forked from docs/doc-exports
Qin Ying, Fan
f906a2fa67
Reviewed-by: Hajba, László Antal <laszlo-antal.hajba@t-systems.com> Co-authored-by: Qin Ying, Fan <fanqinying@huawei.com> Co-committed-by: Qin Ying, Fan <fanqinying@huawei.com>
17 lines
4.7 KiB
HTML
17 lines
4.7 KiB
HTML
<a name="faq_connect_0002"></a><a name="faq_connect_0002"></a>
|
|
|
|
<h1 class="topictitle1">How Does an IPv6 Client on the Internet Access the ECS That Has an EIP Bound in a VPC?</h1>
|
|
<div id="body8662426"><p id="faq_connect_0002__en-us_topic_0118499049_p16871545121714">Users with IPv6 clients can call APIs to assign IPv6 <span id="faq_connect_0002__en-us_topic_0118499049_text424554671113"></span><span id="faq_connect_0002__en-us_topic_0118499049_text3595144914434">EIP</span>s and bind the <span id="faq_connect_0002__en-us_topic_0118499049_text16956047131111"></span><span id="faq_connect_0002__en-us_topic_0118499049_text095644713113">EIP</span>s to <span id="faq_connect_0002__en-us_topic_0118499049_text1914012643514">ECS</span>s. Then, the users can use the <span id="faq_connect_0002__en-us_topic_0118499049_text672394918110"></span><span id="faq_connect_0002__en-us_topic_0118499049_text972354941119">EIP</span> to access the <span id="faq_connect_0002__en-us_topic_0118499049_text974117306359">ECS</span>s in the VPC over the Internet.</p>
|
|
<p id="faq_connect_0002__en-us_topic_0118499049_p1578175220178">For details, see <strong id="faq_connect_0002__en-us_topic_0118499049_b842352706162020">Floating IP Address (IPv6)</strong> > <strong id="faq_connect_0002__en-us_topic_0118499049_b842352706162039">Creating a Floating IP Address</strong> in the <a href="https://docs.otc.t-systems.com/en-us/api/vpc/en-us_topic_0050065465.html" target="_blank" rel="noopener noreferrer">Virtual Private Cloud API Reference</a>. The NAT64 gateway in the data center will convert the IPv6 EIP to the IPv4 address. (The last 32 bits of the obtained IPv6 <span id="faq_connect_0002__en-us_topic_0118499049_text20626689519"></span><span id="faq_connect_0002__en-us_topic_0118499049_text1626982513">EIP</span> is the IPv4 EIP.)</p>
|
|
<p id="faq_connect_0002__en-us_topic_0118499049_p59191342151719">After users who use IPv6 clients bind an IPv6 EIP to an ECS, the data flow is shown in <a href="#faq_connect_0002__en-us_topic_0118499049_fig1038524023539">Figure 1</a>.</p>
|
|
<div class="fignone" id="faq_connect_0002__en-us_topic_0118499049_fig1038524023539"><a name="faq_connect_0002__en-us_topic_0118499049_fig1038524023539"></a><a name="en-us_topic_0118499049_fig1038524023539"></a><span class="figcap"><b>Figure 1 </b>IPv6 data flow</span><br><span><img id="faq_connect_0002__en-us_topic_0118499049_image3589809323539" src="en-us_image_0118499144.png"></span></div>
|
|
<p id="faq_connect_0002__en-us_topic_0118499049_p1139051214430">The IPv6 service has the following restrictions:</p>
|
|
<ul id="faq_connect_0002__en-us_topic_0118499049_ul339071210432"><li id="faq_connect_0002__en-us_topic_0118499049_li4390312184312">ECSs use IPv4 addresses and cannot directly access public IPv6 addresses. Therefore, only public IPv6 addresses can access ECSs. That means ECSs cannot use IPv4 EIPs that are converted from IPv6 address to access the Internet. To enable the ECSs to access the Internet, you must bind IPv4 EIPs to them.</li><li id="faq_connect_0002__en-us_topic_0118499049_li3390012194314">Data packets from an IPv6 network on the Internet are converted to IPv4 packets on the NAT64 gateway. Both the source IP address and port number will be converted. (The source IP address is invisible.)</li><li id="faq_connect_0002__en-us_topic_0118499049_li13901812114313">The IPv6 client can access only the EIP and the ELB service.</li><li id="faq_connect_0002__en-us_topic_0118499049_li1639061244318">Only one <span id="faq_connect_0002__en-us_topic_0118499049_text13966541657"></span><span id="faq_connect_0002__en-us_topic_0118499049_text6966541154">EIP</span> (IPv6 or IPv4) can be bound to each NIC.</li><li id="faq_connect_0002__en-us_topic_0118499049_li72872374106">You can only make API calls to use an <span id="faq_connect_0002__en-us_topic_0118499049_text1855320261374"></span><span id="faq_connect_0002__en-us_topic_0118499049_text55534261071">EIP</span> to obtain the IPv6 address. The management console displays only IPv4 addresses.</li><li id="faq_connect_0002__en-us_topic_0118499049_li824369694417">The security group function does not apply to IPv6 clients.</li><li id="faq_connect_0002__en-us_topic_0118499049_li3211078494758">Resources in internal networks on the cloud can access IPv4 addresses converted by NAT64 gateway.</li><li id="faq_connect_0002__en-us_topic_0118499049_li255331719476">The public cloud does not provide IP spoofing protection for IPv6 traffic from the Internet.</li><li id="faq_connect_0002__en-us_topic_0118499049_li14659141311271">Currently, the Anti-DDoS service does not protect IPv6 addresses.</li></ul>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="faq_connect.html">Connectivity</a></div>
|
|
</div>
|
|
</div>
|
|
|