Page MenuHomeDevCentral

Deploy IPv6 for mail.nasqueron.org
Open, HighPublic

Description

Currently, mail.nasqueron.org SMTP server connects to other servers in IPv4 only:
Feb 15 15:02:52 hervil postfix/smtp[63552]: connect to gmail-smtp-in.l.google.com[2a00:1450:4009:c0f::1a]:25: No route to host

IPv6 is supported on the hypervisor where the mail server Hervil is, directly from a OVH /64 range.

Plan:

Event Timeline

dereckson claimed this task.
dereckson raised the priority of this task from to High.
dereckson updated the task description. (Show Details)
dereckson added subscribers: Sandlayth, ieli, dereckson.
dereckson removed a subscriber: ieli.

Added to the new project-as-tag IPv6 to help to identify and organize tasks requiring IPv6 love.

web-001 on the same hypervisor has correct IPv6 support, we can do the same for Hervil with the /56 trick and the hello trick:

  • The gateway and our /64 IP block belong to a same /56 block
  • OVH route advertisements doesn't reach the server often enough, but if we send a packet to try to reach a IPv6 host, we can receive a configuration
  • Not to use IPv6 for some time and we aren't reachable from outside anymore

All those tricks are already available in roles/core/network unit, so it just need to change pillar/nodes/nodes.sls and NetBox.

dereckson added a project: Servers.
dereckson updated the task description. (Show Details)
dereckson added subscribers: DorianWinty, yousra, Duranzed.