[SOLVED] Completely Disabling IPv6 on Proxmox

MisterDeeds

Active Member
Nov 11, 2021
153
34
33
35
Dear all

I'm trying to completely disable IPv6 on my Proxmox system, but even after following the instructions, I am still seeing IPv6 addresses in the output of netstat. Here's what I've tried so far:

Code:
cat /etc/kernel/cmdline
root=ZFS=rpool/ROOT/pve-1 boot=zfs amd_iommu=on intel_iommu=on iommu=pt pcie_acs_override=downstream,multifunction ipv6.disable=1
root@PVEN01:~# sysctl --system
* Applying /usr/lib/sysctl.d/10-pve-ct-inotify-limits.conf ...
* Applying /usr/lib/sysctl.d/10-pve.conf ...
* Applying /etc/sysctl.d/30-ceph-osd.conf ...
* Applying /usr/lib/sysctl.d/50-pid-max.conf ...
* Applying /usr/lib/sysctl.d/99-protect-links.conf ...
* Applying /etc/sysctl.d/99-sysctl.conf ...
* Applying /etc/sysctl.d/disable-ipv6.conf ...
* Applying /usr/lib/sysctl.d/pve-firewall.conf ...
* Applying /etc/sysctl.d/swappiness.conf ...
* Applying /etc/sysctl.conf ...
fs.inotify.max_queued_events = 8388608
fs.inotify.max_user_instances = 65536
fs.inotify.max_user_watches = 4194304
vm.max_map_count = 262144
net.ipv4.neigh.default.gc_thresh3 = 8192
net.ipv6.neigh.default.gc_thresh3 = 8192
kernel.keys.maxkeys = 2000
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-arptables = 0
net.bridge.bridge-nf-filter-vlan-tagged = 0
net.ipv4.igmp_link_local_mcast_reports = 0
fs.aio-max-nr = 1048576
fs.aio-max-nr = 1048576
kernel.pid_max = 4194304
kernel.pid_max = 4194304
fs.protected_fifos = 1
fs.protected_hardlinks = 1
fs.protected_regular = 2
fs.protected_symlinks = 1
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
net.ipv4.conf.all.rp_filter = 2
vm.swappiness = 0
root@PVEN01:~# netstat -tulpen
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode      PID/Program name
tcp        0      0 127.0.0.1:85            0.0.0.0:*               LISTEN      0          217094     7222/pvedaemon
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      0          72723      7105/master
tcp        0      0 127.0.0.1:2616          0.0.0.0:*               LISTEN      110        130066     6480/staticd
tcp        0      0 127.0.0.1:2617          0.0.0.0:*               LISTEN      110        215060     6483/bfdd
tcp        0      0 127.0.0.1:2605          0.0.0.0:*               LISTEN      110        140317     6473/bgpd
tcp        0      0 127.0.0.1:2601          0.0.0.0:*               LISTEN      110        215054     6466/zebra
tcp        0      0 0.0.0.0:7860            0.0.0.0:*               LISTEN      1000       152599     7189/venv/bin/pytho
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      0          79893      6882/sshd: /usr/sbi
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      0          167937     1/init
tcp6       0      0 :::11434                :::*                    LISTEN      999        134173     10044/ollama
tcp6       0      0 :::8006                 :::*                    LISTEN      33         58382      7306/pveproxy
tcp6       0      0 :::3128                 :::*                    LISTEN      33         42006      7322/spiceproxy
tcp6       0      0 :::22                   :::*                    LISTEN      0          79895      6882/sshd: /usr/sbi
tcp6       0      0 :::111                  :::*                    LISTEN      0          125955     1/init
udp        0      0 0.0.0.0:111             0.0.0.0:*                           0          168961     1/init
udp        0      0 127.0.0.1:323           0.0.0.0:*                           0          44521      6926/chronyd
udp        0      0 0.0.0.0:3784            0.0.0.0:*                           110        189498     6483/bfdd
udp        0      0 0.0.0.0:4784            0.0.0.0:*                           110        189499     6483/bfdd
udp6       0      0 :::111                  :::*                                0          140291     1/init
udp6       0      0 ::1:323                 :::*                                0          44522      6926/chronyd
udp6       0      0 :::3784                 :::*                                110        189500     6483/bfdd
udp6       0      0 :::3785                 :::*                                110        189503     6483/bfdd
udp6       0      0 :::4784                 :::*                                110        189501     6483/bfdd
root@PVEN01:~#

Firewall: I also disabled the firewall completely via the GUI, to rule out any firewall-related interference.

However, when I check the network connections with netstat, I still see IPv6 addresses active.

Despite my attempts, I am still unable to fully disable IPv6. Could someone please guide me on what I might be missing or any additional steps I need to take?

Thanks in advance!
 
Last edited:
FYI, Proxmox Backup Server require ipv6.
Are you sure?

I have at least one PBS/PVE (installed in parallel on a dedicated node) which has definitely zero IPv6 capabilities.

This is all I did to achieve that:
Code:
~# cat /etc/sysctl.d/70-disable-ipv6.conf
net.ipv6.conf.all.disable_ipv6 = 1