eve-ng management IPv6 disabled

Before posting something, READ the changelog, WATCH the videos, howto and provide following:
Your install is: Bare metal, ESXi, what CPU model, RAM, HD, what EVE version you have, output of the uname -a and any other info that might help us faster.

Moderator: mike

adsfadsfadsfdwf
Posts: 24
Joined: Thu Mar 23, 2017 10:07 am

eve-ng management IPv6 disabled

Post by adsfadsfadsfdwf » Mon Nov 04, 2019 5:11 am

eve-ng-pro 2.0.6-8, Ubuntu 16.04.6 LTS, 4.20.17-eve-ng-ukms+ running on ESXi

Why is IPv6 keeps getting disabled on every reboot? I need IPv6 for VM management. I

Code: Select all

root@eve:~# sysctl -a | grep net.ipv6 | grep disable_ipv6
sysctl: reading key "net.ipv6.conf.all.stable_secret"
sysctl: reading key "net.ipv6.conf.default.stable_secret"
sysctl: reading key "net.ipv6.conf.docker0.stable_secret"
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
sysctl: reading key "net.ipv6.conf.eth0.stable_secret"
sysctl: reading key "net.ipv6.conf.eth1.stable_secret"
net.ipv6.conf.docker0.disable_ipv6 = 1
net.ipv6.conf.eth0.disable_ipv6 = 1
sysctl: reading key "net.ipv6.conf.eth2.stable_secret"
sysctl: reading key "net.ipv6.conf.lo.stable_secret"
net.ipv6.conf.eth1.disable_ipv6 = 1
net.ipv6.conf.eth2.disable_ipv6 = 1
sysctl: reading key "net.ipv6.conf.nat0.stable_secret"
sysctl: reading key "net.ipv6.conf.pnet0.stable_secret"
net.ipv6.conf.lo.disable_ipv6 = 1
net.ipv6.conf.nat0.disable_ipv6 = 1
sysctl: reading key "net.ipv6.conf.pnet1.stable_secret"
sysctl: reading key "net.ipv6.conf.pnet2.stable_secret"
net.ipv6.conf.pnet0.disable_ipv6 = 1
net.ipv6.conf.pnet1.disable_ipv6 = 1
sysctl: reading key "net.ipv6.conf.pnet3.stable_secret"
sysctl: reading key "net.ipv6.conf.pnet4.stable_secret"
net.ipv6.conf.pnet2.disable_ipv6 = 1
net.ipv6.conf.pnet3.disable_ipv6 = 1
sysctl: reading key "net.ipv6.conf.pnet5.stable_secret"
sysctl: reading key "net.ipv6.conf.pnet6.stable_secret"
net.ipv6.conf.pnet4.disable_ipv6 = 1
net.ipv6.conf.pnet5.disable_ipv6 = 1
sysctl: reading key "net.ipv6.conf.pnet7.stable_secret"
sysctl: reading key "net.ipv6.conf.pnet8.stable_secret"
net.ipv6.conf.pnet6.disable_ipv6 = 1
net.ipv6.conf.pnet7.disable_ipv6 = 1
sysctl: reading key "net.ipv6.conf.pnet9.stable_secret"
net.ipv6.conf.pnet8.disable_ipv6 = 1
net.ipv6.conf.pnet9.disable_ipv6 = 1
I have to manually re-enabled IPv6 on every reboot

Code: Select all

root@eve:~# sysctl -p /etc/sysctl.conf 
net.ipv6.conf.pnet0.disable_ipv6 = 0
root@eve:~# systemctl restart networking
root@eve:~# 
What keeps disabling IPv6 and why? at least it should not disable pnet0 ipv6, it's almost 2020 disabling v6 isn't a good practice

Uldis (UD)
Posts: 2654
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: eve-ng management IPv6 disabled

Post by Uldis (UD) » Mon Nov 04, 2019 9:00 am

Hi,
It is true about IPv6 and year 2020.
BUT on today worst thing is that repositories of Ubuntu are not ready totally for IPv6 and even doesn't work.
Did you try Update upgrade using IPv6?
instead of 4 minutes upgrade with IPv4, on IPv6 took 56 mins or even dropped download packages at all.

Therefore until these repositories are not stable with IPv6, we had to disable it nn the EVE.

OK,if you want it back:
then edit
/opt/ovf/ovfstartup.sh

find and comment or set to 0

#Disable ipv6 on EVE Host
sysctl -w net.ipv6.conf.all.disable_ipv6=1

Save file.
now your eve will survive reboot and will be with IPv6 enabled.

BUT, if you will run next EVE release upgrade/update this file will be owerwritten back to IPv4 only, so will need edit it again.


Until this IPv6 is unstable, IPv6 will be kept in the EVE disabled.

