Actions
tickets #151192
openRoll out full IPv6 in Provo
Status:
Blocked
Priority:
Normal
Assignee:
-
Category:
Servers hosted in Provo
Target version:
-
Start date:
2023-11-20
Due date:
% Done:
0%
Estimated time:
Description
- assess existing use of our /48 GUA (some machines have a /50 configured)
- split out two /64 segments (internal and public)
- configure BIRD/ospfd on provo-gate to route the new segments
- optional: clean up nftables.conf / refactor to similar structure as the one used on asgard*
- set up HAProxy pair with two interfaces
- reconfigure all incoming internet traffic to pass through the proxy servers
- drop external addresses/interfaces from all other machines
- renumber internal addresses
- create subzones for the /64 segments on chip (superzone for the /48 already exists)
- create reverse DNS records for renumbered machines
- ensure functionality of core services (Salt, DNS, NTP, update repositories)
Actions