IP Allocation¶

Complete IP address allocation and DNS record tables for the cluster.

Node Addresses¶

LoadBalancer IP Pool¶

The Cilium LBIPAM pool allocates LoadBalancer service IPs from the range 192.168.0.220-239.

Gateway Details¶

Network Diagram¶

flowchart TB
    subgraph Internet
        CF[Cloudflare<br/>*.example.com]
    end

    subgraph Router["Ubiquiti Router"]
        DHCP[DHCP / DNS]
    end

    subgraph Cluster["Cluster (192.168.0.0/24)"]
        subgraph ControlPlane["Control Plane"]
            CP1[192.168.0.201<br/>worker-01]
            CP2[192.168.0.202<br/>worker-02]
            CP3[192.168.0.203<br/>worker-03]
        end
        subgraph Workers["Workers"]
            W4[192.168.0.204<br/>worker-04]
            WP1[192.168.0.211<br/>worker-pi-01]
            WP2[192.168.0.212<br/>worker-pi-02]
            WP3[192.168.0.213<br/>worker-pi-03]
        end
        subgraph LB["LoadBalancers (Cilium L2)"]
            EE[192.168.0.239<br/>envoy-external]
            EI[192.168.0.238<br/>envoy-internal]
        end
    end

    CF -->|Tunnel| EE
    DHCP --> ControlPlane
    DHCP --> Workers

DNS Records¶

Cloudflare-Managed Records¶

Traffic Flow by Record¶

flowchart LR
    subgraph External["External Access"]
        W1["*.example.com"] -->|CNAME| E1["external.example.com"]
        E1 -->|CNAME| T1["tunnel.cfargotunnel.com"]
        T1 -->|Tunnel| N1[nginx]
        N1 --> EE1[envoy-external<br/>192.168.0.239]
    end

    subgraph Internal["Internal Access"]
        W3["internal.example.com"] -->|A record| EI1[envoy-internal<br/>192.168.0.238]
    end

Address Space Summary¶

curl -sH 'accept: application/dns-json' \
  'https://cloudflare-dns.com/dns-query?name=echo.example.com&type=A' | jq