Neil: the metadata is just one example (though that's not happening).

The firewall rule thing applies irrespective of the metadata. The cloud
environment created requires only /128 addresses it knows about to be
accessible, and firewalls everything else out. Reasons for this include
prevention of spoofing of IP addresses on outbound traffic. We want each
UEC image to come up with the IPv6 address(es) we have assigned, and not
a random one in the same /64. This is not an unreasonable requirement.
We would use DHCPv6 for this if it weren't for the fact that DHCPv6 is
broken in different ways and has little support.

IPv6 *as designed* says RFC4941 SHOULD (RFC capitalisation) be turned
off by default. So the argument that applications should be using it 'as
designed' is bogus, as if it was deployed *as designed* (i.e. per the
RFC) it would work. There would be no problem with (e.g.) Network
Manager turning this on in a desktop environment.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to cloud-init in Ubuntu.
https://bugs.launchpad.net/bugs/1068756

Title:
  IPv6 Privacy Extensions enabled on Ubuntu Server by default

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/1068756/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to