I didn't have any luck (in 24 hours anyway) with this on the general list so now reaching out to ops and dev. Would appreciate your consideration! ---------- Forwarded message ---------- From: Blair Bethwaite <blair.bethwaite at gmail.com> Date: 29 April 2013 21:18 Subject: nova-network IPv6 To: "openstack at lists.launchpad.net" <openstack at lists.launchpad.net> Hi all, We've got a Folsom cloud running nova-network in FlatDHCP multi-host, currently with just a single public fixed range. We followed http://docs.openstack.org/folsom/openstack-compute/admin/content/configuring-compute-to-use-ipv6-addresses.htmlto get IPv6 going (plus adding a bunch of rules allowing ICMPv6 on the compute bridges for NDP). We've now got instances with the desired global IPv6 addresses but are having connectivity issues, e.g., no luck ping6-ing instances from in or outside the cloud LAN. We started looking into possible security group issues which is when we found this related tidbit: ----- "Currently, ipv6 and other protocols cannot be managed with the security rules, making them permitted by default" ----- ( http://docs.openstack.org/folsom/openstack-compute/admin/content/instance-networking.html ) Is that correct? If it is, it seems like the kind of thing that really ought to be mentioned in the configuration info as it's a show-stopper for public IPv6 deployment! Also, any tips on what might be getting in the way would be much appreciated. -- Cheers, ~Blairo -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20130430/716fd516/attachment.html>