X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~mdw/git/zones/blobdiff_plain/0fdd12c7736e58ef624f2f6593ae5640343471f5..664e6cf95b818fd519f19fa22769072e79cfd5eb:/hosts.lisp diff --git a/hosts.lisp b/hosts.lisp index 1054032..8576a0b 100644 --- a/hosts.lisp +++ b/hosts.lisp @@ -22,7 +22,8 @@ (defhost gandi-ns6 ((:ipv4 "217.70.177.40"))) (defnet distorted.org.uk "172.29.198/23" (untrusted "198.0/24" (wireless "0/25") - (iodine "128/28")) + (iodine "128/28") + (upn "160/27")) (trusted "199.0/24" (wired "0/25" (unsafe "0/27") @@ -42,7 +43,8 @@ (defnet jump "2001:ba8:0:1d9/64") (defnet distorted.org.uk-jump "2001:ba8:1d9/48" (colo "2/64") (any "0/64") - (vpn "6000/64")) + (vpn "6000/64") + (upn "a000/64")) ;; Hurricane Electric IPv6-inIPv4 tunnel. (defnet he-tunnel "2001:470:1f08:1b98/64") @@ -62,6 +64,7 @@ (defhost roadstar.dmz (dmz 3)) (defhost jem.dmz (dmz 4)) (defhost artist.dmz (dmz 5)) (defhost vampire.dmz (dmz 6)) +(defhost universe.dmz (dmz 7)) (defhost ibanez.dmz (dmz 9)) (defhost anon.dmz (dmz 12)) (defhost nat.dmz ((:ipv4 dmz 14))) @@ -73,10 +76,14 @@ (defhost precision.jump (jump 6)) (defhost telecaster.jump (jump 7)) (defhost stratocaster.jump (jump 8)) (defhost jazz.jump (jump 9)) -(defhost jaguar.jump ((:ipv4 jump 11))) -(defhost richmond.jump ((:ipv4 jump 12))) +(defhost jaguar.jump ((:ipv4 jump 11) (:ipv6 jump "::2:1"))) +(defhost richmond.jump ((:ipv4 jump 12) (:ipv6 jump "::1:1"))) (defhost anon.jump (jump 13)) -(defhost blackhole.jump ((:ipv4 jump 14) (:ipv6 jump #xffff))) +(defhost blackhole.jump ((:ipv4 jump 14) (:ipv6 jump "::ffff"))) + +;; Linode virtual hosts. +(defhost national.linode ((:ipv4 "45.33.118.239") + (:ipv6 "2600:3c00::f03c:91ff:fe3b:d7c1"))) ;; Unsafe network. (defhost radius.unsafe (unsafe 1)) @@ -84,12 +91,26 @@ (defhost roadstar.unsafe (unsafe 2)) (defhost jem.unsafe (unsafe 3)) (defhost artist.unsafe (unsafe 4)) (defhost vampire.unsafe (unsafe 5)) +(defhost universe.unsafe (unsafe 6)) (defhost ibanez.unsafe (unsafe 14)) +(defhost groove.unsafe (unsafe 17)) + +;; Client hosts, with IPv6 addresses. +(defhost gibson.unsafe ((:ipv6 "2001:470:9740:1:e269:95ff:fe63:bb4"))) +(defhost crybaby.unsafe ((:ipv6 "2001:470:9740:1:216:eaff:fec2:4cb8"))) +(defhost lespaul.unsafe ((:ipv6 "2001:470:9740:1:a00:27ff:fef5:aaef"))) +(defhost haze.unsafe ((:ipv6 "2001:470:9740:1:5056:a8ff:fe01:5654"))) +(defhost gretsch.unsafe ((:ipv6 "2001:470:9740:1:3a2c:4aff:fe6d:e768"))) +(defhost invader.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fe94:a5d7"))) +(defhost marauder.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fe6a:7846"))) ;; Safe network. (defhost radius.safe (safe 1)) (defhost vampire.safe (safe 2)) -(defhost evolution.safe ((:ipv4 safe 3))) +(defhost evolution.safe (safe 3)) +(defhost grigsby.safe (safe 4)) +(defhost carling.safe (safe 5)) +(defhost tritan.safe (safe 6)) ;; Wireless network. (defhost radius.untrusted (untrusted 1)) @@ -97,9 +118,17 @@ (defhost artist.untrusted (untrusted 2)) (defhost vampire.untrusted (untrusted 3)) ;; Virtual private network. -(defhost crybaby.vpn (vpn 1)) +(defhost crybaby.vpn ((:ipv4 vpn 1) (:ipv6 vpn "::1:1"))) (defhost terror.vpn ((:ipv4 vpn 2))) -(defhost orange.vpn (vpn 3)) +(defhost orange.vpn ((:ipv4 vpn 3) (:ipv6 vpn "::3:1"))) +(defhost haze.vpn ((:ipv4 vpn 4) (:ipv6 vpn "::4:1"))) +(defhost radius.vpn ((:ipv4 vpn 5) (:ipv6 vpn "::5:1"))) +(defhost precision.vpn ((:ipv4 vpn 6) (:ipv6 vpn "::6:1"))) +(defhost jazz.vpn ((:ipv4 vpn 7) (:ipv6 vpn "::7:1"))) +(defhost vampire.vpn ((:ipv4 vpn 8) (:ipv6 vpn "::8:1"))) + +;; Untrusted private network. +(defhost national.upn ((:ipv4 upn 1) (:ipv6 upn "::1:1"))) ;; Iodine network. (defhost jazz.iodine (iodine 1)) @@ -117,13 +146,13 @@ (defhost stratocaster.colo (colo 4)) (defhost jazz.colo (colo 5)) ;; Anycast addresses for services. -(defhost dns0.any (any 0)) -(defhost dns1.any (any 1)) -(defhost ntp0.any (any 2)) -(defhost ntp1.any (any 3)) -(defhost www-cache.any (any 4)) -(defhost krb0.any (any 5)) -(defhost krb1.any (any 6)) +(defhost dns0.any ((:ipv4 any 0) (:ipv6 any "::0:1"))) +(defhost dns1.any ((:ipv4 any 1) (:ipv6 any "::1:1"))) +(defhost ntp0.any ((:ipv4 any 2) (:ipv6 any "::2:1"))) +(defhost ntp1.any ((:ipv4 any 3) (:ipv6 any "::3:1"))) +(defhost www-cache.any ((:ipv4 any 4) (:ipv6 any "::4:1"))) +(defhost krb0.any ((:ipv4 any 5) (:ipv6 any "::5:1"))) +(defhost krb1.any ((:ipv4 any 6) (:ipv6 any "::6:1"))) ;;;-------------------------------------------------------------------------- ;;; Host switch. @@ -132,12 +161,16 @@ (preferred-subnet-case ((unsafe colo) (defhost radius radius.unsafe) (defhost precision precision.colo) + (defhost telecaster telecaster.colo) (defhost stratocaster stratocaster.colo) (defhost vampire vampire.unsafe)) (t (defhost radius radius.dmz) (defhost precision precision.jump) + (defhost telecaster telecaster.jump) (defhost stratocaster stratocaster.jump) (defhost vampire vampire.dmz))) +(defhost jaguar jaguar.jump) + ;;;----- That's all, folks --------------------------------------------------