vault: update IP planning - DHCP range shrunk, K8s nodes reserved, MetalLB isolated

This commit is contained in:
Yaojia Wang
2026-03-15 21:52:36 +01:00
parent bdcc0dd265
commit 8f16ed701c
2 changed files with 70 additions and 19 deletions

View File

@@ -133,6 +133,19 @@ iStoreOS / EasePi Pro (192.168.68.63) ← 主网关
| `10.8.0.0/24` | WireGuard VPN |
| `172.17.0.0/16` | Docker 内部网络 |
### IP 分段规划
```
.1-.10 网络设备预留
.11-.30 K8s 集群(静态 netplan不走 DHCP
.60-.70 核心基础设施DHCP 静态绑定)
.71-.99 个人设备DHCP 静态绑定)
.100-.229 DHCP 动态池start=100, limit=130
.230-.239 预留
.240-.242 MetalLB VIPK8s Ingress LoadBalancer
.243+ 未使用
```
### 端口映射WAN → LAN
| 外部端口 | 目标 | 说明 |
@@ -161,29 +174,61 @@ iStoreOS / EasePi Pro (192.168.68.63) ← 主网关
---
## DHCP 静态绑定
## DHCP 静态绑定22 台设备)
| 名称 | IP | MAC | 设备类型 |
|------|-----|-----|---------|
| YIUKAINAS | 192.168.68.70 | 24:5E:BE:5F:ED:38 | QNAP NAS |
| lingke | 192.168.68.69 | 84:47:09:20:70:DA | PVE 服务器 |
| easepi | 192.168.68.63 | EE:61:98:11:AD:C4 | iStoreOS 路由器 |
| Yiukais-MBP | 192.168.68.87 | 5C:E9:1E:B2:56:79 | MacBook Pro |
| Yiukai-Asus-wifi | 192.168.68.79 | 08:3A:88:59:1F:A6 | Asus 笔记本(WiFi) |
### K8s 集群(.11-.22
| 名称 | IP | MAC | 说明 | DNS |
|------|-----|-----|------|-----|
| k8s-cp1 | 192.168.68.11 | BC:24:11:44:DB:F6 | K8s 控制面 | 8.8.8.8(绕过 OpenClash |
| k8s-w1 | 192.168.68.21 | BC:24:11:16:AD:25 | K8s 工作节点 | 8.8.8.8(绕过 OpenClash |
| k8s-w2 | 192.168.68.22 | BC:24:11:51:8E:58 | K8s 工作节点 | 8.8.8.8(绕过 OpenClash |
### 核心基础设施(.60-.70
| 名称 | IP | MAC | 说明 |
|------|-----|-----|------|
| Yiukai-Asus-lan | 192.168.68.60 | 44:E5:17:DD:26:01 | Asus 笔记本(有线) |
| yiukai-ubuntu | 192.168.68.108 | 1C:79:2D:5C:2C:C4 | Ubuntu 台式机 |
| Yiukai | 192.168.68.89 | 10:FF:E0:CC:1D:00 | 个人设备 |
| pc | 192.168.68.176 | 12:D0:5B:A3:8B:4F | Windows PC |
| pve-docker | 192.168.68.102 | BC:24:11:3B:9C:8A | PVE VM |
| wireguard | 192.168.68.107 | BC:24:11:00:4D:D2 | WireGuard VM |
| kai-desktop-jetson | 192.168.68.104 | 3C:6D:66:1E:D7:62 | Jetson 开发板 |
| homeassistant | 192.168.68.97 | BC:24:11:63:40:1E | Home Assistant VM |
| network-scanner | 192.168.68.84 | BC:24:11:09:F1:9E | 网络扫描 VM |
| adguard-vm | 192.168.68.112 | BC:24:11:C9:58:CB | AdGuard Home VM |
| Yaojia-ipad | 192.168.68.77 | 64:0B:D7:F0:D0:4C | iPad |
| easepi | 192.168.68.63 | EE:61:98:11:AD:C4 | iStoreOS 主网关 |
| pve-server | 192.168.68.69 | 84:47:09:20:70:DA | PVE 虚拟化服务器 |
| YIUKAINAS | 192.168.68.70 | 24:5E:BE:5F:ED:38 | QNAP NAS |
### 个人设备(.71-.99
| 名称 | IP | MAC | 说明 |
|------|-----|-----|------|
| Yaojias-iPhone | 192.168.68.73 | 68:EF:DC:B7:36:40 | iPhone |
| Yaojia-ipad | 192.168.68.77 | 64:0B:D7:F0:D0:4C | iPad |
| Yiukai-Asus-wifi | 192.168.68.79 | 08:3A:88:59:1F:A6 | Asus 笔记本(WiFi) |
| network-scanner | 192.168.68.84 | BC:24:11:09:F1:9E | 网络扫描 VM |
| Yiukais-MBP | 192.168.68.87 | 5C:E9:1E:B2:56:79 | MacBook Pro |
| kuangxideiPhone | 192.168.68.88 | C4:C1:7D:7B:76:CC | iPhone |
| Yiukai | 192.168.68.89 | 10:FF:E0:CC:1D:00 | 个人设备 |
| homeassistant | 192.168.68.97 | BC:24:11:63:40:1E | Home Assistant VM |
### PVE 虚拟机 & 服务(.100-.120
| 名称 | IP | MAC | 说明 |
|------|-----|-----|------|
| pve-docker | 192.168.68.102 | BC:24:11:3B:9C:8A | PVE VM |
| kai-desktop-jetson | 192.168.68.104 | 3C:6D:66:1E:D7:62 | Jetson 开发板 |
| wireguard | 192.168.68.107 | BC:24:11:00:4D:D2 | WireGuard VM |
| yiukai-ubuntu | 192.168.68.108 | 1C:79:2D:5C:2C:C4 | Ubuntu 台式机 |
| android-8fbbfff | 192.168.68.111 | 6C:2D:24:F8:F3:0C | Android 手机 |
| adguard-vm | 192.168.68.112 | BC:24:11:C9:58:CB | AdGuard Home VM备用 |
### 其他
| 名称 | IP | MAC | 说明 |
|------|-----|-----|------|
| pc | 192.168.68.176 | 12:D0:5B:A3:8B:4F | Windows PC |
### MetalLB VIP不走 DHCP
| IP | 用途 |
|-----|------|
| 192.168.68.240 | K8s Ingress (ingress-nginx) |
| 192.168.68.241-242 | MetalLB 预留 |
---