Network¶

Office network¶

For the network infrastructure at the office, we’re using UniFi equipment:

To manage the UniFi devices, use the dedicated UniFi controller, i.e. UniFi cloud key.

We’re using 10.0.0.0/8 for our private network ranges.

All physical networks (clients & servers) use IPs from the 10.0.0.0/12 subnet.

To see the network subnets, check out the UniFi Cloud Key:

All Docker networks use IPs from the 10.16.0.0/12 subnet:

Subnet	Usage
`10.16.0.0/16`	Default Docker bridge
`10.17.0.0/16`	Proxy network
`10.18.0.0/16`	Compose project bridge networks

All other LAN networks use IPs from the 10.32.0.0/12 subnet:

Subnet	Usage
`10.32.0.0/24`	cudy OTG mobile router
`10.32.1.0/24`	Netgear Nethawk mobile router
`10.40.0.0/16`	Reserved subnet for local networking

Hint

Try to use the 10.40.0.0/16 for your network subnets on your local machine.

The office LAN IPs are managed in the UniFi Cloud Key.

The server LAN IPs are managed in Ansible.

Hint

You can use the create_host_list.yml playbook to create a host_list.txt file containing all host IPs.

To protect our network, we’re using firewalls. Check out the Firewall chapter for more information.

To interconnect our networks and access them remotely, we’re using VPNs. Check out the VPN chapter for more information.

At the office we have a fixed and native IPv4 address 84.254.96.223.

We also have a routed IPv4 subnet 217.71.252.24/29 over the native IP address.

At the datacenter, we have a fixed and native IPv4 address 195.201.104.241. It’s assigned to the Proxmox.

We also have a routed IPv4 subnet 46.4.219.16/28 over the native IP address:

The server WAN IPs are managed in Ansible.

Hint

You can use the create_host_list.yml playbook to create a host_list.txt file containing all host IPs.