framework managing digital identities and controlling access to systems and resources.
Identity Management
Processes for creating, maintaining, authenticating, and controlling digital identities.
Identity Provider (IdP)
Service that authenticates users and provides identity information to relying applications.
IDS
Intrusion Detection System monitoring activity for suspicious or malicious behavior.
Incident Management
Structured process for identifying, recording, coordinating, and resolving security incidents.
Incident Response
Process for detecting, containing, investigating, and recovering from security incidents.
Incident Response Team (IRT)
Team responsible for coordinating investigation, containment, eradication, and recovery from security incidents.
Indicators of Compromise (IoC)
Observable evidence suggesting that a system or network may have been compromised.
Information Security
Protection of information against unauthorized access, modification, disclosure, disruption, or destruction.
Intermediate CA
Certificate authority subordinate to a root CA that issues end-entity certificates.
Internet Censorship
Governmental or organizational control restricting access to selected Internet content or services.
Internet Filtering
Filtering Internet traffic or content according to security, policy, or regulatory rules.
P Filtering
Blocking or allowing network traffic based on IP addresses or prefixes.
IPS
Intrusion Prevention System detecting and actively blocking malicious network activity.
IPsec
Network-layer security protocol suite providing authentication, integrity, and encryption for IP communications.
JWT
Compact token format carrying signed or encrypted claims between parties.
Kerberos
Network authentication protocol using tickets and trusted third-party services to authenticate users and systems.
Key Management
Processes for generating, storing, distributing, rotating, and retiring cryptographic keys.
Key Management Service (KMS)
Service providing centralized creation, storage, management, and controlled use of cryptographic keys.
Key Rotation
Replacing cryptographic keys periodically to reduce security risks from key compromise.
KMS
Key Management Service centrally manages cryptographic keys used by applications and services.
Lawful Interception
Authorized collection of communications by service providers under applicable legal requirements.
LDAP
Directory protocol used to access and manage identity and organizational information.
Machine Learning for Threat Detection
Using machine learning models to identify patterns associated with cyber threats.
MACsec
Layer 2 security protocol providing encryption and integrity protection for Ethernet frames.
Malware Protection
Security controls detecting, blocking, and removing malicious software.
Malware Sandboxing
Isolated execution environment for analyzing suspicious files or software safely.
MFA
Authentication requiring multiple independent factors to verify user identity.
MITRE ATT&CK
Knowledge base describing adversary tactics, techniques, and procedures based on real-world observations.
mTLS
Mutual TLS authenticates both communicating endpoints using digital certificates.
Multi-Factor Authentication (MFA)
Authentication requiring two or more independent verification factors.
National Internet Filtering
Government-level filtering controlling access to Internet content within a country.
NDR
Network Detection and Response monitors network activity for threats and supports investigation.
Network-Level Blocking
Preventing network communication based on addresses, protocols, domains, or other network characteristics.
OAuth
Authorization framework allowing applications delegated access to resources without sharing user credentials.
OAuth 2.0
Widely used authorization framework enabling delegated access to protected resources.
OCSP
Protocol allowing clients to obtain the current revocation status of digital certificates.
Online Certificate Status Protocol (OCSP)
Protocol providing real-time certificate revocation status from certificate authorities.
OpenID Connect (OIDC)
Identity layer built on OAuth 2.0 for user authentication and identity information.
PAM
Privileged Access Management controls and monitors access to privileged accounts and systems.
Phishing Protection
Security controls detecting and preventing fraudulent attempts to steal credentials or sensitive information.
PKI
Public Key Infrastructure manages digital certificates, public keys, and trusted identities.
Privileged Access Management (PAM)
Security discipline controlling, monitoring, and protecting privileged accounts and access.
Protective DNS
DNS security service blocking malicious domains before connections are established.
Proxy
Intermediate system forwarding requests between clients and destination services.
Public Key Infrastructure (PKI)
Framework for managing certificates, public keys, identities, and trust relationships.
QUIC
Secure transport protocol providing encrypted, multiplexed communication over UDP.
RADIUS
Protocol providing centralized authentication, authorization, and accounting for network access.
Rate Limiting
Restricting request frequency to protect services from abuse and resource exhaustion.
RBAC
Access control model assigning permissions according to organizational roles.
Risk Engine
System evaluating security signals to calculate risk and support automated decisions.
Risk Scoring
Assigning numerical or categorical values representing the assessed security risk.
