Interactive Tools

IP Allocation Explorer

Interactive, filterable view of all host and service-VM IP allocations across Site A and Site B, with the per-/24 octet-band convention as a visual legend.

All physical host and service-VM IP allocations for Site A (10.10.0.0/16) and Site B (10.20.0.0/16), alongside a visual per-/24 octet-band legend. Type any hostname, IP prefix, or the keywords site-a / site-b to filter the tables in real time.

Status: Site A's 2026-07-26 target uses three L2-only switches and OPNsense for every routed gateway; it is approved but not yet production. Site B remains unchanged.

Per-/24 octet-band convention

.1
Subnet Gateway: OPNsense on Every Routed Site A and Site B VLAN
.2-.9
Network Infrastructure: Switches and APs
.10-.39
Physical Host Interfaces (Host-Octet Convention)
.40-.49
Infrastructure Service VMs: PBS, Pinned DNS
.50-.199
DHCP Pool or Static Services
.200-.254
VIPs, MetalLB Pools, Load-Balancer Addresses

Site A10.10.0.0/16

Host20Proxmox Mgmt10IPMI25Corosync60Storage90Backup
sa-edge-0110.10.20.1010.10.10.1010.10.25.10--
sa-cmp-0110.10.20.11-10.10.25.1110.10.60.1110.10.90.11
sa-cmp-0210.10.20.12-10.10.25.1210.10.60.1210.10.90.12
sa-stor-0110.10.20.2010.10.10.2010.10.25.2010.10.60.2010.10.90.20

sa-cmp-01 and sa-cmp-02 are ThinkPads and have no IPMI. Site A .1 is owned by sa-fw-01 on every routed VLAN. VLANs 25 and 60 have no gateway; VLAN 65 is reserved and not carried; VLAN 999 is an unrouted native sink. VLANs 253 and 4040 are absent.

Site B10.20.0.0/16

Host20Proxmox Mgmt10IPMI25Corosync60Ceph public65Ceph cluster90Backup
sb-edge-0110.20.20.1010.20.10.1010.20.25.10---
sb-cmp-0110.20.20.2010.20.10.2010.20.25.2010.20.60.2010.20.65.2010.20.90.20
sb-cmp-0210.20.20.2110.20.10.2110.20.25.2110.20.60.2110.20.65.2110.20.90.21
sb-cmp-0310.20.20.3010.20.10.3010.20.25.3010.20.60.3010.20.65.3010.20.90.30
sb-cmp-0410.20.20.3110.20.10.3110.20.25.3110.20.60.3110.20.65.3110.20.90.31
sb-cmp-0510.20.20.3210.20.10.3210.20.25.3210.20.60.3210.20.65.3210.20.90.32

VLAN 25 (Corosync) and VLAN 65 (Ceph cluster) carry no OPNsense gateway. sb-edge-01 carries no Ceph or backup interfaces.

Service VMs & VIPs

VM / VIPSite A addressSite B addressVLAN
Site A routed VLAN gateways10.10.{10,20,30,40,50,70,80,90,100,110,120}.1 · OPNsenseNot used10
Site B UniFi WAN transit (VLAN 253)absent · 10.10.253.0/24 reserved10.20.253.1 firewall · .2 USG10
DNS primary (sa-dns-01 / sb-dns-01)10.10.30.1010.20.30.1030
DNS secondary (sa-dns-02 / sb-dns-02)10.10.30.1110.20.30.1130
PBS management (PBS-A / PBS-B)10.10.30.2010.20.30.2030
PBS backup data (PBS-A / PBS-B)10.10.90.4010.20.90.4090
OpenBao (sa-bao-01 / sb-bao-01)10.10.30.4010.20.30.4030
UniFi OS Server (sa-uos-01)10.10.10.40Not used10
Kubernetes API VIP10.10.50.1010.20.50.1050
Kubernetes ingress VIP10.10.50.1110.20.50.1150
MetalLB pool10.10.50.200-10.10.50.25010.20.50.200-10.20.50.25050

VLAN Matrix

Interactive VLAN reference with OPNsense-owned Site A gateways, no-gateway networks, native sink VLAN 999, and unchanged Site B VLAN 253.