You are browsing a read-only backup copy of Wikitech. The live site can be found at wikitech.wikimedia.org

IP and AS allocations: Difference between revisions

From Wikitech-static
Jump to navigation Jump to search
imported>Ayounsi
(Add eqsin AS#)
imported>Ayounsi
(add k8s community)
 
(37 intermediate revisions by 7 users not shown)
Line 1: Line 1:
{{Navigation Wikimedia infrastructure|expand=network}}
This page lists '''IP addresses and Autonomous system numbers (ASN)''' allocated by Wikimedia Foundation.
== Public IPs ==
== Public IPs ==
{| class="wikitable"
{| class="wikitable"
|-
|-
! RIR !! Subnet !! RPKI/ROA
! RIR !! Subnet  
|-
|-
| RIPE || 185.15.56.0/22 || Yes, both AS#, up to /24
| RIPE || 185.15.56.0/22  
|-
|-
| RIPE || 2a02:ec80::/29 || Yes, both AS#, up to /48
| RIPE || 2a02:ec80::/29  
|-
|-
| RIPE || 91.198.174.0/24 ||Yes, both AS#, up to /24
| RIPE || 91.198.174.0/24  
|-
|-
| ARIN || 2620:0:860::/46 || Yes, both AS#, up to /48
| ARIN || 2620:0:860::/46  
|-
|-
| ARIN || 198.35.26.0/23 || Yes, both AS#, up to /24
| ARIN || 198.35.26.0/23  
|-
|-
| ARIN || 208.80.152.0/22 || Yes, both AS#, up to /24
| ARIN || 208.80.152.0/22  
|-
|-
|APNIC
|APNIC
|103.102.166.0/24
|103.102.166.0/24
|Yes, main AS#
|-
|-
|APNIC
|APNIC
|2001:df2:e500::/48
|2001:df2:e500::/48
|Yes, main AS#
|}
|}


=== IPV4 ===
=== IPV4 ===
* 185.15.56.0/22 - RIPE
Moved to [https://netbox.wikimedia.org/ipam/prefixes/ Netbox].
** 185.15.56.0/23 - UNALLOCATED
** 185.15.58.0/24 - reserved for anycast
** 185.15.59.0/24 - (es|kn)ams infrastructure - very little use
 
* 91.198.174.0/24 - RIPE
** 91.198.174.0/25 - public1-esams
** 91.198.174.128/26 - UNALLOCATED
** 91.198.174.192/27 - LVS service IPs
** 91.198.174.224/27 - infrastructure
* 198.35.26.0/23 - ARIN
** 198.35.26.0/24 - ulsfo
*** 198.35.26.0/28 - public1-ulsfo
*** 198.35.26.96/27 - LVS service IPs
*** 198.35.26.128/26 - UNALLOCATED
*** 198.35.26.192/27 - infrastructure
** 198.35.27.0/24 - reserved for anycast
 
* 208.80.152.0/22 - ARIN
** 208.80.152.0/24 - codfw
*** 208.80.152.0/25 - UNALLOCATED
*** 208.80.152.128/26 - UNALLOCATED
*** 208.80.152.192/27 - UNALLOCATED
*** 208.80.152.224/28 - frack-codfw
*** 208.80.152.240/28 - sandbox1-a-codfw
** 208.80.153.0/24 - codfw
*** 208.80.153.0/27 - public1-a-codfw
*** 208.80.153.32/27 - public1-b-codfw
*** 208.80.153.64/27 - public1-c-codfw
*** 208.80.153.96/27 - public1-d-codfw
*** 208.80.153.128/27 - labtest public
*** 208.80.153.192/27 - infrastructure
*** 208.80.153.224/27 - LVS service IPs
** 208.80.154.0/24 - eqiad
*** 208.80.154.0/26 - public1-a-eqiad
*** 208.80.154.64/26 - public1-c-eqiad
*** 208.80.154.128/26 - public1-b-eqiad
*** 208.80.154.192/27 - infrastructure
*** 208.80.154.224/27 - LVS service IPs
** 208.80.155.0/24 - eqiad
*** 208.80.155.0/27 - frack-eqiad
*** 208.80.155.32/27 - UNALLOCATED
*** 208.80.155.64/28 - sandbox1-b-eqiad
*** 208.80.155.80/28 - UNALLOCATED
*** 208.80.155.96/27 public1-d-eqiad
*** 208.80.155.128/25 - labs virtualization - floating IPs


=== IPv6 ===
=== IPv6 ===
* 2a02:ec80::/29 - RIPE
Moved to [https://netbox.wikimedia.org/ipam/prefixes/ Netbox].
** 2a02:ec80:500:1::/64 - esams OOB subnet
 
