mdw@git.distorted.org.uk Git - zones/blob - hosts.lisp

   1 ;;; -*-lisp-*-
   2 ;;;
   3 ;;; distorted.org.uk hosts and networks, and other useful addresses.
   4
   5 ;;;--------------------------------------------------------------------------
   6 ;;; External hosts.
   7
   8 (defhost boyle.nsict.org ((:ipv4 "85.158.42.162")))
   9 (defhost chiark.greenend.org.uk ((:ipv4 "212.13.197.229")
  10                                  (:ipv6 "2001:ba8:1e3::")))
  11 (defhost mccoy.flatline.org.uk "80.74.241.31")
  12 (defhost mythic-ns1 ((:ipv4 "69.56.173.190")
  13                      (:ipv6 "2600:3c00::f03c:91ff:fe96:beac")))
  14 (defhost mythic-ns2 ((:ipv4 "93.93.128.67")
  15                      (:ipv6 "2a00:1098:0:80:1000::10")))
  16 (defhost gandi-ns6 ((:ipv4 "217.70.177.40")))
  17
  18 ;;;--------------------------------------------------------------------------
  19 ;;; Internal addresses.
  20
  21 ;; (RFC1918 addresses are allocated from Cambridge G-RIN.)
  22 (defnet distorted.org.uk "172.29.198/23"
  23   (untrusted "198.0/24"
  24     (wireless "0/25")
  25     (iodine "128/28"))
  26   (trusted "199.0/24"
  27     (wired "0/25"
  28       (unsafe "0/27")
  29       (dhcp "32/27"))
  30     (vpn "128/27")
  31     (its "160/30")
  32     (colo "176/28")
  33     (safe "192/27")
  34     (any "224/27")))
  35
  36 ;; Externally routable DMZ from Demon.
  37 (defnet dmz "62.49.204.144/28")
  38
  39 ;; Externally routed colo range.
  40 (defnet jump "212.13.198.66/28")
  41 (defnet jump "2001:ba8:0:1d9/64")
  42 (defnet distorted.org.uk-jump "2001:ba8:1d9/48"
  43   (colo "2/64")
  44   (any "0/64")
  45   (vpn "6000/64"))
  46
  47 ;; Hurricane Electric IPv6-inIPv4 tunnel.
  48 (defnet he-tunnel "2001:470:1f08:1b98/64")
  49 (defnet dmz "2001:470:1f09:1b98/64")
  50 (defnet distorted.org.uk-he "2001:470:9740/48"
  51   (unsafe "1/64")
  52   (safe "4001/64")
  53   (untrusted "8001/64"))
  54
  55 ;;;--------------------------------------------------------------------------
  56 ;;; Host allocations
  57
  58 ;; External addresses.
  59 (defhost guvnor.dmz ((:ipv4 dmz 1)))
  60 (defhost radius.dmz (dmz 2))
  61 (defhost roadstar.dmz (dmz 3))
  62 (defhost jem.dmz (dmz 4))
  63 (defhost artist.dmz (dmz 5))
  64 (defhost vampire.dmz (dmz 6))
  65 (defhost ibanez.dmz (dmz 9))
  66 (defhost anon.dmz (dmz 12))
  67 (defhost nat.dmz ((:ipv4 dmz 14)))
  68
  69 ;; Colocated addresses.
  70 (defhost gate.jump ((:ipv6 jump 2)))
  71 (defhost fender.jump (jump 5))
  72 (defhost precision.jump (jump 6))
  73 (defhost telecaster.jump (jump 7))
  74 (defhost stratocaster.jump (jump 8))
  75 (defhost jazz.jump (jump 9))
  76 (defhost jaguar.jump ((:ipv4 jump 11)))
  77 (defhost richmond.jump ((:ipv4 jump 12)))
  78 (defhost anon.jump (jump 13))
  79 (defhost blackhole.jump ((:ipv4 jump 14) (:ipv6 jump #xffff)))
  80
  81 ;; Unsafe network.
  82 (defhost radius.unsafe (unsafe 1))
  83 (defhost roadstar.unsafe (unsafe 2))
  84 (defhost jem.unsafe (unsafe 3))
  85 (defhost artist.unsafe (unsafe 4))
  86 (defhost vampire.unsafe (unsafe 5))
  87 (defhost ibanez.unsafe (unsafe 14))
  88
  89 ;; Client hosts, with IPv6 addresses.
  90 (defhost gibson.unsafe ((:ipv6 "2001:470:9740:1:e269:95ff:fe63:bb4")))
  91 (defhost lespaul.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fef5:aaef")))
  92 (defhost invader.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fe94:a5d7")))
  93 (defhost marauder.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fe6a:7846")))
  94
  95 ;; Safe network.
  96 (defhost radius.safe (safe 1))
  97 (defhost vampire.safe (safe 2))
  98 (defhost evolution.safe ((:ipv4 safe 3)))
  99
 100 ;; Wireless network.
 101 (defhost radius.untrusted (untrusted 1))
 102 (defhost artist.untrusted (untrusted 2))
 103 (defhost vampire.untrusted (untrusted 3))
 104
 105 ;; Virtual private network.
 106 (defhost crybaby.vpn (vpn 1))
 107 (defhost terror.vpn ((:ipv4 vpn 2)))
 108 (defhost orange.vpn (vpn 3))
 109
 110 ;; Iodine network.
 111 (defhost jazz.iodine (iodine 1))
 112
 113 ;; Special network for ITS.
 114 ;; It doesn't understand point-to-point links, so we need a little net.
 115 (defhost gw.its (its 1))
 116 (defhost mz.its (its 2))
 117
 118 ;; Internal (VPN) addresses for colocated services.
 119 (defhost fender.colo (colo 1))
 120 (defhost precision.colo (colo 2))
 121 (defhost telecaster.colo (colo 3))
 122 (defhost stratocaster.colo (colo 4))
 123 (defhost jazz.colo (colo 5))
 124
 125 ;; Anycast addresses for services.
 126 (defhost dns0.any (any 0))
 127 (defhost dns1.any (any 1))
 128 (defhost ntp0.any (any 2))
 129 (defhost ntp1.any (any 3))
 130 (defhost www-cache.any (any 4))
 131 (defhost krb0.any (any 5))
 132 (defhost krb1.any (any 6))
 133
 134 ;;;--------------------------------------------------------------------------
 135 ;;; Host switch.
 136
 137 (preferred-subnet-case
 138   ((unsafe colo)
 139    (defhost radius radius.unsafe)
 140    (defhost precision precision.colo)
 141    (defhost stratocaster stratocaster.colo)
 142    (defhost vampire vampire.unsafe))
 143   (t
 144    (defhost radius radius.dmz)
 145    (defhost precision precision.jump)
 146    (defhost stratocaster stratocaster.jump)
 147    (defhost vampire vampire.dmz)))
 148
 149 ;;;----- That's all, folks --------------------------------------------------