add IPv6 support

Development
1

Now that the port to nftables has been completed, it’s time to add IPv6 support.

Suggestions which internal IPv6 addresses we should use for,

  • A) Whonix-Gateway internal network interface?
  • B) Whonix-Gateway external network interface?
  • C) Whonix-Workstation internal network interface?

I plan to keep using static IP configuration without introducing the complexities of DHCP.

related source code files:

related, on why we use 10.152.152.10 for IPv6:

This is for Non-Qubes-Whonix only. For Qubes-Whonix, there is a separate ticket: add IPv6 support to Qubes-Whonix · Issue #9267 · QubesOS/qubes-issues · GitHub

2

Should consider using unique local address (ULA).

3
4
5
6
7

Requested to re-open Listen on IPv6 by default for SocksPort *:Port (#11360) · Issues · The Tor Project / Core / Tor · GitLab because it might not have been actually implemented.

8

Issue:

Pull requests to fix this issue:

9

This adds an IPv6 for the gateway:

Same for the workstation:

Enables IPv6 usage in tor and removes the sysctl disable setting:

Update firewall rules to split IP4/IP6 variables to allow defining proper IPv6 addresses in those and accept NDP required for IPv6:

1 Like
10
11
12