Risk-Based Authentication
Authentication adapting requirements according to calculated risk associated with a login attempt.
Role-Based Access Control (RBAC)
Access permissions determined by roles assigned to users or systems.
Root CA
Top-level trusted certificate authority anchoring a public key infrastructure trust hierarchy.
RSA
Asymmetric cryptographic algorithm commonly used for encryption, signatures, and key exchange.
SAML
XML-based standard exchanging authentication and authorization information between identity providers and services.
SASE
Architecture combining network connectivity and security services through a cloud-delivered model.
SCIM
Standard protocol for automated exchange and provisioning of identity information.
Secret
Sensitive credential such as a password, token, key, or API credential.
Secret Vault
Secure system storing and controlling access to sensitive secrets and credentials.
Secrets Management
Processes and technologies for securely storing, accessing, rotating, and auditing secrets.
Secrets Vault
Protected repository designed to securely store and manage application secrets.
Secure Access Service Edge (SASE)
Architecture delivering networking and security capabilities through globally distributed cloud services.
Secure DNS
DNS services providing enhanced confidentiality, integrity, authentication, or threat protection.
Secure Email Gateway (SEG)
Security gateway filtering email for spam, malware, phishing, and other threats.
Security Analytics
Analysis of security data to identify threats, anomalies, and attack patterns.
Security Automation
Automating repetitive security tasks such as detection, investigation, response, and remediation.
Security Control
Safeguard designed to prevent, detect, mitigate, or respond to security risks.
Security Enforcement Point
Component enforcing security policies on users, devices, applications, or network traffic.
Security Incident
Event indicating actual or suspected compromise of security, confidentiality, integrity, or availability.
Security Information and Event Management (SIEM)
Platform collecting, correlating, analyzing, and alerting on security events and logs.
Security Monitoring
Continuous observation of systems and networks for security threats and anomalies.
Security Operations
Activities for continuously monitoring, protecting, detecting, investigating, and responding to security threats.
Security Operations Center (SOC)
Centralized team and facility responsible for continuous security monitoring and incident response.
Security Orchestration, Automation and Response (SOAR)
Platform coordinating security workflows, automating response actions, and integrating security tools.
Security Policy
Defined rules governing acceptable security practices, access, protection, and risk management.
Security Policy Enforcement
Applying defined security policies to control and restrict actions or traffic.
Security Service Edge (SSE)
Cloud-delivered security services protecting users, applications, and Internet access.
Sender Policy Framework (SPF)
Email authentication mechanism specifying authorized servers permitted to send messages for a domain.
SHA-256
Cryptographic hash algorithm producing a 256-bit message digest.
SHA-3
Cryptographic hash function family standardized for secure data integrity and authentication applications.
SIEM
Security Information and Event Management platform for centralized security monitoring and analysis.
Sigma
Generic rule format for describing and sharing detection logic across security platforms.
Single Sign-On (SSO)
Authentication method allowing users to access multiple applications using one login.
SMTP TLS
TLS encryption used to protect email communication between SMTP servers or clients.
SOAR
Security Orchestration, Automation and Response platform coordinating and automating security operations.
SOAR Playbooks
Predefined automated workflows guiding security investigation and response actions.
Spam Filtering
Identifying and blocking unwanted bulk or unsolicited email messages.
SPF
Email authentication mechanism defining authorized sending servers for a domain.
SSE
Security Service Edge delivers cloud-based security controls for users and applications.
SSO
Single Sign-On enables access to multiple services through one authentication process.
STIX
Structured language and format for representing and exchanging cyber threat intelligence.
Symmetric Encryption
Encryption method using the same secret key for encryption and decryption.
TACACS+
AAA protocol providing centralized authentication, authorization, and accounting for network devices.
TAXII
Protocol enabling automated exchange of structured cyber threat intelligence.
Threat Hunting
Proactive investigation of systems and networks to discover previously undetected threats.
Threat Intelligence
Information about threats, adversaries, vulnerabilities, and indicators used to improve security decisions.
Threat Intelligence Platform (TIP)
Platform collecting, processing, correlating, and distributing cyber threat intelligence.
TLS
Cryptographic protocol providing confidentiality, authentication, and integrity for network communications.
TLS 1.3
Modern TLS version providing stronger security and faster connection establishment.
TLS Inspection
Inspecting encrypted TLS traffic by decrypting and analyzing it at a security control.
TLS Interception
Intermediary technique that terminates and re-establishes TLS connections to inspect encrypted traffic.
