In this illustration, we see a cloud labeled "Administered network" to the left and a smaller cloud labeled "Public Internet" to the right. The administered network includes a laptop connected to a link-layer switch, which is connected to a router, which connects to a second link-layer switch, which connects to a server and a router and a second server. To the right of the server, at the right-most edge of the administered network, is a large pane of glass separating the network from the public Internet.