Info Security Memo
  • Blog
  • Sitemap
    • Categories
  • Contact
  • About
  • Resources
  • Tools
  • 51sec.org

Build Confidence

Focusing on Information Security 

Info Security Notes

Enable IPv6 on Oracle Cloud Infrastructure

9/7/2021

0 Comments

 
Enable IPv6 on Oracle Cloud Infrastructure

On April 15, 2021, Oracle blog announced "We’re pleased to announce that you can now configure IPv6 in Oracle Cloud Infrastructure (OCI)."

One year ago, Azure has announced "IPv6 for Azure Virtual Network is now generally available"

On March 2017, Google Cloud Platform also started supporting IPv6 in a different way based on this post, although it is still not at VPS level. Here is a guide how to do it. .

" Google Cloud supports IPv6 clients with HTTP(S) Load Balancing, SSL Proxy Load Balancing, and TCP Proxy Load Balancing. The load balancer accepts IPv6 connections from your users, and then proxies those connections to your backends.". 

On Dec 1, 2016, AWS already Announced " Internet Protocol Version 6 (IPv6) support for EC2 instances in Amazon Virtual Private Cloud (VPC)"

In this post, I am going to walk you through all steps needed to enable your IPv6 on Oracle Cloud environment and how to assign IPV6 address to your VPS.


Enable IPv6

1. Log into your Oracle Cloud account. Choose networking -> Virtual Cloud Networks 


2. Find out your existing VCN (Virtal Cloud Networks), Click it.

3. You should land on VCN's Subnets page as show below:


4. Change to CIDR Blocks page , then click Add IPv6 CIDR Block button to add a new IPv6 block in. 


You will get a pop up window to confirm you want to enable ipv6. Click Confirm to continue.

5. After you confirmed to enable ipv6 support, a new ipv6 segment (/56 block) will be assigned to you.




Create IPv6 Subnet

1.Click the existing subnet for Resources panel's Subnets page:

2. Click edit button then check "Enable IPv6 CIDR Block"

3. Enter a new HEX character between 00-FF to assign a /64 subnet from a block /56. 



Create Security Rules for Ingress and Egress IPv6 Traffic

Ingress rule for all IPv6 Traffic:


Egress rule for all IPv6 Traffic




Default IPv6 Route

In your Route Rules, there is already one IPv4 default route in place. 

We will also need to add a default IPv6 route in. The option is same concept as your ipv4 default route.

Since it is for all ipv6 traffic, destination CIDR block is ::/0. 



Assign An IPv6 Address to your instance

Go to you instance's configuration page, which you will find Resources panel at the left of page.
Click Attached VNICs, then choose existing VNIC to click. 

You can assign a new ipv6 or randomly let OCI assign one for you without entering anything, just click Assign button:


After a couple of seconds, one IPv6 address will be assigned to your VNIC. 



Acquire This IPv6 Address From Your VPS

Last step is to fetch this ipv6 address by your VPS's OS.

For CentOS:

Restarting networking will not work. We can using following command:

① Fetch IPv6(Oracle Cloud CentOS default network card name is ens3)

1
dhclient -6 ens3

  

②Check if fetched IPv6 address

1
ip add

 

③Test your IPv6 address

1
ping6 google.com


④Add Fetch IPv6 Command into Startup 

After CentOS restarted, IPv6 will not be fetched again. We will let rc.local this automatic boot process to start fetching IP address command.

1
2
chmod +x /etc/rc.d/rc.local
echo "dhclient -6 ens3" >> /etc/rc.d/rc.local

 


For Ubuntu:

IPv6 address will be automatically fetched by network card ens3:


root@opc3ubuntu1:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 02:00:17:01:65:cf brd ff:ff:ff:ff:ff:ff
    altname enp0s3
    inet 10.0.0.14/24 brd 10.0.0.255 scope global ens3
       valid_lft forever preferred_lft forever
    inet6 2603:c021:0:6300:728f:b425:2843:b9b2/128 scope global dynamic noprefixroute
       valid_lft 7164sec preferred_lft 6864sec
    inet6 fe80::17ff:fe01:65cf/64 scope link
       valid_lft forever preferred_lft forever




References

  • 甲骨文云(Oracle Cloud)免费服务器开启 IPv6






via Blogger https://ift.tt/3jNVp42
September 07, 2021 at 11:13AM Cloud
0 Comments



Leave a Reply.

    Categories

    All
    Architecture
    Blog
    Checkpoint
    Cisco
    Cloud
    CyberArk
    F5
    Fortigate
    Guardium
    Juniper
    Linux
    Network
    Others
    Palo Alto
    Qualys
    Raspberry Pi
    Security
    SIEM
    Software
    Vmware
    VPN
    Wireless

    Archives

    March 2024
    February 2024
    January 2024
    December 2023
    November 2023
    October 2023
    September 2023
    August 2023
    July 2023
    June 2023
    May 2023
    April 2023
    March 2023
    February 2023
    January 2023
    December 2022
    November 2022
    October 2022
    September 2022
    August 2022
    July 2022
    June 2022
    May 2022
    April 2022
    March 2022
    February 2022
    January 2022
    December 2021
    November 2021
    October 2021
    September 2021
    August 2021
    July 2021
    June 2021
    May 2021
    April 2021
    March 2021
    February 2021
    January 2021
    December 2020
    November 2020
    October 2020
    September 2020
    August 2020
    July 2020
    October 2019
    September 2019
    June 2019
    July 2018
    May 2018
    December 2017
    August 2017
    April 2017
    March 2017
    January 2017
    December 2016
    November 2016
    October 2016
    September 2016
    August 2016
    July 2016
    June 2016
    May 2016
    April 2016
    March 2016
    February 2016
    January 2016
    December 2015
    November 2015
    October 2015
    September 2015
    August 2015
    July 2015
    June 2015
    May 2015
    April 2015
    March 2015

    Print Page:

    RSS Feed

    Email Subscribe
Powered by Create your own unique website with customizable templates.
  • Blog
  • Sitemap
    • Categories
  • Contact
  • About
  • Resources
  • Tools
  • 51sec.org