Disabled IPv6 privacy extensions
IPv6 privacy extensions can cause issues by preferring a temporary network over a public one. This preference may limit connectivity in certain situations. An example of a connectivity issue can be seen where the command ``traceroute6`` fails or misses all hops while other traffic to a given domain with a "AAAA" record may succeed. To resolve this issue the IPv6 privacy extensions have been disabled. Related-Bug: #1068756 Change-Id: If3bb0fd690673a6d93114e6aebddb5985344b437 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
This commit is contained in:
parent
746c08a474
commit
95821ab951
29
nodepool/elements/nodepool-base/install.d/99-disable-rfc3041
Executable file
29
nodepool/elements/nodepool-base/install.d/99-disable-rfc3041
Executable file
@ -0,0 +1,29 @@
|
||||
#!/bin/bash
|
||||
# Copyright 2016, Rackspace US, Inc.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
# implied.
|
||||
#
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# dib-lint: disable=set setu setpipefail indent
|
||||
if [ ${DIB_DEBUG_TRACE:-0} -gt 0 ]; then
|
||||
set -x
|
||||
fi
|
||||
set -e
|
||||
|
||||
# This will disable the disable Privacy extensions for IPv6 (RFC3041)
|
||||
cat > /etc/sysctl.d/99-cloudimg-ipv6.conf <<EOF
|
||||
# See https://bugs.launchpad.net/ubuntu/+source/procps/+bug/1068756
|
||||
net.ipv6.conf.all.use_tempaddr=0
|
||||
net.ipv6.conf.default.use_tempaddr=0
|
||||
EOF
|
Loading…
Reference in New Issue
Block a user