Network Allocation
CIDR Convention
Each customer devops_env deployment gets a /23 CIDR block, split into two /24 VNets for prod and nonprod environments.
- Minimum viable:
/24split into two/25VNets - Recommended:
/23split into two/24VNets
AWS VPC Allocation
RaaS AWS customer VPCs typically use 10.0.0.0/16 or similar RFC-1918 space. The specific CIDR is set at account creation and documented in the customer Terraform config.
| Subnet Type | Size | Purpose |
|---|---|---|
| Public | /24 |
VPN Gateway, proxy instances, NAT Gateway |
| Private Prod | /24 |
Rhapsody EC2 — production |
| Private NonProd | /24 |
Rhapsody EC2 — non-production |
| Secondary (HA) | /24 |
HA failover subnet in a different AZ |
HSCN Network Allocation
HSCN IP ranges are allocated by Redcentric from the 10.128.0.0/9 HSCN block. See HSCN IP Addresses for details.
Management VPC
The RaaS management account VPC (640815619001) is used for:
- Transit Gateway hub for HSCN connectivity
- Shared services (cert monitoring Lambda, dashboards)
- Management tooling (Ansible Tower, GitHub runners)