I currently have each VPC per cluster (stg, prd, tst, misc) and the standard clusters (stg, prd) have these subnets:
- elb: for public elb(s) that will received direct public traffic
- elb-int: for internal elb(s) that will received service to service comm
- svc: for application service
- db: for database
- dmz: for nat gateway(s), proxy, etc
VPC (stg, prd) ├10.100.0.0/16 az-1 | ├10.100.0.0/20 elb | ├10.100.16.0/20 elb-int | ├10.100.32.0/20 svc | ├10.100.48.0/20 svc | ├10.100.64.0/20 db | ├10.100.80.0/20 dmz | ├10.100.96.0/20 <reserved> | ├ ... | └10.1-0.240.0/20 <reserved> ├10.101.0.0/16 az-2 | ├10.101.0.0/20 elb | ├10.101.16.0/20 elb-int | ├10.101.32.0/20 svc | ├10.101.48.0/20 svc | ├10.101.64.0/20 db | ├10.101.80.0/20 dmz | ├10.101.96.0/20 <reserved> | ├ ... | └10.101.240.0/20 <reserved> └10.102.0.0/16 az-3 ├10.102.0.0/20 elb ├10.102.16.0/20 elb-int ├10.102.32.0/20 svc ├10.102.48.0/20 svc ├10.102.64.0/20 db ├10.102.80.0/20 dmz ├10.102.96.0/20 <reserved> ├ ... └10.102.240.0/20 <reserved>
I know this question is broad, like "it depends on the situation" kinda question. But I've searched the internet and found no sensible guideline on this.
So I asked this question to find out how sysadmins choose a strategy for their subnet(s). Please share yours, and, if you can, place a small statement explaining why you choose that approach.