proxmox/docs/02-architecture/VMID_ALLOCATION_FINAL.md

# Final VMID Allocation Plan

**Navigation:** [Home](/docs/01-getting-started/README.md) > [Architecture](/docs/01-getting-started/README.md) > VMID Allocation

**Last Updated:** 2026-02-26  
**Document Version:** 1.1  
**Status:** 🟢 Active Documentation

---

## VMID Quick Reference (Operational)

| Range | Purpose | Notes |
|------:|---------|-------|
| 3000–3003 | Monitor / RPC-adjacent (ml110 / ccip-monitor-1..4) | Within RPC/Gateways (2500–3499). Not CCIP DON. Not AI/Agents. |
| 5400–5599 | CCIP DON (Chainlink CCIP) | 5410–5429 Commit, 5440–5459 Execute, 5470–5476 RMN. |
| 5700–5999 | AI / Agents / Dev | Official band for model serving, MCP, agent runtimes. |

**Naming/Tags (recommended):**
- AI VMs: `ai-<role>-<env>` (e.g. `ai-mcp-prod`, `ai-inf-dev`, `ai-agent-prod`)
- Monitor/RPC-adjacent: `ccip-monitor-<n>`
- Proxmox tags: `AI`, `MCP`, `HF`, `MONITOR`, `PROD`/`DEV`

---

## Complete VMID Allocation Table

| VMID Range      | Domain                                                          | Total VMIDs | Initial Usage | Available |
|-----------------|----------------------------------------------------------------|-------------|---------------|-----------|
| **1000–4999**   | **Besu Sovereign Network**                                     | 4,000       | ~17           | ~3,983    |
| 5000–5099       | Blockscout                                                     | 100         | 1             | 99        |
| 5200–5299       | Cacti                                                           | 100         | 1             | 99        |
| 5400–5599       | Chainlink CCIP                                                 | 200         | 1+            | 199       |
| 5700–5999       | AI / Agents / Dev (model serving, MCP, agent runtimes)         | 300         | 1             | 299       |
| 6000–6099       | Fabric                                                          | 100         | 1             | 99        |
| 6200–6299       | FireFly                                                         | 100         | 1             | 99        |
| 6400–7399       | Indy                                                            | 1,000       | 1             | 999       |
| 7800–8999       | Sankofa / Phoenix / PanTel                                      | 1,200       | 1             | 1,199     |
| **10000–13999** | **Sovereign Cloud Band (SMOM / ICCC / DBIS / Absolute Realms)** | 4,000       | 1             | 3,999     |

**Total Allocated**: 11,000 VMIDs (1000-13999)  
**Total Initial Usage**: ~26 containers  
**Total Available**: ~10,974 VMIDs

---

## Detailed Breakdown

### Besu Sovereign Network (1000-4999) - 4,000 VMIDs

#### Validators (1000-1499) - 500 VMIDs
- **1000-1004**: Initial validators (5 nodes)
- **1005-1499**: Reserved for validator expansion (495 VMIDs)

#### Sentries (1500-2499) - 1,000 VMIDs
- **1500-1503**: Initial sentries (4 nodes)
- **1504-2499**: Reserved for sentry expansion (996 VMIDs)

#### RPC / Gateways (Besu) — 2500–3499
- **2500–2508:** In-use RPC/Gateway nodes (2500–2502 initial; 2503–2505 HYBX; 2506–2508 destroyed 2026-02-08).
- **2509–2999:** Reserved for RPC/Gateway expansion
- **3000–3003:** **ml110 / monitor-style (RPC-adjacent)** — legacy/current usage
  - Suggested naming: **ccip-monitor-1..4**
  - **Not** the CCIP DON allocation (CCIP DON = **5400–5599**)
  - **Not** the AI/Agents allocation (AI/Agents = **5700–5999**)
- **3004–3499:** Reserved for RPC/Gateway expansion

#### Archive / Telemetry (3500-4299) - 800 VMIDs
- **3500+**: Archive / Snapshots / Mirrors / Telemetry

#### Reserved Besu Expansion (4300-4999) - 700 VMIDs
- **4300-4999**: Reserved for future Besu expansion

---

### Blockscout Explorer (5000-5099) - 100 VMIDs

- **5000**: Blockscout primary (1 node)
- **5001-5099**: Indexer replicas / DB / analytics / HA (99 VMIDs)

