Skip to content
Runbooks

subnet-allocations

Summary

Section titled “Summary”

This document tracks the subnet allocation across multiple infrastructure projects related to GitLab.com. Any project that requires centralized monitoring or maintenance from ops runners should be configured to not overlap with the gitlab-ops project for network peering.

Reserving a new subnet

Section titled “Reserving a new subnet”
  • Update this MR with a new allocation, pick a row that has AVAILABLE GCP, if needed we can start using previously allocated subnets for Azure
  • Larger subnets can be split into smaller ones, if necessary

Subnet Allocations

Section titled “Subnet Allocations”
First IPLast IPSubnetProjectDescription
10.0.0.010.0.255.25510.0.0.0/16N/ARESERVED
10.1.0.010.1.3.25510.1.0.0/22N/ARESERVED
10.1.4.010.1.4.25510.1.4.0/24N/ARESERVED
10.1.5.010.1.5.25510.1.5.0/24gitlab-ci Runner ManagersCI
10.1.6.010.1.7.25510.1.6.0/23N/ARESERVED
10.1.8.010.1.15.25510.1.8.0/21N/ARESERVED
10.1.16.010.1.31.25510.1.16.0/20N/ARESERVED
10.1.32.010.1.63.25510.1.32.0/19N/ARESERVED
10.1.64.010.1.127.25510.1.64.0/18N/ARESERVED
10.1.128.010.1.255.25510.1.128.0/17N/ARESERVED
10.2.0.010.3.255.25510.2.0.0/15N/ARESERVED
10.4.0.010.7.255.25510.4.0.0/14N/ARESERVED
10.8.0.010.9.255.25510.8.0.0/15N/ARESERVED
10.10.0.010.10.7.25510.10.0.0/21gitlab-ci Ephemeral RunnersCI-plan-free-7
10.10.8.010.10.15.25510.10.8.0/21gitlab-ci Ephemeral RunnersCI-plan-free-6
10.10.16.010.10.23.25510.10.16.0/21gitlab-ci Ephemeral RunnersCI-plan-free-5
10.10.24.010.10.31.25510.10.24.0/21gitlab-ci Ephemeral RunnersCI-plan-free-4
10.10.32.010.10.39.25510.10.32.0/21gitlab-ci Ephemeral RunnersCI-plan-free-3
10.10.40.010.10.47.25510.10.40.0/21gitlab-ci Ephemeral RunnersCI private (old)
10.10.48.010.10.55.25510.10.48.0/21gitlab-ci Ephemeral RunnersCI shared-gitlab-org
10.10.56.010.10.63.25510.10.56.0/21N/ARESERVED
10.10.64.010.10.79.25510.10.64.0/20gitlab-ci Temp Priv RunnersCI private temp
10.10.80.010.10.95.24410.10.80.0/20gitlab-ci Ephemeral RunnersCI private (new)
10.10.96.010.10.127.25510.10.96.0/19N/ARESERVED
10.10.128.010.10.255.25510.10.128.0/17N/ARESERVED
10.11.0.010.11.255.25510.11.0.0/16N/ARESERVED
10.12.0.010.15.255.25510.12.0.0/14N/ARESERVED
10.16.0.010.16.255.25510.16.0.0/16gitlab-ci Ephemeral RunnersCI saas-l-s-amd64 us-east5 (saas-l-s-amd64-us-east5-0, shared by all of the shard’s projects). Also the Private Services Access range of the gitlab-ops ops network, which is not peered with ci
10.17.0.010.17.255.25510.17.0.0/16gitlab-ci Ephemeral RunnersCI saas-l-p-amd64 us-east5 (saas-l-p-amd64-us-east5-0, shared by all of the shard’s projects)
10.18.0.010.18.255.25510.18.0.0/16gitlab-ci Ephemeral RunnersCI saas-l-m-amd64 us-east5 (saas-l-m-amd64-us-east5-0, shared by all of the shard’s projects)
10.19.0.010.19.207.255N/AN/ARESERVED for runner cross-region fallback subnets (10.19.0.0/17, 10.19.128.0/18, 10.19.192.0/20)
10.19.208.010.19.223.25510.19.208.0/20gitlab-ciPrivate Services Access range of the default network (not peered with ci)
10.19.224.010.19.255.25510.19.224.0/19N/ARESERVED for runner cross-region fallback subnets
10.20.0.010.20.255.25510.20.0.0/16AWS r-saas-m-stagingmacOS staging jobs VPC, HA VPN to ci
