OVHcloud Network Status
Current status
Legend
- Operational
- Degraded performance
- Partial Outage
- Major Outage
- Under maintenance
FS#8709 — IP verify
Scheduled Maintenance
Report for Network & Infrastructure
Completed
To improve the network security and avoid the spoofs in the network (which are blocked by ACLs on the switches, but we never know) we added the commands \"ip verify\" on all dedicated servers infrastructure.
The router verifies that the packets coming from the server via vlan have the best root via the same vlan.
This prevents spoof problems that can be generated by vracks: the packet comes to the server via the vrack and goes out through the standard network.
This configuration is no longer possible.
The packet incoming by vrack must outcome by vrack.
You must use the iproute2 that manages this kind of routing:
Considering that the server IP is 123.123.123.123 IN THE VRACK
Considering that the gateway of the vrack is 123.123.123.254
Considering that your vlan number is 2000
ip rule add from 123.123.123.123/32 table 666
ip route add default via 123.123.123.254 dev eth0.2000 table 666
Please check this guide for further details :
http://help.ovh.co.uk/RipeVrack
Update(s):
Date: 2013-06-19 07:39:29 UTC
We had a problem with the DHCP. We have found a workaround
and we are in process of resolving it.
Date: 2013-06-14 15:00:47 UTC
Beauharnois HG:
bhs-s3-6k and bhs-s4-6k done
Date: 2013-06-14 14:59:42 UTC
bhs-1/2-6k done
Date: 2013-06-10 12:40:42 UTC
all done in RBX, GRA and SBG.
BHS still to go, collocation and mpCC.
Date: 2013-06-10 12:38:03 UTC
Strasbourg HG :
sbg-s3-6k and sbg-s4-6k done
Date: 2013-06-10 12:37:48 UTC
Gravelines :
gra-3a-6k and gra-3b-6k done
Date: 2013-06-10 12:37:34 UTC
s19 done
Date: 2013-06-10 12:37:25 UTC
s18 done
Date: 2013-06-10 11:30:10 UTC
s1 done
s2 in progress
Date: 2013-06-10 11:28:22 UTC
Now vRack:
s1/s2
Date: 2013-06-10 11:22:18 UTC
sbg-3a/b-6k done
Date: 2013-06-10 10:26:04 UTC
s50/s51 done
Date: 2013-06-10 09:57:00 UTC
s5/s6 done
Date: 2013-06-10 09:56:38 UTC
Done. We are saving the config. and applying the config. patch.
Date: 2013-06-10 09:55:57 UTC
All the ACLs of all the pCCs will be removed first.
Date: 2013-06-10 09:54:58 UTC
The configuration is being applied on the pCC.
The router verifies that the packets coming from the server via vlan have the best root via the same vlan.
This prevents spoof problems that can be generated by vracks: the packet comes to the server via the vrack and goes out through the standard network.
This configuration is no longer possible.
The packet incoming by vrack must outcome by vrack.
You must use the iproute2 that manages this kind of routing:
Considering that the server IP is 123.123.123.123 IN THE VRACK
Considering that the gateway of the vrack is 123.123.123.254
Considering that your vlan number is 2000
ip rule add from 123.123.123.123/32 table 666
ip route add default via 123.123.123.254 dev eth0.2000 table 666
Please check this guide for further details :
http://help.ovh.co.uk/RipeVrack
Update(s):
Date: 2013-06-19 07:39:29 UTC
We had a problem with the DHCP. We have found a workaround
and we are in process of resolving it.
Date: 2013-06-14 15:00:47 UTC
Beauharnois HG:
bhs-s3-6k and bhs-s4-6k done
Date: 2013-06-14 14:59:42 UTC
bhs-1/2-6k done
Date: 2013-06-10 12:40:42 UTC
all done in RBX, GRA and SBG.
BHS still to go, collocation and mpCC.
Date: 2013-06-10 12:38:03 UTC
Strasbourg HG :
sbg-s3-6k and sbg-s4-6k done
Date: 2013-06-10 12:37:48 UTC
Gravelines :
gra-3a-6k and gra-3b-6k done
Date: 2013-06-10 12:37:34 UTC
s19 done
Date: 2013-06-10 12:37:25 UTC
s18 done
Date: 2013-06-10 11:30:10 UTC
s1 done
s2 in progress
Date: 2013-06-10 11:28:22 UTC
Now vRack:
s1/s2
Date: 2013-06-10 11:22:18 UTC
sbg-3a/b-6k done
Date: 2013-06-10 10:26:04 UTC
s50/s51 done
Date: 2013-06-10 09:57:00 UTC
s5/s6 done
Date: 2013-06-10 09:56:38 UTC
Done. We are saving the config. and applying the config. patch.
Date: 2013-06-10 09:55:57 UTC
All the ACLs of all the pCCs will be removed first.
Date: 2013-06-10 09:54:58 UTC
The configuration is being applied on the pCC.