Provisioning Methods: Difference between revisions

From 44Net Wiki
Organize IPIP Mesh documentation and navigation
mw push
 
Line 1: Line 1:
{{DISPLAYTITLE:Provisioning Methods}}
{{DISPLAYTITLE:Provisioning Methods}}


New here? Start with [[GetStarted|Getting started]].
44Net provides address resources and ways to connect amateur radio projects. You can use a service that supplies connectivity, participate in a community network, or request address space for a network whose connectivity you arrange.


There is no single way to provision 44Net. The network is fundamentally decentralized, and operators participate from within different environments and toward different goals.  
This page helps you choose what your project needs and where to start. New here? See [[GetStarted|Getting started]] for account setup.


The provisioning models people have developed reflect those operational realities rather than a progression of experience, but there are some learning opportunities associated with moving among them or combining them.
== IP networks and connectivity ==


To understand more about decentralization and why these approaches exist, see [[Decentralization]].
=== 44Net Connect ===


== Current provisioning models ==
[[44Net Connect]] gives your device or network public IP addresses through a WireGuard tunnel over your existing Internet connection. ARDC operates the Connect endpoints; you maintain your device or gateway, its routing, and its firewall.


=== [[44Net Connect/Quick Start|44Net Connect]] ===
'''Includes:''' Addresses and a WireGuard tunnel, with routed subnets available through the Connect dashboard. You do not need to request address space separately in the Portal before creating a tunnel.


Provision 44Net to a single device or small network using a tunnel. This model works from typical home networks, cloud hosts, mobile environments, and other locations where direct routing infrastructure is not available.  
'''Requirements:''' Internet access and a device or router that supports WireGuard. Connect works behind NAT and CGNAT, provided your connection allows WireGuard traffic to reach the endpoint.


=== [[IPIP Mesh/Quick Start|IPIP Mesh]] ===
'''Start here:''' [[44Net Connect|Choose a single-device or routed-subnet setup]], then sign in to the [https://connect.44net.cloud/ Connect dashboard] with your Portal account.


Participate in a shared community routing environment. Independently operated stations link with one another through a mesh of tunnels, and traffic to or from the wider Internet typically transits shared gateways (such as at UCSD). This model is common in long‑running regional and club networks.
=== IPIP Mesh ===


=== [[BGP/Quick Start|BGP-announced subnet]] ===
The [[IPIP Mesh]] connects participating amateur radio networks through IP-in-IP tunnels. You can operate your own gateway or ask an existing participating network about connecting through its infrastructure. ARDC supports the Mesh and operates a shared Internet gateway; participants operate their own gateways and networks.


Integrate 44Net directly into independently operated routing infrastructure. Operators announce their allocated prefixes using BGP and maintain their own routing policy and operational practices. This model is suited to research networks, {{Term|IX}}-connected operators, multi-homing, community backbones, and other autonomous environments.
'''Includes:''' An address assignment for Mesh use. For your own gateway, you register its endpoint and subnet in the Portal and configure tunnels and routes to other Mesh networks.


== Comparing the approaches ==
'''Requirements:''' An IPIP-capable gateway, a reachable public IPv4 endpoint, and an Internet connection that permits IPIP (IP protocol 4). NAT and CGNAT are not supported. The Mesh does not provide general-purpose Internet access; see its overview for the limits of the shared Internet gateway.


{| class="wikitable"
'''Start here:''' [[IPIP Mesh|Check the requirements and choose how to participate]]. For your own gateway, [[Portal/Request Address Space|request a Mesh address assignment]] in the Portal.
! Model
! Typical environment
! How routing reaches you
! Operational responsibility
|-
| 44Net Connect
| Single host or small network without direct routing infrastructure
| Tunnel between your device and a point of presence
| Managing the tunnel and the provisioned subnet
|-
| IPIP Mesh
| Regional or community network with shared routing
| Shared mesh gateways (such as UCSD)
| Operating a mesh node and participating in shared routing
|-
| BGP-announced subnet
| Independently routed infrastructure
| Global routing via BGP
| Operating routers, BGP edge, and routing policy
|}


== How to choose ==
== Address space and registration ==


If you want to provision 44Net to a single device or a small LAN without operating routing infrastructure, start with '''44Net Connect'''.
=== Connectivity you arrange ===


If you are participating in a regional or club network that exchanges routes cooperatively, or if you are working with a [[Regional Coordinator]], consider '''IPIP Mesh'''.
If you are building a network with your own connectivity, you can request 44Net address space for it. ARDC maintains the assignment and provides routing authorization where applicable. You and your network or upstream provider arrange how traffic reaches the addresses.