Traffic Classification
Identifying network traffic according to applications, protocols, users, or other characteristics.
Traffic Filtering
Allowing or blocking network traffic according to defined security or policy rules.
Traffic Inspection
Analyzing network traffic to identify threats, applications, anomalies, or policy violations.
Transaction Monitoring
Monitoring transactions to detect suspicious behavior, fraud, or policy violations.
Transparent Proxy
Proxy operating without requiring explicit client configuration or awareness.
UEBA
User and Entity Behavior Analytics detects abnormal behavior by analyzing users and entities.
URL Filtering
Controlling access to websites based on URLs, categories, reputation, or policies.
VPN
Encrypted network connection providing secure communication across untrusted networks.
Vulnerability Management
Process for identifying, assessing, prioritizing, remediating, and monitoring security vulnerabilities.
WAF
Web Application Firewall protecting web applications by filtering malicious HTTP and HTTPS traffic.
Web Application Firewall (WAF)
Security system inspecting and filtering web requests to protect applications from attacks.
WebAuthn
Web authentication standard enabling strong public-key authentication through browsers and supported devices.
X.509
Standard defining digital certificate formats and public-key infrastructure credentials.
XDR
Extended Detection and Response correlates security data across multiple security layers for threat detection.
YARA
Rule-based technology for identifying and classifying malware and other suspicious files.
Zero Trust
Security model requiring continuous verification rather than implicitly trusting users, devices, or networks.
Zero Trust Architecture
Security architecture enforcing continuous verification, least privilege, and explicit access decisions.
Zero Trust Network Access (ZTNA)
Security model providing application-specific access based on verified identity, device, and context.
ZTNA
Zero Trust Network Access provides controlled application access without implicitly trusting network location.

Active Measurement
Proactively generating network traffic to measure connectivity, latency, availability, and performance.
AIOps
Applying artificial intelligence and machine learning to automate IT operations and analyze operational data.
Alert Management
Processes for creating, prioritizing, routing, correlating, acknowledging, and resolving operational alerts.
Alerting
Generating notifications when monitored conditions exceed defined thresholds or indicate abnormal behavior.
Anomaly Detection
Identifying unusual patterns in operational data that may indicate failures or performance problems.
Ansible
Automation platform for configuring systems, deploying software, and orchestrating operational tasks.
Application Monitoring
Monitoring application availability, performance, errors, dependencies, and user experience.
Application Performance Monitoring (APM)
Monitoring application performance, transactions, dependencies, errors, and resource usage.
Asset Discovery
Identifying and cataloging devices, systems, applications, and infrastructure within an environment.
Availability Monitoring
Continuously checking whether systems, services, and network resources are operational and reachable.
Bandwidth Utilization
Measurement of network capacity currently consumed by traffic.
Baseline Monitoring
Comparing current operational behavior against established normal performance patterns.
BGP BMP (BGP Monitoring Protocol)
Protocol providing detailed BGP routing information from network devices to monitoring and analytics systems.
BGP Looking Glass
Public interface allowing observation of BGP routes and routing information from selected networks.
BGP Monitoring
Monitoring BGP sessions, routes, prefixes, policies, and routing changes.
BGP Route Analytics
Analyzing BGP routing data to understand reachability, paths, changes, and anomalies.
Browser Monitoring
Monitoring application performance and behavior from real or simulated web browsers.
Capacity Management
Ensuring infrastructure capacity meets current and anticipated service requirements.
Capacity Planning
Forecasting resource requirements and planning infrastructure expansion based on expected demand.
Configuration Management
Controlling, tracking, and maintaining infrastructure and system configurations throughout their lifecycle
Configuration Management Database (CMDB)
Repository storing information about IT assets, configurations, relationships, and dependencies.
Deep Packet Inspection (DPI)
Analyzing packet contents to identify applications, traffic characteristics, anomalies, and policy violations.
Digital Experience
The quality and performance of users' interactions with digital applications and services.
Digital Experience Monitoring (DEM)
Monitoring digital service performance from the perspective of users and endpoints.
Distributed Tracing
Tracking requests across distributed services to understand latency, dependencies, and failures.
DNS Measurement
Measuring DNS resolution performance, availability, latency, errors, and response behavior.
Docker
Container platform used to package, deploy, and operate applications consistently.
eBPF
Linux technology enabling programmable, low-overhead observability, networking, tracing, and security.
Elasticsearch
Distributed search and analytics engine commonly used for logs, metrics, and operational data.
