mark22k
/
dn42-wiki
mirror of https://codeberg.org/mark22k/dn42-wiki.git


			
							123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231
							<!DOCTYPE html>
<html lang="en">
    <head>
<meta charset="UTF-8">


<title>Address-space | dn42 wiki</title>

<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="robots" content="index, follow">
<meta name="keywords" content="dn42,wiki,routing,bgp">

<link rel="canonical" href="https://dn42.obl.ong/howto/Address-Space.html">
<link rel="icon" type="image/x-icon" href="/favicon.ico">
<link rel="shortcut icon" type="image/x-icon" href="/favicon.ico">

<link rel="author" type="text/html" href="/docs/people">

<link rel="stylesheet" href="/css/normalize.css">
<link rel="stylesheet" href="/css/simple.min.css">
<link rel="stylesheet" href="/css/style.css">
<link rel="stylesheet" href="/css/menu.css">


</head>
    
    <body>

        <header>


<b>dn42 wiki / Address-space</b>

<div id="dn42_header">
    
    <p><a href="/"><img src="/dn42.png" alt="dn42" /></a></p>

</div>
</header>

        <main>
            <p>DN42 uses network addresses in the <a href="https://tools.ietf.org/html/rfc1918">rfc1918</a> and <a href="https://tools.ietf.org/html/rfc4193">ULA</a> ranges. These are described in detail within the sections below.</p>

<p>The <a href="https://git.dn42.dev/dn42/registry">DN42 registry</a> is the authoritative source of information on address space assignment. Within the registry, the DN42 address space is divided in to blocks based on <em>policies</em> that define how the addresses may be used. Policies are defined in <code class="language-plaintext highlighter-rouge">inetnum</code> and <code class="language-plaintext highlighter-rouge">inet6num</code> objects and can be:</p>

<ul>
  <li><strong>open</strong> - users may request prefixes in this range, subject to any constraints that are described in the <code class="language-plaintext highlighter-rouge">remark</code> attributes</li>
  <li><strong>closed</strong> - these ranges cannot be assigned</li>
  <li><strong>reserved</strong> - these ranges are reserved for future use</li>
  <li><strong>ask</strong> - these ranges are for specific uses, please ask on the mailing list before requesting assignments</li>
</ul>

<p>A simple way to see all the active policies in the registry is to search the registry content for policy attributes:</p>

<div class="language-sh highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="nb">grep</span> <span class="nt">-r</span> ^policy data/inet<span class="o">{</span>,6<span class="o">}</span>num/
</code></pre></div></div>

<p>The <a href="https://git.dn42.dev/dn42/registry/src/master/data/filter.txt">filter.txt</a> and <a href="https://git.dn42.dev/dn42/registry/src/master/data/filter6.txt">filter6.txt</a> files within the registry detail the network wide constraints on what address ranges are in use together with the global limits on what can be announced.</p>

<p><code class="language-plaintext highlighter-rouge">inetnum</code> and <code class="language-plaintext highlighter-rouge">inet6num</code> objects within the registry are used to describe the allocation of address space to users. <code class="language-plaintext highlighter-rouge">route</code> and <code class="language-plaintext highlighter-rouge">route6</code> objects in the registry are used to validate routing announcements through <a href="/howto/Bird2#route-origin-authorization">ROA</a>.</p>

<p>In addition to the native DN42 address ranges, the registry also contains allocations for the address space used by affiliate networks. These are updated by a regular <a href="https://git.dn42.dev/dn42/registry-sync">sync script</a>.</p>

<p>Globally routable prefixes are not supported in DN42; they are denied via the registry filter{6,}.txt files and many networks will filter both announcements and traffic for prefixes that are outside of the allowable ranges.</p>

<h1 id="ipv6-address-space">IPv6 Address Space</h1>

<p>DN42 uses the fd00::/8 ULA range for IPv6 addresses. Apart from a block of addresses reserved for anycast (fd42:d42:d42::/48), the whole fd00::/8 block has an open policy and users are free to request any prefix in this range, that is not already allocated.</p>

