To use the Apple APP , you must support IPV6 and HTTPS . Alibaba Cloud itself does not open IPV6 addresses. Therefore , the related configuration of IPV6 is required. I checked a lot of IPV6 configuration information, and finally chose to use HE for IPV6 settings. There are some problems encountered during this process to record them for remarks.
1. IPV6 Tunnel Broker settings
Register a user on HE 's Free IPV6 Tunnel Broker and go to https://tunnelbroker.net/ to create an IPV6 corresponding to an IPV4 address . As shown in the figure below, enter the open IPV4 address of the Alibaba Cloud server , select the IPV6 server of HE , and finally click " Create Tunnel " at the bottom to set the data.
The problem encountered here is that the firewall of the Alibaba Cloud server is turned on, and the following error occurs when HE performs IPV4 verification:
The solution is to set the IP address in the server firewall.
2. Follow the reference command of Tunnel Broker in HE to set IP6Tunnel on Alibaba Cloud server
Enter the commands line by line in PowerShell of the Windows 2012R2 server according to the command line in the above figure . After the command is executed, enter ipconfig /all to check the IPV6 address. Here, since the Alibaba Cloud server is in a private cloud, the IPV4 address in the second step is an open IPV4 address according to the command , which will cause the media status of IP6Tunnel to be the media disconnected state. Therefore, according to the content of the NOTE in the above figure , you need to change the IPV4 address of the command to the internal IP address of the server, such as 192.168.0.5 .
After the IP6Tunnel of HE is successfully set on the server, the result of ipconfig /all is as follows.
When doing command line processing in this step, the problems encountered are:
a. There are duplicate names on the IP6Tunnel network
This is because IP6Tunnel already exists and needs to be deleted. The delete command is as follows:
netsh interface ipv6 delete interface IP6Tunnel
netsh interface ipv6 reset all
3. Check the effect of server IPV6 address settings
Enter http://test-ipv6.com/index.html.zh_CN in the browser to check the IPV6 connection of the test server . The effect of successful IPV6 setting on the server is as shown in the figure below.
4. Configure the IP address of AAAA on DNS
5. IPV6 access verification test
Enter the domain name address corresponding to IPV6 in http://ipv6-test.com/validate.php to perform the verification test.
The following problems occurred while testing:
a. As shown in the figure below, when the firewall is turned on, only the AAAA DNS record verification is passed, and the other two verifications are not.
The way to solve the above problem is to make firewall settings. The settings are as follows:
b. As shown in the test results in a , the second and third tests are still not passed even if the firewall is not turned on.
The inspection found that the difference between this server and the test server that can pass the verification of IPV6 is that there is an additional " loopback " network in the network properties of ipconfig /all . Is this network setting causing the network abnormality ? So disable the network, and then test it, and find that the results can be obtained normally. So the loopback network is disabled.
c. After the IPV6 test verification corresponding to the Http address is passed, the https address verification is performed. It is supposed to be verified. However, it is still the test result in a , but the error message in the second step is different.
The solution to this problem is that there is no IPV6 address binding in the IIS settings. After binding the IPV6 address, the verification is successful. As shown in the figure below, set the IPV6 address for website binding in IIS .
6. IPV6 test results
