hosts.lisp, distorted.lisp: Preliminary setup for migration to A&A.
[zones] / hosts.lisp
1 ;;; -*-lisp-*-
2 ;;;
3 ;;; distorted.org.uk hosts and networks, and other useful addresses.
4
5 ;;;--------------------------------------------------------------------------
6 ;;; External hosts.
7
8 (defhost boyle.nsict.org ((:ipv4 "85.158.42.162")))
9 (defhost chiark.greenend.org.uk ((:ipv4 "212.13.197.229")
10 (:ipv6 "2001:ba8:1e3::")))
11 (defhost mccoy.flatline.org.uk "80.74.241.31")
12 (defhost mythic-ns1 ((:ipv4 "69.56.173.190")
13 (:ipv6 "2600:3c00::f03c:91ff:fe96:beac")))
14 (defhost mythic-ns2 ((:ipv4 "93.93.128.67")
15 (:ipv6 "2a00:1098:0:80:1000::10")))
16 (defhost gandi-ns6 ((:ipv4 "217.70.177.40")))
17
18 ;;;--------------------------------------------------------------------------
19 ;;; Internal addresses.
20
21 ;; (RFC1918 addresses are allocated from Cambridge G-RIN.)
22 (defnet distorted.org.uk "172.29.198/23"
23 (untrusted "198.0/24"
24 (wireless "0/25")
25 (iodine "128/28")
26 (upn "160/27"))
27 (trusted "199.0/24"
28 (wired "0/25"
29 (unsafe "0/27")
30 (dhcp "32/27"))
31 (vpn "128/27")
32 (its "160/30")
33 (colo "176/28")
34 (safe "192/27")
35 (any "224/27")))
36
37 ;; Externally routable DMZ from Demon.
38 (defnet dmz "62.49.204.144/28")
39
40 ;; Externally routable DMZ from Andrews and Arnold.
41 (defnet aaisp-gw "81.2.113.195")
42 (defnet aaisp "81.187.238.128/28")
43 (defnet aaisp "2001:8b0:c92/48")
44
45 ;; Externally routed colo range.
46 (defnet jump "212.13.198.66/28")
47 (defnet jump "2001:ba8:0:1d9/64")
48 (defnet distorted.org.uk-jump "2001:ba8:1d9/48"
49 (colo "2/64")
50 (any "0/64")
51 (vpn "6000/64")
52 (upn "a000/64"))
53
54 ;; Hurricane Electric IPv6-inIPv4 tunnel.
55 (defnet he-tunnel "2001:470:1f08:1b98/64")
56 (defnet dmz "2001:470:1f09:1b98/64")
57 (defnet distorted.org.uk-he "2001:470:9740/48"
58 (unsafe "1/64")
59 (safe "4001/64")
60 (untrusted "8001/64"))
61
62 ;;;--------------------------------------------------------------------------
63 ;;; Host allocations
64
65 ;; External addresses.
66 (defhost guvnor.dmz ((:ipv4 dmz 1)))
67 (defhost radius.dmz (dmz 2))
68 (defhost roadstar.dmz (dmz 3))
69 (defhost jem.dmz (dmz 4))
70 (defhost artist.dmz (dmz 5))
71 (defhost vampire.dmz (dmz 6))
72 (defhost universe.dmz (dmz 7))
73 (defhost ibanez.dmz (dmz 9))
74 (defhost anon.dmz (dmz 12))
75 (defhost nat.dmz ((:ipv4 dmz 14)))
76
77 (defhost guvnor.aaisp (aaisp-gw 0))
78 (defhost radius.aaisp (aaisp 1))
79 (defhost roadstar.aaisp (aaisp 2))
80 (defhost jem.aaisp (aaisp 3))
81 (defhost artist.aaisp (aaisp 4))
82 (defhost vampire.aaisp (aaisp 5))
83 (defhost universe.aaisp (aaisp 6))
84 (defhost ibanez.aaisp (aaisp 9))
85 (defhost anon.aaisp (aaisp 12))
86 (defhost nat.aaisp ((:ipv4 aaisp 14)))
87
88 ;; Colocated addresses.
89 (defhost gate.jump ((:ipv6 jump 2)))
90 (defhost fender.jump (jump 5))
91 (defhost precision.jump (jump 6))
92 (defhost telecaster.jump (jump 7))
93 (defhost stratocaster.jump (jump 8))
94 (defhost jazz.jump (jump 9))
95 (defhost jaguar.jump ((:ipv4 jump 11) (:ipv6 jump "::2:1")))
96 (defhost richmond.jump ((:ipv4 jump 12) (:ipv6 jump "::1:1")))
97 (defhost anon.jump (jump 13))
98 (defhost blackhole.jump ((:ipv4 jump 14) (:ipv6 jump "::ffff")))
99
100 ;; Linode virtual hosts.
101 (defhost national.linode ((:ipv4 "45.33.118.239")
102 (:ipv6 "2600:3c00::f03c:91ff:fe3b:d7c1")))
103
104 ;; Unsafe network.
