All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Question regarding ipv6 Proxmox routed setup.
Hi all,
I'm running Proxmox on a dedicated server with a routed IPv4 and IPv6 setup from Hetzner. IPv4 is working perfectly, and I'm using multiple routed IPs through a secondary bridge. However, I'm struggling to correctly configure IPv6.
This is my current /etc/network/interfaces configuration on the Proxmox host:
# Loopback interfaces
auto lo
iface lo inet loopback
iface lo inet6 loopback
# Physical NIC
auto enp5s0
iface enp5s0 inet manual
# Main IPv4 address
auto vmbr0
iface vmbr0 inet static
address 78.x.x.x/32
gateway 78.x.x.1
bridge-ports enp5s0
bridge-stp off
bridge-fd 0
# Routed IPv4 subnet bridge (used for guest public IPs)
auto vmbr1
iface vmbr1 inet static
address 5.9.x.x/32
bridge_ports none
bridge_stp off
bridge_fd 0
up ip route add 5.9.x.49/32 dev vmbr1
up ip route add 5.9.x.50/32 dev vmbr1
up ip route add 5.9.x.51/32 dev vmbr1
up ip route add 5.9.x.52/32 dev vmbr1
up ip route add 5.9.x.53/32 dev vmbr1
post-up iptables -t nat -A POSTROUTING -s 5.9.x.48/29 -o vmbr0 -j SNAT --to-source 78.x.x.x
post-down iptables -t nat -D POSTROUTING -s 5.9.x.48/29 -o vmbr0 -j SNAT --to-source 78.x.x.x
# Internal NAT bridge (for private LAN)
auto vmbr2
iface vmbr2 inet static
address 192.168.100.1/24
bridge_ports none
bridge_stp off
bridge_fd 0
post-up iptables -t nat -A POSTROUTING -s 192.168.100.0/24 -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s 192.168.100.0/24 -o vmbr0 -j MASQUERADE
IPv6 subnet info:
Routed /64 subnet from Hetzner (e.g., 2a01:4f8:xxxx:xxxx::/64)
My goal is to assign public IPv6 addresses (like 2a01:4f8:xxxx:xxxx::100) to individual guests and allow them to be reachable over the internet.
IPv6 gateway provided by Hetzner is fe80::1, reachable via the main interface.
Questions:
How should I correctly configure IPv6 routing on the Proxmox host for this kind of routed /64 setup?
How do I assign IPv6 addresses to VMs that are in vmbr1?
Should I configure IPv6 on vmbr0, vmbr1, or create a separate bridge?
Any examples or working interfaces configs would be super helpful. Thanks!
Comments
I'd add an
inet6device tovmbr1with a/128of your subnet and then assign everything else on the guests, both via this bridge.@webcraft
Like this?
iface vmbr1 inet6 static
address 2a01:4f8:xxx:2026::1
netmask 128
gateway fe80::1
post-up ip -6 route add default via fe80::1 dev enp5s0
post-up echo 1 > /proc/sys/net/ipv6/conf/vmbr1/proxy_ndp
post-up echo 1 > /proc/sys/net/ipv6/conf/all/forwarding
Yes, actually you can also add this interface to
vmbr0since you specified the deviceenp5s0directly already but it shouldn't really matter and work both ways.It actually matters and should be on the same bridge that hands over IPv4 to the guests, as this will be assigned to their virtual nic 😉