Ensure that connected networks never share address space, so that traffic is always delivered to the intended network.
Prevent Overlapping Address Ranges
CCC.VPC.CN06 · Networking
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CP02 | IPv4 CIDR Block | The service can be configured with an IPv4 CIDR block that defines the private address range of the virtual network. |
| CCC.VPC.CP03 | IPv6 CIDR Block | The service can be configured with an IPv6 CIDR block in addition to IPv4 so that resources in the virtual network are addressable over IPv6. |
| CCC.VPC.CP11 | Connectivity Options - VPC Peering | The service can establish a private peering connection between two virtual networks so that their resources communicate using private addresses. |
| CCC.VPC.CP12 | Connectivity Options - Transit Hub | The service can connect multiple virtual networks and on-premises networks through a central transit hub in a hub-and-spoke model. |
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.VPC.TH06 | Overlapping Address Ranges Disrupt Connectivity | Address ranges may be assigned that overlap with those of peered networks or transit hub spokes. Traffic destined for the overlapping range is dropped or routed to the wrong network and the connection cannot be established, impacting the availability of connected resources and the integrity of traffic that reaches an unintended destination. |
Assessment Requirements
| ID | Text | Applicability |
|---|---|---|
| CCC.VPC.CN06.AR01 | When a peering connection or transit attachment is requested between networks whose address ranges overlap, the service MUST reject the request. | tlp-clear, tlp-green, tlp-amber, tlp-red |
Guideline Mappings
| Framework | ID | Remarks |
|---|---|---|
| NIST_800_53 | SC-7 |