Project

General

Profile

Actions

tickets #67600

closed

IPv6 network migration

Added by lrupp almost 4 years ago. Updated almost 4 years ago.

Status:
Resolved
Priority:
High
Assignee:
Category:
Core services and virtual infrastructure
Target version:
-
Start date:
2020-06-02
Due date:
2020-06-30
% Done:

90%

Estimated time:

Description

As SUSE is becoming independent, some networks need to be re-arranged. One of them is the IPv6 network.

The old IPv6 network range (2620:113:80c0:8000::/50) in Nuremberg will go away end of the month. openSUSE still has some machines using this old IPv6 address since 2012. These machines need to be switched to the new IPv6 range (2001:67c:2178::/50), which is already in place and can be used directly.


Checklist

  • admin.lists4 (2620:113:80c0:8::14)
  • download (2620:113:80c0:8::13)
  • downloadcontent (2620:113:80c0:8::27)
  • foreman (2620:113:80c0:8::22)
  • gate2 (2620:113:8044:72:130:57:72:5) => disable for now
  • hydra (2620:113:80c0:8::19)
  • lists4 (2620:113:80c0:8::14)
  • lists5 (2620:113:80c0:8::26)
  • login (2620:113:80c0:8::12)
  • login2 (2620:113:80c0:8::161)
  • login2-nue (2620:113:80c0:8::161)
  • ns4 (2620:113:8044:72:130:57:72:32) => disable for now
  • pontifex (2620:113:80c0:8::13)
  • provo-downloadcontent (2620:113:8044:72:130:57:72:9) => disable for now
  • provo-mirror (2620:113:8044:72:130:57:72:10) => disable for now
  • proxy-nue (2620:113:80c0:8::16)
  • proxy-prv (2620:113:8044:72:130:57:72:1) => disable for now
  • proxy-prv1 (2620:113:8044:72:130:57:72:2) => disable for now
  • proxy-prv2 (2620:113:8044:72:130:57:72:3) => disable for now
  • scanner (2620:113:80c0:8::20)
  • scar (2620:113:80c0:8::28)
  • stage (2620:113:80c0:8::10)
  • static (2620:113:80c0:8::18)
  • status2 (2620:113:8044:72:130:57:72:11) => disable for now
  • login3 (2620:113:8044:72:130:57:72:20) => disable for now
Actions #1

Updated by lrupp almost 4 years ago

  • Checklist item changed from [ ] admin.lists4 (2620:113:80c0:8::14), [ ] download (2620:113:80c0:8::13), [ ] downloadcontent (2620:113:80c0:8::27), [ ] foreman (2620:113:80c0:8::22), [ ] gate2 (2620:113:8044:72:130:57:72:5) => disable for now, [ ] hydra (2620:113:80c0:8::19), [ ] lists4 (2620:113:80c0:8::14), [ ] lists5 (2620:113:80c0:8::26), [ ] login (2620:113:80c0:8::12), [ ] login2 (2620:113:80c0:8::161), [ ] login2-nue (2620:113:80c0:8::161), [ ] login3 (2620:113:8044:72:130:57:72:20), [ ] ns4 (2620:113:8044:72:130:57:72:32) => disable for now, [ ] pontifex (2620:113:80c0:8::13), [ ] provo-downloadcontent (2620:113:8044:72:130:57:72:9) => disable for now, [ ] provo-mirror (2620:113:8044:72:130:57:72:10) => disable for now, [ ] proxy-nue (2620:113:80c0:8::16), [ ] proxy-prv (2620:113:8044:72:130:57:72:1) => disable for now, [ ] proxy-prv1 (2620:113:8044:72:130:57:72:2) => disable for now, [ ] proxy-prv2 (2620:113:8044:72:130:57:72:3) => disable for now, [ ] scanner (2620:113:80c0:8::20), [ ] scar (2620:113:80c0:8::28), [ ] stage (2620:113:80c0:8::10), [ ] static (2620:113:80c0:8::18), [ ] status2 (2620:113:8044:72:130:57:72:11) => disable for now to [ ] admin.lists4 (2620:113:80c0:8::14), [ ] download (2620:113:80c0:8::13), [ ] downloadcontent (2620:113:80c0:8::27), [ ] foreman (2620:113:80c0:8::22), [ ] gate2 (2620:113:8044:72:130:57:72:5) => disable for now, [ ] hydra (2620:113:80c0:8::19), [ ] lists4 (2620:113:80c0:8::14), [ ] lists5 (2620:113:80c0:8::26), [ ] login (2620:113:80c0:8::12), [ ] login2 (2620:113:80c0:8::161), [ ] login2-nue (2620:113:80c0:8::161), [ ] ns4 (2620:113:8044:72:130:57:72:32) => disable for now, [ ] pontifex (2620:113:80c0:8::13), [ ] provo-downloadcontent (2620:113:8044:72:130:57:72:9) => disable for now, [ ] provo-mirror (2620:113:8044:72:130:57:72:10) => disable for now, [ ] proxy-nue (2620:113:80c0:8::16), [ ] proxy-prv (2620:113:8044:72:130:57:72:1) => disable for now, [ ] proxy-prv1 (2620:113:8044:72:130:57:72:2) => disable for now, [ ] proxy-prv2 (2620:113:8044:72:130:57:72:3) => disable for now, [ ] scanner (2620:113:80c0:8::20), [ ] scar (2620:113:80c0:8::28), [ ] stage (2620:113:80c0:8::10), [ ] static (2620:113:80c0:8::18), [ ] status2 (2620:113:8044:72:130:57:72:11) => disable for now, [ ] login3 (2620:113:8044:72:130:57:72:20) => disable for now
Actions #2

