Page MenuHomeVyOS Platform

Better support for dynamic IPv6 prefixes
Needs reporter action, NormalPublicFEATURE REQUEST

Description

For a SOHO user, it is very likely that the user doesn't have static public IPv6 prefixes. For users who get dynamic IPv6 prefixes through ISP's DHCPv6 prefix delegation, it is difficult to set up firewall rules (with source / destination address matches), prefix translation, or set up an DHCPv6 server to hand out addresses or sub-prefixes from delegated prefixes.

I would like to open a discussion for ideas about improving support for dynamic IPv6 prefixes. There could be some technical difficulties for some issues though.

One thing that could be a good start point is to patch wide-dhcpv6-client to invoke a custom script when a dynamic prefixes is received or released. OPNSense maintains a fork (https://github.com/opnsense/dhcp6c) with patches to do that, which I can help port those patches to VyOS. Then we will need some mechanism in VyOS to react to prefix changes.

Let me know if anyone has more ideas.

Similar feature requests:

Details

Difficulty level
Hard (possibly days)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)

Event Timeline

vfreex changed Difficulty level from Unknown (require assessment) to Hard (possibly days).
vfreex updated the task description. (Show Details)

Note: Mikrotik's RouterOS can add received IPv6 prefixes to a pool in its DHCPv6 client configuration, then the pool can be configured for DHCPv6 server to hand out addresses or sub-prefixes: https://wiki.mikrotik.com/wiki/Manual:IPv6/DHCP_Client

Viacheslav triaged this task as Normal priority.Jan 20 2024, 1:57 PM

https://vyos.dev/T3771 was resolved should this one be closed as well given your comment @sever ?

@vfreex Can you re-check to see if everything works as you expected?

Viacheslav changed the task status from Open to Needs reporter action.Wed, Apr 10, 1:45 PM