End-User Experience Monitoring
Measuring application and service performance from the user's perspective.
Event Correlation
Combining related events to identify patterns, incidents, and potential root causes.
Event Management
Collecting, processing, classifying, correlating, and responding to operational events.
Event-Driven Automation
Automatically executing operational workflows in response to detected events.
Events
Recorded occurrences indicating changes, activities, conditions, or incidents within monitored systems.
Fault Management
Detecting, isolating, diagnosing, and resolving infrastructure and service faults.
Flow Analyzer
Analyzes network flow records to understand traffic patterns, sources, destinations, and applications.
Flow Collector
Collects network flow records generated by routers, switches, and other devices.
Flow Monitoring
Monitoring summarized network traffic flows to understand utilization and communication patterns.
Fluent Bit
Lightweight telemetry agent for collecting, processing, and forwarding logs and other data.
Fluentd
Open-source data collector aggregating and routing logs and operational events.
gNMI
gRPC-based protocol for retrieving and configuring network device telemetry and state.
Grafana
Visualization and observability platform for dashboards, metrics, logs, and traces.
gRPC
High-performance remote procedure call framework commonly used for distributed services and telemetry.
HTTP Measurement
Measuring HTTP service availability, response time, errors, and performance.
Incident Detection
Identifying operational conditions or events that indicate potential service incidents.
Incident Management
Process for restoring normal service operation and minimizing incident impact.
InfluxDB
Time-series database designed for storing and querying metrics and operational measurements.
Infrastructure as Code (IaC)
Managing infrastructure through declarative or programmatic configuration files.
Infrastructure Automation
Automatically provisioning, configuring, operating, and maintaining infrastructure resources
.Infrastructure Monitoring
Monitoring infrastructure components for availability, health, performance, and resource utilization.
Infrastructure Performance Monitoring
Measuring infrastructure performance, resource utilization, latency, and operational health.
Internet Measurement
Measuring Internet connectivity, routing, latency, availability, and performance across distributed locations.
IPFIX
Standard protocol for exporting detailed network flow information from devices to collectors.
IT Service Management (ITSM)
Framework for managing IT services, incidents, changes, problems, and service levels.
J-Flow
Juniper's technology for collecting and exporting network traffic flow information.
Jitter Monitoring
Measuring variation in packet delay across network paths.
Kafka
Distributed event-streaming platform for collecting, processing, and transporting large-scale operational data.
Kibana
Visualization and analytics interface commonly used with Elasticsearch data.
Kubernetes
Container orchestration platform for deploying, scaling, and managing containerized applications
.Kubernetes Monitoring
Monitoring Kubernetes clusters, workloads, nodes, resources, services, and application health.
Latency Monitoring
Measuring delays experienced by packets, requests, applications, or services.
Logs
Timestamped records describing system, application, network, and operational activities.
Logstash
Data processing pipeline for collecting, transforming, and forwarding logs and events.
Machine Learning
Computational techniques enabling systems to learn patterns from data and make predictions.
Mean Time Between Failures (MTBF)
Average operating time between successive failures of a system or component.
Mean Time to Acknowledge (MTTA)
Average time between incident detection and acknowledgment by an operations team.
Mean Time to Detect (MTTD)
Average time required to detect an operational or security incident.
Mean Time to Resolve (MTTR)
Average time required to restore normal operation after an incident.
Message Queue
Middleware enabling asynchronous communication by storing and delivering messages between systems.
Metrics
Numerical measurements representing system, network, application, or service behavior over time.
MQTT
Lightweight messaging protocol commonly used for telemetry and Internet of Things communications.
MTR
Diagnostic tool combining ping and traceroute to analyze network paths and packet loss.
NETCONF
Network management protocol used to configure and retrieve device configuration and operational data.
NetFlow
Flow-export technology providing summarized information about network traffic conversations.
Network Automation
Automating network configuration, provisioning, monitoring, testing, and operational workflows.
Network Availability
Measure of how consistently network services and infrastructure remain operational and reachable.
Network Capacity
Maximum traffic or service load that network infrastructure can support.
Network Configuration Management
Managing, tracking, validating, and controlling network device configurations.
Network Configuration Protocol (NETCONF)
Protocol providing standardized mechanisms for installing and retrieving network device configurations.
Network Discovery
Automatically identifying network devices, interfaces, connections, and infrastructure components.
Network Function Virtualization (NFV)
Implementing network functions as software running on virtualized infrastructure.