---

### Cacti (5200-5299) - 100 VMIDs

- **5200**: Cacti core (1 node)
- **5201-5299**: connectors / adapters / relays / HA (99 VMIDs)

---

### Chainlink CCIP (5400-5599) - 200 VMIDs

- **5400-5403**: Admin / Monitor / Relay (4 nodes)
- **5410-5429**: Commit DON (20 nodes)
- **5440-5459**: Execute DON (20 nodes)
- **5470-5476**: RMN (7 nodes)
- **5480-5599**: Reserved (more lanes / redundancy / scale; 120 VMIDs)

---

### AI / Agents / Dev — 5700–5999

This is the **official VMID range** for AI workloads, agent runtimes, MCP servers, and AI/dev experimentation. **Do not** place AI workloads in 3000–3099; that range is within RPC/Gateways expansion and includes legacy monitor/RPC-adjacent nodes (3000–3003).

- **5700:** Dev VM (existing). See [DEV_VM_GITOPS_PLAN.md](../04-configuration/DEV_VM_GITOPS_PLAN.md).
- **5701–5749:** AI platform services (model serving, MCP hub, auth, observability)
- **5750–5899:** AI applications (per-project agents, DODO PMM tooling, policy guardrails)
- **5900–5999:** Experiments / temporary / buffer

**Optional suggested layout:** 5701 = MCP Hub; 5702 = Inference (HF model server); 5703 = Agent Worker (orchestration); 5704 = Memory/State (Postgres/Redis/Vector DB). See [AI_AGENTS_57XX_DEPLOYMENT_PLAN.md](AI_AGENTS_57XX_DEPLOYMENT_PLAN.md) for copy/paste deployment steps (QEMU guest agent, 57xx layout, MCP/DODO PMM, read-only vs execution).

---

### Fabric (6000-6099) - 100 VMIDs

- **6000**: Fabric core (1 node)
- **6001-6099**: peers / orderers / HA (99 VMIDs)

---

### FireFly (6200-6299) - 100 VMIDs

- **6200**: FireFly core (1 node)
- **6201-6299**: connectors / plugins / HA (99 VMIDs)

---

### Indy (6400-7399) - 1,000 VMIDs

- **6400**: Indy core (1 node)
- **6401-7399**: agents / trust anchors / HA / expansion (999 VMIDs)

---

### Sankofa / Phoenix / PanTel (7800-8999) - 1,200 VMIDs

- **7800**: Initial deployment (1 node)
- **7801-8999**: Reserved for expansion (1,199 VMIDs)

---

### Sovereign Cloud Band (10000-13999) - 4,000 VMIDs

**Domain**: SMOM / ICCC / DBIS / Absolute Realms

- **10000**: Initial deployment (1 node)
- **10001-13999**: Reserved for sovereign cloud expansion (3,999 VMIDs)

---

## Configuration Variables

All VMID ranges are defined in `config/proxmox.conf`:

```bash
VMID_VALIDATORS_START=1000         # Besu validators: 1000-1499
VMID_SENTRIES_START=1500           # Besu sentries: 1500-2499
VMID_RPC_START=2500                # Besu RPC: 2500-3499
VMID_ARCHIVE_START=3500            # Besu archive/telemetry: 3500-4299
VMID_BESU_RESERVED_START=4300      # Besu reserved: 4300-4999
VMID_EXPLORER_START=5000           # Blockscout: 5000-5099
VMID_CACTI_START=5200              # Cacti: 5200-5299
VMID_CCIP_START=5400               # Chainlink CCIP: 5400-5599
VMID_AI_AGENTS_START=5700          # AI / Agents / Dev: 5700-5999 (model serving, MCP, agent runtimes)
# Optional alias for backward compatibility (deprecated):
# VMID_BUFFER_START=5700           # deprecated: use VMID_AI_AGENTS_START
VMID_FABRIC_START=6000             # Fabric: 6000-6099
VMID_FIREFLY_START=6200            # Firefly: 6200-6299
VMID_INDY_START=6400               # Indy: 6400-7399
VMID_SANKOFA_START=7800            # Sankofa/Phoenix/PanTel: 7800-8999
VMID_SOVEREIGN_CLOUD_START=10000   # Sovereign Cloud: 10000-13999
```

