Forum Stats

  • 3,741,009 Users
  • 2,248,356 Discussions
  • 7,861,580 Comments

Discussions

What's this RFC1918 stuff you keep talking about?

Michael.R.Taylor-Oracle
Michael.R.Taylor-Oracle Posts: 255 Employee
edited Feb 24, 2019 7:02PM in Dyn Community

How can I tell if my Internet IP address is one of these IP addresses?

---

RFC 1918 defines a set of 3 IP ranges that are not routed across the Internet and can only be used on local networks. You will sometimes see these used on ISP networks, where the devices can only be accessed from within the ISP's network, not from the rest of the Internet.

There are 3 IP ranges defined in RFC 1918:

<span class="lit" style="color: #006666;">172.16</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">12</span><span class="pln" style="color: #000000;"> </span><span class="pun" style="color: #666600;">(</span><span class="lit" style="color: #006666;">172.16</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">-</span><span class="lit" style="color: #006666;">172.31</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">255.255</span><span class="pun" style="color: #666600;">)</span><span class="lit" style="color: #006666;">192.168</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">16</span><span class="pln" style="color: #000000;"> </span><span class="pun" style="color: #666600;">(</span><span class="lit" style="color: #006666;">192.168</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">-</span><span class="lit" style="color: #006666;">192.168</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">255.255</span><span class="pun" style="color: #666600;">)</span><span class="lit" style="color: #006666;">10.0</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">8</span><span class="pln" style="color: #000000;"> </span><span class="pun" style="color: #666600;">(</span><span class="lit" style="color: #006666;">10.0</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">-</span><span class="lit" style="color: #006666;">10.255</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">255.255</span><span class="pun" style="color: #666600;">)</span>

There are also the RFC 6598 addresses for Carrier-Grade NAT:

<span class="lit" style="color: #006666;">100.64</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">10</span><span class="pln" style="color: #000000;"> </span><span class="pun" style="color: #666600;">(</span><span class="lit" style="color: #006666;">100.64</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">-</span><span class="lit" style="color: #006666;">100.127</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">255.255</span><span class="pun" style="color: #666600;">)</span>

If you ISP or provider allocates one of these IP ranges as your WAN IP then your device can only be reached from within your ISP at best. They are very commonly seen where the provider is part of an academic environment (school, college, hall of residence etc), is part of an apartment complex or a mobile phone network. They are also normally seen where the ISP connected device is an ADSL device and you are connecting a router to that device (discussed briefly here).The problem is that if you visit any of the web pages that claim to tell you your IP address they will tell you the IP address your ISP is NATing you behind. The only way to know is to look at the management pages of your ISP connected device (or if you are connecting with a USB connected modem looking at the IP assigned to that interface - using ipconfig on Windows and ifconfig on Linux and BSD).For over a decade those IP ranges (and the link-local subnet) have been routed to AS112, which is a black hole designed to minimize the impact of people trying to reach those IP addresses across the Internet.There are also a few other special case IP ranges that you may also see, covered in RFC 5735:

<span class="lit" style="color: #006666;">127.0</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">8</span><span class="lit" style="color: #006666;">169.254</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">16</span><span class="lit" style="color: #006666;">192.0</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">24</span><span class="lit" style="color: #006666;">192.0</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">2.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">24</span><span class="lit" style="color: #006666;">192.88</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">99.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">24</span><span class="lit" style="color: #006666;">198.18</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">15</span><span class="lit" style="color: #006666;">198.51</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">100.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">24</span><span class="lit" style="color: #006666;">203.0</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">113.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">24</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">.</span><span class="lit" style="color: #006666;">0.0</span><span class="pun" style="color: #666600;">/</span><span class="lit" style="color: #006666;">8</span>

These IP addresses also cannot be routed across the Internet, some (127.0.0.0/8) cannot be routed beyond the local host and the others beyond the local network.

Corrected category from Traffic Management to Remote Access.

Tagged:
RotBlitz
This discussion has been closed.