[SOLVED] Completely Disabling IPv6 on Proxmox

MisterDeeds

Well-Known Member
Nov 11, 2021
156
36
48
36
Dear all

I'm trying to completely disable IPv6 on my Proxmox system, but even after following the instructions, I am still seeing IPv6 addresses in the output of netstat. Here's what I've tried so far:

Code:
cat /etc/kernel/cmdline
root=ZFS=rpool/ROOT/pve-1 boot=zfs amd_iommu=on intel_iommu=on iommu=pt pcie_acs_override=downstream,multifunction ipv6.disable=1
root@PVEN01:~# sysctl --system
* Applying /usr/lib/sysctl.d/10-pve-ct-inotify-limits.conf ...
* Applying /usr/lib/sysctl.d/10-pve.conf ...
* Applying /etc/sysctl.d/30-ceph-osd.conf ...
* Applying /usr/lib/sysctl.d/50-pid-max.conf ...
* Applying /usr/lib/sysctl.d/99-protect-links.conf ...
* Applying /etc/sysctl.d/99-sysctl.conf ...
* Applying /etc/sysctl.d/disable-ipv6.conf ...
* Applying /usr/lib/sysctl.d/pve-firewall.conf ...
* Applying /etc/sysctl.d/swappiness.conf ...
* Applying /etc/sysctl.conf ...
fs.inotify.max_queued_events = 8388608
fs.inotify.max_user_instances = 65536
fs.inotify.max_user_watches = 4194304
vm.max_map_count = 262144
net.ipv4.neigh.default.gc_thresh3 = 8192
net.ipv6.neigh.default.gc_thresh3 = 8192
kernel.keys.maxkeys = 2000
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-arptables = 0
net.bridge.bridge-nf-filter-vlan-tagged = 0
net.ipv4.igmp_link_local_mcast_reports = 0
fs.aio-max-nr = 1048576
fs.aio-max-nr = 1048576
kernel.pid_max = 4194304
kernel.pid_max = 4194304
fs.protected_fifos = 1
fs.protected_hardlinks = 1
fs.protected_regular = 2
fs.protected_symlinks = 1
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
net.ipv4.conf.all.rp_filter = 2
vm.swappiness = 0
root@PVEN01:~# netstat -tulpen
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode      PID/Program name
tcp        0      0 127.0.0.1:85            0.0.0.0:*               LISTEN      0          217094     7222/pvedaemon
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      0          72723      7105/master
tcp        0      0 127.0.0.1:2616          0.0.0.0:*               LISTEN      110        130066     6480/staticd
tcp        0      0 127.0.0.1:2617          0.0.0.0:*               LISTEN      110        215060     6483/bfdd
tcp        0      0 127.0.0.1:2605          0.0.0.0:*               LISTEN      110        140317     6473/bgpd
tcp        0      0 127.0.0.1:2601          0.0.0.0:*               LISTEN      110        215054     6466/zebra
tcp        0      0 0.0.0.0:7860            0.0.0.0:*               LISTEN      1000       152599     7189/venv/bin/pytho
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      0          79893      6882/sshd: /usr/sbi
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      0          167937     1/init
tcp6       0      0 :::11434                :::*                    LISTEN      999        134173     10044/ollama
tcp6       0      0 :::8006                 :::*                    LISTEN      33         58382      7306/pveproxy
tcp6       0      0 :::3128                 :::*                    LISTEN      33         42006      7322/spiceproxy
tcp6       0      0 :::22                   :::*                    LISTEN      0          79895      6882/sshd: /usr/sbi
tcp6       0      0 :::111                  :::*                    LISTEN      0          125955     1/init
udp        0      0 0.0.0.0:111             0.0.0.0:*                           0          168961     1/init
udp        0      0 127.0.0.1:323           0.0.0.0:*                           0          44521      6926/chronyd
udp        0      0 0.0.0.0:3784            0.0.0.0:*                           110        189498     6483/bfdd
udp        0      0 0.0.0.0:4784            0.0.0.0:*                           110        189499     6483/bfdd
udp6       0      0 :::111                  :::*                                0          140291     1/init
udp6       0      0 ::1:323                 :::*                                0          44522      6926/chronyd
udp6       0      0 :::3784                 :::*                                110        189500     6483/bfdd
udp6       0      0 :::3785                 :::*                                110        189503     6483/bfdd
udp6       0      0 :::4784                 :::*                                110        189501     6483/bfdd
root@PVEN01:~#

Firewall: I also disabled the firewall completely via the GUI, to rule out any firewall-related interference.

However, when I check the network connections with netstat, I still see IPv6 addresses active.

Despite my attempts, I am still unable to fully disable IPv6. Could someone please guide me on what I might be missing or any additional steps I need to take?

Thanks in advance!
 
Last edited:
FYI, Proxmox Backup Server require ipv6.
Are you sure?

I have at least one PBS/PVE (installed in parallel on a dedicated node) which has definitely zero IPv6 capabilities.

This is all I did to achieve that:
Code:
~# cat /etc/sysctl.d/70-disable-ipv6.conf
net.ipv6.conf.all.disable_ipv6 = 1