Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IPv6 support #1

Closed
kverstr opened this issue Nov 20, 2023 · 3 comments
Closed

IPv6 support #1

kverstr opened this issue Nov 20, 2023 · 3 comments
Assignees
Labels
enhancement New feature or request

Comments

@kverstr
Copy link

kverstr commented Nov 20, 2023

Is your feature request related to a problem?

Hey,

We're looking into IPv6 in AWS to avoid IPv4 pool exhaustion and future proofing. Currently trying to get a setup to work, however without much success.
The modules are not IPv6 ready, this seems to be an easy fix at first sight though. It's a few resources like the GWLB, GWLBe, endpoint service, that need an extra variable to enable IPv6 or dualstack. And the rest is adding IPv6 CIDRs to the VPC and subnets. I'd create the MR myself if I would be able to get this setup to work but it seems I'm running into FW configuration issues. Right now I don't see any IPv6 traffic in the FW, yet I'm routing IPv6 from a spoke account through the GWLBe..

So, should this setup support IPv6 and will the modules support this in the future as well?
Secondly, can I maybe get some help with getting the configuration correct on the FW or should I create a support ticket at PaloAlto for this?

Kr

Kim

Describe the solution you'd like

IPv6 support for the modules with a working bootstrap configuration example.

Describe alternatives you've considered.

No response

Additional context

No response

@kverstr kverstr added the enhancement New feature or request label Nov 20, 2023
@migara
Copy link
Member

migara commented Nov 21, 2023

@kverstr Indeed, we are planning to extend support for IPv6 over the next few months 🚀 We can share a sample configuration snippet with you once we have set this up in the lab, or feel free to open a support case 🙌🏽

@migara migara transferred this issue from PaloAltoNetworks/terraform-aws-vmseries-modules Jan 4, 2024
@migara
Copy link
Member

migara commented Jun 27, 2024

There is an example on how to use IPv6 now

@migara migara closed this as completed Jun 27, 2024
@kverstr
Copy link
Author

kverstr commented Jul 3, 2024

Not everything seems to be covered though. We're using a GWLB setup, it seems the GWLB related modules are still lacking the IPv6 updates. The GWLB, VPCe service, VPCe,... all need to be configured as IPv6 / dualstack capable as well. I ended up doing all the IPv6 changes myself and we're going to start rolling it out to nprd soon. Maybe I can create some PR's here once I tested everything.

Kr

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants