Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

There are three types of VPCs we will be utilizing: Cloud Management VPC, Shard Management VPCs and Shard Service VPCs.  A single Cloud Management VPC holds the centralized cloud management services for the OpenMethods Cloud solution.  Each cloud shard will have a single Shard Management VPC that hosts the common, centralized components that are shared between customers that reside in the shard.  These Shard Management VPCs will share the 10.255.0.0/16 address space.  The first (left to right) three bits of the third byte will be used to indicate which of 8 possible shards the Shard Management VPC belongs to.  The forth bit is used to subnet between the two availability zones used for redundancy.  The remaining address space is used for instances within the VPC and availability zone subnets.  Here’s the table of shard prefixes in binary:


Shard Id

Bit Prefix

Core VPC CIDR

Availability Zone A Subnet

Availability Zone B Subnet

1 – Development

000

10.255.0.0/19

10.255.0.0/20 (4091 hosts)

10.255.16.0/20

2 – Gen Pop

001

10.255.32.0/19

10.255.32.0/20

10.255.48.0/20

3 – GDPR

010

10.255.64.0/19

10.255.64.0/20

10.255.80.0/20

4 - GovCloud?

011

10.255.96.0/19

10.255.96.0/20

10.255.112.0/20

5

100

10.255.128.0/19

10.255.128.0/20

10.255.144.0/20

6

101

10.255.160.0/19

10.255.160.0/20

10.255.176.0/20

7

110

10.255.192.0/19

10.255.192.0/20

10.255.208.0/20

8

111

10.255.224.0/19

10.255.224.0/20

10.255.240.0/20

...

The second type of VPC we will use is a Shard Service VPC.  Shard Service VPCs will host the services related to specific customers and the IPSec connectivity needed to communicate with any on premise CTI or data endpoints.  Each shard will have any number of service VPCs distributed around the globe.  Although AWS often provides many data centers (called regions) globally, we will be creating a logical grouping of these AWS regions into larger geographical areas:

  • North America
  • South America
  • EMEA
  • APAC
  • Oceana
  • South America

For example, we consider Canada, US, and Mexico to be a single area called North America, while AWS has multiple regions within this area. To support the multi-dimensional deployments of Service VPCs, we will use a slightly different network addressing scheme.  Each geographical region will have one (or more as we expand) /16 address space used across the service vpcs in that area:


Geographical Area

Base CIDR

Expansion CIDR

North America

10.254.0.0/16

10.249.0.0/16

South AmericaEMEA

10.253.0.0/16

10.248.0.0/16

EMEAAPAC

10.252.0.0/16

10.247.0.0/16

APACOceana

10.251.0.0/16

10.246.0.0/16

OceanaSouth America

10.250.0.0/16

10.245.0.0/16

...

As with Shard Management VPCs, Shard Service VPCs belong to a single cloud shard and are not shared.  The ownership of the Service VPC is designated by the first (left to right) three bits of the third byte.  Unlike Core VPCs, the address space needs to be divided up further to allow multiple Service VPCs to be created and to limit the size of the VPC subnets to eliminate customer overlap where possible.  This is handled by using the 4th through 7th bits th bit of the third octet to identify the Service VPC specifically.  The eighth fifth bit is used to segment off the availability zone subnet space.  Here’s the breakdown of the Shard 1, North American network address space:The full service VPC address space is laid out below with grey rows not being implemented today but may be in the future:


Bit 00012400104232554242555240011623255624255724010023255824255910.255.31.0/24
Geography

Shard Id

Shard Prefix

Service VPC Id

Service VPC Prefix

Service VPC CIDR

Availability Zone A Subnet

Availability Zone B Subnet

North America

1 – Development

000

1

00000

10.254.0.0/2320

10.255254.0.0/24 21 (250 2043 hosts)

10.255.1.0/24

2

254.8.0/21




2

1

10.254.16.0/20

10.254.16.0/21

10.254.24.0/21


2 - General Population

001

1

0

10.254.32.0/20

10.254.32.0/21

10.254.40.0/21




2

1

10.254.48.0/2320

10.255254.248.0/2421

10.254.25556.0/21


3 - GDPR

010

1

0

10.254.64.0/20

10.254.64.0/

3

21

10.254.72.0/21




2

1

10.254.

80.0/

20

10.

254.

80.0/

21

10.

254.

88.0/

21


4

- Gov Cloud

011

1

0

10.254.

96.0/

20

10.

254.

96.0/

21

10.

254.

104.0/

5

21




2

1

10.254.112.0/20

10.254.112.0/21

10.254.120.0/21

EMEA1 – Development0001010.253.0.0/2010.253.0.0/21 (2043 hosts)10.253.8.0/21



2110.253.16.0/2010.253.16.0/2110.253.24

6

0101

10.254.10.0/23

10.255.10.0/24

10.255.11.0/24

7

0110

10.254.12.0/23

10.255.12.0/24

10.255.13.0/24

8

0111

10.254.14.0/23

10.255.14.0/24

10.255.15.0/24

9

1000

10.254.16.0/23

10.255.16.0/24

10.255.17.0/24

10

1001

10.254.18.0/23

10.255.18.0/24

10.255.19.0/24

11

1010

10.254.20.0/23

10.255.20.0/24

10.255.21.0/24

12

1011

10.254.22.0/23

10.255.22.0/24

10.255.23.0/24

13

1100

10.254.24.0/23

10.255.24.0/24

10.255.25.0/24

14

1101

10.254.26.0/23

10.255.26.0/24

10.255.27.0/24

15

1110

10.254.28.0/23

10.255.28.0/24

10.255.29.0/24

16

1111

10.254.30.0/23

10.255.30.0/24

.0/21

2 - General Population0011010.253.32.0/2010.253.32.0/2110.253.40.0/21



2110.253.48.0/2010.253.48.0/2110.253.56.0/21

3 - GDPR0101010.253.64.0/2010.253.64.0/2110.253.72.0/21



2110.253.80.0/2010.253.80.0/2110.253.88.0/21

4 - Gov Cloud0111010.253.96.0/2010.253.96.0/2110.253.104.0/21



2110.253.112.0/2010.253.112.0/2110.253.120.0/21
APAC1 – Development0001010.252.0.0/2010.252.0.0/21 (2043 hosts)10.252.8.0/21



2110.252.16.0/2010.252.16.0/2110.252.24.0/21

2 - General Population0011010.252.32.0/2010.252.32.0/2110.252.40.0/21



2110.252.48.0/2010.252.48.0/2110.252.56.0/21

3 - GDPR0101010.252.64.0/2010.252.64.0/2110.252.72.0/21



2110.252.80.0/2010.252.80.0/2110.252.88.0/21

4 - Gov Cloud0111010.252.96.0/2010.252.96.0/2110.252.104.0/21



2110.252.112.0/2010.252.112.0/2110.252.120.0/21
Oceana1 – Development00010





21



2 - General Population00110





21



3 - GDPR01010





21



4 - Gov Cloud01110





21


South America1 – Development00010





21



2 - General Population00110





21



3 - GDPR01010





21



4 - Gov Cloud01110





21



The vast majority of the time there will only be 1 or 2 Service VPCs VPC in a given geographical area associated with a shard.  As with Core VPCs, you’ll be able to tell which geographical region based on the second octet.  The associated shard can be determined by looking at the range of the third octet, 10.254.0.0 – 10.254.31.255 indicates shard 1.  The Service VPC is determined by the sub range, 10.254.0.0 – 10.254.115.255 for Service VPC 1.  The availability zone can be determined by evens high or odds low values of the third octet , even is AZ A which odd is AZ Bwithin the VPC range.

User interaction and design

Create Shard

  1. An adminstrator logs in 

Open Questions

QuestionAnswerDate Answered

...