IPv6 – Arun’s blog

Enable IPv6 on Direct Admin

Arun N. — Mon, 14 Nov 2011 10:11:17 +0000

It was rather easy to get IPv6 working with DA if you have the IPv6 subnet allocated for your server.

Make sure that you have IPv6 enabled on your DA.

# grep ipv6 /usr/local/directadmin/conf/directadmin.conf ipv6=1

Add the IPv6 Addresses to your direct admin, through IP Management (This will add IPv6 address to the interface).
Enter the IPv6 Address in IP field and keep the Netmask as 255.255.255.0

Add IPv6 address for your name servers,
go to DNS administration –> Select your name server domain –> Add AAAA records for your Name Servers. Make sure you have added the IPv6 addresses already to DA.

Check your name server is resolving/reachable via IPv6.

Now to add IPv6 Address to hosted domains, select the domain –> Modify user –> select the IPv6 address in “Add Additional IP”. If the IPv6 address is not visible, make sure it is added to DA and to the reseller account you are editing the domain.

Add the IPv6 address(AAAA) to the corresponding domains DNS configuration.

Here we go, ping666666

./arun

Configure IPv6 squid

Arun N. — Tue, 01 Mar 2011 08:01:43 +0000

Squid 3.1+ support IPv6

– Compile and install 3.1.x version of squid.

# useradd -d /opt/squid squid

# wget http://www.squid-cache.org/Versions/v3/3.1/squid-3.1.11-20110228.tar.gz

# tar xvzf squid-3.1.11-20110228.tar.gz

# cd squid-3.1.11-20110228; ./configure –prefix=/opt/squid/

# make; make install

# /opt/squid/sbin/squid -z

Configure squid

edit /opt/squid/etc/squid.conf

cache_effective_user squid

acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

acl to_ipv6 dst ipv6
http_access allow to_ipv6 !all
tcp_outgoing_address 2001:: to_ipv6
tcp_outgoing_address 12.34.56.78 !to_ipv6

And add necessary acls to allow access for your network to squid.

Testing:

$ telnet 3128
Trying 2001::…
Connected to 2001::..
Escape character is ‘^]’.
get http://ipv6.google.com/
HTTP/1.0 200 OK

Check the access.log to make sure

1298965141.719 477 2001:: TCP_MISS/200 25918 GET http://ipv6.google.com/ – DIRECT/2a00:1450:8002::6a text/html

IPv6 configuration for KVM guests

Arun N. — Wed, 28 Jul 2010 10:00:55 +0000

It is simple and straight forward to enable IPv6 on KVM guests

Configure the host machine with IPv6 Address on the bridge interface

cat ifcfg-br0

IPV6INIT=yes
IPV6ADDR=xxxx.xx::10
IPV6_DEFAULTGW=xxxx.xx::1
IPV6_AUTOCONF=no

Configure the interface on virutal machines with ipv6 address

cat ifcfg-eth0

IPV6INIT=yes
IPV6ADDR=xxxx.xx::11
IPV6_DEFAULTGW=xxxx.xx::1
IPV6_AUTOCONF=no

Add the the necessary firewall rules to ip6tables on the host machine

-A FORWARD -m physdev –physdev-is-bridged -j ACCEPT.

./arun

Setting Up IPv6 Tunnels on MAC and Linux

Arun N. — Thu, 11 Mar 2010 13:28:19 +0000

IPv6, the next generation Internet Protocol, brings a wealth of possibilities to your network, system, and services. In this guide, we’ll walk you through the process of establishing an IPv6 network tunnel on both MAC OS X and Linux.

Step 1: Choose an IPv6 Tunnel Broker

First, you need to select an IPv6 tunnel broker. These brokers provide the essential infrastructure to connect your network to the IPv6 world. There are several options available, but for this guide, we’ll use Hurricane Electric, a free and reliable tunnel broker. You can find a list of tunnel brokers here.

Step 2: Creating the Tunnel

With your selected tunnel broker, follow these steps to create your IPv6 tunnel:

Visit your chosen tunnel broker’s website and sign up for an account.
Once logged in, create a tunnel by specifying your public IPv4 address.
Your tunnel broker will assign you a range of IPv6 addresses, which you will need in the next steps.

