Technical Note: CSTN 00039: Enabling the IPv6 protocol in the CyOPs appliance

[Andy_G]

Description

This article provides you information about how you can enable the IPv6 protocol in the CyOPs™ appliance to access CyOPs™ over an IPv6 address. 

By default, IPv6 is disabled in the CyOPs™ appliance (version 5.0.0 or earlier). You require to execute the shell script attached with this article to enable IPv6.

Solution

Steps to execute the shell script

1. Login to your CyOPs™ terminal.
2. Type sudo su. 
3. Copy the enable_ipv6-v3.sh script, which is attached with the article. 
4. Execute the script using the following command:
   sh enable_ipv6-v3.sh

The script performs following tasks: 

1. Enables the IPv6 protocol. 
2. Configures the SSL certs for inter-service communication. 
3. Updates the CyOPs™component to use IPv6 protocol. 
4. Restarts CyOPs™services.
5. The script might also initiate reboot of systems based on the grub settings.

Notes:  

1. This script does not disable IPv4
2. Nginx is configured for both IPv4 and IPv6 
   1. Incase you want make nginx listen to only IPv6, then perform the following steps:
      1. Edit the /etc/nginx/conf.d/cyops-api.conf file as follows:
         Add listen [::]:443 ipv6only=on;
         Remove all other listen statements.
      2. Restart the nginx service using the following command:
         systemctl restart nginx