[openstack-dev] Fwd: nova-network IPv6

Blair Bethwaite blair.bethwaite at gmail.com
Tue Apr 30 11:19:59 UTC 2013


I didn't have any luck (in 24 hours anyway) with this on the general list
so now reaching out to ops and dev. Would appreciate your consideration!

---------- Forwarded message ----------
From: Blair Bethwaite <blair.bethwaite at gmail.com>
Date: 29 April 2013 21:18
Subject: nova-network IPv6
To: "openstack at lists.launchpad.net" <openstack at lists.launchpad.net>


Hi all,

We've got a Folsom cloud running nova-network in FlatDHCP multi-host,
currently with just a single public fixed range.

We followed
http://docs.openstack.org/folsom/openstack-compute/admin/content/configuring-compute-to-use-ipv6-addresses.htmlto
get IPv6 going (plus adding a bunch of rules allowing ICMPv6 on the
compute bridges for NDP). We've now got instances with the desired global
IPv6 addresses but are having connectivity issues, e.g., no luck ping6-ing
instances from in or outside the cloud LAN.

We started looking into possible security group issues which is when we
found this related tidbit:
-----
"Currently, ipv6 and other protocols cannot be managed with the security
rules, making them permitted by default"
-----
(
http://docs.openstack.org/folsom/openstack-compute/admin/content/instance-networking.html
)

Is that correct? If it is, it seems like the kind of thing that really
ought to be mentioned in the configuration info as it's a show-stopper for
public IPv6 deployment!

Also, any tips on what might be getting in the way would be much
appreciated.


-- 
Cheers,
~Blairo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130430/716fd516/attachment.html>


More information about the OpenStack-dev mailing list