"Musty Bits" McGee

Site 2 Site Wireguard AllowedIPs question.

IPv4 both sites are private address ranges with no overlap, so to do split tunnel I just configure the client AllowedIPs to match the server's untunneled LAN range. Easy enough.

However for IPv6 everything has GUA addresses thanks to prefix delegation. Thing is, the ISP won't guarantee my prefix. So how do I guard against prefix changes... Or do I just have to update the client config then?

#Networking #Wireguard

How is everyone doing IPAM for home networks and different sites?

I'm specifically looking at the following:

- ULA for Site2Site VPN - thinking of sticking with one /48 ULA and doing sequential /64s. Or should I just say fuck it and do a different /48 for each?
- IPv4 subnets. Current site is set up with 192.168.1.0/24 and then I went down from 198.168.255.0/24 for VPN ranges. Do I do move the VPN ranges to be sequential on the original site and then what, have a gap and start the new site at 192.168.100.0? I have seen some clever solutions about encoding latitude+longitude into the bits to ensure no clashes, of course I'm not ever going to scale like that but...

Hrm...

#Networking #HomeLab

Finally up to breaking the home network (notwork eheh) as promised while partner is away.

Some scuffles with passwords and IPv6 so far but tethering looks to be working dual stack so both WiFi networks and routers are UP and *both* have internet. Which means no having to look stuff up on my phone or swap networks to get back to the router admin. Incredible luxury tbh

A break and then on to wireguard

#Networking

It be like that

#PlatformEngineering #DevOps