Skip to content

Production Network

dhellstern edited this page Jan 30, 2022 · 24 revisions

Introduction

For the final DN42 separate, there are two main networks, the Management and the DN42 networks. The management network provides supporting services (mainly ROA) to the router, but does not expose them to the DN42 network. The management network also does not make use of DN42 address space.

Management

The management network uses the address space 172.19.255.240/28, which precedes the address space used by DN42, 172.20.0.0/14.

Hostname Description IP Address
- Router 172.19.255.241
roa-1 Primary RTR cache server 172.19.255.242
roa-2 Fallback RTR cache server 172.19.255.243
roa-srv ROA signature database generator 172.19.255.244
mon Monitoring and alerts server 172.19.255.245

DN42

The DN42 network is comprised of two separate networks, one providing services, and one used to access the network without using NAT. These networks uses the address space from AS4242421878, 172.23.119.64/27 and fde6:a552:874f::/48.

Services

The services network uses 172.23.119.64/28 (the first half of the IPv4 allocation) and fde6:a552:874f:1c2d::/64. EUI-64 is used for predictable address generation based on router advertisements.

Hostname Description IPv4 Address
- Router 172.23.119.65
ns-1 Primary authoritative DNS server 172.23.119.66
ns-2 Fallback authoritative DNS server 172.23.119.67
dns-1 Primary DNS resolver 172.23.119.68
dns-2 Fallback DNS resolver 172.23.119.69
lg BGP Looking Glass 172.23.119.70

Clients

The client network uses 172.23.119.80/28 (the second half of the IPv4 allocation) and fde6:a552:874f:9a3b::/64.

Clone this wiki locally