Re: Disable IPv6 for systemvm

2012-07-30 Thread Chiradeep Vittal
It may not be obvious but the default ebtables rules (when CSP is installed) is to drop ipv6 util.pread2(['ebtables', '-A', 'DEFAULT_EBTABLES', '-p', 'IPv6', '-j', 'DROP']) However, your change is a good idea as well. On 7/30/12 4:20 AM, "Hugo Trippaers" wrote: >Hey guys, > >The curre

Re: Disable IPv6 for systemvm

2012-07-30 Thread John Kinsella
onf.all.disable_ipv6=1 fi Cheers, Hugo -Original Message- From: Chip Childers [mailto:chip.child...@sungard.com] Sent: Monday, July 30, 2012 4:06 PM To: mailto:cloudstack-dev@incubator.apache.org>> Subject: Re: Disable IPv6 for systemvm The latest Xen Server install seems to have IPv6 dis

Re: Disable IPv6 for systemvm

2012-07-30 Thread David Nalley
On Mon, Jul 30, 2012 at 11:43 AM, Hugo Trippaers wrote: > Hey, > > I just pushed a fix that will disable IPv6 immediately and reinstate the > disable-ipv6 file. This should take care of the current situation for people > with the support pack. So far my testing has revealed no adverse effects. >

RE: Disable IPv6 for systemvm

2012-07-30 Thread Hugo Trippaers
-dev@incubator.apache.org Subject: Re: Disable IPv6 for systemvm Indeed - I'm testing in an advanced networking zone, so we didn't bother doing the support pack installation. That would be the difference. I think your scripts will work, excluding the error condition that my environment

Re: Disable IPv6 for systemvm

2012-07-30 Thread Chip Childers
guide) actively promotes that > this should be installed to enable security groups. > > Cheers, > > Hugo > > -Original Message- > From: Chip Childers [mailto:chip.child...@sungard.com] > Sent: Monday, July 30, 2012 4:57 PM > To: cloudstack-dev@incubator.apache.org &g

RE: Disable IPv6 for systemvm

2012-07-30 Thread Hugo Trippaers
Monday, July 30, 2012 4:57 PM To: cloudstack-dev@incubator.apache.org Subject: Re: Disable IPv6 for systemvm Looks like we are using the same version, but different configuration?: # uname -a Linux xshost2 2.6.32.12-0.7.1.xs6.0.2.542.170665xen #1 SMP Tue Jan 17 15:14:24 EST 2012 i686 i686 i386 GNU/Li

Re: Disable IPv6 for systemvm

2012-07-30 Thread Chip Childers
m. This morning i >> applied them to my test environment and they do the job. >> >> We could add the actual sysctl command to the vmops next to adding the IPv6 >> ip6tables statements I think. >> >> Cheers, >> >> Hugo >> >> >> -Or

RE: Disable IPv6 for systemvm

2012-07-30 Thread Hugo Trippaers
> > Hugo > > > -Original Message- > From: Chip Childers [mailto:chip.child...@sungard.com] > Sent: Monday, July 30, 2012 3:13 PM > To: cloudstack-dev@incubator.apache.org > Subject: Re: Disable IPv6 for systemvm > > On Mon, Jul 30, 2012 at 7:32 AM, Hugo Trippaers

Re: Disable IPv6 for systemvm

2012-07-30 Thread Chip Childers
ge- > From: Chip Childers [mailto:chip.child...@sungard.com] > Sent: Monday, July 30, 2012 3:13 PM > To: cloudstack-dev@incubator.apache.org > Subject: Re: Disable IPv6 for systemvm > > On Mon, Jul 30, 2012 at 7:32 AM, Hugo Trippaers > wrote: >> By the way, we might wan

RE: Disable IPv6 for systemvm

2012-07-30 Thread Hugo Trippaers
-Original Message- From: Chip Childers [mailto:chip.child...@sungard.com] Sent: Monday, July 30, 2012 3:13 PM To: cloudstack-dev@incubator.apache.org Subject: Re: Disable IPv6 for systemvm On Mon, Jul 30, 2012 at 7:32 AM, Hugo Trippaers wrote: > By the way, we might want to add the s

Re: Disable IPv6 for systemvm

2012-07-30 Thread Chip Childers
On Mon, Jul 30, 2012 at 7:32 AM, Hugo Trippaers wrote: > By the way, we might want to add the same configuration to vmops for > XenServer. > > Currently it is possible to have a tenant vm send a router advertisement on > the isolated lan that is picked up by XenServer. Even though XenServer only

Re: Disable IPv6 for systemvm

2012-07-30 Thread Chip Childers
On Mon, Jul 30, 2012 at 7:20 AM, Hugo Trippaers wrote: > Hey guys, > > The current systemvm has IPv6 enabled including autoconfiguration. This means > that if the machine is placed in an IPv6 enabled network (or somebody starts > sending router advertisements) the VM's based on the system vm wil

RE: Disable IPv6 for systemvm

2012-07-30 Thread Hugo Trippaers
By the way, we might want to add the same configuration to vmops for XenServer. Currently it is possible to have a tenant vm send a router advertisement on the isolated lan that is picked up by XenServer. Even though XenServer only has a bridge interface in the tenant lan that interface will be