If you already operate routed infrastructure and want your 44Net prefixes announced as part of your existing routing environment, use a '''BGP-announced subnet'''.
'''Includes:''' An IP address assignment, a Letter of Authorization (LOA) for BGP announcements where applicable, and optional reverse DNS delegation.


== Under the hood ==
'''Requirements:''' A network plan and your own connectivity. For a BGP-announced subnet, you need an upstream or routing arrangement that can announce it. Your provider may announce on your behalf, or you may operate BGP yourself, depending on that arrangement.


All provisioning models place your systems into the same shared 44Net address space. The differences are operational: how routes reach your network, where gateways exist, and who is responsible for routing decisions. These distinctions reflect the decentralized structure of 44Net rather than separate networks.
'''Start here:''' [[Portal/Request Address Space|Request address space in the Portal]]. For Internet routing through a provider, read the [[BGP|BGP overview]] and [[BGP/Quick Start|BGP Quick Start]] before requesting service from an upstream. You may also want to review the [[Guide for ISPs|Guide for ISPs]].
 
For these independently connected assignments, ARDC provides address resources and authorization. You and your provider are responsible for connectivity, routing, and transit.
 
If you are joining an existing network, ask its operators how addresses and routing are arranged before requesting a separate assignment.
 
== Supporting services ==
 
=== DNS ===
 
[[DNS]] gives names to your devices and services. You can request an ampr.org subdomain for your callsign, or a club or organization subdomain subject to review, and manage records beneath it.
 
DNS can support projects using Connect, the Mesh, or independently arranged connectivity. A and AAAA records can point to addresses outside 44Net as well as to 44Net addresses.
 
Reverse DNS for an address assignment is a separate facility from a callsign subdomain. Reverse DNS for 44Net Connect is not currently available.
 
Reverse DNS delegation for eligible BGP subnets is available by request; [[DNS/Portal/Delegations#Reverse DNS (rDNS)|check the delegation requirements]] and open a support ticket in the Portal.
 
'''Start here:''' [[DNS/Portal/Subdomains|Request and manage a subdomain in the Portal]].
 
== Joining an existing project ==
 
You may be able to participate through an independently operated network or project. Its operators determine how you join, what connectivity they provide, and what equipment or resources you need. Ask them whether you should request your own address assignment before applying for one.
 
Independently operated networks such as HAMNET and HAMGATE use 44Net resources. Networks built with AREDN can also use 44Net addresses; ask the local operators what their network supports.
 
== Choosing for your project ==
 
=== If you want… ===
 
'''A public address for a device or small network over an existing Internet connection:'''
 
Start with [[44Net Connect]]. It can work behind NAT and CGNAT.
 
'''Communication with networks on the IPIP Mesh:'''
 
Check the [[IPIP Mesh|Mesh requirements]], or ask a participating network about joining through it.
 
'''Addresses for a network whose connectivity you arrange:'''
 
[[Portal/Request Address Space|Request address space]]. If an upstream will announce it to the Internet, follow the [[BGP/Quick Start|BGP guide]].
 
'''Names for your devices or services:'''
 
Use [[DNS]] alongside the connection you choose.
 
These choices describe what your project needs, not a sequence of upgrades. A project may use more than one. Using 44Net addresses does not automatically make systems reachable from every other 44Net network; reachability depends on routing, service arrangements, and firewall rules.


== Learn more ==
== Learn more ==


* [[GetStarted|Getting started]]
* [[Portal/Introduction|Managing resources in the Portal]]
* [[Routing|Routing and connectivity]]
* [[Routing|Routing and connectivity]]
* [[CommunityProjects|Community projects]]
* [[Internet Requirements|Internet connection requirements]]
* [[Decentralization|How Connect, IPIP Mesh, and BGP fit together]]
* [[Get Help|Getting help]]


== Older docs and notes ==
Earlier pages that may still be useful:
* [[IPIP Mesh/Gateways|Gateway]]
* [[IPIP Mesh/Registering Your Gateway|Registering Your Gateway]]
* [[Tunnel]]
* [[AMPRNet VPN]]
* [[Routing your allocation via BGP]]
* [[Announcing your allocation directly]]
* [[FAQ|Why can’t I announce my allocation directly?]]
* See [[Archive]] for more.
[[Category:Explanation]]
[[Category:Explanation]]
[[Category:Participation Methods]]
[[Category:Participation Methods]]

Latest revision as of 15:29, 19 October 2026


44Net provides address resources and ways to connect amateur radio projects. You can use a service that supplies connectivity, participate in a community network, or request address space for a network whose connectivity you arrange.

