utilities for accessing entities behind subnets