[PVE-User] PX4 and IPv6

[Guillaume]

It is not a firewall issue, stopping it doesn't help.

Le 18/08/2016 à 09:59, Guillaume a écrit :
> And to add to the strangeness, i noticed that my first container 
> doesn't have the issue at all, but all the other ones have it.
>
> Network configuration, settings and firewall rules are the same for 
> all containers.
>
>
> Le 17/08/2016 à 18:00, Guillaume a écrit :
>> It the same for http/https access.
>>
>> I can access my websites on ipv6 from my host (tested with lynx on 
>> http and https), but not from the outside.
>>
>> No issues with ipv4.
>>
>>
>> Le 17/08/2016 à 17:20, Guillaume a écrit :
>>> Hello,
>>>
>>> I have an issue with ipv6.
>>>
>>> My host and my lxc container all have an ipv6 address and are able 
>>> to ping worldwide ipv6 addresses (e.g. ping6 ipv6.google.com works).
>>> My host can ping my containers ipv6 address.
>>> I can't ping my ipv6 addresses from the outside, except for the host 
>>> ipv6 address.
>>>
>>> Here's my firewall configuration :
>>>
>>> * cluster.fw
>>>
>>> [OPTIONS]
>>> enable: 1
>>>
>>> [RULES]
>>> IN Ping(ACCEPT)
>>> IN NeighborDiscovery(ACCEPT)
>>>
>>> [group web]
>>> IN HTTPS(ACCEPT)
>>> IN HTTP(ACCEPT)
>>>
>>>
>>> * 102.fw
>>>
>>> [OPTIONS]
>>> enable: 1
>>>
>>> [RULES]
>>> IN Ping(ACCEPT)
>>> IN NeighborDiscovery(ACCEPT)
>>> GROUP web
>>>
>>>
>>> # sysctl -p
>>> net.ipv6.conf.eth0.disable_ipv6 = 0
>>> net.ipv6.conf.eth1.disable_ipv6 = 0
>>> net.ipv6.conf.all.forwarding = 1
>>> net.ipv6.conf.all.autoconf = 0
>>> net.ipv6.conf.default.autoconf = 0
>>> net.ipv6.conf.vmbr0.autoconf = 0
>>> net.ipv6.conf.all.accept_ra = 0
>>> net.ipv6.conf.default.accept_ra = 0
>>> net.ipv6.conf.vmbr0.accept_ra = 0
>>> net.ipv6.conf.vmbr0.accept_ra = 0
>>> net.ipv6.conf.vmbr0.autoconf = 0
>>> fs.inotify.max_user_instances = 1024
>>>
>>>
>>> * Host ipv6 interface :
>>> iface vmbr0 inet6 static
>>>          address  2001:41d0:1007:1c79::
>>>          netmask  64
>>>          post-up /sbin/ip -f inet6 route add 
>>> 2001:41d0:1007:1cff:ff:ff:ff:ff dev vmbr0
>>>          post-up /sbin/ip -f inet6 route add default via 
>>> 2001:41d0:1007:1cff:ff:ff:ff:ff
>>>          pre-down /sbin/ip -f inet6 route del default via 
>>> 2001:41d0:1007:1cff:ff:ff:ff:ff
>>>          pre-down /sbin/ip -f inet6 route del 
>>> 2001:41d0:1007:1cff:ff:ff:ff:ff dev vmbr0
>>>
>>> * Container ipv6 interface :
>>> iface eth0 inet6 static
>>>          address 2001:41d0:1007:1c79::102
>>>          netmask 64
>>> # --- BEGIN PVE ---
>>>          post-up ip route add 2001:41d0:1007:1cff:ff:ff:ff:ff dev eth0
>>>          post-up ip route add default via 
>>> 2001:41d0:1007:1cff:ff:ff:ff:ff dev eth0
>>>          pre-down ip route del default via 
>>> 2001:41d0:1007:1cff:ff:ff:ff:ff dev eth0
>>>          pre-down ip route del 2001:41d0:1007:1cff:ff:ff:ff:ff dev eth0
>>> # --- END PVE ---
>>>
>>> Any idea ?
>>> Thanks,
>>>
>>
>> _______________________________________________
>> pve-user mailing list
>> pve-user at pve.proxmox.com
>> http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>
> _______________________________________________
> pve-user mailing list
> pve-user at pve.proxmox.com
> http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user