checkpoints defining IPs