Awesome! Seems like we reached agreement for not covering privacy extension at
this moment. I am totally fine with that. To put closure on this subject, do
you think we need to document it and provide user with work-around in case
somebody asks for it in Juno release?
Shixiong
On May 16, 2014, at 3:29 PM, Robert Li (baoli) <ba...@cisco.com> wrote:
> Dane put some notes on the session??s ether pad to support multiple
> prefixes. Seem like this is really something that everyone want to support in
> openstack.
>
> ??Robert
>
> On 5/16/14, 2:23 PM, "Martinx - ?????`????" <thiagocmarti...@gmail.com> wrote:
>
>> Precisely Anthony! We talked about this topic ("Non-NAT Floating IPv6")
>> here, on the following thread:
>>
>> --
>> [openstack-dev] [Neutron][IPv6] Idea: Floating IPv6 - "Without any kind of
>> NAT":
>> http://lists.openstack.org/pipermail/openstack-dev/2014-February/026871.html
>> --
>>
>> :-D
>>
>> About IPv6 Privacy Extensions, well, if it is too hard to implement, I think
>> that it can be postponed... And only the IPv6 self-generated by SLAAC and
>> previously calculated by Neutron itself (based on Instance's MAC address),
>> should be allowed to pass/work for now...
>>
>> -
>> Thiago
>>
>>
>> On 16 May 2014 12:12, Veiga, Anthony <anthony_ve...@cable.comcast.com> wrote:
>>> I??ll take this one a step further. I think one of the methods for getting
>>> (non-NAT) floating IPs in IPv6 would be to push a new, extra address to the
>>> same port. Either by crafting an extra, unicast RA to the specific VM or
>>> providing multiple IA_NA fields in the DHCPv6 transaction. This would
>>> require multiple addresses to be allowed on a single MAC.
>>> -Anthony
>>>
>>> From: Martinx - ?????`???? <thiagocmarti...@gmail.com>
>>> Reply-To: "OpenStack Development Mailing List (not for usage questions)"
>>> <openstack-dev@lists.openstack.org>
>>> Date: Thursday, May 15, 2014 at 14:18
>>> To: "OpenStack Development Mailing List (not for usage questions)"
>>> <openstack-dev@lists.openstack.org>
>>> Subject: Re: [openstack-dev] [Neutron][IPv6] Privacy extension
>>>
>>>> Hello!
>>>>
>>>> I agree that there is no need for Privacy Extensions in a Cloud
>>>> environment, since MAC address are fake... No big deal...
>>>>
>>>> Nevertheless, I think that should be nice to allow 1 Instance to have more
>>>> than 1 IPv6 addr, since IPv6 is (almost) virtually unlimited... This way,
>>>> a VM with, for example, a range of IPv6s to it, can have a shared host
>>>> environment when each website have its own IPv6 address (I prefer to use
>>>> IP-Based virtualhosts on Apache, instead of Name-Based)...
>>>>
>>>> Cheers!
>>>> Thiago
>>>>
>>>>
>>>> On 15 May 2014 14:22, Ian Wells <ijw.ubu...@cack.org.uk> wrote:
>>>>> I was just about to respond to that in the session when we ran out of
>>>>> time. I would vote for simply insisting that VMs run without the privacy
>>>>> extension enabled, and only permitting the expected ipv6 address based on
>>>>> MAC. Its primary purpose is to conceal your MAC address so that your IP
>>>>> address can't be used to track you, as I understand it, and I don't think
>>>>> that's as relevant in a cloud environment and where the MAC addresses are
>>>>> basically fake. Someone interested in desktop virtualisation with
>>>>> Openstack may wish to contradict me...
>>>>> --
>>>>> Ian.
>>>>>
>>>>>
>>>>> On 15 May 2014 09:30, Shixiong Shang <sparkofwisdom.cl...@gmail.com>
>>>>> wrote:
>>>>>> Hi, guys:
>>>>>>
>>>>>> Nice to meet with all of you in the technical session and design
>>>>>> session. I mentioned the challenge of privacy extension in the meeting,
>>>>>> but would like to hear your opinions of how to address the problem. If
>>>>>> you have any comments or suggestions, please let me know. I will create
>>>>>> a BP for this problem.
>>>>>>
>>>>>> Thanks!
>>>>>>
>>>>>> Shixiong
>>>>>>
>>>>>>
>>>>>> Shixiong Shang
>>>>>>
>>>>>> !--- Stay Hungry, Stay Foolish ---!
>>>>>>
>>>>>>
>>>>>> _______________________________________________
>>>>>> OpenStack-dev mailing list
>>>>>> OpenStack-dev@lists.openstack.org
>>>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> OpenStack-dev mailing list
>>>>> OpenStack-dev@lists.openstack.org
>>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>>>
>>>>
>>>
>>> _______________________________________________
>>> OpenStack-dev mailing list
>>> OpenStack-dev@lists.openstack.org
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>
>>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev@lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Shixiong Shang
!--- Stay Hungry, Stay Foolish ---!
_______________________________________________
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
