CIDR blocks and IP addressing in AWS - Deep Dive

Overview - CIDR blocks and IP addressing

What is it?

CIDR blocks and IP addressing are ways to organize and assign addresses to devices on a network. CIDR stands for Classless Inter-Domain Routing, which is a method to allocate IP addresses more flexibly than older systems. IP addresses are like phone numbers for devices, allowing them to find and talk to each other. CIDR blocks group these addresses into ranges that help manage networks efficiently.

Why it matters

Without CIDR and proper IP addressing, networks would waste many addresses or run out quickly, causing communication problems. It would be like having a phone book with many empty or duplicate numbers, making it hard to connect calls. CIDR helps use address space wisely, enabling the internet and cloud networks to scale and work smoothly.

Where it fits

Before learning CIDR and IP addressing, you should understand basic networking concepts like what an IP address is and how devices connect. After this, you can learn about subnetting, routing, and how cloud providers like AWS use CIDR blocks to create virtual networks.

Mental Model

Core Idea

CIDR blocks group IP addresses into flexible ranges using a prefix length, allowing efficient and scalable network addressing.

Think of it like...

Think of CIDR blocks like street blocks in a city. Instead of assigning house numbers randomly, you group houses on the same street block together, making it easier to find addresses and deliver mail.

┌───────────────┐
│ IP Address    │ 192.168.1.0
│ CIDR Notation │ /24
├───────────────┤
│ Address Range │ 192.168.1.0 - 192.168.1.255
│ Total IPs     │ 256 addresses
└───────────────┘

Build-Up - 7 Steps

1

Foundation

Understanding IP Addresses Basics

Concept: Learn what an IP address is and how it identifies devices on a network.

An IP address is a unique number assigned to each device on a network. It looks like four numbers separated by dots, for example, 192.168.1.1. Each number can be from 0 to 255. This address helps devices find each other, like a home address helps mail reach the right house.

Result

You can recognize and understand the format of IP addresses and their role in networking.

Knowing what an IP address is forms the foundation for understanding how networks organize and communicate.

2

Foundation

What is a Network and Host Portion

Concept: Learn how an IP address is split into network and host parts to identify networks and devices.

An IP address has two parts: the network part and the host part. The network part tells which network the device belongs to, and the host part identifies the device within that network. For example, in 192.168.1.10, '192.168.1' might be the network, and '10' the device.

Result

You understand how IP addresses help group devices into networks.

Recognizing the network and host parts helps you see why grouping addresses is necessary for routing and communication.

3

Intermediate

Introducing CIDR Notation

🤔Before reading on: do you think CIDR notation increases or decreases the number of IP addresses in a block? Commit to your answer.

Concept: CIDR notation adds a suffix to an IP address to show how many bits are used for the network part.

CIDR notation looks like an IP address followed by a slash and a number, for example, 192.168.1.0/24. The number after the slash tells how many bits are fixed for the network. The rest are for devices. A /24 means the first 24 bits are network, leaving 8 bits for hosts, so 256 addresses.

Result

You can read and interpret CIDR notation to know the size of an IP block.

Understanding CIDR notation is key to flexible network design and efficient IP address use.

4

Intermediate

Calculating IP Address Ranges from CIDR

🤔Before reading on: if you have 192.168.1.0/26, do you think the block contains 64 or 128 IP addresses? Commit to your answer.

Concept: Learn how to find the range of IP addresses covered by a CIDR block.

The number after the slash shows how many bits are fixed for the network. The remaining bits define how many addresses are in the block. For example, /26 means 32 - 26 = 6 bits for hosts, so 2^6 = 64 addresses. The block 192.168.1.0/26 covers addresses from 192.168.1.0 to 192.168.1.63.

Result

You can calculate the start and end IP addresses in any CIDR block.

Knowing how to calculate ranges helps you plan and allocate network addresses precisely.

