jbpadgett

I am experiencing dissonance between developers, security, and infrastructure teams on the topic of whether to do network layer segmentation for DEV and PROD environments.

Security and Infra folks say yes and want firewalls between the environments with different levels of change control.

Developers say no and argue that different VMs/containers are sufficient and don't see value in having firewalls between DEV and PROD.

I see value on both sides of this argument but would love to know what others are doing here.