Page History

...

When a Instance boots it sends out a Router Solicitation and it gets the information from both routers. This is done by the Network Stack of the Instance and is supported by all major Operating Systems.

Using SLAAC the Instances will obtain their IPv6 address. Linux properly uses the MAC Address to generate the IPv6 address. Only Windows has to be configured to not use the random identifier, but the MAC address.

...

• ebtables to prevent MAC spoofing
• Do source IP-address checking to prevent source address spoofing
  
  • The Addresses of the Instance
  • Any delegated prefixes

Using libvirt here might be a good solution.

Afterwards the security groups need additional rules, we have to allow:

...

In CloudStack we pre-configured a few things:

• The /64 used in the Layer 2 network. Using a /64 is mandatory to use SLAAC.
• The /40 we use for Prefix Delegation Assigments
• The size of the prefixes we want to delegate: /60

...