This page helps you choose what your project needs and where to start. New here? See Getting started for account setup.

IP networks and connectivity

44Net Connect

44Net Connect gives your device or network public IP addresses through a WireGuard tunnel over your existing Internet connection. ARDC operates the Connect endpoints; you maintain your device or gateway, its routing, and its firewall.

Includes: Addresses and a WireGuard tunnel, with routed subnets available through the Connect dashboard. You do not need to request address space separately in the Portal before creating a tunnel.

Requirements: Internet access and a device or router that supports WireGuard. Connect works behind NAT and CGNAT, provided your connection allows WireGuard traffic to reach the endpoint.

Start here: Choose a single-device or routed-subnet setup, then sign in to the Connect dashboard with your Portal account.

IPIP Mesh

The IPIP Mesh connects participating amateur radio networks through IP-in-IP tunnels. You can operate your own gateway or ask an existing participating network about connecting through its infrastructure. ARDC supports the Mesh and operates a shared Internet gateway; participants operate their own gateways and networks.

Includes: An address assignment for Mesh use. For your own gateway, you register its endpoint and subnet in the Portal and configure tunnels and routes to other Mesh networks.

Requirements: An IPIP-capable gateway, a reachable public IPv4 endpoint, and an Internet connection that permits IPIP (IP protocol 4). NAT and CGNAT are not supported. The Mesh does not provide general-purpose Internet access; see its overview for the limits of the shared Internet gateway.

Start here: Check the requirements and choose how to participate. For your own gateway, request a Mesh address assignment in the Portal.

Address space and registration

Connectivity you arrange

If you are building a network with your own connectivity, you can request 44Net address space for it. ARDC maintains the assignment and provides routing authorization where applicable. You and your network or upstream provider arrange how traffic reaches the addresses.

Includes: An IP address assignment, a Letter of Authorization (LOA) for BGP announcements where applicable, and optional reverse DNS delegation.

Requirements: A network plan and your own connectivity. For a BGP-announced subnet, you need an upstream or routing arrangement that can announce it. Your provider may announce on your behalf, or you may operate BGP yourself, depending on that arrangement.

Start here: Request address space in the Portal. For Internet routing through a provider, read the BGP overview and BGP Quick Start before requesting service from an upstream. You may also want to review the Guide for ISPs.

For these independently connected assignments, ARDC provides address resources and authorization. You and your provider are responsible for connectivity, routing, and transit.

If you are joining an existing network, ask its operators how addresses and routing are arranged before requesting a separate assignment.

Supporting services

DNS

DNS gives names to your devices and services. You can request an ampr.org subdomain for your callsign, or a club or organization subdomain subject to review, and manage records beneath it.

DNS can support projects using Connect, the Mesh, or independently arranged connectivity. A and AAAA records can point to addresses outside 44Net as well as to 44Net addresses.

Reverse DNS for an address assignment is a separate facility from a callsign subdomain. Reverse DNS for 44Net Connect is not currently available.

Reverse DNS delegation for eligible BGP subnets is available by request; check the delegation requirements and open a support ticket in the Portal.

Start here: Request and manage a subdomain in the Portal.

Joining an existing project

You may be able to participate through an independently operated network or project. Its operators determine how you join, what connectivity they provide, and what equipment or resources you need. Ask them whether you should request your own address assignment before applying for one.

Independently operated networks such as HAMNET and HAMGATE use 44Net resources. Networks built with AREDN can also use 44Net addresses; ask the local operators what their network supports.

Choosing for your project

If you want…

A public address for a device or small network over an existing Internet connection:

Start with 44Net Connect. It can work behind NAT and CGNAT.

Communication with networks on the IPIP Mesh:

Check the Mesh requirements, or ask a participating network about joining through it.

Addresses for a network whose connectivity you arrange:

Request address space. If an upstream will announce it to the Internet, follow the BGP guide.

Names for your devices or services:

Use DNS alongside the connection you choose.

These choices describe what your project needs, not a sequence of upgrades. A project may use more than one. Using 44Net addresses does not automatically make systems reachable from every other 44Net network; reachability depends on routing, service arrangements, and firewall rules.

Learn more