3 ms·

> Afair Google just ran irc on their corp network which was completely separate from prod I thought Google didn't have a "corp" network because of their embrac

• dilyevsky 3y ago
  I don't think zero-trust prohibits network segmentation for redundancy or due to geographical constraints etc. It's mainly about how you gain access.
  • Moto7451 3y ago
    Correct. At an old job we did zero trust corp on a different AWS region and account. The admin site was a different zero trust zone in prod region/account and was supposed to eventually become another AWS account in another region (for cost purposes). I can’t say if any of this was ideal but it did work unobtrusively.
• shanemhansen 3y ago
  They do. But I'd say most employees go their whole career without needing to do anything that requires a VPN. It's basically all web based access through what is, at the end of the day, a http proxy. SREs need to be ready for stuff like "hey, what if the big proxy we all use to access internal resources is down?".
• foobazgt 3y ago
  Way back when, for a while, our local (Google) office's internet access ran off the same physical lines as the local prod datacenter traffic. So, any time there was a datacenter traffic outage of any kind, our office was also out. There weren't a lot of outages of that variant, but we knew immediately when one was happening. It's not particularly fun to have all of your access go out concurrently with a prod outage.