Use and purpose
First, you need to order a subnet (pool) of IPv6 “/ 52” addresses, you can do this through the billing system or by contacting the customer support service (Customer Care).
Individual issuance of IPv6 addresses is not provided. This is a technological limitation, IPv6 addresses are issued only by / 52 subnets, from which smaller / 64 subnets are already formed.
The DHCP option only works correctly on / 64 subnets. This feature must be taken into account when forming subnets.
There is no additional charge for using the IPv6 subnet.
As part of the activation, one subnet “/ 64” is created with the DHCP option enabled, which will greatly simplify the assignment of ip-addressing to the instance. The user can create other subnets “/ 64” by himself.
New IPv6 “/ 64” subnet is added to the existing network vpc-network-project_id.
An IPv6 address will be assigned immediately to the same network port (interface) as the current IP from the private subnet (172.16.0.0/20). Next, you need to check the settings of the network interface in the OS (check if the IPv6 option is enabled and check if the interface received an address via DHCP). If necessary, you will need to make the necessary edits and restart the interface.
It is possible to assign an IPv6 subnet to a separate network, in this case, to add a new address, you need to add one more network interface to the instance, after which the “openstack” service will automatically randomly allocate a free IP and assign it to the instance interface (you must first make sure that that the option of obtaining IP via DHCP is set in the OS setting of the instance after adding the interface). Using the option in which the IPv6 subnet will be created in a separate network requires a separate agreement with the technical support service, as well as understanding, the need to make certain changes to the configuration of the network settings of the OS of the instance, which requires additional knowledge of the organization of routing networks.
Additionally you need:
- Add Allow Rule in Security Groups for IPv6 /
- For Windows instances Run commands in PowerShell with Administrator rights:
Set-NetIPv6Protocol -RandomizeIdentifiers Disabled
Set-NetIPv6Protocol -UseTemporaryAddresses Disabled
netsh interface ipv6 set global randomizeidentifiers=disabled store=active
netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent
netsh interface ipv6 set privacy state=disabled store=active
netsh interface ipv6 set privacy state=disabled store=persistent