105 (defhost radius.unsafe (unsafe 1))
106 (defhost roadstar.unsafe (unsafe 2))
107 (defhost jem.unsafe (unsafe 3))
108 (defhost artist.unsafe (unsafe 4))
109 (defhost vampire.unsafe (unsafe 5))
110 (defhost universe.unsafe (unsafe 6))
111 (defhost ibanez.unsafe (unsafe 14))
112 (defhost groove.unsafe (unsafe 17))
113
114 ;; Client hosts, with IPv6 addresses.
115 (defhost gibson.unsafe ((:ipv6 "2001:470:9740:1:e269:95ff:fe63:bb4")))
116 (defhost crybaby.unsafe ((:ipv6 "2001:470:9740:1:216:eaff:fec2:4cb8")))
117 (defhost lespaul.unsafe ((:ipv6 "2001:470:9740:1:a00:27ff:fef5:aaef")))
118 (defhost haze.unsafe ((:ipv6 "2001:470:9740:1:5056:a8ff:fe01:5654")))
119 (defhost gretsch.unsafe ((:ipv6 "2001:470:9740:1:3a2c:4aff:fe6d:e768")))
120 (defhost invader.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fe94:a5d7")))
121 (defhost marauder.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fe6a:7846")))
122
123 ;; Safe network.
124 (defhost radius.safe (safe 1))
125 (defhost vampire.safe (safe 2))
126 (defhost evolution.safe (safe 3))
127 (defhost grigsby.safe (safe 4))
128 (defhost carling.safe (safe 5))
129 (defhost tritan.safe (safe 6))
130
131 ;; Wireless network.
132 (defhost radius.untrusted (untrusted 1))
133 (defhost artist.untrusted (untrusted 2))
134 (defhost vampire.untrusted (untrusted 3))
135
136 ;; Virtual private network.
137 (defhost crybaby.vpn ((:ipv4 vpn 1) (:ipv6 vpn "::1:1")))
138 (defhost terror.vpn ((:ipv4 vpn 2)))
139 (defhost orange.vpn ((:ipv4 vpn 3) (:ipv6 vpn "::3:1")))
140 (defhost haze.vpn ((:ipv4 vpn 4) (:ipv6 vpn "::4:1")))
141 (defhost radius.vpn ((:ipv4 vpn 5) (:ipv6 vpn "::5:1")))
142 (defhost precision.vpn ((:ipv4 vpn 6) (:ipv6 vpn "::6:1")))
143 (defhost jazz.vpn ((:ipv4 vpn 7) (:ipv6 vpn "::7:1")))
144 (defhost vampire.vpn ((:ipv4 vpn 8) (:ipv6 vpn "::8:1")))
145
146 ;; Untrusted private network.
147 (defhost national.upn ((:ipv4 upn 1) (:ipv6 upn "::1:1")))
148
149 ;; Iodine network.
150 (defhost jazz.iodine (iodine 1))
151
152 ;; Special network for ITS.
153 ;; It doesn't understand point-to-point links, so we need a little net.
154 (defhost gw.its (its 1))
155 (defhost mz.its (its 2))
156
157 ;; Internal (VPN) addresses for colocated services.
158 (defhost fender.colo (colo 1))
159 (defhost precision.colo (colo 2))
160 (defhost telecaster.colo (colo 3))
161 (defhost stratocaster.colo (colo 4))
162 (defhost jazz.colo (colo 5))
163
164 ;; Anycast addresses for services.
165 (defhost dns0.any ((:ipv4 any 0) (:ipv6 any "::0:1")))
166 (defhost dns1.any ((:ipv4 any 1) (:ipv6 any "::1:1")))
167 (defhost ntp0.any ((:ipv4 any 2) (:ipv6 any "::2:1")))
168 (defhost ntp1.any ((:ipv4 any 3) (:ipv6 any "::3:1")))
169 (defhost www-cache.any ((:ipv4 any 4) (:ipv6 any "::4:1")))
170 (defhost krb0.any ((:ipv4 any 5) (:ipv6 any "::5:1")))
171 (defhost krb1.any ((:ipv4 any 6) (:ipv6 any "::6:1")))
172
173 ;;;--------------------------------------------------------------------------
174 ;;; Host switch.
175
176 (preferred-subnet-case
177 ((unsafe colo)
178 (defhost radius radius.unsafe)
179 (defhost precision precision.colo)
180 (defhost telecaster telecaster.colo)
181 (defhost stratocaster stratocaster.colo)
182 (defhost vampire vampire.unsafe))
183 (t
184 (defhost radius radius.dmz)
185 (defhost precision precision.jump)
186 (defhost telecaster telecaster.jump)
187 (defhost stratocaster stratocaster.jump)
188 (defhost vampire vampire.dmz)))
189
190 (defhost jaguar jaguar.jump)
191
192 ;;;----- That's all, folks --------------------------------------------------