nanog mailing list archives
Re: using "reserved" IPv6 space
From: TJ <trejrco () gmail com>
Date: Fri, 13 Jul 2012 14:47:26 -0400
On Fri, Jul 13, 2012 at 1:56 PM, <Jean-Francois.TremblayING () videotron com>wrote:
-Hammer- <bhmccie () gmail com> a écrit sur 13/07/2012 12:21:13 PM :I like the ULA approach.Global and ULA are two approach, but there's a third one: GUA + ULA. We actually put a GUA on servers speaking publicly, a ULA on servers speaking in our domain only and *both* ULA and GUA on servers which talk both ways. Our datacenter firewalls are configured to enforce GUA-GUA and ULA-ULA connections only (just simple URPF over two interfaces). This setup works very well, surprisingly we've had very little source address selection problems so far (knock on wood). We're very happy that the separation between public and "private" networks is clear, it helps a lot with debugging and service separation.
Of the top of my head, the first problem you might hit there is WRT multicast ... *(ULA might "win" some source address selections that you want GUA to win)* /TJ
Current thread:
- Re: using "reserved" IPv6 space, (continued)
- Re: using "reserved" IPv6 space Mike Jones (Jul 15)
- Re: using "reserved" IPv6 space Owen DeLong (Jul 15)
- Re: using "reserved" IPv6 space Scott Morris (Jul 15)
- Re: using "reserved" IPv6 space Jimmy Hess (Jul 14)
- Re: using "reserved" IPv6 space valdis . kletnieks (Jul 15)
- Re: using "reserved" IPv6 space Tom Cooper (Jul 13)
- Re: using "reserved" IPv6 space Adrian Bool (Jul 13)
- Re: using "reserved" IPv6 space -Hammer- (Jul 13)
- Re: using "reserved" IPv6 space TJ (Jul 13)
- Re: using "reserved" IPv6 space Jean-Francois . TremblayING (Jul 13)
- Re: using "reserved" IPv6 space TJ (Jul 13)
- Re: using "reserved" IPv6 space Jean-Francois . TremblayING (Jul 13)
- Re: using "reserved" IPv6 space Jeroen Massar (Jul 13)
- Re: using "reserved" IPv6 space Owen DeLong (Jul 14)
- Re: using "reserved" IPv6 space Oliver (Jul 14)
- Re: using "reserved" IPv6 space Laurent GUERBY (Jul 14)
- Re: using "reserved" IPv6 space Owen DeLong (Jul 14)
- Re: using "reserved" IPv6 space Laurent GUERBY (Jul 15)