Project

General

Profile

Common operations on IPv4-to-IPv6-Proxy » History » Version 4

Nico Schottelius, 05/05/2020 12:10 AM

1 1 Timothée Floure
h1. Common operations on IPv4-to-IPv6-Proxy
2
3
{{toc}}
4
5
*%{color:red}This document only concerns operations by ungleich staff. See [[How to use the IPv4-to-IPv6-Proxy]] page for user documentation.%*
6
7
h2. Status
8
9
This document is *IN PRODUCTION*. 
10
11
h2. HTTP / HTTPS proxying.
12
13
* It's configured by cdist, type @__ungleich_haproxy@
14
* To add a domain, edit manifest/ungleich
15 4 Nico Schottelius
** Find *either* ipv6-proxy.place5.ungleich.ch *OR* ipv6-proxy.place6.ungleich.ch
16 1 Timothée Floure
** Verify that the domain has an AAAA entry
17
** Add the domain using the "--v4proxy DOMAIN" parameter
18
** Commit in git, push
19 4 Nico Schottelius
* Run cdist: (either of them)
20
** @cdist config ipv6-proxy.place5.ungleich.ch@
21
** @cdist config ipv6-proxy.place6.ungleich.ch@
22 1 Timothée Floure
23
h3. Troubleshooting
24
25
If the customer domain does not exist (anymore), haproxy will refuse to reload. In this case the customer domain has to be removed and the customer to be notified.
26 2 Timothée Floure
27
h2. SMTP proxying (experimental)
28
29
* Configured by cdist, type @__ungleich_smtp_proxy@.
30
* To add an entry, edit @manifest/ungleich@.
31
** Find configuration entry for @ipv6-mx.ungleich.ch@.
32 3 Timothée Floure
** Add @--proxy domain.tld@ entry to the @__ungleich_smtp_proxy@ type. Make sure that @ipv6-mx.ungleich.ch@ is not the primary MX of @domain.tld@:t we will have routing loops if it is the case.
33 2 Timothée Floure
** Commit, push.
34
* Deploy with @cdist config -v ipv6-mx.ungleich.ch@.
35
36
h3. Troubleshooting
37
38
Postfix's logs can be found in @/var/log/messages@ on @ipv6-mx.ungleich.ch@.