Provider Networking - upstream SLAAC support

Registered by Sean M. Collins on 2013-11-21

It should be possible to create a Provider Network in Neutron, that uses an upstream switch or router that advertises RA's - so that instances can use SLAAC to configure their IPv6 networking, while still utilizing the Neutron APIs for security group rules.

Blueprint information

Status:
Complete
Approver:
Mark McClain
Priority:
Low
Drafter:
Openstack@Comcast
Direction:
Approved
Assignee:
Openstack@Comcast
Definition:
Approved
Series goal:
Accepted for juno
Implementation:
Implemented
Milestone target:
milestone icon 2014.2
Started by
Mark McClain on 2014-01-07
Completed by
Sean M. Collins on 2014-06-27

Whiteboard

11-June (mestery): Moving to Juno-2 since one of the patches is still WIP.

29-May (mestery): This should land in Juno-1.

6-Mar (markmcclain): Deferring this last bit until Juno

Any details on how this is to be implemented, particularly with respect to port firewalling? You wouldn'y want to pass RAs from just anybody and the antispoof filters need to know the IPv6 addresses in use. -- Ian.

We'll be putting some documentation together fairly soon, under both the wiki, under the IPv6 section (https://wiki.openstack.org/wiki/Neutron/IPv6) and we'll also look into adding a chapter to openstack-manuals. -- Sean M. Collins

Gerrit topic: https://review.openstack.org/#q,topic:bp/ipv6-provider-nets-slaac,n,z

Addressed by: https://review.openstack.org/64578 --merged
    Ensure that that all fixed ips for a port belong to a subnet using DHCP

Addressed by: https://review.openstack.org/88043 -- Merged
    Add ipv6-provider-nets-slaac

Addressed by: https://review.openstack.org/86044 -- Merged
    Support Subnets that are configured by external RAs

(?)

Work Items