Network Health
Overall operational condition of network infrastructure based on availability, performance, and faults.
Network Intelligence
Analyzing network data to derive operational, performance, and routing insights.
Network Management
Processes and tools for operating, configuring, monitoring, and maintaining networks.
Network Measurement
Quantifying network performance characteristics such as latency, loss, throughput, and availability.
Network Monitoring
Continuously observing network devices, links, traffic, performance, and availability.
Network Operations
Activities required to operate, maintain, troubleshoot, and optimize network infrastructure.
Network Operations Center (NOC)
Centralized team or facility responsible for continuous network monitoring and operations.
Network Orchestration
Coordinating multiple automated network operations and workflows across infrastructure and services.
Network Orchestrator
System that coordinates automated configuration and operational workflows across network resources.
Network Packet Broker (NPB)
Network device that aggregates, filters, and distributes traffic to monitoring and security tools.
Network Performance Monitoring (NPM)
Monitoring network performance using metrics such as latency, packet loss, throughput, and availability.
Network Reliability
Ability of network infrastructure to consistently provide expected services without failures.
Network Resilience
Ability of a network to withstand failures and maintain or restore service.
Network Topology Discovery
Identifying network devices and determining their physical or logical interconnections.
Network Traffic Analysis
Analyzing network traffic patterns to understand performance, applications, usage, and anomalies.
Observability
Ability to understand internal system behavior through metrics, logs, traces, and events.
OpenSearch
Open-source search and analytics platform for logs, metrics, traces, and operational data
.OpenTelemetry
Open standard and framework for collecting and exporting metrics, logs, and traces.
OpenTofu
Open-source infrastructure-as-code tool for provisioning and managing infrastructure.
Operational Analytics
Analyzing operational data to identify trends, problems, performance issues, and improvement opportunities.
Operational Intelligence
Using real-time operational data to support faster decisions, automation, and service optimization.
Packet Capture
Recording network packets for troubleshooting, performance analysis, security investigation, or protocol analysis.
Packet Loss
Percentage or number of network packets that fail to reach their destination.
Passive Measurement
Observing existing network traffic without generating additional measurement traffic.
Performance Management
Monitoring and optimizing systems and services to meet defined performance requirements.
Ping
Network diagnostic method measuring reachability and round-trip latency using ICMP or equivalent mechanisms.
Prometheus
Open-source monitoring system collecting and querying time-series metrics.
Python Automation
Using Python programs and scripts to automate operational, monitoring, and network tasks.
Quality of Service (QoS)
Techniques prioritizing and managing network traffic to meet performance requirements.
RabbitMQ
Message broker supporting asynchronous communication between distributed applications and services.
Real User Monitoring (RUM)
Collecting performance data directly from actual users and their devices.
REST API
HTTP-based interface enabling applications to access and manipulate resources through standardized operations
.RESTCONF
REST-based protocol for managing network configuration and operational data.
RIPE Atlas
Distributed measurement platform providing Internet connectivity, latency, routing, and DNS measurements.
RIPE RIS
Distributed routing information service collecting BGP data from multiple Internet locations.
Root Cause Analysis (RCA)
Systematic investigation identifying the underlying cause of an incident or failure.
Route Analytics
Analysis of routing information to understand reachability, paths, changes, and routing behavior.
Route Collector
System collecting routing information from multiple network devices or autonomous systems.
Route Monitoring
Continuous observation of routing information, prefixes, sessions, and routing changes.
Route Views
Public service providing access to Internet routing information collected from distributed BGP peers.
Routing Intelligence
Analysis of routing data to understand Internet topology, paths, reachability, and changes.
Service Assurance
Ensuring network and IT services consistently meet availability, performance, and quality requirements.
Service Dependency Mapping
Identifying relationships and dependencies between applications, services, infrastructure, and network components.
Service Level Agreement (SLA)
Contract defining measurable service commitments between providers and customers.
Service Level Indicator (SLI)
Quantitative measurement used to assess actual service performance.
Service Level Management
Process for defining, monitoring, and maintaining agreed service performance levels.
Service Level Objective (SLO)
Target value or range defining expected service performance or reliability.
Service Mesh
Infrastructure layer managing communication, security, observability, and traffic between microservices.
Service Mesh Telemetry
Metrics, logs, and traces collected from service-to-service communications.
sFlow
Packet-sampling technology providing statistical network traffic monitoring information.
