Appearance
Network Segmentation Policy
Private IP Allocation — 10.33.0.0/14
All Watsco e-commerce infrastructure uses private IP space within 10.33.0.0/14 (10.33.0.0 – 10.36.255.255). Each /16 block is assigned a platform or purpose.
/16 Block Allocation
| CIDR | Purpose | Status |
|---|---|---|
10.33.0.0/16 | Magento (legacy) | Active — eventual deprecation |
10.34.0.0/16 | Shopware — Primary | Active |
10.35.0.0/16 | Shopware — DR (mirror of 10.34) | Reserved |
10.36.0.0/16 | Reserved | — |
10.37.0.0/16 | Reserved | — |
10.38.0.0/16 | Reserved | — |
10.39.0.0/16 | Reserved | — |
10.33.0.0/16 — Magento (Legacy)
Per-BU allocation within 10.33. Each BU receives a 10-block of /24s with a consistent pattern: /23 for Production, /23 for Staging, /23 for DR Production, /23 for DR Staging.
| /24 Range | BU | Notes |
|---|---|---|
| 10.33.0–9 | SupplySync | See SupplySync docs |
| 10.33.10–19 | Baker | |
| 10.33.20–29 | Gemaire | |
| 10.33.30–39 | CENA | Full |
| 10.33.40–49 | ECMDI | |
| 10.33.50–59 | Peirce Phelps | |
| 10.33.60–69 | CELATAM | |
| 10.33.70–71 | Homans | |
| 10.33.72–79 | Flow API | |
| 10.33.80–83 | GreeComfort | |
| 10.33.84–95 | Unused | |
| 10.33.96/19 | Human Element Workspace Manager | |
| 10.33.128/19 | Internal Services (Airflow) | |
| 10.33.160–255 | Unused |
Per-BU Pattern (Magento)
| Offset | CIDR | Purpose |
|---|---|---|
| +0 | /23 | Production |
| +2 | /23 | Staging |
| +4 | /23 | DR Production |
| +6 | /23 | DR Staging |
| +8–9 | /24 × 2 | Overflow / special (OC Registry, etc.) |
10.34.0.0/16 — Shopware (Primary)
Greenfield allocation for the Shopware platform. See Shopware Network Architecture for full details.
Key differences from 10.33:
- /20 per BU (vs 10× /24 in Magento)
- /21 per environment (vs /23 in Magento) — 4× the IPs
- Dedicated subnets per component tier (Next.js, Domain API, Shopware Backend)
- EKS-ready sizing for Domain API
- Isolated data tier (RDS, ElastiCache, RabbitMQ)
| CIDR Block | BU |
|---|---|
10.34.0.0/20 | SupplySync |
10.34.16.0/20 | Baker |
10.34.32.0/20 | Gemaire |
10.34.48.0/20 | CENA |
10.34.64.0/20 | ECMDI |
10.34.80.0/20 | Peirce Phelps |
10.34.96.0/20 | CELATAM |
10.34.112.0/20 | Homans |
10.34.128.0/20 | GreeComfort |
10.34.144.0/20 | Reserved (future BU) |
10.34.160.0/20 | Reserved |
10.34.176.0/20 | Reserved |
10.34.192.0/20 | Shared Services |
10.34.208.0/20 – 10.34.240.0/20 | Reserved |
10.35.0.0/16 — Shopware DR
Identical structure to 10.34, deployed in the DR region. Same BU offsets, same per-environment subnet layout. Enables clean Transit Gateway or VPC peering routes with no CIDR overlap between primary and DR.
Design Principles
- Account-per-BU-per-environment — each AWS account contains a single VPC for one BU's environment
- No CIDR overlap between regions — primary (10.34) and DR (10.35) never conflict
- Component isolation — network-level separation between frontend, backend, API, and data tiers
- EKS headroom — Domain API subnets sized for VPC CNI pod IP consumption
- Consistent patterns — same subnet layout across all BUs, only the base offset changes