UK HSCN Customers
Sources: Cloud Clients using AWS Direct Connect HSCN (LS 19390365930) · HSCN Customers (TRIB 19931889960) · HSCN Connectivity IP table (LS 6908903520)
Active HSCN Customers
| Customer | Product | Key Contact | Live | Test | |
|---|---|---|---|---|---|
| West Herts | RaaS | Rachel Slegers | r.slegers@nhs.net | Yes | Yes |
| The Christie | RaaS | Leon Guy | Leon.Guy@nhs.net | Unknown | Yes |
| Camden and Islington | RaaS | Alexander Mills | Alexander.Mills@Candi.nhs.uk | No | Yes |
| Lincolnshire Partnership FT | Envoy | David Jones | david.jones10@nhs.net | No | Yes |
Note
"Live" indicates the production environment is actively receiving patient data over HSCN. "Test" indicates a test/dev environment has been connected. "Unknown" means status was not confirmed in the source document.
HSCN IP Addresses per Customer
These IP addresses are allocated from the HSCN IPAM range (10.104.29.0/24) and are used for the Rhapsody instances on the HSCN side of the VPN tunnel.
| Customer | CIDR | Prod | Test | Dev |
|---|---|---|---|---|
| West Herts | 10.104.29.64/29 |
10.104.29.64 |
10.104.29.65 |
— |
| Camden & Islington | 10.104.29.72/29 |
10.104.29.72 |
10.104.29.73 |
10.104.29.74 |
| The Christie | 10.104.29.80/29 |
10.104.29.80 |
10.104.29.81 |
10.104.29.82 |
| Lincolnshire | 10.104.29.88/30 |
10.104.29.88 |
10.104.29.90 |
10.104.29.89 |
Customer Firewall IPs (External Connectivity)
These are the external IPs that customers use on their end of the HSCN VPN connection. They are the IP addresses you'd configure as vpn_endpoint and rightsubnet in the connection stack tfvars.
| Customer | IP Address(es) | Notes |
|---|---|---|
| Ashford & St Peter's | 10.151.69.64, 10.151.84.108 |
|
| Cardiff & Vale | 10.59.9.70 |
|
| Royal Berkshire | 195.104.159.100 |
Prod port 65005, Pre-prod port 65004 |
| The Christie | cloud.christie.nhs.uk / 194.72.7.137, .142, 194.189.117.64, 212.196.252.0, 212.196.253.0, 155.231.0.0, 163.160.0.0, 20.146.120.128, 20.146.248.128 |
Multiple IPs — complex setup |
| Isle of Wight | 172.16.206.25, .26, 10.154.217.69 |
Prod: 3402, Test: 3403, Dev: 3401 |
| Golden Jubilee | 10.248.94.150 |
|
| SynLab | 3.8.40.38 |
Customer Account Details
| Customer code | AWS Account ID | Account alias | Region |
|---|---|---|---|
uk-hscn (uk) |
943397710386 |
raas-customer-uk |
eu-west-2 |
| westherts | 851725456662 |
raas-customer-westherts-hscn |
eu-west-2 |
thechristie (christie) |
715653178609 |
raas-customer-thechristie |
eu-west-2 |
| camdenisling | 945644993432 |
raas-customer-camdenisling |
eu-west-2 |
| lincolnshire | 944682177265 |
envoy-customer-lincolnshire |
eu-west-2 |
What "HSCN Customer" Means in AWS Terms
HSCN customers do not have public-facing AWS VPN gateways. Instead:
- Their VPC connects to the management account's Transit Gateway via a TGW VPC attachment
- Their Rhapsody traffic routes through the management account's StrongSwan termination nodes (
10.104.29.4/10.104.29.20) - The VPN tunnel from the customer's NHS Trust runs to the termination nodes via Redcentric/HSCN
- Outbound internet access goes via the management account proxy instances (ALB-fronted Squid)