topic Re: Best Practice for HA1 IP address in General Topics

Best Practice for HA1 IP address

emr_1 — Mon, 02 Apr 2018 07:52:25 GMT

I have a lots of customers who uses HA pair with 1.1.1.1/30 and 1.1.1.2/30 for HA1 port.

This HA1 port connected directly. And reason for selecting these IPs are because nobody was using it in the past.

Today, I read this article:

https://blog.cloudflare.com/announcing-1111/

https://www.theverge.com/2018/4/1/17185732/cloudflare-dns-service-1-1-1-1

According to this thread, it sounds okay to keep using 1.1.1.1 for HA1, though I'm curious... do they need to change IPs?

In addition, with my quick test in my lab, I can access to 1.1.1.1 DNS server even HA1 is using 1.1.1.1, thus I believe 1.1.1.1 for HA1 is okay.

Regards.

Emr

Re: Best Practice for HA1 IP address

BPry — Mon, 02 Apr 2018 13:56:17 GMT

@emr_1,

HA links are usually directly connected and therefore the IP doesn't really matter since the traffic will never be routed.

APNIC releasing 1.1.1.1 to CloudFlare is one of the most unreasonable things I've seen in a long time. APNIC has attempted to analyze how much traffic attempt to route to 1.1.1.1 multiple different times and have been unable; CloudFlare offering to do this for them in exchange of allowing them to utilize the IP is the only reason they were allocated the address.

Re: Best Practice for HA1 IP address

OtakarKlier — Mon, 02 Apr 2018 19:32:35 GMT

Hello,

I agree with @BPry. That said I always use RFC 1918 addresses for my HA IP's. This way they can never get routed externally even if the two devices have to be be routed if they are in different locations, etc.

Regards,

Re: Best Practice for HA1 IP address

reaper — Tue, 03 Apr 2018 08:29:55 GMT

oh wow, this is a pretty important thing to consider when 'nonchalantly' using 1.1.1.1 instead of a proper RFC1918 or RFC5735 (documentation) IP

just thinking dns sinkhole,....