IPV6 in Isolated/VPC networks

Hi all, @Wei Zhou @Rohit Yadav and myself are investigating how to enable IPV6 support on Isolated and VPC networks and would like your input on it. At the moment we are looking at implementing FRR with BGP (and possibly OSPF) on

RE: IPV6 in Isolated/VPC networks

ssage- From: Wido den Hollander Sent: 13 July 2021 15:08 To: d...@cloudstack.apache.org; Alex Mattioli Cc: Wei Zhou ; Rohit Yadav ; Gabriel Beims Bräscher Subject: Re: IPV6 in Isolated/VPC networks On 7/7/21 1:16 PM, Alex Mattioli wrote: > Hi all, > @Wei Zhou<mailto:wei.z.

Re: IPV6 in Isolated/VPC networks

ring your own AS > and IP scenario) > > Thoughts? > > Cheers > Alex > > > > > -Original Message- > From: Wido den Hollander > Sent: 13 July 2021 15:08 > To: d...@cloudstack.apache.org; Alex Mattioli > Cc: Wei Zhou ; Rohit Yadav < > rohit.ya..

RE: IPV6 in Isolated/VPC networks

: IPV6 in Isolated/VPC networks Hi I replied in another thread, i think do not need implement BGP or OSPF, that would be complicated . We only need assign IPv6 's /64 prefix to Virtual Router (VR) in NAT zone, and the VR responsible to deliver single IPv6 to VM via DHCP6. In VR, you ne

Re: IPV6 in Isolated/VPC networks

> > own AS and IP scenario) > > > > Thoughts? > > > > Cheers > > Alex > > > > > > > > > > -Original Message- > > From: Wido den Hollander > > Sent: 13 July 2021 15:08 > > To: d...@cloudstack.apache.org; Alex Ma

Re: IPV6 in Isolated/VPC networks

y 2021 15:08 To: d...@cloudstack.apache.org <mailto:d...@cloudstack.apache.org>; Alex Mattioli mailto:alex.matti...@shapeblue.com>> Cc: Wei Zhou mailto:wei.z...@shapeblue.com>>; Rohit Yadav mailto:rohit.ya...@shapeblue.com>>; Gabriel Beims Bräscher mailto:gabr...@pcextreme.n

Re: IPV6 in Isolated/VPC networks

> > Alex > > > > > > > > > > -Original Message- > > From: Wido den Hollander mailto:w...@widodh.nl>> > > Sent: 13 July 2021 15:08 > > To: d...@cloudstack.apache.org <mailto:d...@cloudstack.apache.org>; &

Re: IPV6 in Isolated/VPC networks

; - Route /48 (or/56) down to the VR >> > - /64 per network >> > - SLACC for IP addressing >> > >> > I believe the next big question is then "on which level of ACS do we >> > manage AS numbers?". I see two options: >> > 1) Private A

Re: IPV6 in Isolated/VPC networks

m <mailto:wei.z...@shapeblue.com>>>; Rohit Yadav >     mailto:rohit.ya...@shapeblue.com> <mailto:rohit.ya...@shapeblue.com <mailto:rohit.ya...@shapeblue.com>>>; >     Gabriel Beims Bräscher mailto:gabr...@pcextreme.nl>

Re: IPV6 in Isolated/VPC networks

> 3) End-user driven AS number on a per network basis (for > > bring your > > > own AS and IP scenario) > > > > > > Thoughts? > > > > > > Cheers > > &g

Re: IPV6 in Isolated/VPC networks

ue.com> > <mailto:alex.matti...@shapeblue.com <mailto:alex.matti...@shapeblue.com>>> > Cc: Wei Zhou mailto:wei.z...@shapeblue.com> > <mailto:wei.z...@shapeblue.com <mailto:wei.z...@shapeblue.com>&

Re: IPV6 in Isolated/VPC networks

> >>> <mailto:alex.matti...@shapeblue.com>>> wrote: > >>> > > >>> > Hi Wido, > >>> > That's pretty much in line with our thoughts, thanks > for > >>>

Re: IPV6 in Isolated/VPC networks

<mailto:wei.z...@shapeblue.com <mailto:wei.z...@shapeblue.com>>>; Rohit Yadav > mailto:rohit.ya...@shapeblue.com> <mailto:rohit.ya...@shapeblue.com <mailto:rohit.ya...@shapeblue.com>>>; >

Re: IPV6 in Isolated/VPC networks

; >>>>> - It's own AS number > >>>>> - The peer's address(es) > >>>>> > >>>>> With FRR you can simply say: > >>>>> > >>>>> neighbor 2001:db8

Re: IPV6 in Isolated/VPC networks

> <mailto:alex.matti...@shapeblue.com <mailto:alex.matti...@shapeblue.com>>> > Cc: Wei Zhou mailto:wei.z...@shapeblue.com> > <mailto:wei.z...@shapeblue.com <mailto:wei.z...@sh

Re: IPV6 in Isolated/VPC networks

r a few days, sharing this solely for testing purposes) Regards. From: Wido den Hollander Sent: Tuesday, July 20, 2021 12:46 To: d...@cloudstack.apache.org Subject: Re: IPV6 in Isolated/VPC networks Op 19-07-2021 om 20:38 schreef Kristaps Cudars: > Hi Wido, > > I assume th

Re: IPV6 in Isolated/VPC networks

e in the isolated network > 2001:470:ed36:1::/64 via dev > > * > ... and I enabled firewall rules to allow any traffic to pass for the new > /64 network > > And voila all done! I create a domain AAAA record that points to my guest > VM IPv6 address a test webserver on &

Re: IPV6 in Isolated/VPC networks

gt; /64 network > > And voila all done! I create a domain AAAA record that points to my guest > VM IPv6 address a test webserver on > http://ipv6-isolated-ntwk-demo.yadav.cloud/ > > (Note: I'll get rid of the tunnel and request a new /48 block after a few > days, sharing t

RE: IPV6 in Isolated/VPC networks

ssign them to the inside interfaces of the VRs. Cheers Alex -Original Message- From: Kristaps Cudars Sent: 12 August 2021 10:37 To: d...@cloudstack.apache.org Cc: users@cloudstack.apache.org Subject: Re: IPV6 in Isolated/VPC networks Hi Rohit, I think its excellent and satisfie