Network¶

Office network¶

For the network infrastructure at the office, we’re using UniFi equipment:

To manage the UniFi devices, use the dedicated UniFi controller, resp. UniFi cloud key.

We’re using 10.0.0.0/8 for our private network ranges.

All physical networks are assigned IPs from the 10.0.0.0/12 subnet.

To see the network subnets, check out the UniFi Cloud Key:

All Docker networks are assigned IPs from the 10.16.0.0/12 subnet:

Subnet	Usage
`10.16.0.0/16`	Default Docker bridge
`10.17.0.0/16`	Proxy network
`10.18.0.0/16`	Compose project bridge networks

The office LAN IPs are managed in the UniFi Cloud Key.

The server LAN IPs are managed in Ansible.

Hint

You can use the create_host_list.yml playbook to create a host_list.txt file containing all host IPs.

To protect our network, we’re using firewalls. Check out the Firewall chapter for more information.

To interconnect our networks, resp. access them from remote, we’re using VPNs. Check out the VPN chapter for more information.

At the office we’ve a fixed & native IPv4 address 84.254.96.223.

We also have a routed IPv4 subnet 217.71.252.24/29 over the native IP address.

At the datacenter, we’ve a fixed & native IPv4 address 195.201.104.241. It’s assigned to the Proxmox.

We also have a routed IPv4 subnet 46.4.219.16/28 over the native IP address:

The server WAN IPs are managed in Ansible.

Hint

You can use the create_host_list.yml playbook to create a host_list.txt file containing all host IPs.