summaryrefslogtreecommitdiff
path: root/docs/network.rst
blob: 834e219cb8b0c23717639a2366e28569c0a89634 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
Network
=======

.. this page contains information from the IP address list at
   https://wiki.cacert.org/SystemAdministration/IPList

.. seealso::

   https://wiki.cacert.org/SystemAdministration/IPList


Internet
--------

CAcert has a public Internet IPv4 address range and some of the Internet IP
addresses are mapped to the infrastructure systems.

The infrastructure systems use IPv4 addresses from the
:ip:v4range:`213.154.225.0/24` subnet.

IPv6 connectivity is also available. The infrastructure IPv6 addresses are
taken from the :ip:v6range:`2001:7b8:616:162:1::/80` and
:ip:v6range:`2001:7b8:616:162:2::/80` ranges.


Intranet
--------

CAcert's infrastructure systems are using a private network range that is
accessible from other CAcert systems. The Intranet IPv4 addresses are in the
:ip:v4range:`172.16.2.0/24` subnet.


Internal
--------

The infrastructure host :doc:`infra02` has a local bridge interface *br0* that
is used to connect the containers on that machine and allows explicit routing
as well as services that are purely internal and are not reachable from the
Internet or Intranet machines in the IP range mentioned above.

The local bridge uses IPv4 addresses from the :ip:v4range:`10.0.0.0/24` range.
IPv6 addresses are directly assigned to containers from the
:ip:v6range:`2001:7b8:616:162:2::/80` range.