* 2620:0:860::/46 - ARIN
** 2620:0:860::/48 - codfw
*** 2620:0:860:0::/56 - codfw public
**** 2620:0:860:1::/64 - public1-a-codfw
**** 2620:0:860:2::/64 - public1-b-codfw
**** 2620:0:860:3::/64 - public1-c-codfw
**** 2620:0:860:4::/64 - public1-d-codfw
*** 2620:0:860:100::/56 - codfw private
**** 2620:0:860:101::/64 - private1-a-codfw
**** 2620:0:860:102::/64 - private1-b-codfw
**** 2620:0:860:103::/64 - private1-c-codfw
**** 2620:0:860:104::/64 - private1-d-codfw
*** NOT COMPLETE
** 2620:0:861::/48 - eqiad
*** 2620:0:860:0::/56 - eqiad public
**** 2620:0:860:1::/64 - public1-a-eqiad
**** 2620:0:860:2::/64 - public1-b-eqiad
**** 2620:0:860:3::/64 - public1-c-eqiad
**** 2620:0:860:4::/64 - public1-d-eqiad
*** 2620:0:860:100::/56 - eqiad private
**** 2620:0:860:101::/64 - private1-a-eqiad
**** 2620:0:860:102::/64 - private1-b-eqiad
**** 2620:0:860:103::/64 - private1-c-eqiad
**** 2620:0:860:104::/64 - private1-d-eqiad
*** NOT COMPLETE
** 2620:0:862::/48 - esams
*** 2620:0:862:1::/64 - public1-esams
*** 2620:0:862:102::/64 - private2-esams
*** NOT COMPLETE
** 2620:0:863::/48 - ulsfo
*** 2620:0:863:1::/64 - public1-ulsfo
*** 2620:0:863:101::/64 - private1-ulsfo
*** NOT COMPLETE


== RFC1918 IPs ==
== RFC1918 IPs ==
* 10.0.0.0/8
Moved to [https://netbox.wikimedia.org/ipam/prefixes/ Netbox].
** 10.2.0.0/16 - LVS VIPs
*** 10.2.1.0/24 - codfw LVS low-traffic (internal) services
*** 10.2.2.0/24 - eqiad LVS low-traffic (internal) services
*** 10.2.3.0/24 - esams LVS low-traffic (internal) services
*** 10.2.4.0/24 - ulsfo LVS low-traffic (internal) services - unused
** 10.20.0.0/24 - private1-esams
** 10.21.0.0/24 - mgmt-esams
** 10.64.0.0/12 - eqiad
*** 10.64.0.0/22 - private1-a-eqiad
*** 10.64.4.0/24 - labs-support1-a-eqiad
*** 10.64.5.0/24 - analytics1-a-eqiad
*** 10.64.16.0/22 - private1-b-eqiad
*** 10.64.20.0/24 - labs-hosts1-b-eqiad
*** 10.64.21.0/24 - analytics1-b-eqiad
*** 10.64.32.0/22 - private1-c-eqiad
*** 10.64.36.0/24 - analytics1-c-eqiad
*** 10.64.37.0/24 - labs-support1-c-eqiad
*** 10.64.40.0/23 - frack
*** 10.64.48.0/22 - private1-d-eqiad
*** 10.64.53.0/24 - analytics1-d-eqiad
*** 10.64.64.0/21 - kubernetes eqiad pod IPs reservation
*** 10.64.72.0/24 - kubernetes eqiad service IPs reservation
*** 10.64.75.0/24 - kubernetes staging (eqiad) pod IPs reservation
*** 10.64.76.0/24 - kubernetes staging (eqiad) service IPs reservation
*** 10.65.0.0/16 - management
*** 10.68.0.0/24 - labs-instances1-a-eqiad
*** 10.68.16.0/21 - labs-instances1-b-eqiad
*** 10.68.32.0/24 - labs-instances1-c-eqiad
*** 10.68.48.0/24 - labs-instances1-d-eqiad
** 10.128.0.0/16 - ulsfo
*** 10.128.0.0/24 - private1-ulsfo
*** 10.128.128.0/17 - ulsfo mgmt
** 10.192.0.0/12 - codfw
*** 10.192.0.0/22 - private1-a-codfw
*** 10.192.4.0/24 - labs-hosts1-a-codfw - RESERVED
*** 10.192.5.0/24 - labs-support1-a-codfw - RESERVED
*** 10.192.16.0/22 - private1-b-codfw
*** 10.192.20.0/24 - labs-hosts1-b-codfw
*** 10.192.21.0/24 - labs-support1-b-codfw
*** 10.192.32.0/22 - private1-c-codfw
*** 10.192.36.0/24 - labs-hosts1-c-codfw - RESERVED
*** 10.192.37.0/24 - labs-support1-c-codfw - RESERVED
*** 10.192.48.0/22 - private1-d-codfw
*** 10.192.52.0/24 - labs-hosts1-d-codfw - RESERVED
*** 10.192.53.0/24 - labs-support1-d-codfw - RESERVED
*** 10.192.64.0/21 - kubernetes codfw pod IPs reservation
*** 10.192.72.0/24 - kubernetes codfw service IPs reservation
*** 10.193.0.0/16 - mgmt-codfw
*** 10.195.0.0/25 - frack.codfw subnets
*** 10.196.0.0/24 - labs-instances1-a-codfw
*** 10.196.16.0/21 - labs-instances1-b-codfw
*** 10.196.32.0/24 - labs-instances1-c-codfw
*** 10.196.48.0/24 - labs-instances1-d-codfw


== Multicast ==
== Multicast ==
[[Multicast HTCP purging#Multicast Addressing]]
As of July 16th 2020, there is no more multicast/PIM in the infra.
 
