ungleich-public/ungleich-staticcms
6
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Merge branch 'master' of code.ungleich.ch:ungleich-public/ungleich-staticcms

Browse source
This commit is contained in:
sanghee 2021-11-22 16:13:57 +01:00
commit a62ea7c395
3 changed files with 81 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
assets/u/image/ipv6-to-ipv4-proxy.png Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 88 KiB

57
content/u/blog/DRAFT-kubernetes-based-ipv6-ipv4-proxies/contents.lr Normal file
View file

@ -0,0 +1,57 @@
title: Introducting Kubernetes based IPv4 to IPv6 proxies
---
pub_date: 2021-11-22
---
author: ungleich
---
twitter_handle: ungleich
---
_hidden: no
---
_discoverable: no
---
abstract:
How to proxy from IPv4 to IPv6 in an IPv6 only kubernetes cluster.
---
body:
## The crazy project: IPv6 based IPv4 proxies in Kubernetes
If you know ungleich, you know that we always push the limits of what
is possible. Today we want to push the barrier of "where can
IPv4-to-IPv6 proxies live" a bit further. Let's see how that is going
to look like!
## IPv4-to-IPv6 proxies in general
Before going into the details, let's see how and why we use
IPv4-to-IPv6 proxies in general:
![](/u/image/ipv6-to-ipv4-proxy.png)
The basic idea is that IPv6 only services are made reachable via
IPv4-to-IPv6 proxies towards the IPv4 world. So far we are offering
this based on standard virtual machines. You can checkout
[our previous tech
talk](/u/blog/ungleich-tech-talk-2-accessing-ipv4-only-devices-via-ipv6/)
for details on how this works.
Let's try to dial things up a few notches, shall we?
## Moving the IPv4-to-IPv6 proxy into kubernetes
You are probably aware that at ungleich we are moving our workload
from [cdist](https://cdi.st) + virtual machine automated workloads
towards Kubernetes. At ungleich we are using
[haproxy](http://www.haproxy.org/) as a basis for our IPv4-to-IPv6
proxies. Moving this into kubernetes
## Other solution?
As you can see, mixing the dynamic IP generation and coupling it with
static DNS entries for IPv4 resolution is not the easiest tasks. If
you have a smart idea on how to solve this without manually creating
entries for each and every service,
[give us a shout!](/u/contact)

29
content/u/offers/dedicated-december-2021/contents.lr
View file

@ -40,10 +40,11 @@ dedicated servers hosted in Data Center Light:
## The offer in detail
The offer is valid for all orders received between 2021-12-01 to
2021-12-31. The monthly price is 250 CHF. The price
2021-12-31. The monthly price is 250 CHF. The price stays the same
until the end of the contract.
On order, you get access to an empty server without operating system
or Alpine Linux installed on the first SSD (your choice).
or booted into Alpine Linux via USB stick.
You have remote access (keyboard/mouse/video) via IPMIview (access
protected using Wireguard VPN).
@ -56,7 +57,14 @@ software raid.
The supplied power is 100% renewable hydro power.
The server includes 15TB traffic per month. Additional 30TB traffic
can be added for 75 CHF/month.
can be added for 75 CHF/month. The server is located in an *IPv6 only*
network. It can reach the IPv4 Internet via outgoing NAT64. If you
need **incoming** IPv4 connectivity, we offer dedicated public IPv4
addresses for 9 CHF/month. They are mapped via NAT64-SIIT
to an IPv6 address of your choice.
The default setup fee of 50 CHF for dedicated servers is removed for
this offers.
The offer is limited to 10 dedicated servers on a first come, first
serve basis.
@ -77,6 +85,17 @@ As this is real hardware, hardware failures can occur and they will be
repaired without any extra cost. It is however your responsibility to
inform the Data Center Light team about issues.
## How can I order?
## How can I start / how can order?
The order link will be placed here when the offer starts.
You can order at the [Data Center Light / Dedicated Server
1](https://datacenterlight.ch/product/dedicated-server-1/) page.
After the order is confirmed you will get access to the server via
wireguard and IPMIView with 3 working days. We will need a public
wireguard key for you to grant you access to your server. You can
already install
[IPMIView](https://www.thomas-krenn.com/en/download/frame.only_content/hide_filter.1/hide_filter_serial.1/product.3133.html)
on your machine.
If you opted for Alpine Linux on a USB stick, you can send us a public
ssh key for direct access.