Air-gapped

Infrastructure
About 1 min read

Refers to the highest level of security environment that is completely physically disconnected from external networks and the internet to fundamentally block data leakage and external intrusion.

Also known as
Physical Network IsolationClosed NetworkAir-gapIsolated Network

Detailed explanation

Air-gapping is a design method that helps improve security by removing physical and logical connections between information systems. When adopting AI systems, an air-gapped environment ensures that model deployment, data training, and real-time inference are performed solely within an independent internal infrastructure that is not connected to the external internet. This fundamentally eliminates the risk of transmitting an organization's core secrets or sensitive personal information to external cloud servers or third-party APIs, making it essential in industries that require major security regulations and Data Sovereignty, such as defense, finance, and public institutions. Modern LLM platforms support the stable operation of advanced AI models even in these isolated network environments by providing offline license authentication, local container registry mirroring, and model weight updates via physical storage media.

Why It Matters in Tool Selection

Most modern AI tools are designed assuming an internet connection for cloud-based API calls or license verification. However, in enterprise environments where security is critical, there are times when not a single byte of data should leave for an external network. Whether air-gapping is supported becomes a key criterion for determining if the tool can perform all its functions in an 'isolated state' within a closed network environment.

What to Check When Adopting Tools

  • Can licenses be activated and renewed in a local environment without an internet connection?
  • Does it provide an official guide for transferring (Offline Import) model weights and container images into the closed network?
  • Does it provide independently installable packages without relying on package managers or external library dependencies?
  • Is a manual update process via physical media (such as USB) established for security patches and model updates?

Use Cases

A typical example is an environment in national security facilities or core data centers of the financial sector where all external network cables are physically removed, and LLMs are installed only on internal servers to perform internal report summarization and data analysis tasks.