Page MenuHomeDevCentral

Deploy IPv6 for mail.nasqueron.org
Open, HighPublic

Description

We need IPv6 for LXC containers, as we need to reach our SMTP, POP, IMAP servers through IPv6, but also allow the SMTP server to contact another IPv6 server.

The first need (incoming IPv6) would have been easily doable with a socat script (see P80 for an example).

The second requires real connectivity for the container.

Event Timeline

dereckson claimed this task.
dereckson raised the priority of this task from to High.
dereckson updated the task description. (Show Details)
dereckson added subscribers: Sandlayth, inidal, dereckson.
dereckson removed a subscriber: inidal.

Added to the new project-as-tag IPv6 to help to identify and organize tasks requiring IPv6 love.

web-001 on the same hypervisor has correct IPv6 support, we can do the same for Hervil with the /56 trick and the hello trick:

  • The gateway and our /64 IP block belong to a same /56 block
  • OVH route advertisements doesn't reach the server often enough, but if we send a packet to try to reach a IPv6 host, we can receive a configuration
  • Not to use IPv6 for some time and we aren't reachable from outside anymore

All those tricks are already available in roles/core/network unit, so it just need to change pillar/nodes/nodes.sls and NetBox.