[135560] in North American Network Operators' Group
Re: Ipv6 for the content provider
daemon@ATHENA.MIT.EDU (Owen DeLong)
Wed Jan 26 15:45:53 2011
From: Owen DeLong <owen@delong.com>
In-Reply-To: <alpine.OSX.2.00.1101260905210.211@cust11794.lava.net>
Date: Wed, 26 Jan 2011 12:39:16 -0800
To: Antonio Querubin <tony@lava.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jan 26, 2011, at 11:17 AM, Antonio Querubin wrote:
> On Wed, 26 Jan 2011, Charles N Wyble wrote:
>=20
>> Do I just need to assign ip addresses to my servers, add AAAA records =
to
>> my DNS server and that's it? I'm running PowerDNS for DNS, Apache for
>> WWW. Postfix for SMTP.
>=20
> Best to remove IP version dependencies in your configs.
>=20
> If you are using name-based virtual hosting in Apache, convert:
>=20
> Listen a.b.c.d:80 -> Listen 80
> <Virtualhost a.b.c.d:80> -> <Virtualhost *:80>
>=20
That only works if you have only one address on the machine and.
If you have addresses that aren't intended for name-based-site-A but
do terminate SSL connections to sites B, C, and D, then you probably
don't want to use * for site A.
> Use hard-coded IP addresses only where required for stuff like =
SSL-enabled webhosts.
>=20
Depends on the complexity of your environment. In a more complex =
configuration
you can actually save yourself a lot of trouble and confusion later by =
using a
construct like this:
Listen 192.159.10.7:80
Listen [2620:0:930::dead:beef:cafe]:80
Listen [2620:0:930::400:7]:80
<VirtualHost 192.159.10.7:80 [2620:0:930::400:7]:80 =
[2620:0:930::dead:beef:cafe]
:80>
ServerName www.delong.com
...
YMMV, but, that's working reliably in my environment for:
[root@owen conf]# host www.delong.com
www.delong.com has address 192.159.10.7
www.delong.com has IPv6 address 2620:0:930::400:7
(The dead:beef:cafe address isn't currently in the AAAAs that are =
publicly visible because
it's used for testing specialized testing from different DNS views.)
The machine in question has a number of IPv4 and IPv6 addresses many
of which terminate HTTP/HTTPs connections, some of which do not.
Owen