== Autonomous System Numbers ==
Moved to [https://netbox.wikimedia.org/ipam/asns/ Netbox]
 
Private ranges: 64512-65534 and 4200000000-4294967294 ([[rfc:6996|RfC 6996]])


== Public AS ==
== BGP communities ==
{| class="wikitable"
{| class="wikitable sortable"
!RIR
|+
!AS#
!Community
!Name
!Allocation
!Allocation
!Action
|-
|-
|ARIN
|14907:0
|14907
|AVOIDED_PATH
|main AS
|Manual as-path-group
|-
|local-pref 50
|RIPE
|43821
|
|}
 
== Private AS ==
{| class="wikitable"
!AS#
!Allocation
|-
|-
|64600
|14907:2
|PyBal
|[[phab:T262517|PEERING_ROUTE_PRIMARY]]
|Prefixes learned from an IX we want to prefer (when multiple IXs are present at a site)
|local-pref 260
|-
|-
|64601
|14907:3
|Kubernetes eqiad
|PEERING_ROUTE
|Prefixes learned from IX peers
|local-pref 250
|-
|-
|64602
|14907:4
|Kubernetes codfw
|TRANSIT_ROUTE
|Prefixes learned from transit peers
|none, info only
|-
|-
|64603
|14907:5
|Kubernetes stage
|PARTIAL_TRANSIT_ROUTE
|Unused
|none
|-
|-
|64605
|14907:6
|Anycast
|PEER_INTERNAL
|Unused
|local-pref 290
|-
|-
|64700
|14907:7
|frack-eqiad
|PEER_CUSTOMER
|WMF customers prefixes (SF office, WMCS)
|local-pref 250
|-
|-
|64701
|14907:8
|frack-codfw
|PEER_PRIVATE_PEER
|Prefixes learned from private peers (similar to IX peers)
|local-pref 270
|-
|-
|65001
|14907:9
|confed-eqiad-eqord
|PEER_PUBLIC_PEER
|Unused
|none
|-
|-
|65002
|14907:10
|confed-eqdfw-codfw
|PREFERRED_TRANSIT
|Manual as-path-group
|local-pref 180
|-
|-
|65003
|14907:11
|confed-esams
|SELECTED_PATH
|Manual as-path-group
|local-pref 350
|-
|-
|65004
|14907:12
|confed-ulsfo
|DIRECT_PEER
|Prioritize directly connected peers - [[phab:T280054|T280054]]
|local-pref 280
|-
|-
|65005
|14907:13
|confed-eqsin
|ANYCAST
|Public anycast prefixes - [[phab:T288843|T288843]]
|none
|-
|-
|65517
|14907:14
|Equinix
|KUBERNETES
|Prefixes from k8s/Calico nodes - [[phab:T328523|T328523]]
|export to other k8s nodes
|}
|}
[[Category:SRE Infrastructure Foundations]]
[[Category:Network]]

Latest revision as of 13:18, 17 March 2023

This page lists IP addresses and Autonomous system numbers (ASN) allocated by Wikimedia Foundation.

Public IPs

RIR Subnet
RIPE 185.15.56.0/22
RIPE 2a02:ec80::/29
RIPE 91.198.174.0/24
ARIN 2620:0:860::/46
ARIN 198.35.26.0/23
ARIN 208.80.152.0/22
APNIC 103.102.166.0/24
APNIC 2001:df2:e500::/48

IPV4

Moved to Netbox.

IPv6

Moved to Netbox.

RFC1918 IPs

Moved to Netbox.

Multicast

As of July 16th 2020, there is no more multicast/PIM in the infra.

Autonomous System Numbers

Moved to Netbox

Private ranges: 64512-65534 and 4200000000-4294967294 (RfC 6996)

BGP communities

Community Name Allocation Action
14907:0 AVOIDED_PATH Manual as-path-group local-pref 50
14907:2 PEERING_ROUTE_PRIMARY Prefixes learned from an IX we want to prefer (when multiple IXs are present at a site) local-pref 260
14907:3 PEERING_ROUTE Prefixes learned from IX peers local-pref 250
14907:4 TRANSIT_ROUTE Prefixes learned from transit peers none, info only
14907:5 PARTIAL_TRANSIT_ROUTE Unused none
14907:6 PEER_INTERNAL Unused local-pref 290
14907:7 PEER_CUSTOMER WMF customers prefixes (SF office, WMCS) local-pref 250
14907:8 PEER_PRIVATE_PEER Prefixes learned from private peers (similar to IX peers) local-pref 270
14907:9 PEER_PUBLIC_PEER Unused none
14907:10 PREFERRED_TRANSIT Manual as-path-group local-pref 180
14907:11 SELECTED_PATH Manual as-path-group local-pref 350
14907:12 DIRECT_PEER Prioritize directly connected peers - T280054 local-pref 280
14907:13 ANYCAST Public anycast prefixes - T288843 none
14907:14 KUBERNETES Prefixes from k8s/Calico nodes - T328523 export to other k8s nodes