Step 3: Configuration for MAC OS X

For MAC OS X, here are the steps to configure your machine for the IPv6 tunnel:

Configure the tunnel with your assigned IPv4 and IPv6 addresses:

$ sudo ifconfig gif0 tunnel host_ip tunnel_broker_ipv4_ip

Replace host_ip with your machine’s private address or public IP if you’re not behind NAT.

Set up the tunnel endpoints:

$ sudo ifconfig gif0 inet6 host_ipv6_address tunnel_broker_ipv6_address prefixlen 128

These IPv6 addresses are assigned by the tunnel broker.

Add a default route for IPv6 traffic:

$ sudo route -n add -inet6 default tunnel_broker_ipv6_address

To ensure IPv6 is enabled on the interface, use:

$ sudo ip6 -x gif0

Test your IPv6 connectivity:

$ ping6 ipv6.google.com

$ telnet ipv6.google.com 80

Step 4: Configuration for Linux

The process is nearly identical on Linux:

Confirm that the IPv6 module is present in the kernel:

$ sudo modprobe ipv6

Create the tunnel:

$ sudo ip tunnel add he-ipv6 mode sit remote 216.66.xx.xx local 192.168.1.2 ttl 255

Replace local with your public IP if directly assigned.

Activate the tunnel:

$ sudo ip link set he-ipv6 up

Assign an IP address to the interface:

$ sudo ip addr add 2001:470:xxxx:xxxx::2/64 dev he-ipv6

Add a default route for IPv6:

$ sudo ip route add ::/0 dev he-ipv6

Add a protocol family identifier:

$ sudo ip -f inet6 addr

With these steps, your MAC or Linux machine is now equipped with an IPv6 tunnel, allowing you to access IPv6 networks.

Enable IPv6 on Linux (2010)

Arun N. — Tue, 09 Mar 2010 14:09:55 +0000

IPv6 is the future of internet addressing, and Linux, with its robust kernel support, makes it remarkably easy to enable IPv6 on your system. In this guide, we’ll explore the process of setting up IPv6 on a Linux system, with a focus on Red Hat Linux. However, the principles and steps discussed here are applicable to all Linux distributions. By the end of this guide, you’ll have a clear understanding of how to configure and utilize IPv6 effectively.

Step 1: Ensure IPv6 Support in the Kernel

Before diving into the configuration, you need to confirm that IPv6 support is enabled in your kernel. Most modern kernels have IPv6 support enabled by default. However, it’s always a good idea to double-check.

To do this, open the file /etc/modprobe.conf and comment out the following lines if they exist:

plaintext

#alias ipv6 off

#alias net-pf-10 off

Step 2: Enable IPv6 Networking

The next step is to enable IPv6 networking. To do this:

Open the file /etc/sysconfig/network.
Add or modify the following line to read:

plaintext

NETWORKING_IPV6=yes

Step 3: Configure the IPv6 Address

To configure your IPv6 address:

Edit the appropriate network configuration file. For example, if you’re using Ethernet, you would typically edit /etc/sysconfig/network-scripts/ifcfg-eth0. If you’re using bond interfaces, the same principles apply.
Add or modify the following lines to specify your IPv6 address details:

plaintext

IPV6INIT=yes

IPV6ADDR=your_ipv6_address

IPV6ADDR_SECONDARIES=any_additional_ipv6_addresses

IPV6_DEFAULTGW=your_ipv6_gateway

IPV6_AUTOCONF=yes/no

Step 4: Restart the Network

After making these changes, restart your network to apply the new IPv6 configurations. Your system should now be assigned an IPv6 address, and you’ll be ready to utilize IPv6 networking.

Step 5: Software Configuration

Most Linux software works seamlessly with IPv6. However, for certain services like Apache, you may need to make some adjustments. For Apache, ensure you do the following:

Add the IPv6 listen address to your Apache configuration.
Enable name virtual host for IPv6 addresses if necessary.

Step 6: Testing IPv6 Connectivity

You can verify your IPv6 connectivity by using the ping6 command. For instance, to test your connection to Google’s IPv6 address, you can run:

bash

$ ping6 ipv6.google.com

This command will help you confirm that your system is effectively communicating over IPv6.