AKS icon indicating copy to clipboard operation
AKS copied to clipboard

[Question] when would IPv6 support calico network policies?

Open UXabre opened this issue 3 years ago • 19 comments

Describe scenario Currently it seems there's no way to filter data or apply network policies when IPv6 is enabled on a cluster. We'd very much like to have this as to have network seggregation possibilities in place as i don't want pods from one namespace to talk to another namespacd for instance.

Also, AFAICT calico already supports IPv6 policies? So is this disabled as a Just-in-case scenario?

Question When would calico support be introduced to an IPv6 enabled cluster? Or, when would IPv6 be regarded for GA?

UXabre avatar Dec 05 '22 22:12 UXabre

Action required from @Azure/aks-pm

ghost avatar Jan 05 '23 16:01 ghost

Issue needing attention of @Azure/aks-leads

ghost avatar Jan 20 '23 18:01 ghost

@aanandr, @phealy would you be able to assist?

Issue Details

Describe scenario Currently it seems there's no way to filter data or apply network policies when IPv6 is enabled on a cluster. We'd very much like to have this as to have network seggregation possibilities in place as i don't want pods from one namespace to talk to another namespacd for instance.

Also, AFAICT calico already supports IPv6 policies? So is this disabled as a Just-in-case scenario?

Question When would calico support be introduced to an IPv6 enabled cluster? Or, when would IPv6 be regarded for GA?

Author: UXabre
Assignees: -
Labels:

question, networking/azcni, action-required, Needs Attention :wave:

Milestone: -

ghost avatar Feb 03 '23 19:02 ghost

Hi, gentle reminder on the subject... Perhaps my most pressing question: Is there a timeline on when IPv6 on AKS would go GA? :-)

UXabre avatar Feb 14 '23 15:02 UXabre

Action required from @Azure/aks-pm

ghost avatar Mar 16 '23 19:03 ghost

Issue needing attention of @Azure/aks-leads

ghost avatar Apr 01 '23 00:04 ghost

Issue needing attention of @Azure/aks-leads

ghost avatar Apr 16 '23 00:04 ghost

Issue needing attention of @Azure/aks-leads

ghost avatar May 01 '23 06:05 ghost

Issue needing attention of @Azure/aks-leads

ghost avatar May 16 '23 06:05 ghost

Issue needing attention of @Azure/aks-leads

ghost avatar May 31 '23 12:05 ghost

Issue needing attention of @Azure/aks-leads

ghost avatar Jun 15 '23 18:06 ghost

Issue needing attention of @Azure/aks-leads

ghost avatar Jul 01 '23 00:07 ghost

Issue needing attention of @Azure/aks-leads

ghost avatar Jul 16 '23 00:07 ghost

Issue needing attention of @Azure/aks-leads

ghost avatar Jul 31 '23 00:07 ghost

This is un clear but we are prtty close to cilium support for dualstack.

paulgmiller avatar Dec 15 '23 22:12 paulgmiller

To be honest, I'm not married to calico and anything that can help me enforce network policies in a dual stack environment sounds good to me! If cillium supports this, then fine by me (any pointer to get me started with cillium in aks are more than appreciated)

UXabre avatar Feb 20 '24 09:02 UXabre

@UXabre cilium is likely to have ipv6 support very soon. I'll check with someone to get docs updated.

paulgmiller avatar Jul 08 '24 16:07 paulgmiller

This issue has been automatically marked as stale because it has not had any activity for 21 days. It will be closed if no further activity occurs within 7 days of this comment.

Ok, great, I'll see to check it out, would be good news! :-)

UXabre avatar Jul 30 '24 12:07 UXabre

This issue will now be closed because it hasn't had any activity for 7 days after stale. UXabre feel free to comment again on the next 7 days to reopen or open a new issue after that time if you still have a question/issue or suggestion.