[RFC0038] IPv6 Dual Stack Support for Cloud Foundry

[beyhan]

This is a tracking issue for RFC0038.

Delivered with:

• CF-Deployment version:
• CLI version:
• CF Docs:

Tasks

Are maintained in #1107 (comment)

[peanball]

Runtime: Diego, Silk, BBS, etc

• IPv6 Support diego-release#989
  • [RFC0038] IPv6 support for Silk CNI and VXLAN policy agent silk-release#155
  • [RFC0038] icmpv6 support in ASGs bbs#107
  • [RFC0038] Support container IPv6 address and icmpv6 NetOut rules executor#112
  • [RFC0038] container ipv6 address and icmpv6 support garden#125
  • [RFC0038] External Networker IPv6 support cf-networking-release#343
  • [RFC0038] Support IPv6 in hosts file compilation guardian#482

bosh-bootloader

• Dual Stack (add IPv6) Support for BOSH Bootloader (AWS) bosh-bootloader#632
  • feat: Add IPv6 support to IP and CIDRBlock bosh-bootloader#633
  • feat: Add dualstack support for AWS Infrastructure bosh-bootloader#640
  • Add IPv6 information forwarding to BOSH via ops files generated by bbl
  • Add IPv6 option on bbl CLI Document how to enable dual stack via the TF variable(?)

BOSH

• Agent
  • Disable error messages related to networks/network interface cards bosh-agent#344
  • enable ipv6 in boshSysctl bosh-agent#347 - Allow enabling IPv6 on Jammy
  • Update kernel_ipv6.go bosh-agent#348
  • IP prefix delegation to VMs
• AWS CPI:
  • Enable dual stack with single nic bosh-aws-cpi-release#174
  • add ipv6 prefix bosh-aws-cpi-release#176
  • enable aws allocated ipv6 prefix bosh-aws-cpi-release#180
• BOSH Director Adaptations
  • [RFC0038] Introduce prefix allocation bosh#2611
• BOSH CLI Adaptations
  • Add ipv6 support bosh-cli#690

Stemcells

• sysctl job disables ipv6 implicitly on jammy stemcells os-conf-release#71

CF API

• Add cc.enable_ipv6 to config capi-release#536
• Add support for IPv6 in security groups cloud_controller_ng#4318
  • Accept zero-padded segments in IPv6 addresses cloud_controller_ng#4367
• Add support for icmpv6 protocol cloud_controller_ng#4404
  • Issue 4404: Add support for "icmpv6" protocol to ASGs cloud_controller_ng#4424

CF Deployment

• Add empty experimental ops file for IPv6 enablement  cf-deployment#1253
• Add security group for handling ipv6 traffic cf-deployment#1255
• Fix failing unit tests for the new ipv6 ops file cf-deployment#1254
• Configure CC in enable-ipv6-egress.yml cf-deployment#1256
• Add diego-cell specifics to the enable-ipv6-egress.yml ops file cf-deployment#1258

Test Environment Adaptations

Diego

• Enable IPv6 Support in Concourse Containers for Upcoming silk-release Integration Tests diego-release#1004

CF Deployment (ARD)

• Add new dobby lb cert to credhub auto regen app-runtime-deployments-infrastructure#7
• https://github.com/cloudfoundry/relint-envs/pull/57
• New env dobby ipv6 runtime-ci#512
• Add new env dobby ipv6 pool relint-ci-pools#6
• Fix pool path for dobby env runtime-ci#513
• Add new env dobby for ipv6 dual-stack validation cf-deployment#1238
• Add IPv6 validation within python and node apps cf-acceptance-tests#1535