Jump to: navigation, search

Difference between revisions of "Neutron/IPv6"

 
(10 intermediate revisions by 6 users not shown)
Line 1: Line 1:
 
=== IPv6 Support in Neutron ===
 
=== IPv6 Support in Neutron ===
 +
The following specs are in progress and expected to land in [[Juno_Release_Schedule|Juno]].
 +
* [http://specs.openstack.org/openstack/neutron-specs/specs/juno/ipv6-provider-nets-slaac.html Provider Networking - upstream SLAAC Support]
 +
* [http://specs.openstack.org/openstack/neutron-specs/specs/juno/ipv6-dnsmasq-dhcpv6-stateless-stateful.html Support DHCPv6 stateless and stateful mode in Dnsmasq]
 +
* [http://specs.openstack.org/openstack/neutron-specs/specs/juno/ipv6-radvd-ra.html Support Router Advertisement Daemon (radvd) for IPv6]
  
 
=== TODO ===
 
=== TODO ===
Line 7: Line 11:
  
 
===== Blueprints =====
 
===== Blueprints =====
 +
 +
[https://blueprints.launchpad.net/neutron?searchtext=ipv6 Search: Blueprints containing IPv6]
  
 
[https://blueprints.launchpad.net/quantum/+spec/ipv6-feature-parity Blueprint: IPv6 Feature Parity]
 
[https://blueprints.launchpad.net/quantum/+spec/ipv6-feature-parity Blueprint: IPv6 Feature Parity]
  
 
[https://blueprints.launchpad.net/neutron/+spec/allow-multiple-subnets-on-gateway-port Blueprint: Allow multiple subnets on gateway port]
 
[https://blueprints.launchpad.net/neutron/+spec/allow-multiple-subnets-on-gateway-port Blueprint: Allow multiple subnets on gateway port]
 +
 +
[https://blueprints.launchpad.net/neutron/+spec/security-group-icmp-type-filter Blueprint: Support ICMP type filter by security group]
 +
 +
[https://blueprints.launchpad.net/neutron/+spec/ipv6-lla-gua-router-interface Blueprint: Store both LLA and GUA on router interface port]
 +
 +
[https://blueprints.launchpad.net/neutron/+spec/security-group-ipv6-ra-guard Blueprint: Security group rule for IPv6 RA guard]
  
 
===== Bugs =====
 
===== Bugs =====
Line 17: Line 29:
  
 
===== Code Reviews =====
 
===== Code Reviews =====
[https://review.openstack.org/#/c/52983/| Create new IPv6 attributes for Subnets ]
+
====== The following code reviews are in progress ======
 +
[https://review.openstack.org/#/c/70649/ Add support to DHCP agent for BP ipv6-two-attributes ]
 +
 
 +
[https://review.openstack.org/#/c/76125/ Allow LLA as router interface of IPv6 subnet ]
 +
 
 +
====== The following reviews have already been merged ======
 +
[https://review.openstack.org/#/c/52983/ Create new IPv6 attributes for Subnets ]
 
    
 
    
[https://review.openstack.org/#/c/64578/| Ensure entries in dnsmasq belong to a subnet using DHCP ]
+
[https://review.openstack.org/#/c/64578/ Ensure entries in dnsmasq belong to a subnet using DHCP ]
  
[https://review.openstack.org/#/c/56184/| Calculate stateless IPv6 address ]
+
[https://review.openstack.org/#/c/56184/ Calculate stateless IPv6 address ]
  
[https://review.openstack.org/#/c/70649/| Add support to DHCP agent for BP ipv6-two-attributes ]
+
[https://review.openstack.org/#/c/72252/ Permit ICMPv6 RAs only from known routers ]
  
[https://review.openstack.org/#/c/72252/| Permit ICMPv6 RAs only from known routers ]
+
[https://review.openstack.org/#/c/75871/ Create new IPv6 attributes for Subnets by client ]
  
[https://review.openstack.org/#/c/76125/| Allow LLA as router interface of IPv6 subnet ]
+
[https://review.openstack.org/#/c/75355/ Make sure dnsmasq can distinguish IPv6 address from MAC address ]
  
[https://review.openstack.org/#/c/75871/| Create new IPv6 attributes for Subnets by client ]
+
[https://review.openstack.org/#/c/72880/ Fix unshortened IPv6 address caused DHCP crash]
  
[https://review.openstack.org/#/c/75355/| Make sure dnsmasq can distinguish IPv6 address from MAC address ]
+
[https://review.openstack.org/#/c/78835/ Process ICMP type for iptables firewall]
  
 +
[https://review.openstack.org/#/c/80932/ Trigger provider security group update for RA]
  
 +
===== Known Limitations in IPv6 Support =====
  
===== Known Limitations in IPv6 Support =====
+
[http://docs.openstack.org/admin-guide-cloud/content/section_limitations.html OpenStack Cloud Admin Guide - Ch7: Advanced config options - Limitations ]
 +
 
 +
[http://openvswitch.org/pipermail/discuss/2015-January/016344.html VXLAN Overlay on IPv6 network not supported by OVS ]
 +
 
 +
===== Wiki for IPv6 Networking Manual  =====
  
[http://docs.openstack.org/grizzly/openstack-network/admin/content/ch_limitations.html Running Openstack Networking - Ch10: Limitations ]
+
[[NEUTRON-IPV6-MANUAL]]

Latest revision as of 21:59, 20 April 2015

IPv6 Support in Neutron

The following specs are in progress and expected to land in Juno.

TODO

  • Break feature parity blueprint into smaller blueprints
  • Improve documentation in Network manual, add more IPv6 examples
  • Eventually - transition all Network manual examples from IPv4 to IPv6 - as IPv6 deployment becomes more widespread
Blueprints

Search: Blueprints containing IPv6

Blueprint: IPv6 Feature Parity

Blueprint: Allow multiple subnets on gateway port

Blueprint: Support ICMP type filter by security group

Blueprint: Store both LLA and GUA on router interface port

Blueprint: Security group rule for IPv6 RA guard

Bugs

Bugs tagged IPv6

Code Reviews
The following code reviews are in progress

Add support to DHCP agent for BP ipv6-two-attributes

Allow LLA as router interface of IPv6 subnet

The following reviews have already been merged

Create new IPv6 attributes for Subnets

Ensure entries in dnsmasq belong to a subnet using DHCP

Calculate stateless IPv6 address

Permit ICMPv6 RAs only from known routers

Create new IPv6 attributes for Subnets by client

Make sure dnsmasq can distinguish IPv6 address from MAC address

Fix unshortened IPv6 address caused DHCP crash

Process ICMP type for iptables firewall

Trigger provider security group update for RA

Known Limitations in IPv6 Support

OpenStack Cloud Admin Guide - Ch7: Advanced config options - Limitations

VXLAN Overlay on IPv6 network not supported by OVS

Wiki for IPv6 Networking Manual

NEUTRON-IPV6-MANUAL