From 4b1a875e567a7df56ecc44bba87ea768812110c3 Mon Sep 17 00:00:00 2001 From: Kevin Carter Date: Wed, 17 Aug 2016 08:21:53 -0500 Subject: [PATCH] Disabled IPv6 privacy extensions IPv6 privacy extensions can cause issues by preferring a temporary network over a public one. This preference may limit connectivity in certain situations. An example of a connectivity issue can be seen where the command ``traceroute6`` fails or misses all hops while other traffic to a given domain with a "AAAA" record may succeed. To resolve this issue the IPv6 privacy extensions have been disabled. Change-Id: I62b9d6301b9e8b8e93b49cecbc96334ceea92fa5 Related-Bug: #1068756 Signed-off-by: Kevin Carter --- elements/base/install.d/80-disable-rfc3041 | 29 ++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100755 elements/base/install.d/80-disable-rfc3041 diff --git a/elements/base/install.d/80-disable-rfc3041 b/elements/base/install.d/80-disable-rfc3041 new file mode 100755 index 00000000..b57ccbfb --- /dev/null +++ b/elements/base/install.d/80-disable-rfc3041 @@ -0,0 +1,29 @@ +#!/bin/bash +# Copyright 2016, Rackspace US, Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or +# implied. +# +# See the License for the specific language governing permissions and +# limitations under the License. + +# dib-lint: disable=set setu setpipefail indent +if [ ${DIB_DEBUG_TRACE:-0} -gt 0 ]; then + set -x +fi +set -e + +# This will disable the disable Privacy extensions for IPv6 (RFC3041) +cat > /etc/sysctl.d/99-cloudimg-ipv6.conf <