<p><strong>The DN42 registry is not authoritative for the fd00::/8 range</strong></p>

<p>DN42 is interconnected with other networks, like icvpn, which also use the same ULA range and many users will also use this range for their own networks. A registration in the dn42 registry cannot prevent IPv6 conflicts, so a fully random prefix (see <a href="https://tools.ietf.org/html/rfc4193">RFC4193</a>) is strongly recommended. If an address conflict is found, then needing to renumber your network is no fun.</p>

<h1 id="ipv4-address-space">IPv4 Address Space</h1>

<p>DN42 uses the 172.20.0.0/14 range for IPv4 addresses. As with the public internet, IPv4 space is more limited and users are encouraged to conserve space where possible. A typical assignment in DN42 is a /27 and any requests for assignments larger than /24 must provide justification.</p>

<p>Unlike the IPv6 address space, the DN42 IPv4 space is not fully open for assignment to users; some ranges are intended for specific uses and other ranges are reserved. See the policy section, below. Users should always check the policy in the registry before requesting a prefix to be assigned.</p>

<p>There are other IPv4 ranges in use within DN42 related to the affiliate networks, see the <a href="https://git.dn42.dev/dn42/registry/src/master/data/filter.txt">filter.txt</a> file in the registry.</p>

<h2 id="ipv4-policies">IPv4 Policies</h2>

<p>The diagram below shows the allocation policies for the DN42 address space.</p>

<p><img src="/howto/images/PolicyMap.png" alt="Policy Map Image" /></p>

<p>Specific policy restrictions:</p>

<table>
  <thead>
    <tr>
      <th>Prefix</th>
      <th>Usage</th>
    </tr>
  </thead>
  <tbody>
    <tr>
      <td>172.20.0.0/24<br />172.21.0.0/24<br />172.22.0.0/24<br />172.23.0.0/24</td>
      <td>Reserved for anycast addresses</td>
    </tr>
    <tr>
      <td>172.20.240.0/20<br />172.22.240.0/20</td>
      <td>Reserved for transfer networks</td>
    </tr>
    <tr>
      <td>172.20.64.0/18</td>
      <td>Reserved for allocations larger than /23, up to /21</td>
    </tr>
    <tr>
      <td>172.22.0.0/18</td>
      <td>Reserved for allocations of /24 or larger, up to /21</td>
    </tr>
    <tr>
      <td>172.23.16.0/21</td>
      <td>Closed to new allocations</td>
    </tr>
    <tr>
      <td>172.21.0.0/18<br />172.21.128.0/17<br />172.22.192.0/18</td>
      <td>Reserved for future use</td>
    </tr>
  </tbody>
</table>


            <div id="menu-container" class="menu-container">
                <hr>
                <div id="menu" class="menu">
                    
                    <ul>
  <li><a href="/Home">Home</a>
    <ul>
      <li><a href="/howto/Getting-Started">Getting Started</a></li>
      <li><a href="/howto/Registry-Authentication">Registry Authentication</a></li>
      <li><a href="/howto/Address-Space">Address Space</a></li>
      <li><a href="/howto/BGP-communities">BGP communities</a></li>
      <li><a href="/FAQ">FAQ</a></li>
    </ul>
  </li>
  <li>How-To
    <ul>
      <li><a href="/howto/wireguard">Wireguard</a></li>
      <li><a href="/howto/openvpn">Openvpn</a></li>
      <li><a href="/howto/IPsec-with-PublicKeys">IPsec With Public Keys</a></li>
      <li><a href="/howto/tinc">Tinc</a></li>
      <li><a href="/howto/GRE-on-FreeBSD">GRE on FreeBSD</a></li>
      <li><a href="/howto/GRE-on-OpenBSD">GRE on OpenBSD</a></li>
      <li><a href="/howto/IPv6-Multicast">IPv6 Multicast (PIM-SM)</a></li>
      <li><a href="/howto/multicast">SSM Multicast</a></li>
      <li><a href="/howto/mpls">MPLS</a></li>
      <li><a href="/howto/Bird2">Bird2</a></li>
      <li><a href="/howto/frr">FRRouting</a></li>
      <li><a href="/howto/OpenBGPD">OpenBGPD</a></li>
      <li><a href="/howto/mikrotik">Mikrotik RouterOS</a></li>
      <li><a href="/howto/EdgeOS-Config">EdgeRouter</a></li>
      <li><a href="/howto/Static-routes-on-Windows">Static routes on Windows</a></li>
      <li><a href="/howto/networksettings">Universal Network Requirements</a></li>
      <li><a href="/howto/vyos1.4.x">VyOS</a></li>
      <li><a href="/howto/nixos">NixOS</a></li>
    </ul>
  </li>
  <li>Services
    <ul>
      <li><a href="/services/IRC">IRC</a></li>
      <li><a href="/services/Whois">Whois registry</a></li>
      <li><a href="/services/DNS">DNS</a></li>
      <li><a href="/services/IX-Collection">IX Collection</a></li>
      <li><a href="/services/Clearnet-Domains">Public DNS</a></li>
      <li><a href="/services/Looking-Glasses">Looking Glasses</a></li>
      <li><a href="/services/Automatic-Peering">Automatic Peering</a></li>
      <li><a href="/services/Repository-Mirrors">Repository Mirrors</a></li>
      <li><a href="/services/Distributed-Wiki">Distributed Wiki</a></li>
      <li><a href="/services/Certificate-Authority">Certificate Authority</a></li>
      <li><a href="/services/Route-Collector">Route Collector</a></li>
    </ul>
  </li>
  <li>Internal
    <ul>
      <li><a href="/internal/Internal-Services">Internal services</a></li>
      <li><a href="/internal/Interconnections">Interconnections</a></li>
      <li><a href="/internal/APIs">APIs</a></li>
      <li><a href="/internal/ShowAndTell">Show and Tell</a></li>
      <li><a href="/internal/Historical-Services">Historical services</a></li>
    </ul>
  </li>
  <li>Historical
    <ul>
      <li><a href="/historical/Bird">Bird 1</a></li>
      <li><a href="/historical/Quagga">Quagga</a></li>
    </ul>
  </li>
  <li>External Tools
    <ul>
      <li><a href="https://paste.dn42.us">Paste Board</a></li>
      <li><a href="https://git.dn42.dev">Git Repositories</a></li>
    </ul>
  </li>
</ul>

<hr />


                </div>
            </div>
        </main>
        
        <footer><div class="center">
    <div id="dn42_footer">
        
        <table>
  <tbody>
    <tr>
      <td>Hosted by: <a href="mailto:dn42@burble.com">BURBLE-MNT</a>, <a href="mailto:nurtic-vibe@grmml.net">GRMML-MNT</a>, <a href="mailto:xuu@dn42.us">XUU-MNT</a>, <a href="mailto:janeric@ortgies.it">JAN-MNT</a>, <a href="mailto:lare@lare.cc">LARE-MNT</a>, <a href="mailto:danny@saru.moe">SARU-MNT</a>, <a href="mailto:androw95220@gmail.com">ANDROW-MNT</a>, <a href="mailto:dn42@mk16.de">MARK22K-MNT</a></td>
      <td>Accessible via: <a href="https://wiki.dn42">dn42</a>, <a href="https://dn42.dev/">dn42.dev</a>, <a href="https://dn42.eu/">dn42.eu</a>, <a href="https://wiki.dn42.us/">wiki.dn42.us</a>, <a href="https://dn42.de/">dn42.de</a> (IPv6-only), <a href="https://dn42.cc/">dn42.cc</a> (wiki-ng), <a href="https://dn42.wiki/">dn42.wiki</a>, <a href="https://dn42.pp.ua/">dn42.pp.ua</a>, <a href="https://dn42.obl.ong/">dn42.obl.ong</a></td>
    </tr>
  </tbody>
</table>

    </div>
</div>
</footer>

        
    </body>

</html>