ipv6 on new node

blucobalt

New Member
Jun 2, 2023
15
1
3
Hi,
I have a vps in the cloud that I'm trying to install PVE on. It comes with 2 ipv4s (each having its own subnet/gateway) and 1 ipv6 /64, on one interface. I have my network setup such that ipv4 works through nat for guests, but I am having trouble getting ipv6 to work without nat.

Code:
auto lo
iface lo inet loopback

auto enp3s0
iface enp3s0 inet static
        address [ip-1]/22
        gateway [gw-1]

iface enp3s0 inet static
        address [ip-2]/22
        gateway [gw-2]

iface enp3s0 inet6 manual
        address [ipv6-prefix]::1/128
        gateway [ipv6-gw]::1

auto vmbr0
iface vmbr0 inet static
        address 10.0.0.1/24
        bridge-ports none
        bridge-stp off
        bridge-fd 0

        post-up echo 1 > /proc/sys/net/ipv4/ip_forward


        post-up iptables -t nat -A POSTROUTING -s 10.0.0.2/32 -o enp3s0 -j SNAT --to-source [ip-2]


        post-up iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -o enp3s0 -j SNAT --to-source [ip-1]


        post-down iptables -t nat -D POSTROUTING -s 10.0.0.2/32 -o eth0 -j SNAT --to-source [ip-2]
        post-down iptables -t nat -D POSTROUTING -s 10.0.0.0/24 -o eth0 -j SNAT --to-source [ip-1]
        # port forward rules
        ...

iface vmbr0 inet6 static
        address [ipv6-prefix]::1/64
        bridge-ports none
        bridge-stp off
        bridge-fd 0

        post-up echo 1 > /proc/sys/net/ipv6/conf/all/forwarding
The guests and host can ping each other over ipv6, but only the host can reach the outside internet. How can I set this up so that the guests can reach the outside internet and the outside internet can reach the guests, over ipv6?