Hetzner networking configuration once again

[Kacper]

Hello everyone. I'm looking for solution for my networking configuration and can't get it work.

What do I have:
- One public IPv4 IP
- IPv6 with /64

What do I need:
- main PVE server working on IPv4 IP
- all containers working with IPv6.

Each container should automatically obtain IPv6 which would be external and connected to internet.

My current config which doesn't work at all:

source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback
iface lo inet6 loopback

auto enp4s0
iface enp4s0 inet manual
iface enp4s0 inet6 manual

auto vmbr0
iface vmbr0 inet static
    address  <main IPv4>
    netmask  255.255.255.225
    gateway  <IPv4 gateway>
    pointopoint <IPv4 gateway>
    broadcast <IPv4 broadcast>
    bridge_ports enp4s0
    bridge_stp off
    bridge_fd 0

iface vmbr0 inet6 static
    address  <main IPv6 address>::2
    netmask  64
    gateway  <main IPv6 gateway>

auto vmbr1
iface vmbr1 inet static
        address  10.10.10.1
        netmask  255.255.255.0
        bridge_ports none
        bridge_stp off
        bridge_fd 0

Summarize:
- ipv6 should be a direct internet access for lvm/kvm (vmbr0)
- ipv4 should access only host (with port redirection possibility to machines)
- machines should sees each other via vmbr1

Questions:
- meybe you see what's wrong with above config?
- should main IPv6 address contains ::2 ?


Thank you for all help and sugestions

 

[Richard]

Hello everyone. I'm looking for solution for my networking configuration and can't get it work.

What do I have:
- One public IPv4 IP
- IPv6 with /64

What do I need:
- main PVE server working on IPv4 IP
- all containers working with IPv6.

Each container should automatically obtain IPv6 which would be external and connected to internet.

The main question is if your provider's router allows "unknown" (i.e. not part of his Hardware equipment) MAC addresses. If not (probable) the described concept will not work. The Proxmox host has to route the connections instead.