SIEM
Platform collecting, correlating, analyzing, and alerting on security events and logs.
SNMP
Network management protocol used to monitor and manage network devices and systems.
SNMPv2
Second-generation SNMP version providing network monitoring and management capabilities.
SNMPv3
SNMP version providing authentication, integrity, and privacy for network management communications.
Software-Defined Networking (SDN)
Networking architecture separating control and forwarding functions for programmable centralized management.
Splunk
Data platform used for searching, analyzing, visualizing, and monitoring operational machine data.
Streaming Telemetry
Continuous streaming of operational data from network devices to monitoring systems.
Synthetic Monitoring
Proactively testing services using simulated user interactions or transactions.
Synthetic Transactions
Automated user-like transactions used to test application and service availability and performance.
Syslog
Standard mechanism for transmitting and collecting system and network event messages.
Systems Monitoring
Monitoring servers, operating systems, processes, resources, and system health.
TCP Measurement
Measuring TCP connectivity, latency, throughput, retransmissions, and connection behavior.
Telegraf
Lightweight agent for collecting, processing, and forwarding metrics and telemetry.
Telemetry
Automated collection and transmission of operational data from systems and infrastructure.
Telemetry Collection
Gathering metrics, logs, traces, events, and other operational data from monitored systems.
Terraform
Infrastructure-as-code tool for provisioning and managing infrastructure using declarative configurations.
Threshold Monitoring
Generating alerts when measured values cross predefined operational thresholds.
Time-Series Database (TSDB)
Database optimized for storing and querying timestamped measurements and metrics.
Traceroute
Network diagnostic tool revealing intermediate hops and approximate latency along a network path.
Traces
Records showing the execution path of requests across systems and distributed services.
Traffic Analytics
Analyzing network traffic data to understand usage, performance, applications, and anomalies.
Traffic Engineering
Optimizing network traffic paths and resource utilization according to operational objectives.
Webhooks
HTTP callbacks that automatically notify systems when specified events occur.
Workflow Automation
Automatically executing predefined sequences of operational tasks and actions.
YANG
Data modeling language used to define configuration and operational data for network management.

3GPP Standards
Technical standards defining specifications for mobile telecommunications systems, including 4G LTE and 5G.
Academic Community
Researchers and educational institutions contributing expertise, research, and evidence to Internet development and governance.
Autonomous System Number (ASN)
Globally unique identifier assigned to an autonomous system for Internet routing.
BGP
Interdomain routing protocol enabling autonomous systems to exchange network reachability information.
Civil Society
Non-governmental organizations, communities, and individuals participating in Internet policy and governance discussions.
Consensus-Based Decision Making
Decision process seeking broad agreement among participants rather than relying solely on majority voting.
Content Regulation
Rules and policies governing what online content may be published, accessed, or distributed.
Cross-Border Data Governance
Policies governing data movement, processing, protection, and access across national borders.
Cybersecurity Regulation
Legal and regulatory requirements designed to protect digital systems, networks, and information.
Data Protection Regulation
Rules governing collection, processing, storage, sharing, and protection of personal data.
DHCP
Network protocol that automatically assigns IP configuration parameters to connected devices.
Digital Governance
Policies, institutions, and processes governing digital technologies, infrastructure, services, and online activities.
Digital Policy
Principles and rules guiding development, deployment, and use of digital technologies and services.
Digital Policy Framework
Structured set of principles, rules, institutions, and processes guiding digital policy.
Digital Rights
Rights and freedoms concerning access, privacy, expression, information, and participation in digital environments.
DNS
Hierarchical naming system translating domain names into IP addresses and other resource information.
DNS Root Zone
Top-level DNS zone containing delegations for all recognized top-level domains.
DNSSEC
DNS security extensions providing cryptographic authentication and integrity for DNS data.
ENUM
DNS-based system mapping telephone numbers to Internet communication services.
EPP
Protocol used by registrars and registries to provision and manage domain names.
Government Stakeholder
Government entity participating in Internet policy, regulation, governance, or infrastructure decisions.
HTTP
Application protocol used for transferring web resources between clients and servers.
HTTPS
HTTP secured with TLS to provide encrypted and authenticated web communications.
IAB
Internet Architecture Board providing architectural oversight and guidance within the Internet technical community.
ICMP
Internet protocol used for network diagnostics, error reporting, and operational control messages.
IEEE Standards
Technical standards developed by IEEE covering networking, communications, computing, and electrical technologies.
