Worked planning examples
Plan private access, application publishing, public addressing and internet exits. Worked examples explain resources, permissions, verification and removal.
01 / Choose the job
Each scenario names its resources, permission boundary, verification evidence and removal criteria. Choose a task, then adapt the example to your environment.
Give the right person a path to a specific private resource.
Developer laptop → private build host
Plan the approved developer’s access, keep application login separate and test an unapproved identity.
Project team → internal dashboard
Give colleagues and a contractor the access their job needs, then withdraw network and application access at handover.
Keep storage and compute where they belong, with a defined path between them.
Approved device → office storage
Choose a supported host or gateway path. Check folder permissions, saving over the connection and interrupted work.
Cloud worker → service at another provider
Connect the selected dependency while accounting for provider firewalls, return routing and the resources outside its grant.
An incoming application request and an outgoing provider connection have different needs.
External visitor → selected HTTP application
Give a portal, webhook or review app an HTTPS entry. Keep application login, API credentials and webhook checks in place.
Workload → external provider
Compare Outbound with a Public IP assignment, then verify the source address the provider actually observes.
Include the return journey and a way to restore the previous connection.
Working device → private team resource
Check network changes, sleep and reconnect behavior. Treat an optional internet route as a separate decision from private access.
Cloud worker → gateway → office service
Approve the destination range, check for conflicting routes and verify replies before planning gateway retirement.
02 / Keep what you already run
Some workloads belong on your own servers. Some equipment needs a nearby gateway. Start with the resource and choose who should reach it.
Local server, GPU host or colocated workload
Separate private administration from public client access. Plan migration, application checks and cutover while retaining responsibility for power, updates, backups and recovery.
Approved technician or client → existing equipment
Choose private maintenance or a selected public service for an NVR, NAS or kiosk. Assess a supported gateway where the equipment cannot run an agent.
These are planning scenarios. Supported software and hardware are confirmed for the deployment; Edge hardware remains in development/pilot.
03 / Separate managed service · Public IPs
A small hosting operator or virtualisation lab may need a public block for several servers, VMs or containers. Routed Subnets is a separately scoped, invitation-led managed service.
Fibmesh routes the allocation over a tunnel.
Receives the block and forwards it to the workloads.
Use the assigned addresses with agreed firewall and return routing.
IPv4 and IPv6 are separate allocations. The worked model covers small IPv4 blocks and IPv6 prefixes from /48 through /64, with firewall boundaries and return routing.
Confirm stock, country, delivery location and quoted terms with Fibmesh. Managed setup defines the assigned block and the customer router’s responsibilities.
Explore the routed-subnet model →04 / Your next decision
Replace the example names with your own. A useful connection plan shows how the work starts, what stays outside its scope and how the connection ends.
Which person, device or workload starts the connection? Record its platform and location.
Name the application or resource, its protocol and the job that must work.
Agree who approves access, runs the application and maintains the device or gateway.
Record an identity, service or route that must remain outside the permitted connection.
Define how access ends, how the previous path is restored and what evidence confirms it.
Available with assisted setup. Confirm supported devices, locations and scope before deployment.
Planning a whole location? Explore offices and branches →