Uldis

adsfadsfadsfdwf
Posts: 24
Joined: Thu Mar 23, 2017 10:07 am

Re: eve-ng management IPv6 disabled

Post by adsfadsfadsfdwf » Wed Nov 20, 2019 10:34 am

IPv6 has been production ready for years...imo you should ask your ISP to fix their IPv6 connectivity instead of disabling it on network orchestration platform

This is very frustrating that every time I update eve-ng remote connectivity breaks

Uldis (UD)
Posts: 2654
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: eve-ng management IPv6 disabled

Post by Uldis (UD) » Wed Nov 20, 2019 4:11 pm

my dear, lot of coubtries are not ready for IPv6, therefore ubuntu repos still sit on IPv4..
therefore if you are on IPv6 you can have issues until your IPv6 NATting to IPv4 !!
Thats why we do offer during update turn off that IPv6...

sysctl -w net.ipv6.conf.all.disable_ipv6=1


Uldis

Uldis (UD)
Posts: 2654
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: eve-ng management IPv6 disabled

Post by Uldis (UD) » Wed Nov 20, 2019 4:12 pm

It is not EVE issue mate, but Ubuntu which does not ofer downloads from IPv6...
EVE repo is already on IPv6 and transfer all necessary packets

adsfadsfadsfdwf
Posts: 24
Joined: Thu Mar 23, 2017 10:07 am

Re: eve-ng management IPv6 disabled

Post by adsfadsfadsfdwf » Tue Dec 03, 2019 4:29 am

Uldis (UD) wrote:
Wed Nov 20, 2019 4:11 pm
my dear, lot of coubtries are not ready for IPv6, therefore ubuntu repos still sit on IPv4..
therefore if you are on IPv6 you can have issues until your IPv6 NATting to IPv4 !!
Thats why we do offer during update turn off that IPv6...

sysctl -w net.ipv6.conf.all.disable_ipv6=1


Uldis
For US Ubuntu upgrade has been over v6 for years. Can you at least make IPv6 config sticky so IPv6 is not broken on every eve-ng update? This breaks remote access which is quite frustrating.

Code: Select all

host us.archive.ubuntu.com
us.archive.ubuntu.com has address 91.189.91.14
us.archive.ubuntu.com has address 91.189.91.24
us.archive.ubuntu.com has address 91.189.91.26
us.archive.ubuntu.com has address 91.189.91.23
us.archive.ubuntu.com has IPv6 address 2001:67c:1562::19
us.archive.ubuntu.com has IPv6 address 2001:67c:1562::16

Uldis (UD)
Posts: 2654
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: eve-ng management IPv6 disabled

Post by Uldis (UD) » Tue Dec 03, 2019 8:56 pm

you can do this permanent.

check this cript
cat /opt/ovf/ovfstartup.sh

you can comment (#) this line to have IPv6 enabled, uncommented line is disabled IPv5

#Disable ipv6 on EVE Host
sysctl -w net.ipv6.conf.all.disable_ipv6=1

but as I told it is not EVE issue at all but your ISP how it deals with IPv6 and connecting to repos.
EVE Repo works with IPv6 as well

ongolaBoy
Posts: 8
Joined: Wed Dec 04, 2019 12:17 pm

Re: eve-ng management IPv6 disabled

Post by ongolaBoy » Wed Dec 04, 2019 12:49 pm

Hello,
Uldis (UD) wrote:
Mon Nov 04, 2019 9:00 am
Hi,
It is true about IPv6 and year 2020.
BUT on today worst thing is that repositories of Ubuntu are not ready totally for IPv6 and even doesn't work.
Which repositories are you talking about please ?
In my installation

Code: Select all

http://mu.archive.ubuntu.com
http://security.ubuntu.com
http://www.eve-ng.net
The first 2 have IPv6 addresses . Only eve-ng website is IPv4-only (please fix it) .

Code: Select all

a$ dig +short AAAA security.ubuntu.com
2001:67c:1560:8001::14
2001:67c:1360:8001::17
2001:67c:1562::16
2001:67c:1562::19
2001:67c:1360:8001::21
2001:67c:1560:8001::11

a$ dig +short AAAA mu.archive.ubuntu.com
2001:67c:1560:8001::11
2001:67c:1360:8001::17
2001:67c:1560:8001::14
2001:67c:1562::19
2001:67c:1360:8001::21
2001:67c:1562::16

a$ dig +short AAAA www.eve-ng.net
a$ 
Uldis (UD) wrote:
Mon Nov 04, 2019 9:00 am
Did you try Update upgrade using IPv6?
instead of 4 minutes upgrade with IPv4, on IPv6 took 56 mins or even dropped download packages at all.
That's a local network issue. You have to check with your ISP .
Uldis (UD) wrote:
Mon Nov 04, 2019 9:00 am
Therefore until these repositories are not stable with IPv6, we had to disable it nn the EVE.
IMHO we should not disable it for all because the issue is not on eve-ng

Uldis (UD)
Posts: 2654
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: eve-ng management IPv6 disabled

Post by Uldis (UD) » Wed Dec 04, 2019 2:30 pm

Issue is in most countries which are NOT migrated to IPv6..

ongolaBoy
Posts: 8
Joined: Wed Dec 04, 2019 12:17 pm

Re: eve-ng management IPv6 disabled

Post by ongolaBoy » Wed Dec 04, 2019 4:14 pm

Uldis (UD) wrote:
Wed Dec 04, 2019 2:30 pm
Issue is in most countries which are NOT migrated to IPv6..
Sorry but you are trying to solve an issue in the wrong way.
Again, the issue (when it exists) is not related to eve-ng software but to the network environment of the user when they are using IPv6. The bad user experience here is not due to eve-ng please.

You cannot fix issues from other networks. This is a regression from my point of view.

While waiting to have IPv6 re-enable in your code, can you please insert clearly in your documentation how to enable IPv6 ?

Post Reply