Control Plane Separation

The control plane and service plane coexist on the same physical infrastructure, but they never share access paths, credentials, or network exposure.

Management access is allowed only from the internal management network (10.66.0.0/24).

Public-facing services are reachable from the internet. Management services are not.

A compromise of a service endpoint does not imply control-plane access.

This separation is enforced at:

• Network level
• Service binding level
• Account and key level
• Logging and audit level

go to Home : glitter.kr