https://www.sans.org/reading-room/whitepapers/bestprac/secure-network-design-micro-segmentation-36775