5

Intermediate

Subnetting with CIDR Blocks

🤔Before reading on: does subnetting increase or decrease the number of networks? Commit to your answer.

Concept: Subnetting divides a larger network into smaller parts using CIDR blocks.

Subnetting splits a big network into smaller networks by changing the CIDR prefix length. For example, splitting 192.168.1.0/24 into two /25 blocks creates two networks with 128 addresses each. This helps organize devices and control traffic.

Result

You understand how to create smaller networks inside a bigger one using CIDR.

Subnetting with CIDR allows better network management and security by isolating groups of devices.

6

Advanced

CIDR in AWS VPC Networking

🤔Before reading on: do you think AWS allows overlapping CIDR blocks in VPCs? Commit to your answer.

Concept: AWS uses CIDR blocks to define virtual networks called VPCs and their subnets.

In AWS, when you create a Virtual Private Cloud (VPC), you assign it a CIDR block like 10.0.0.0/16. This defines the IP address range for the VPC. Inside the VPC, you create subnets with smaller CIDR blocks, like 10.0.1.0/24. AWS does not allow overlapping CIDR blocks in the same VPC or peered VPCs to avoid routing conflicts.

Result

You can design AWS networks using CIDR blocks to control IP address allocation and isolation.

Understanding AWS CIDR rules prevents network conflicts and ensures smooth cloud infrastructure operation.

7

Expert

Advanced CIDR Allocation and IP Exhaustion

🤔Before reading on: do you think using very small CIDR blocks wastes IP addresses or saves them? Commit to your answer.

Concept: Experts balance CIDR block sizes to avoid wasting IP addresses while ensuring enough for growth.

Allocating CIDR blocks too large wastes IP addresses that cannot be used elsewhere. Too small blocks limit growth and require complex reconfiguration later. AWS and network engineers plan CIDR allocations carefully, sometimes using automation to track usage and avoid exhaustion. They also consider reserved addresses and future scaling.

Result

You appreciate the tradeoffs in CIDR block sizing and how to plan for efficient, scalable networks.

Knowing the balance between block size and address waste is crucial for long-term network health and cost efficiency.

Under the Hood

CIDR works by using a subnet mask that marks which bits of an IP address belong to the network and which to hosts. The mask is a sequence of 1s followed by 0s in binary, matching the prefix length. Routers use this mask to decide if an IP address is inside a network or should be forwarded elsewhere. This flexible bit-length prefix replaced older fixed classes, allowing variable-sized networks.

Why designed this way?

CIDR was created in the 1990s to solve the problem of IP address exhaustion caused by rigid class-based addressing. It allows networks to be sized exactly as needed, reducing waste and improving routing efficiency. Older classful addressing was too coarse and led to many unused addresses and large routing tables.

┌─────────────────────────────┐
│ IP Address: 192.168.1.10   │
│ Binary:    11000000.10101000.00000001.00001010 │
├─────────────────────────────┤
│ Subnet Mask (/24):          │
│ Binary:    11111111.11111111.11111111.00000000 │
├─────────────────────────────┤
│ Network Part:               │
│ 11000000.10101000.00000001 │
│ Host Part:                 │
│ 00001010                   │
└─────────────────────────────┘

Myth Busters - 4 Common Misconceptions

Quick: Does a /24 CIDR block always have 256 usable IP addresses? Commit to yes or no.

Common Belief: A /24 block always provides 256 usable IP addresses for devices.

Reality: A /24 block has 256 total addresses, but typically 2 are reserved: one for the network address and one for the broadcast address, leaving 254 usable IPs.

Why it matters: Assuming all 256 addresses are usable can cause IP conflicts or network errors when assigning addresses.

Quick: Can two VPCs in AWS have overlapping CIDR blocks and still communicate directly? Commit to yes or no.

Common Belief: AWS allows VPCs with overlapping CIDR blocks to connect and communicate without issues.

Reality: AWS does not allow VPC peering between VPCs with overlapping CIDR blocks because it causes routing conflicts.

