>>>>> "YOSHIFUJI" == YOSHIFUJI Hideaki <yoshf...@linux-ipv6.org> writes: >> I have a number of XEN Dom0 machines running lenny. >> >> When they boot, the XEN bridge scripts basically toast the IPv6 >> configuration. >> >> I'm looking for some thoughts on what the "right" answer might >> be, so that I can work on a proper solution.
YOSHIFUJI> It depends on your requirements. Topology: Wired YOSHIFUJI> network? Host? Router? Address assignment? Security? YOSHIFUJI> ....? Basic requirement: - if I put an IPv6 into /etc/network/interfaces, or - I get an address via autoconf the XEN "bridify" scripts should not break it. The problem is threefold: a) we have no way to turn off autoconf on an interface-by-interface basis. This means that we can get a DAD fail once the physical interface has been into a bridge, because the bridge device will have the same MAC address as the physical address. In practice, this often doesn't occur because... b) once a physical device is part of a bridge, it no longer sends packets up it's stack, so any network configuration that existed (such as IPv6 addresses and plumbing) are rendered non-functional. c) the XEN bridgify process involves an ifconfig FOO down on the devices, and so any configuration that occured on the physical device is lost. One remedy I can see if to introduce some kind of "--redo" option to ifup that causes it to run through the ifup process again, and use this in the XENify scripts once the plumbing has been adjusted. Maybe the ifup -f option does enough, but it doesn't cause autoconf to be redone. (/usr/sbin/ndisc6 can do that) Once the above is done, then the dom0 won't lose IPv6 when XEN is enabled. Guest machines will then be bridged on the "wire" and can already do IPv6 on that wire if they like. Advanced configurations might include: - use DHCPv6 get-a-subnet option to get a /64 - use a non-bridged XEN configuration and become a router. But, *I* at least don't have need of this now. -- ] He who is tired of Weird Al is tired of life! | firewalls [ ] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[ ] m...@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[ Kyoto Plus: watch the video <http://www.youtube.com/watch?v=kzx1ycLXQSE> then sign the petition. -- To UNSUBSCRIBE, email to debian-ipv6-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/13440.1276611...@marajade.sandelman.ca.sandelman.ca