• To System Administration - To Systems Overview

---

Systems - IP list

This is a list of IP addresses used in our infrastructure. The new documentation contains an automatically generated IP address list and a page describing the network setup.

Bit, Ede, NL

10.0.0.0/24

Internal host network on Infra02. Have a look at the new documentation.

172.16.2.0/24

Have a look at the new documentation.

• IP	Machine	Comments
  172.16.2.1	firewall
  172.16.2.2	firewall-01
  172.16.2.3	firewall-02
  172.16.2.9	Infra02
  172.16.2.10	Emailout	outbound email server for automated services, SNAT address for traffic leaving Infra02
  172.16.2.12	Wiki
  172.16.2.13	Blog
  172.16.2.14	Ircserver	irc
  172.16.2.15	SVN
  172.16.2.16	Bugs
  172.16.2.17	Lists
  172.16.2.18	Monitor
  172.16.2.19	Email	forward 12022 to community:22, 19022 to email:22 ( should not be needed, email is directly reachable on port 22), 32022 to emailout:22, 21022 to mail:22, 11022 to ldap:22
  172.16.2.20	Community	community webmail and selfservice
  172.16.2.21	Mail
  172.16.2.26	Web	reverse proxy for funding.cacert.org and infradocs.cacert.org on webstatic and jenkins.cacert.org on jenkins, portforwarding 11622 to webstatic:22, portforwarding 11522 to jenkins:22
  172.16.2.27	CATS
  172.16.2.28	Issue	several suspicious forwardings to non-existing container issue-test with internal IP 10.0.0.144 {0} TODO: cleanup
  172.16.2.31	Translations
  172.16.2.32	Emailout	outbound email server for automated services, address for traffic going to https://infradocs.cacert.org/systems/infra02.html containers
  172.16.2.33	-	available
  172.16.2.34	Board
  172.16.2.100	Hopper	for critical-admin only
  172.16.2.115	Jenkins
  172.16.2.116	Webstatic
  172.16.2.117	Motion
  172.16.2.118	-	available
  172.16.2.119	Pgpkeys
  172.16.2.148	Testmgr
  172.16.2.241	Proxyin	Proxy for incoming connections forwarding to motion and possibly other new systems
  172.16.2.248	Test	port forwarding on 14822, 14880, 14843 to Testmgr
  172.16.2.249	Test2
  172.16.2.250	Git

172.16.3.0/24

• IP	Machine	Comments
  172.16.3.1	firewall
  172.16.3.2	firewall-01
  172.16.3.3	firewall-02
  172.16.3.100	Hopper	for critical-admin only
  172.16.3.102	Ns
  172.16.3.103	Ocsp
  172.16.3.104	Crl

172.28.50.0/24

• IP	Machine	Comments
  172.28.50.1	firewall
  172.28.50.2	firewall-01
  172.28.50.3	firewall-02
  172.28.50.12	Webdb
  172.28.50.13	Sun3
  172.28.50.14	Sun4
  172.28.50.52	sun1ilo
  172.28.50.53	sun2ilo
  172.28.50.54	sun3ilo
  172.28.50.55	sun4ilo
  172.28.50.56	infra02ilo
  172.28.50.80	Backup
  172.28.50.100	Hopper	for critical-admin only
  172.28.50.101	Syslog
  172.28.50.102	Ns
  172.28.50.103	Ocsp
  172.28.50.104	Crl

213.154.225.224/27

Have a look at the new documentation.

2001:7b8:3:9c::/64

IPv6 transition

2001:7b8:616::/48

The following subnets are used:

2001:7b8:616:162::/64

Following addresses are configured:

2001:7b8:616:162:1::/80

Have a look at the new documentation.

2001:7b8:616:162:2::/80

Have a look at the new documentation.

Infra02 is routing traffic for the IPv6 subnet to the containers hosted on that machine.

The following addresses are already routed to the corresponding containers:

Following addresses are reserved but not yet configured:

2001:7b8:616:163::/64

Following addresses are configured:

IT-SLS, Offenbach/Main, DE

192.109.159.0/24, 10.38.6.0/24

• IP Internet	IP Intranet	Machine
  192.109.159.22	10.38.6.66	vmware-host.it-sls.de
  192.109.159.23	10.38.6.74	cacert1.it-sls.de, Main testserver, webdb patches
  192.109.159.24	10.38.6.79	secure1.it-sls.de, Main testserver, webdb patches, secure channel
  192.109.159.25	10.38.6.86	cacert2.it-sls.de, Main testserver, os + applic patches, dedicated to critical team
  192.109.159.26	10.38.6.87	secure2.it-sls.de, Main testserver, os + applic patches, secure channel, dedicated to critical team
  192.109.159.27	10.38.6.88	ca-mgr1.it-sls.de, Testserver Management Console (incl. mailboxes for testserver accounts, testserver 1)
  192.109.159.28	10.38.6.88	cats1.it-sls.de, new CATS testserver
  212.38.6.89	10.38.6.89	ca-mgr2.it-sls.de, Testserver Management Console (incl. mailboxes for testserver accounts, testserver 2) - not yet activated -
  192.109.159.29	10.38.6.92	git-cacert.it-sls.de, central git repository (old + new software)

Other

---

• CategoryInfrastructure

• CategorySystems