I do not know whether because of upgrade Sino-US trade disputes, most recently consulting solutions for IPv6 users suddenly more up.
Because these customers demand high degree of agreement:
- Both traditional industries and government clients.
- Before the end of the site to provide access to the IPv6 client support.
- Not affect access existing IPv4 clients.
- IPv4 and IPv6 clients with access to the same domain sites, and display content to be consistent.
- IPv6 user access to be recorded and tracked.
- To be able to perceive IPv6 client access experience.
In response to these needs, informed customers would choose to take advantage of cloud services to solve the problem, which led to the recent surge in advisory capacity. And these customers through the exchange, I summed up the two solutions, customers have similar needs for reference selection.
Non-compatible program Ali cloud servers
Whether your server is not on Ali cloud can choose this solution, the solution can support next line of servers on the IDC, or other cloud platforms, of course, if the server in the cloud Ali is naturally better supported.
Solution consists of the following products:
- Ali cloud resolution DNS, IPv4 and IPv6 addresses with the same domain name.
- Ali cloud IPv6 transition services, while retaining the original site IPv4 address, an IPv6 address for the site to increase to achieve simultaneous access.
- Ali Cloud Web Application Firewall Enterprise Edition, providing at the same time improving site security for site access logging IPv6 users, why must the Enterprise Edition, because Ali cloud just above the Enterprise Edition Web application firewall only support IPv6, of course, local tyrants can select Ultimate.
- Ali cloud ARMS front-end monitoring, providing experience and perception record for IPv6 users, the site can not be opened when there is, slow loading, etc., may perceive ARMS front-end monitoring and alarm, and afterwards also provide analysis and backtracking.
Because the use of Web Application Firewall Enterprise Edition, except that this solution is expensive, no other disadvantages, but if your site is already missing a Web application firewall, then it is another matter.
Only Ali cloud server support program
If you do not need a Web application firewall, you can also choose a cheaper solution, but only if your server within the following geographical scope Ali cloud:
- 2 North China, Beijing
- 1 East China, Hangzhou
- 2 East China, Shanghai
- 1 South China, Shenzhen
IPv6 solutions Ali cloud server involves the following products:
- Ali cloud resolution DNS, IPv4 and IPv6 addresses with the same domain name.
- SLB IPv6 example, can be provided by IPv6 example SLB for the same area of the IPv4 server additional IPv6 address and access to the entrance, currently SLB IPv6 instance on Ali cloud are available in a usable area of some areas, and SLB instance must be a performance guarantee type, but rest assured, I simply type in the type of performance guarantees instances of no additional costs instance, and the performance for the average organization's website quite enough. To be able to track the IPv6 address of the client, the SLB must http / https application layer load balancing, so that the client's address can be embedded in the HTTP header, and then can be parsed by the server on the appropriate configuration client address.
- Ali cloud ARMS front-end monitoring, providing experience and perception record for IPv6 users, the site can not be opened when there is, slow loading, etc., may perceive ARMS front-end monitoring and alarm, and afterwards also provide analysis and backtracking.
The cost of this solution is worse than the previous one solution more than ten times, uh ...... no, it seems to be almost a hundred times, and this perhaps reflects the value of the Ali cloud from the other side of it.
Here are some screenshots processes and operations, for reference:
Ali cloud DNS service supports the same domain name resolves to IPv6 and IPv4 addresses:
Examples of IPv6 SLB:
IPv6 address of the IPv6 example is: 2400: 3200: 1500 :: 30
From the server logs you can see IPv6 address of the client: the
front of each line is SLB intranet IPv4 addresses, because SLB is a cluster, so the address is always changing, SLB IPv6 instances to access the same geographical IPv4 server through this address Finally, a client is a real IPv6 address, which is recorded in the HTTP header through the X-Forwarded-For field.
100.121.135.28 - - [25/May/2019:15:21:31 +0800] "GET / HTTP/1.1" 200 3488 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Mobile/15E148 Safari/604.1””2409:8915:2402:7944:8572:72db:45ae:8444”
100.121.134.245 - - [25/May/2019:15:21:45 +0800] "GET / HTTP/1.1" 200 3488 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Mobile/15E148 Safari/604.1””2409:8915:2402:7944:8572:72db:45ae:8444”
100.121.134.254 - - [25/May/2019:15:21:46 +0800] "GET / HTTP/1.1" 200 3488 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Mobile/15E148 Safari/604.1””2409:8915:2402:7944:8572:72db:45ae:8444”
100.121.134.246 - - [25/May/2019:15:21:48 +0800] "GET / HTTP/1.1" 200 3488 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Mobile/15E148 Safari/604.1””2409:8915:2402:7944:8572:72db:45ae:8444”
100.121.134.249 - - [25/May/2019:15:21:48 +0800] "GET / HTTP/1.1" 200 3488 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Mobile/15E148 Safari/604.1””2409:8915:2402:7944:8572:72db:45ae:8444”
100.121.134.246 - - [25/May/2019:15:21:49 +0800] "GET / HTTP/1.1" 200 3488 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Mobile/15E148 Safari/604.1””2409:8915:2402:7944:8572:72db:45ae:8444”