You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/ipv6.md
+9-11Lines changed: 9 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,15 +2,13 @@
2
2
3
3
Supports EKS IPv6 clusters and any other k8s cluster type which has IPv6(Cluster)-to-IPv4(Internet) Egress communication enabled.
4
4
5
-
When running an IPv6-only Kubernetes cluster, pods may still need to access external IPv4 endpoints (e.g., APIs, package repositories, Github which are ipv4 only). This requires configuring the CNI and VPC to support IPv6-to-IPv4 egress. If your cluster already has this capability, please skip this and proceed with deploying sumologic helm chart.
5
+
When running an IPv6-only Kubernetes cluster, pods may still need to access external IPv4 endpoints (e.g., APIs, package repositories, Github which are ipv4 only). This requires configuring the CNI and VPC to support IPv6-to-IPv4 egress via NAT64 and DNS64 components. If your cluster already has this capability, please skip this and proceed with deploying sumologic helm chart.
6
6
7
7
## Pre-requisites for EKS Cluster
8
-
Both VPC-CNI plugin and NAT gateways provide IPv6-to-IPv4 communication. Please choose accordinly based on your cluster setup/preference.
9
8
10
-
### 1. If you are using EKS's inbuilt VPC-CNI as the CNI plugin, then please ensure below
11
-
12
-
#### 1.1. Ensure Amazon VPC CNI plugin v1.10.1 or later is deployed in cluster
9
+
### 1. Ensure IPv6 settings in your CNI plugin to turn on IPv6 pod addressing
13
10
11
+
**For Amazon VPC CNI**, Ensure Amazon VPC CNI plugin v1.10.1 or later is deployed in cluster
14
12
IP prefix delegation and ENABLE_IPv6 settings must be enabled. If you already deployed VPC-CNI Plugin while creating the cluster, these will
15
13
be enabled automatically. If you have added the plugin after the cluster is created, please ensure aforementioned settings are enabled.
16
14
@@ -32,9 +30,11 @@ aws eks update-addon \
32
30
For more information and different methods to update plugin settings, please refer
### 2. Ensure that a NAT Gateway/Internet gateway is provisioned to reach public ipv4 endpoints
34
+
35
+
##### 2.1. If your worker nodes are in public subnet and you are using AWS VPC-CNI, then please make sure ipv4 external route is added.
36
36
37
-
Make sure that VPC’s Route table has a route from IPv4(local) to Internet gateway. This is to ensure that ipv4 traffic from your cluster can reach internet.
37
+
Make sure that the subnet’s Route table has a route from IPv4(local) to Internet gateway. This is to ensure that ipv4 traffic from your cluster can reach internet.
38
38
Ex. 0.0.0.0/0→igw-XXX (Internet Gateway)
39
39
40
40
```bash
@@ -47,11 +47,9 @@ aws ec2 create-route \
47
47
For more information and different methods to add route, please refer
### 2. If you want to configure ipv6->ipv4 egress communication via NAT gateway for your ipv6 worker nodes, please ensure below configurations
51
-
52
-
AWS provides DNS64 and NAT64 components to provide VPC level ipv6->ipv4 communication.
50
+
#### 2.2. If your worker nodes are in private subnet or you are not using AWS VPC-CNIusing custom CNI like celium, then please ensure you have provisioned a NAT gateway.
53
51
54
-
If you have a subnet with IPv6-only workloads that needs to communicate with IPv4-only services outside the subnet, this example shows you how to enable these IPv6-only services to communicate with IPv4-only services on the internet.
52
+
If you have a subnet with IPv6-only workloads that needs to communicate with IPv4-only services outside the subnet, this shows you how to enable these IPv6-only services to communicate with IPv4-only services on the internet.
55
53
56
54
You should first configure a NAT gateway in a public subnet (separate from the subnet containing the IPv6-only workloads). For example, the subnet containing the NAT gateway should have a 0.0.0.0/0 route pointing to the internet gateway.
0 commit comments