How to setup Proxmox for IPv6 in my HomeNet?

[Willi_H]

Hi there,
I have with the help of the great tutorials here but also on the Internet and Youtube set up the following setup.

You can see here my home network based on IPv4, which then edits the DNS server of my web hoster through a small php script and cron and thus also realizes an own dynDNS. Because now the dark time of the year has begun, I have set in my head my connection and the HomeNet also with IPv6 to provide. Unfortunately, my provider gives me only a dynamic prefix with IPv6 /56. After now 1 week of searching and reading, I still have not managed to realize a connection. The appropriate IPv6 prefixes to /57 and 0x5 for VLAN-1, 0x6 for VLAN-2 and 0x7 for VLAN-3 are given to the devices, but an assignment by the DHCPv6 does not happen. But also a connection only with IPv6 to outside does not work.

Long story short question: Can you please tell me the settings of the proxmox to the above scheme? I know that also with OPNsense something could seem wrong. But I would like to understand independently of the troubleshooting once how you would do this.

This is the actual /etc/networks/interfaces:

auto lo
iface lo inet loopback

auto eth0
iface eth0 inet manual
#only WAN

auto eth1
iface eth1 inet manual

auto eth2
iface eth2 inet manual

auto bond0
iface bond0 inet manual
        bond-slaves eth1 eth2
        bond-miimon 100
        bond-mode balance-rr
#network bond

auto vmbr0
iface vmbr0 inet manual
        bridge-ports bond0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094
#one4all

auto vmbr100
iface vmbr100 inet manual
        bridge-ports eth0
        bridge-stp off
        bridge-fd 0
#WAN

auto vmbr0.1
iface vmbr0.1 inet static
        address 10.10.10.20/24
        gateway 10.10.10.1
#management over vlan1

I would be super grateful to you for this.

 

[encryptedserver]

My Proxmox gets the IPv6 from my Openwrt router using DHCPv6 and all the VMs also gets their global IPv6 addresses from the router. My VPN VM is IPv6 inbound only even though I have a public IPv4. Dynamic IPv6 does not matter since I only match the last static prefix in the router firewall and use the script to update the DynDNS hostname.

 

[Willi_H]

My Proxmox gets the IPv6 from my Openwrt router using DHCPv6 and all the VMs also gets their global IPv6 addresses from the router. My VPN VM is IPv6 inbound only even though I have a public IPv4. Dynamic IPv6 does not matter since I only match the last static prefix in the router firewall and use the script to update the DynDNS hostname.

Thanks for your input and it makes me feel positive that it should work.

I would still like to know what your configuration looks like in Proxmox. If possible also a short explanation why.

I noticed that Proxmox does not record the DHCP info correctly (see also thread). So the link local with fe80::x:x:x:x/64 of each interface is created, but the one given by the DHCP is not. Only when I use

dchlient -6 -v vmbr0.1

a correct IPv6 is "pulled".

Also to avoid misunderstandings. Jellifyn e.g. is reachable by IPv4 and the appropriate rules and settings in the nginx proxy from outside. Adguard and Homeassistant only internally, but on a fixed IP or via dns. I would also like to realize this with IPv6. And no, I do not want to use VPN for this.

 

[encryptedserver]

This is my interfaces file for Proxmox, it also changes the port 8006 to default 443 this way you don't have to type the port in the address bar.

auto lo
iface lo inet loopback

iface eth0 inet manual

auto vmbr0
allow-hotplug vmbr0
iface vmbr0 inet dhcp
    gateway 10.88.88.1
    bridge-ports eth0
    bridge-stp off
    bridge-fd 0
    post-up iptables -t nat -A PREROUTING -p tcp -d 10.88.88.11 --dport 443 -j REDIRECT --to-ports 8006

iface vmbr0 inet6 dhcp
    gateway fd88::1
    post-up ip6tables -t nat -A PREROUTING -p tcp -d fd88::11 --dport 443 -j REDIRECT --to-ports 8006

Finally don't forget to add net.ipv6.conf.vmbr0.accept_ra=2 to your /etc/sysctl.conf file and reboot ProxMox.

Dont forget to add this fix https://forum.proxmox.com/threads/l...rating-new-ipv6-duid-for-every-reboot.129429/

Now your devices should be able to get an IPv4 / IPv6 address from your router.

I use Debian for all my servers and if you are looking to setup your server and router firewall with dynamic IPv6 prefix you can use the guide here.