Difference between revisions of "IPv6"

From OpenVZ Virtuozzo Containers Wiki
Jump to: navigation, search
m (Reverted edits by 173.12.28.45 (talk) to last revision by 88.74.63.8)
(proxy_ndp may need to be enabled)
Line 14: Line 14:
  
 
In my tests, the container had to be restarted before it would respond to ICMP6 echo requests.
 
In my tests, the container had to be restarted before it would respond to ICMP6 echo requests.
 +
 +
In other tests on 2.6.32-042stab044.11 kernel, container failed to receive Neighbor Solicitation requests and replies, so I had to enable proxy_ndp:
 +
 +
<pre>
 +
# sysctl -w net.ipv6.conf.all.proxy_ndp=1
 +
</pre>
 +
 +
(and later add appropriate line to /etc/sysctl.conf).
  
 
=== Removing an IPv6 address from a container ===
 
=== Removing an IPv6 address from a container ===

Revision as of 17:36, 27 December 2011

IPv6 works best when veth devices are used to bridge VEs to their host. An IPv6 compliant method of using veth interfaces for VEs can be found in the VEs and HNs in same subnets article.

venet devices are not fully IPv6 compliant, but still works if you statically assign IPv6 addresses. They do not properly support MAC addresses and consequently link local addresses and can not play nice with neighbor discovery or router advertisements, router discovery, or auto-conf. They also require additional modifications to the layer 3 forwarding behaviour of the host via sysctl.

venet example

(tests done on CentOS kernel 2.6.18-194.26.1.el5.028stab079.2)

Adding an IPv6 address to a container

# vzctl set <id> --ipadd <ipv6_addr> --save

In my tests, the container had to be restarted before it would respond to ICMP6 echo requests.

In other tests on 2.6.32-042stab044.11 kernel, container failed to receive Neighbor Solicitation requests and replies, so I had to enable proxy_ndp:

# sysctl -w net.ipv6.conf.all.proxy_ndp=1

(and later add appropriate line to /etc/sysctl.conf).

Removing an IPv6 address from a container

# vzctl set <id> --ipdel <ipv6_addr> --save

Removal is effective immediately and the host stops replying to echo requests.

See also

External Links

  • A user success story / howto on SixXS wiki [1].