Conceptly
← All Concepts
🏠

IP Address & Subnet

AddressingNetwork addressing and subnet design

An IP (Internet Protocol) address is a unique identifier for every device connected to the internet. Subnets divide large networks into purpose-specific segments. CIDR notation (/24, /16, etc.) defines network ranges and creates routing boundaries.

β–ΆArchitecture Diagram

πŸ” Structure

Dashed line animations indicate the flow direction of data or requests

Why do you need it?

In real network design, the first hard question is often not where to place servers but how to carve up address space. If web servers, databases, worker nodes, and private integrations all share one vague address pool, routing becomes confusing and security boundaries become blurry. You cannot explain which systems should talk directly, which should cross a gateway, or which ranges a firewall rule should allow unless the address plan itself is clear. Poor planning wastes address space on one side and blocks future growth on the other. IP addressing and subnetting matter because they define not only where packets go, but how a network is organized.

Why did this approach emerge?

Early internet allocation relied on fixed Class A, B, and C networks, which looked simple on paper but fit real organizations poorly. Some networks received far more addresses than they needed, while others hit artificial ceilings too quickly. As the internet expanded, that inefficiency stopped being a local inconvenience and became a global scaling problem. CIDR was introduced not only to make address allocation more precise, but also to let operators aggregate prefixes so routing stayed scalable. That same design logic still matters in enterprise networks, data centers, ISP backbones, and cloud networks today.

How does it work inside?

An IP address is structured into a network portion and a host portion rather than being just an arbitrary label. CIDR notation such as /24 or /16 defines where that boundary sits, which in turn determines how large a subnet is and how many host addresses it can hold. Devices on the same subnet can reach each other locally, while traffic bound for another subnet must be sent through a gateway and routed onward. That means subnetting is simultaneously an address allocation decision, a routing decision, and a security boundary decision. CIDR made this far more flexible than the older fixed block model, letting operators design networks around actual growth and topology instead of rigid address classes.

What is it often confused with?

IPv4 and IPv6 both solve the same core problem: they provide network-layer addresses that let packets find the right destination. The difference is the scale and operational model they encourage. IPv4's 32-bit space is scarce enough that address conservation, private ranges, and NAT became normal parts of architecture. IPv6's 128-bit space changes that conversation by making address abundance the default rather than the exception. In practice, many environments still run largely on IPv4 while preparing for or partially adopting IPv6. So the real distinction is not only format, but whether your network design is constrained by scarcity or simplified by abundance.

When should you use it?

IP addressing and subnetting are foundational for office-network segmentation, data-center zoning, VPN routing, firewall policy, and cloud network design. If you place a database in the wrong address range, a later security fix may require structural rework instead of a simple rule change. If you size a network too tightly, future expansion and redundancy become painful; if you choose overly broad ranges carelessly, you can create overlap that complicates branch links, hybrid connectivity, or cloud interconnection. Good address design is therefore less about memorizing CIDR arithmetic than about laying out a network so routing, isolation, and growth remain manageable over time.

Address planning -- assigning blocks by site, department, or environmentFirewall rules -- defining allow/deny rules based on IP rangesRouting design -- deciding which path each destination range should takeNetwork interconnection -- preventing address overlap before branch, VPN, or cloud links