10.21.0.010.21.255.25510.21.0.0/16gitlab-ci Ephemeral RunnersCI saas-l-l-amd64 us-east5 (saas-l-l-amd64-us-east5-0, shared by all of the shard’s projects)
10.22.0.010.22.255.25510.22.0.0/16gitlab-ci Ephemeral RunnersCI saas-l-xl-amd64 us-east5 (saas-l-xl-amd64-us-east5-0, shared by all of the shard’s projects)
10.23.0.010.23.255.25510.23.0.0/16gitlab-ci Ephemeral RunnersCI saas-l-2xl-amd64 us-east5 (saas-l-2xl-amd64-us-east5-0, shared by all of the shard’s projects)
10.24.0.010.24.255.25510.24.0.0/16gitlab-ci Ephemeral RunnersCI saas-l-m-org us-east5 (saas-l-m-org-us-east5-0, shared by all of the shard’s projects)
10.25.0.010.29.255.255N/AN/ARESERVED for runner cross-region fallback subnets (10.25.0.0/16, 10.26.0.0/15, 10.28.0.0/15)
10.30.0.010.30.255.25510.30.0.0/16AWS r-saas-m-m1macOS m1 jobs VPC, HA VPN to ci
10.31.0.010.31.255.25510.31.0.0/16N/ARESERVED for runner cross-region fallback subnets
10.32.0.010.32.255.25510.32.0.0/16N/AN/A
10.34.0.010.34.255.25510.34.0.0/16gitlab-vaultVault and Vault-nonprod GKE
10.35.0.010.35.255.25510.35.0.0/16DR testingDR testing
10.36.0.010.36.255.25510.36.0.0/16SnowPlow, DR testingAWS-SnowPlow, DR testing
10.37.0.010.37.255.25510.37.0.0/16DR testingDR testing
10.38.0.010.38.255.25510.38.0.0/16N/AN/A
10.39.0.010.39.255.25510.39.0.0/16N/AN/A
10.40.0.010.40.255.25510.40.0.0/16AWS r-saas-m-l-m2promacOS m2pro jobs VPC, HA VPN to ci
10.44.0.010.45.255.25510.44.0.0/15gitlab-ci Experimental RunnersExperimental runners subnets
10.46.0.010.46.255.25510.46.0.0/16gitlab-ci GKE Runner Managersci network runner-managers-ops-gke subnet (10.46.0.0/20 nodes, 10.46.16.0/20 services for runner-managers-ops-1)
10.47.0.010.47.255.25510.47.0.0/16gitlab-ci GKE Runner Managersci network runner-managers-ops-gke pods, runner-managers-ops-1 (32 pods per node, a /26 each, 1024 nodes)
10.50.0.010.50.255.25510.50.0.0/16gitlab-ci GKE Runnerssaas-l-p-amd64 network runner-workloads subnet (10.50.0.0/20 nodes, 10.52.0.0/20 services for the runner-workloads cluster in project 1)
10.51.0.010.51.255.25510.51.0.0/16gitlab-ci GKE Runnerssaas-l-p-amd64 network runner-workloads pods, project-1 cluster (16 pods per node, a /27 each, 2048 nodes)
10.52.0.010.52.255.25510.52.0.0/16gitlab-ci GKE Runnerssee 10.50.0.0/16: services ranges for saas-l-p-amd64 clusters
10.58.0.010.58.255.25510.58.0.0/16gitlab-ci GKE Runner Managersci network runner-managers-gke subnet (10.58.0.0/20 nodes, 10.58.16.0/20 services for runner-managers-gprd-1)
10.59.0.010.59.255.25510.59.0.0/16gitlab-ci GKE Runner Managersci network runner-managers-gke pods, runner-managers-gprd-1 (32 pods per node, a /26 each, 1024 nodes)
10.60.0.010.60.255.25510.60.0.0/16gitlab-ci GKE Runner Managersci network runner-managers-gstg-gke subnet (10.60.0.0/20 nodes, 10.60.16.0/20 services for runner-managers-gstg-1)
10.61.0.010.61.255.25510.61.0.0/16gitlab-ci GKE Runner Managersci network runner-managers-gstg-gke pods, runner-managers-gstg-1 (32 pods per node, a /26 each, 1024 nodes)
10.62.0.010.62.255.25510.62.0.0/16gitlab-ci GKE Runner Managersci network runner-managers-dev-gke subnet (10.62.0.0/20 nodes, 10.62.16.0/20 services for runner-managers-dev-1)
10.63.0.010.63.255.25510.63.0.0/16gitlab-ci GKE Runner Managersci network runner-managers-dev-gke pods, runner-managers-dev-1 (32 pods per node, a /26 each, 1024 nodes)