Why it matters: Overlapping CIDR blocks in peered VPCs break network communication and cause hard-to-debug connectivity problems.

Quick: Does increasing the CIDR prefix length always increase the number of IP addresses? Commit to yes or no.

Common Belief: Increasing the CIDR prefix length (like from /24 to /26) increases the number of IP addresses in the block.

Reality: Increasing the prefix length actually decreases the number of IP addresses because more bits are fixed for the network, leaving fewer for hosts.

Why it matters: Misunderstanding this leads to wrong network sizing and address shortages.

Quick: Is CIDR only useful for IPv4 addressing? Commit to yes or no.

Common Belief: CIDR is only relevant for IPv4 and not used with IPv6 addressing.

Reality: CIDR notation is used for both IPv4 and IPv6 to represent network prefixes and address ranges.

Why it matters: Ignoring CIDR in IPv6 leads to confusion and misconfiguration in modern networks.

Expert Zone

1

CIDR blocks must be aligned on boundaries that match their prefix length; misaligned blocks cause routing errors.

2

AWS reserves some IP addresses in each subnet for internal use, reducing the number of assignable IPs beyond standard network and broadcast reservations.

3

Using very small CIDR blocks can complicate routing and increase management overhead, so balance is key.

When NOT to use

CIDR is not suitable when fixed-size blocks are mandated by legacy systems or when using non-IP-based addressing schemes. Alternatives include fixed classful addressing or IPv6 with different subnetting rules.

Production Patterns

In production, CIDR blocks are planned carefully to avoid overlap, allow future growth, and segment networks by function or security level. Automation tools track CIDR usage and prevent conflicts during cloud infrastructure deployment.

Connections

Binary Number System

CIDR uses binary math to define network and host parts of IP addresses.

Understanding binary helps decode how CIDR masks work and why prefix lengths matter.

Postal Addressing Systems

Both CIDR and postal addresses group locations hierarchically for efficient delivery.

Recognizing hierarchical grouping in CIDR clarifies how networks route data like mail delivery.

Set Theory (Mathematics)

CIDR blocks represent sets of IP addresses with clear boundaries and intersections.

Viewing CIDR as sets helps understand subnet overlaps and address allocation conflicts.

Common Pitfalls

#1 Assigning overlapping CIDR blocks in connected networks.

Wrong approach:

VPC1 CIDR: 10.0.0.0/16
VPC2 CIDR: 10.0.0.0/16
Attempting to peer these VPCs.

Correct approach:

VPC1 CIDR: 10.0.0.0/16
VPC2 CIDR: 10.1.0.0/16
Peering these non-overlapping VPCs.

Root cause:

Misunderstanding that overlapping CIDR blocks cause routing conflicts and are disallowed in peering.

#2 Misinterpreting CIDR prefix length as host count directly.

Wrong approach:

Assuming /26 means 26 hosts available.

Correct approach:

Recognizing /26 means 2^(32-26) = 64 total addresses, with fewer usable hosts.

Root cause:

Confusing prefix length with number of hosts instead of understanding it defines network bits.

#3 Ignoring reserved IP addresses in subnets.

Wrong approach:

Using all IPs in 192.168.1.0/24 for devices, including .0 and .255.

Correct approach:

Using 192.168.1.1 to 192.168.1.254 for devices, reserving .0 as network and .255 as broadcast.

Root cause:

Not knowing network and broadcast addresses are reserved and unusable for hosts.

Key Takeaways

CIDR blocks allow flexible grouping of IP addresses using a prefix length that defines network size.

Understanding how to read and calculate CIDR ranges is essential for efficient network design and management.

AWS uses CIDR blocks to create virtual networks and subnets, enforcing rules to avoid overlaps and conflicts.

Misunderstanding CIDR prefix lengths and reserved addresses leads to network errors and IP exhaustion.

Expert network planning balances CIDR block sizes to optimize address use and support future growth.