A data diode uses physical properties, often an optical transmitter and receiver, to make a return channel impossible rather than merely forbidden by software. It can allow approved information into an isolated environment without giving that environment a network path back out.
The device controls direction, not content quality. Incoming records still require authentication, validation, malware checks and quarantine before trusted systems accept them.
Acronyms and aliases
unidirectional network gateway synonymone-way data diode variant
Related terms
Frequently asked questions
How is a data diode different from a firewall?
A firewall enforces software rules for network traffic, while a data diode physically permits communication in only one direction.
Does a data diode validate incoming data?
No. It enforces one-way flow, so separate validation and quarantine are still needed for incoming content.
