3 ms·
The solution I've come up with here is to use ULA's in addition to the public prefix. If my public prefix changes it can cause a temporary disruption in service
by snuxoll 5y ago
The solution I've come up with here is to use ULA's in addition to the public prefix. If my public prefix changes it can cause a temporary disruption in service availability from outside my home, but on the inside everything uses the ULA prefix for communication so I don't have giant messes during re-addressing. This has also tackled my issues with inter-vlan routing, since my switch does not have the ability to take a prefix delegation but can route static IPv6 subnets just fine.
My big issue remains multi-homing for smaller setups like my homelab and SMB's. When doing NAT (and I could do NPT with my v6 network) all my policy is at the gateway - what traffic goes over what link, etc. I lose all that with IPv6, and I'm still trying to figure out how to deal with it - what used to be simple policies like "my home office uses CenturyLink and only fails over to Sparklight if that's down while everything else does the opposite" now require some way to push down the client or more sophisticated IFTT style setups on the router (if this gateway goes down depreciate the prefix and advertise this one instead).
- aidenn0 5y agoDo you use SLAAC or DHCP6 for assigning the ULAs? I'm looking for something that lets me use ipv6 on my home network, and my ISP changes my /64 PD disturbingly often.
- snuxoll 5y agoI use SLAAC - I actually use my main switch (Juniper EX2300) to advertise those since it can handle routing the inter-vlan traffic on my network, and then my router/firewall handles the public prefixes.
- candiddevmike 5y agoAre you assigning a public and private IP to everything, or just private and using NAT on the gateway?
- snuxoll 5y agoEverything gets a public address as well as a ULA one.
- phicoh 5y agoFor multi-homing, you can also look at it another way: the only thing you have to do to move downstream hosts from one prefix and router to another is different router advertisements. In theory, you could actually disable router advertisements on the routers themselves, and run a small daemon that just announces the right information.
- snuxoll 5y ago> In theory, you could actually disable router advertisements on the routers themselves, and run a small daemon that just announces the right information. I actually investigated the feasibility of something like this - but the way IPv6 RA's work requires they be sent from the link-local address of the router itself, so I'd have to run said daemon on the router itself - at which point I can just write some scripts to modify configuration on event triggers.