From e9b9102cf39d1e20f24b7bd54cbcd2a55940aee0 Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Tue, 12 Nov 2024 10:38:41 +0000
Subject: [PATCH] Blackhole unreachable Amazon IPv6 block on equinix machines

---
 roles/equinix-ams.rb | 5 ++++-
 roles/equinix-dub.rb | 5 ++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/roles/equinix-ams.rb b/roles/equinix-ams.rb
index d56d0540a..f421e3d39 100644
--- a/roles/equinix-ams.rb
+++ b/roles/equinix-ams.rb
@@ -21,7 +21,10 @@ default_attributes(
         },
         :inet6 => {
           :prefix => "64",
-          :gateway => "2001:470:1:fa1::1"
+          :gateway => "2001:470:1:fa1::1",
+          :routes => {
+            "2600:9000::/28" => { :type => "unreachable" }
+          }
         }
       }
     }
diff --git a/roles/equinix-dub.rb b/roles/equinix-dub.rb
index ccfe57645..929639a23 100644
--- a/roles/equinix-dub.rb
+++ b/roles/equinix-dub.rb
@@ -30,7 +30,10 @@ default_attributes(
         },
         :inet6 => {
           :prefix => "64",
-          :gateway => "2001:470:1:b3b::1"
+          :gateway => "2001:470:1:b3b::1",
+          :routes => {
+            "2600:9000::/28" => { :type => "unreachable" }
+          }
         }
       }
     }
-- 
2.39.5