openstack team mailing list archive

[Blair Bethwaite <blair.bethwaite@xxxxxxxxx>]

Hi all,

We've got a Folsom cloud running nova-network in FlatDHCP multi-host,
currently with just a single public fixed range.

We followed
http://docs.openstack.org/folsom/openstack-compute/admin/content/configuring-compute-to-use-ipv6-addresses.htmlto
get IPv6 going (plus adding a bunch of rules allowing ICMPv6 on the
compute bridges for NDP). We've now got instances with the desired global
IPv6 addresses but are having connectivity issues, e.g., no luck ping6-ing
instances from in or outside the cloud LAN.

We started looking into possible security group issues which is when we
found this related tidbit:
-----
"Currently, ipv6 and other protocols cannot be managed with the security
rules, making them permitted by default"
-----
(
http://docs.openstack.org/folsom/openstack-compute/admin/content/instance-networking.html
)

Is that correct? If it is, it seems like the kind of thing that really
ought to be mentioned in the configuration info as it's a show-stopper for
public IPv6 deployment!

Also, any tips on what might be getting in the way would be much
appreciated.

--
Cheers,
~Blairo