10.64.0.010.95.255.25510.64.0.0/11gitlab-productionGKE pods
10.96.0.010.127.255.25510.96.0.0/11gitlab-stagingGKE pods
10.128.0.010.159.255.25510.128.0.0/11gitlab-preGKE pods
10.160.0.010.163.255.25510.160.0.0/14gitlab-analysisGKE pods
10.164.0.010.167.255.25510.164.0.0/14gitlab-analysisGKE pods
10.168.0.010.175.255.25510.168.0.0/13gitlab-opsGKE pods
10.176.0.010.176.255.25510.176.0.0/16gitlab-staging-dbRepeatable db provisioning
10.177.0.010.177.255.25510.177.0.0/16gitlab-production-dbRepeatable db provisioning
10.178.0.010.178.255.25510.178.0.0/16gitlab-sandbox-dbRepeatable db provisioning
10.181.0.010.181.255.25510.181.0.0/16gitlab-analysis-stagingAnalysis Staging GCP
10.182.0.010.182.255.25510.182.0.0/16gitlab-opsOps us-central1 GKE pods
10.183.0.010.183.255.25510.183.0.0/16gitlab-qa-runners-2RESERVED
10.184.0.010.191.255.25510.184.0.0/16omnibus-build-runnersRESERVED
10.185.2.010.185.2.25510.185.2.0/24gitlab-subscriptions-stagingStgsub GCP
10.185.3.010.185.3.25510.185.3.0/24gitlab-subscriptions-stagingStgsub GCP
10.185.4.010.185.4.25510.185.4.0/24gitlab-subscriptions-stagingStgsub GKE
10.185.5.010.185.5.25510.185.5.0/24gitlab-subscriptions-stagingStgsub GKE Service
10.185.6.010.185.6.25510.185.6.0/24gitlab-subscriptions-prodPrdsub GCP
10.185.7.010.185.7.25510.185.7.0/24gitlab-subscriptions-prodPrdsub GCP
10.185.8.010.185.8.25510.185.8.0/24gitlab-subscriptions-prodPrdsub GKE
10.185.9.010.185.9.25510.185.9.0/24gitlab-subscriptions-prodPrdsub GKE Service
10.186.0.010.186.255.25510.186.0.0/16gitlab-subscriptions-stagingStgsub GKE Pods
10.187.0.010.187.255.25510.187.0.0/16gitlab-subscriptions-prodPrdsub GKE Pods
10.188.0.010.188.255.25510.188.0.0/16gitlab-runway-stagingRunway Staging
10.189.0.010.189.255.25510.189.0.0/16gitlab-runway-productionRunway Production
10.201.0.010.201.0.25510.201.0.0/24gitlab-productionci-gateway VPC, haproxy-ci VMs second NIC
10.201.1.010.201.1.1510.201.1.0/28gitlab-stagingci-gateway VPC, Private Service Connect subnet psc-ci-c
10.201.2.010.201.2.25510.201.2.0/24gitlab-productionci-gateway VPC, GKE haproxy-ci node pool second interface (gitlab-3okls)
10.201.3.010.201.3.25510.201.3.0/24gitlab-productionci-gateway VPC, pods on that interface (secondary range haproxy-pods)
10.203.0.010.203.0.25510.203.0.0/24gitlab-stagingci-gateway VPC, haproxy-ci VMs second NIC
10.203.1.010.203.1.25510.203.1.0/24gitlab-stagingci-gateway VPC, GKE haproxy-ci node pool second interface (gitlab-36dv2)
10.203.2.010.203.2.25510.203.2.0/24gitlab-stagingci-gateway VPC, pods on that interface (secondary range haproxy-pods)
10.208.0.010.208.0.25510.208.0.0/24gitlab-releaseRelease GCP
10.209.0.010.209.0.25510.209.0.0/24gitlab-devDev GCP
10.216.0.010.223.255.25510.216.0.0/13gitlab-productionProduction GCP
10.251.0.010.251.255.25510.251.0.0/16gitlab-drDR GCP
10.224.0.010.231.255.25510.224.0.0/13gitlab-stagingStaging GCP
10.232.0.010.239.255.25510.232.0.0/13gitlab-prePreProd GCP
10.248.0.010.248.255.25510.248.0.0/16N/APreProd GCP
10.249.0.010.249.255.25510.249.0.0/16N/APreProd GCP
10.250.0.010.250.255.25510.250.0.0/16gitlab-opsOps GCP
10.252.0.010.252.255.25510.252.0.0/16gitlab-restoreRestore GCP
10.253.0.010.253.255.25510.253.0.0/16N/AOps GCP US-Central1
10.255.0.010.255.255.25510.255.0.0/16db-benchmarkingDB Benchmarking GCP