Best Practice for HA1 IP address

[emr_1]

I have a lots of customers who uses HA pair with 1.1.1.1/30 and 1.1.1.2/30 for HA1 port.

This HA1 port connected directly. And reason for selecting these IPs are because nobody was using it in the past.

Today, I read this article:

https://blog.cloudflare.com/announcing-1111/

https://www.theverge.com/2018/4/1/17185732/cloudflare-dns-service-1-1-1-1

According to this thread, it sounds okay to keep using 1.1.1.1 for HA1, though I'm curious... do they need to change IPs?

In addition, with my quick test in my lab, I can access to 1.1.1.1 DNS server even HA1 is using 1.1.1.1, thus I believe 1.1.1.1 for HA1 is okay.

Regards.

Emr

[BPry · Accepted solution]

@emr_1,

HA links are usually directly connected and therefore the IP doesn't really matter since the traffic will never be routed.

APNIC releasing 1.1.1.1 to CloudFlare is one of the most unreasonable things I've seen in a long time. APNIC has attempted to analyze how much traffic attempt to route to 1.1.1.1 multiple different times and have been unable; CloudFlare offering to do this for them in exchange of allowing them to utilize the IP is the only reason they were allocated the address. 

[OtakarKlier]

Hello,

I agree with @BPry. That said I always use RFC 1918 addresses for my HA IP's. This way they can never get routed externally even if the two devices have to be be routed if they are in different locations, etc.

Regards,

[reaper]

oh wow, this is a pretty important thing to consider when 'nonchalantly' using 1.1.1.1 instead of a proper RFC1918 or RFC5735 (documentation) IP

just thinking dns sinkhole,....