IETF
Open standards organization developing Internet protocols and technical standards.
IETF Standards
Internet technical specifications developed through the IETF standards process.
IMAP
Email protocol allowing clients to access and manage messages stored on mail servers.
Internet Advocacy
Activities promoting particular Internet policies, principles, rights, or stakeholder interests.
Internet Advocacy Organization
Organization representing and promoting specific interests, principles, or policies concerning the Internet.
Internet Architecture
Structural design and principles governing how Internet protocols, networks, and systems interoperate.
Internet Architecture Board (IAB)
IETF body providing architectural oversight, advice, and coordination for Internet technology development.
Internet Architecture Governance
Processes and institutions overseeing principles and decisions affecting Internet architectural development.
Internet Architecture Principles
Fundamental design principles guiding development and evolution of Internet architecture.
Internet Assigned Numbers Authority (IANA)
Function responsible for coordinating globally unique Internet identifiers, including names, numbers, and protocol parameters.
Internet Community
Broad collection of organizations, communities, users, and stakeholders participating in the Internet ecosystem.
Internet Corporation for Assigned Names and Numbers (ICANN)
Organization coordinating global DNS, domain name systems, and Internet unique identifiers.
Internet Engineering Task Force (IETF)
Open international community developing voluntary Internet standards through technical working groups.
Internet Exchange Policy
Policies governing participation, interconnection, routing, and operational practices at Internet exchange points.
Internet Governance
Development and application of shared principles, norms, rules, and procedures shaping the Internet.
Internet Governance Forum (IGF)
United Nations-facilitated multistakeholder forum for discussing Internet governance issues.
Internet Governance Framework
Set of principles, institutions, processes, and mechanisms governing Internet-related public policy.
Internet Governance Model
Structural approach defining how Internet governance responsibilities and decisions are organized.
Internet Governance Organization
Organization participating in coordinating, developing, implementing, or discussing Internet governance.
Internet Number Registry
System maintaining records of allocated Internet number resources such as IP addresses and ASNs.
Internet Number Resources
Globally unique identifiers including IP addresses and autonomous system numbers.
Internet Policy
Policies addressing the development, operation, access, security, and use of the Internet.
Internet Policy Development
Processes through which Internet-related policies are researched, debated, formulated, and adopted.
Internet Protocol
Standardized rules enabling communication and data exchange across interconnected networks.
Internet Public Policy
Government and stakeholder policies addressing societal, economic, legal, and technical Internet issues.
Internet Regulation
Governmental rules governing Internet services, infrastructure, platforms, content, and digital activities.
Internet Regulator
Public authority responsible for regulating Internet-related services, markets, infrastructure, or activities.
Internet Research
Systematic investigation of Internet technologies, architecture, usage, performance, and societal impacts.
Internet Research Organization
Organization conducting research into Internet technologies, architecture, operations, or policy.
Internet Research Task Force (IRTF)
Research organization exploring long-term Internet technologies and architectural concepts.
Internet Rights
Rights and freedoms applicable to individuals and communities in digital and online environments.
Internet Routing Registry (IRR)
Distributed database containing routing policy and network registration information.
Internet Standard
Technical specification established through an accepted standards process for interoperable Internet implementation.
Internet Standards
Technical specifications enabling interoperable communication and operation across Internet networks and systems.
Internet Standards Organization
Organization developing or maintaining technical standards used across the Internet.
Internet-Draft
Working document proposing technical ideas or specifications within the IETF process.
Interoperability
Ability of independently developed systems, networks, or technologies to communicate and operate together.
Interoperability Standards
Technical specifications enabling different systems and technologies to communicate and work together.
IP Address Allocation
Process of distributing IP address blocks among organizations according to established policies.
IP Address Assignment
Process assigning specific IP addresses to networks, interfaces, devices, or services.
IPsec
Network-layer security protocol suite providing authentication, integrity, and encryption for IP communications.
IPv4
Internet Protocol version using 32-bit addresses to identify network interfaces and hosts.
IPv6
Internet Protocol version using 128-bit addresses to support a vastly larger address space.
IRTF
Research organization exploring emerging Internet technologies, architecture, and long-term technical challenges.
ITU-T Standards
International telecommunications standards developed by the ITU Telecommunication Standardization Sector.
Lawful Interception
Authorized interception of communications by designated authorities under applicable laws and procedures.
Multistakeholder Governance
Governance approach involving governments, private sector, civil society, and technical communities.
