Forums

Resolved
1 votes
I am with OVH and have configured my dedicated server (Not a VPS!) par instructions via:

http://docs.ovh.ca/en/guides-network-ipv6.html#redhat-derivatives-centos-scientific-linux-clearos

As OVH dedicated machines (BHS datacenter at least) do not need fe80 interface I have previously through a ticket ascertained the correct IPv6 information in the past. Even with virtual infrastructure running upon said dedicated machine, when it comes to IPv6 addressing, so long as the address isn't used, things do in such "just work". I was testing ClearOS tonight and configured IPv6 per instructions provided in the docs/guide and got IPv6 working without any issue.

I had the odd experience that while I was trying to get Certbot (Let's Encrypt) working with properly setup ns records pointing to the machine as confirmed by nslookup, dig, ping, etc. that IPv6 all of a sudden flaked out. I had a chat with a ClearOS staffer on the live chat so that I could make my dilemma made aware, and she admitted that many modules in ClearOS don't yet have proper support for IPv6.

I am very suspect that iptables itself has been the culprit as I am not new to these sort of problems, especially considering that ClearOS doesn't yet expose IPv6 configuration to its web interface with the exception of DNS servers. Strangely enough, it started working again after a few minutes, but the sporadic behaviour, which as I alluded to is probably related to the lack of real IPv6 support in the web ui is definitely an area that needs to be addressed since Solaris 7 was the first commercial system to support IPv6 20 years ago as of next year, and it's a crying shame to have a decent system that is for the potential uses with SMB applications and the like curtailed by lack of pervasive support throughout its service offerings, arguably as of yet down to the core.
Thursday, December 01 2016, 02:53 AM

Location [ View Larger Map ]

http://maps.googleapis.com/maps/api/staticmap?center=31.9685988,-99.90181310000003&language=en&maptype=roadmap&zoom=5&size=450x300&sensor=true&markers=color:red|label:S|31.9685988,-99.90181310000003
Share this post:
Responses (3)
  • Accepted Answer

    Thursday, December 01 2016, 06:56 PM - #Permalink
    Resolved
    0 votes
    .... but the iptables6 firewall does not like IPv4 addresses - bug 11041. ;)
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, December 01 2016, 05:22 PM - #Permalink
    Resolved
    0 votes
    I appreciate the response and hope for the same regarding release 8. Thank you.
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, December 01 2016, 05:18 PM - #Permalink
    Resolved
    0 votes
    Hi James,

    The low level of ClearOS customer interest in IPv6 is a bit surprising to me. Yes, businesses tend to be conservative and stick with old and proven tech, so that probably explains some of it. It doesn't help that IPv6 isn't easily available to most of the development team including yours truly (I would have to switch to a slower DSL link to get IPv6).

    And, we still run into applications that are IPv6 ready, but not yet feature complete. A recent example is the deep packet inspection engine (nDPI @ http://www.ntop.org/products/deep-packet-inspection/ndpi/) used by the Protocol Filter and Application Filter. Most of the nDPI engine happily runs on IPv6, but the IP matching feature only accepts IPv4 addresses. Amavis plugins are in a similar boat - IPv6 works, but not everything is quite feature complete.

    Hopefully, a fully supported IPv6 stack will be part of ClearOS 8.
    The reply is currently minimized Show
Your Reply