Updated by lrupp almost 4 years ago

  • Due date set to 2020-06-30
  • Category changed from Servers hosted in NBG to Core services and virtual infrastructure
  • Status changed from New to In Progress
  • Assignee set to lrupp
  • Priority changed from Normal to High
  • Private changed from Yes to No
Actions #3

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] proxy-prv1 (2620:113:8044:72:130:57:72:2) => disable for now
Actions #4

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] proxy-prv2 (2620:113:8044:72:130:57:72:3) => disable for now
Actions #5

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] proxy-prv (2620:113:8044:72:130:57:72:1) => disable for now
Actions #6

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] login3 (2620:113:8044:72:130:57:72:20) => disable for now
Actions #7

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] provo-mirror (2620:113:8044:72:130:57:72:10) => disable for now
Actions #8

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] provo-downloadcontent (2620:113:8044:72:130:57:72:9) => disable for now
Actions #9

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] gate2 (2620:113:8044:72:130:57:72:5) => disable for now
Actions #10

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] ns4 (2620:113:8044:72:130:57:72:32) => disable for now
Actions #11

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] status2 (2620:113:8044:72:130:57:72:11) => disable for now
Actions #12

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] proxy-nue (2620:113:80c0:8::16)
Actions #13

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] static (2620:113:80c0:8::18)
Actions #14

Updated by ryanbach almost 4 years ago

http://download.opensuse.org/ is currently givng a 403 access forbidden.

Actions #15

Updated by ryanbach almost 4 years ago

It looks like it is unrelated to this: https://status.opensuse.org/incidents/230 and is due to filesystem errors.

Actions #16

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] scanner (2620:113:80c0:8::20)
Actions #17

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] scar (2620:113:80c0:8::28)
Actions #18

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] login2 (2620:113:80c0:8::161)
Actions #19

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] login2-nue (2620:113:80c0:8::161)
Actions #20

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] foreman (2620:113:80c0:8::22)
Actions #21

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] lists4 (2620:113:80c0:8::14)
Actions #22

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] lists5 (2620:113:80c0:8::26)
Actions #23

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] admin.lists4 (2620:113:80c0:8::14)
Actions #24

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] hydra (2620:113:80c0:8::19)
Actions #25

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] login (2620:113:80c0:8::12)
Actions #26

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] pontifex (2620:113:80c0:8::13)
Actions #27

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] downloadcontent (2620:113:80c0:8::27)
Actions #28

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] download (2620:113:80c0:8::13)
Actions #29

Updated by lrupp almost 4 years ago

  • Checklist item changed from to [x] stage (2620:113:80c0:8::10)
Actions #30

Updated by lrupp almost 4 years ago

  • % Done changed from 0 to 90

As announced on the mirrors@opensuse.org list, all IPv6 entries are now available.

DNS had been changed and is pointing to the new IPv6 addresses as well.

Reverse IPv6 entries exist as well.

=> Waiting for the DNS to get distributed through all DNS servers.

Actions #31

Updated by cboltz almost 4 years ago

Please don't forget to update the keepalived in salt git - currently it still has:

role/login.sls-      virtual_ipaddress:
role/login.sls-        # external IPs
role/login.sls-        # login2.opensuse.org
role/login.sls:        - 2620:113:80c0:8::161/64 dev external
--
role/proxy.sls-      virtual_ipaddress:
role/proxy.sls-        # proxy-nue.opensuse.org
role/proxy.sls:        - 2620:113:80c0:8::16/64 dev external
role/proxy.sls-        # static.opensuse.org
role/proxy.sls:        - 2620:113:80c0:8::18/64 dev external
Actions #32

Updated by lrupp almost 4 years ago

  • Assignee changed from lrupp to cboltz

cboltz wrote:

Please don't forget to update the keepalived in salt git - currently it still has:

role/login.sls-      virtual_ipaddress:
role/login.sls-        # external IPs
role/login.sls-        # login2.opensuse.org
role/login.sls:        - 2620:113:80c0:8::161/64 dev external
--
role/proxy.sls-      virtual_ipaddress:
role/proxy.sls-        # proxy-nue.opensuse.org
role/proxy.sls:        - 2620:113:80c0:8::16/64 dev external
role/proxy.sls-        # static.opensuse.org
role/proxy.sls:        - 2620:113:80c0:8::18/64 dev external

I've currently no access to gitlab (forgot my 2nd factor @home). => leaving this up to you, Christian.

Actions #33

Updated by cboltz almost 4 years ago

  • Status changed from In Progress to Resolved

I've currently no access to gitlab (forgot my 2nd factor @home). => leaving this up to you, Christian.

I hope you have your 2FA device ready to review https://gitlab.infra.opensuse.org/infra/salt/-/merge_requests/430 ;-)

Actions

Also available in: Atom PDF