Multistakeholder Internet Governance
Internet governance involving diverse stakeholder groups in policy development and decision-making.
Multistakeholder Model
Governance model distributing participation and decision-making across multiple stakeholder groups.
National Internet Policy
Government policy governing Internet development, access, security, regulation, and digital services nationally.
National Regulatory Authority
Government body responsible for regulating communications, technology, markets, or digital services nationally.
Network Neutrality
Principle that Internet traffic should receive nondiscriminatory treatment regardless of content or source.
Number Resource Policy
Rules governing allocation, registration, transfer, and use of Internet number resources.
Open Standards
Publicly available technical specifications developed through transparent processes and enabling interoperability.
Policy Coordination
Coordination among organizations and stakeholders to align policies, responsibilities, and regulatory approaches.
Policy Development
Process of researching, formulating, consulting on, adopting, and reviewing policies.
Policy Forum
Platform where stakeholders discuss, coordinate, and develop policies concerning specific issues.
POP3
Email protocol allowing clients to retrieve messages from a mail server.
Private Sector
Commercial organizations participating in Internet infrastructure, services, technology, and governance.
Protocol Standardization
Process of developing common technical specifications enabling interoperable network communication.
Public Policy
Government principles and rules addressing societal, economic, legal, and technological issues.
QUIC
Modern encrypted transport protocol designed to provide secure, reliable, and efficient Internet communication.
RDAP
Standard protocol providing structured access to Internet registration and allocation data.
Regional Internet Policy
Internet policies developed or applied across a specific geographic region.
Regional Internet Registry (RIR)
Organization responsible for allocating Internet number resources within a geographic region.
Regional Regulatory Authority
Regulatory body coordinating or enforcing telecommunications and digital policies across a defined region.
Regulatory Authority
Public institution responsible for creating, implementing, and enforcing sector-specific regulations.
Regulatory Compliance
Adherence to applicable laws, regulations, standards, and regulatory requirements.
Regulatory Framework
Structured set of laws, rules, institutions, and procedures governing a sector or activity.
Request for Comments (RFC)
Publication format used to document Internet standards, protocols, technical specifications, and informational material.
Resource Public Key Infrastructure (RPKI)
Cryptographic framework securing Internet number resources and validating route-origin authorizations.
RFC
Document series containing Internet standards, protocols, technical specifications, and informational publications.
ROA (Route Origin Authorization)
Cryptographic authorization specifying which autonomous system may originate a particular IP prefix.
Root Server System
Distributed system providing authoritative DNS responses for the Internet root zone.
RPKI
Infrastructure using cryptographic certificates to validate IP address ownership and route-origin authorizations.
SMTP
Protocol used to transfer email messages between mail clients and servers.
SNMP
Network management protocol used to monitor and manage network devices.
Spectrum Regulation
Rules governing allocation, licensing, and use of radio frequency spectrum.
Stakeholder
Individual, organization, or group affected by or participating in Internet-related decisions.
Standards Development Organization (SDO)
Organization that develops technical standards through established processes and stakeholder participation.
TCP/IP
Foundational protocol suite enabling communication across interconnected Internet networks.
Technical Community
Experts and organizations developing, operating, researching, and maintaining Internet technologies.
Technical Standards
Specifications defining interoperable technical requirements, interfaces, protocols, or implementation practices.
Telecommunications Policy
Policies governing telecommunications infrastructure, services, competition, access, and technology.
Telecommunications Regulation
Rules governing telecommunications operators, services, infrastructure, markets, and spectrum use.
Telecommunications Regulator
Authority responsible for regulating telecommunications operators, services, markets, and infrastructure.
Telecommunications Standards
Technical specifications enabling interoperability among telecommunications networks, equipment, and services.
TLS
Cryptographic protocol providing confidentiality, authentication, and integrity for Internet communications.
Universal Service
Policy principle promoting widespread availability and affordability of essential telecommunications services.
URI
Uniform Resource Identifier identifying a resource through a standardized naming or addressing syntax.
URI Schemes
Defined syntaxes specifying how different types of resources are identified and addressed.
URL
URI identifying a resource and providing information about its network location or retrieval method.
URN
URI scheme providing persistent, location-independent names for identified resources.
W3C Standards
Web standards developed by the World Wide Web Consortium to promote interoperability and accessibility.
WHOIS
Legacy query service providing registration information about Internet domains and network resources.
World Wide Web Consortium (W3C)
International organization developing open standards for the World Wide Web.