DHCP PD best practise

[Nico Schottelius]

Good evening,

we are a small hosting / network provider in Switzerland and are running
our infrastructure "IPv6 first" - aka only adding IPv4 where necessary
and the core network is 100% IPv6 only.

All of our hosting customers currently have 1 IPv6 address
assigned and can request a /64 network, which we currently manually
route to their VM.

We are now considering an infrastructure revamp and would like to switch
to more "standard techniques", like DHCP & DHCP PD.

When looking at the ISC DHCPd, we see that there is PD support, however
some things are rather unclear to us:

- Given that you can trust the mac address (we can ensure that), how do
  you ensure that a client can only request a certain number (1, 2, x?)
  prefixes?
- Similar: is there a way to grant clients access to a /64 or /48 (or
  anything in between) defaulting to /64?
- How does dhcpd ensure that a system is adding the respective route to
  the client? If it is not dhcpcd, how is it commonly solved?
- Does dhcpd have hooks? If yes, what kind of hooks are available and
  how do we pass information to them?

I hope we have not overseen the documentation parts for these questions,
but if so, we would be happy if you point us to it.

Best regards from the mountains,

Nico

--
Your Swiss, Open Source and IPv6 Virtual Machine. Now on www.datacenterlight.ch.
_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users

[Christian Kratzer]

Gruezi Nico,

On Sat, 15 Sep 2018, Nico Schottelius wrote:

>
> Good evening,
>
> we are a small hosting / network provider in Switzerland and are running
> our infrastructure "IPv6 first" - aka only adding IPv4 where necessary
> and the core network is 100% IPv6 only.
>
> All of our hosting customers currently have 1 IPv6 address
> assigned and can request a /64 network, which we currently manually
> route to their VM.
>
> We are now considering an infrastructure revamp and would like to switch
> to more "standard techniques", like DHCP & DHCP PD.
>
> When looking at the ISC DHCPd, we see that there is PD support, however
> some things are rather unclear to us:
>
> - Given that you can trust the mac address (we can ensure that), how do
>  you ensure that a client can only request a certain number (1, 2, x?)
>  prefixes?
> - Similar: is there a way to grant clients access to a /64 or /48 (or
>  anything in between) defaulting to /64?
> - How does dhcpd ensure that a system is adding the respective route to
>  the client? If it is not dhcpcd, how is it commonly solved?
> - Does dhcpd have hooks? If yes, what kind of hooks are available and
>  how do we pass information to them?
>
> I hope we have not overseen the documentation parts for these questions,
> but if so, we would be happy if you point us to it.
>
> Best regards from the mountains,

with all what you are attempting to do you shold really consider swiching to KEA.

It should be able to do all you want and you will be more flexible.


Greetings
Christian

--
Christian Kratzer                   CK Software GmbH
Email:   [hidden email]               Wildberger Weg 24/2
Phone:   [phone] - 0       D-71126 Gaeufelden
Fax:     [phone] - 9       HRB 245288, Amtsgericht Stuttgart
Mobile:  [phone]           Geschaeftsfuehrer: Christian Kratzer
Web:     http://www.cksoft.de/
_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users