Tinkerer

Tinkerer

Tinkering with technology for a long long time. I was once a sysadmin, but then I saw the light and escaped.

RFC1918

1 minute read

RFC 1918 defines a set of 3 IP ranges that are not routed across the Internet and can only be used on local networks. You will sometimes see these used on ISP networks, where the devices can only be accessed from within the ISP’s network, not from the rest of the Internet.

There are 3 IP ranges defined in RFC 1918. Your home network should be in one of these ranges:

10.0.0.0/8 (10.0.0.0-10.255.255.255)
172.16.0.0/12 (172.16.0.0-172.31.255.255)
192.168.0.0/16 (192.168.0.0-192.168.255.255)

There are also the RFC 6598 addresses for Carrier-Grade NAT:

100.64.0.0/10 (100.64.0.0-100.127.255.255)

If you ISP or provider allocates one of these IP ranges as your WAN IP then your device can only be reached from within your ISP at best. They are very commonly seen where the provider is part of an academic environment (school, college, hall of residence etc), is part of an apartment complex or a mobile phone network. They are also normally seen where the ISP connected device is an ADSL device and you are connecting a router to that device.

The problem is that if you visit any of the web pages that claim to tell you your IP address they will tell you the IP address your ISP is NATing you behind. The only way to know is to look at the management pages of your ISP connected device (or if you are connecting with a USB connected modem looking at the IP assigned to that interface - using ipconfig on Windows, ifconfig on Linux and BSD, or ip addr show on Linux).

For over a decade those IP ranges (and the link-local subnet) have been routed to AS112, which is a black hole designed to minimise the impact of people trying to reach those IP addresses across the Internet.

There are also a few other special case IP ranges that you may also see, covered in RFC 5735:

0.0.0.0/8
127.0.0.0/8
169.254.0.0/16
192.0.0.0/24
192.0.2.0/24
192.88.99.0/24
198.18.0.0/15
198.51.100.0/24
203.0.113.0/24

These IP addresses also cannot be routed across the Internet, some (127.0.0.0/8) cannot be routed beyond the local host and the others beyond the local network.

You May Also Enjoy

Ulanzi TC001 Smart Pixel clock

3 minute read

Update 2024-03-11: Well, I bought another one and the LaMetric is now in the drawer. The only thing missing was a native weather app, so I wrote an automatio...

Cloudflare tunnels with authentication

4 minute read

I mentioned before that I was using Traefik, what I didn’t say is that I was also using Authentik for authentication. Sometimes as forward auth (providing au...

Limited remote access for Home Assistant

2 minute read

I mentioned on the Home Assistant forum about allowing access to only the bits you need, and that I do this for the mobile app. I didn’t mention what that me...

WiFi sensor into device tracker

1 minute read

Something that makes for a great home/away tracker is the Android and iOS app’s connected WiFi sensor, or at least it would if it was a device tracker.