IPv6 Firewall Support planed?

[nixmomo]

Hi there,

is it planed to support IPv6 in the firewall? If yes, when would it be available? Or is it available and i cant see it?
At moment we have to run damnit iptables on every machine too

 

[dietmar]

What do you miss?

 

[Rhinox]

Maybe you could switch to nftables. Seems to be stable, and Debian-devs recommend to use it...

 

[dietmar]

AFAIk there are still missing features in nftables ...

 

[Rhinox]

Not sure what features you have in mind, but there are definitely areas where nftables surpass iptables (simplified dual-stack config, update speed, multiple targets, native set/map, etc)...

 

[nixmomo]

What do you miss?

Support for hostnames in general. Proxmox firewall didn't support hostnames from dynamic DNS Services as example.

 

[aderumier]

Support for hostnames in general. Proxmox firewall didn't support hostnames from dynamic DNS Services as example.

I think it can be done, using aliases, and a cron script which run each minute, do a dns lookup and update the ip of the alias.

(BTW, IPV6 firewall is fully supported in proxmox since v4)