[EHPweb] ipv6 on public web systems

[Christopher J Bidwell]

I am in the process of adding ipv6 addresses to all public webservers. 
This is a mandate put out by OMB that all public FTP and WEB servers are 
to have ipv6 addresses enabled.

I've already enabled this on ehppdl3 which isn't an active system at the 
moment.  I'd like to do this for ehppdl1 and 2 as well and make sure they 
are all working properly, then move on to add ipv6 to ehp1-4 and ciimweb* 
(not including ciimwebpas).  Keep in mind that this will only be enabled 
for the secondary interfaces ehp1-earthquake, ehp2-earthquake, 
ciimd-sslearthquake, etc. 

In addition to this, Level 3 changes will also need to be addressed.  I'm 
seeking further guidance from natweb on how they transitioned www.usgs.gov 
into ipv6 so that it will be a smooth transition for us as well.

For systems that don't have ipv6 enabled, I need to make changes in 
/etc/modprobe.d and will require a reboot to activate that change.

Here is a list of all systems that need to have ipv6 enabled:

DFC DMZ:
2001:49c8:8000:120c::74 137.227.224.74  ehp4-earthquake.cr.usgs.gov
2001:49c8:8000:120c::76 137.227.224.76  eqweb-den.cr.usgs.gov
2001:49c8:8000:120c::81 137.227.224.81  ehppdl3.cr.usgs.gov
2001:49c8:8000:120c::83 137.227.224.83  ehp1-earthquake.cr.usgs.gov
2001:49c8:8000:120c::87 137.227.224.87  ciimd-sslearthquake2.cr.usgs.gov
2001:49c8:8000:120c::88 137.227.224.88  ciimd-sslearthquake.cr.usgs.gov
2001:49c8:8000:120c::89 137.227.224.89  eids1.cr.usgs.gov
2001:49c8:8000:120c::90 137.227.224.90  eids1-vm.cr.usgs.gov
2001:49c8:8000:120c::95 137.227.224.95  ehppdl1.cr.usgs.gov
2001:49c8:8000:120c::96 137.227.224.96  ehpcache-den.cr.usgs.gov
2001:49c8:8000:120c::97 137.227.224.97  cwbpub.cr.usgs.gov
2001:49c8:8000:120c::98 137.227.224.98  gldplone.cr.usgs.gov
2001:49c8:8000:120c::100        137.227.224.100 comcat.cr.usgs.gov

Menlo Park:
2001:49c8:c000:122C::18 137.227.233.18      ehp3-earthquake.wr.usgs.gov
2001:49c8:c000:122C::24 137.227.233.24      ehp2-earthquake.wr.usgs.gov
2001:49c8:c000:122C::5  137.227.233.5 ciimm-sslearthquake.wr.usgs.gov
2001:49c8:c000:122C::12 137.227.233.12      ehppdl2.wr.usgs.gov
2001:49c8:c000:122C::13 137.227.233.13      ehpcache-men.wr.usgs.gov

DNS will bind for both A records and AAAA records with the same name.

Please let me know if you have any questions as I'm sure you will. 
----------------
Thank you,

Chris Bidwell, RHCSA
Red Hat Linux Administrator
National Earthquake Information Center
US Geological Survey
email: cbidwell at usgs.gov
work: 303-273-8642
mobile: 303-435-6362
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://geohazards.usgs.gov/pipermail/ehpweb/attachments/20120919/c19cee21/attachment.html>