Gandi Wiki


Questions

Gandi hosting enabled IPv6

Upon completion of the beta testing period in the Paris datacenter in January 2011 (thanks to all participants), we activated IPv6 automatic configuration on January 6th.

Remember, when Baltimore's data center opened, IPv6 was already activated !

IP Addressing

Your network interface(s) will automatically obtain an IPv6 address, which will be derived from the MAC address of the interface. The MAC address is assigned by our provisioning system.

The Paris hosting platform will have a network prefix in for the form of 2001:4b98:dc0:xx::/64 , where xx is the specific subnet that the interface is attached to.

The rest of the address will be obtained using stateless autoconfiguration.

For example, if the link-local address of the interface is fe80::222:15ff:fed7:d0dd and the prefix is 2001:4b98:dc0:45::/64, the complete address will be 2001:4b98:dc0:45:222:15ff:fed7:d0dd

Baltimore's address will be in the prefix 2604:3400:dc1:XX::/64.

Interface and API

IPv6 related information for your network interface will be available in the coming days on Gandi.net's administration interface and the public Hosting API.

You will be also able to edit the reverse DNS associated with this address.

Kernel, modules and IPv6 support

The 2.6.18 kernel used on some VMs doesn't support the 'conntrack' module correctly, so we recommend the 2.6.27 or 2.6.32 kernel release.

In this case, don't forget to update the kernel modules

You can change the kernel settings in advanced mode of your disk in the administration panel.

iptables and IPv6

If you are using an iptables firewall with IPv4, we highly recommend that you also apply 'ip6tables' configurations. (Even if there is relatively little malicious traffic using IPv6 on the Internet currently…)

I don't want IPv6 !

There are three different ways to stop the kernel from installing IPv6 module or not to configure the IPv6 network interface. The first will require a server reboot.

  • blacklist module : echo "blacklist ipv6" » /etc/modprobe.d/blacklist.conf
  • disable IPv6 auto-configuration : sysctl -w net.ipv6.conf.all.autoconf=0
  • completely disable IPv6 : sysctl -w net.ipv6.conf.all.disable_ipv6=1

We recommend using the easier third method, but if you use sysctl don't forget to put this command line in /etc/sysctl.conf if you want this to be persistent upon subsequent reboots.

Questions

RSS feed for questions matching this filter (Help)

Last modified: 03 Mar 2011 at 09:08 by Emerick M. (Gandi)