---

## Allocation Summary

| Category | Start | End | Total | Initial | Available | % Available |
|----------|-------|-----|-------|---------|-----------|------------|
| Besu Network | 1000 | 4999 | 4,000 | ~17 | ~3,983 | 99.6% |
| Blockscout | 5000 | 5099 | 100 | 1 | 99 | 99.0% |
| Cacti | 5200 | 5299 | 100 | 1 | 99 | 99.0% |
| Chainlink CCIP | 5400 | 5599 | 200 | 1+ | 199 | 99.5% |
| AI/Agents/Dev | 5700 | 5999 | 300 | 1 | 299 | 99.7% |
| Fabric | 6000 | 6099 | 100 | 1 | 99 | 99.0% |
| FireFly | 6200 | 6299 | 100 | 1 | 99 | 99.0% |
| Indy | 6400 | 7399 | 1,000 | 1 | 999 | 99.9% |
| Sankofa/Phoenix/PanTel | 7800 | 8999 | 1,200 | 1 | 1,199 | 99.9% |
| Sovereign Cloud | 10000 | 13999 | 4,000 | 1 | 3,999 | 99.975% |
| **TOTAL** | **1000** | **13999** | **11,000** | **~26** | **~10,974** | **99.8%** |

---

## Key Features

✅ **Non-overlapping ranges** - Clear separation between all domains  
✅ **Sovereign-scale capacity** - 4,000 VMIDs for Besu network expansion  
✅ **Future-proof** - Large buffers and reserved ranges  
✅ **Modular design** - Each service has dedicated range  
✅ **Sovereign Cloud Band** - 4,000 VMIDs for SMOM/ICCC/DBIS/Absolute Realms  
✅ **AI/Agents band (5700–5999)** — Dedicated range for model serving, MCP, agent runtimes; 3000–3003 remain RPC/monitor-adjacent  

---

## Migration Notes

**New Additions (v1.1):**
- **AI/Agents/Dev (5700–5999)** defined as the official band for AI inference, MCP, agent runtimes, vector DB, and AI platform services (not 3000–3099).
- **3000–3003** explicitly documented as **RPC/monitor-adjacent** (ml110 / ccip-monitor-1..4), not CCIP DON and not AI/Agents.

**Previous Allocations**:
- Validators: 106-110, 1100-1104 → **1000-1004**
- Sentries: 111-114, 1110-1113 → **1500-1503**
- RPC: 115-117, 1120-1122 → **2500-2502**
- Blockscout: 2000, 250 → **5000**
- Cacti: 2400, 261 → **5200**
- CCIP: 3200 → **5400**
- Fabric: 4500, 262 → **6000**
- Firefly: 4700, 260 → **6200**
- Indy: 8000, 263 → **6400**

**New Additions**:
- AI/Agents/Dev: 5700-5999 (300 VMIDs). **Use this band for AI inference, MCP, agent runtimes, vector DB; not 3000-3099.** Sub-ranges: 5701-5749 platform, 5750-5899 apps, 5900-5999 experiments. 3000-3003 remain RPC/monitor-adjacent (ml110/ccip-monitor-1..4).
- Sankofa/Phoenix/PanTel: 7800-8999 (1,200 VMIDs)
- Sovereign Cloud Band: 10000-13999 (4,000 VMIDs)
- **NPMplus Alltra/HYBX:** VMID 10235 (192.168.11.169). See [04-configuration/NPMPLUS_ALLTRA_HYBX_MASTER_PLAN.md](../04-configuration/NPMPLUS_ALLTRA_HYBX_MASTER_PLAN.md). NPMplus range: 10233 (primary), 10234 (HA secondary), 10235 (Alltra/HYBX).

---

**Owner:** Architecture  
**Review cadence:** Quarterly or upon new VMID band creation  
**Change control:** PR required; update Version + Last Updated