Page MenuHomeVyOS Platform
Create Task
Maniphest T5795

Better support for dynamic IPv6 prefixes
Needs reporter action, NormalPublicFEATURE REQUEST
Actions

Description

For a SOHO user, it is very likely that the user doesn't have static public IPv6 prefixes. For users who get dynamic IPv6 prefixes through ISP's DHCPv6 prefix delegation, it is difficult to set up firewall rules (with source / destination address matches), prefix translation, or set up an DHCPv6 server to hand out addresses or sub-prefixes from delegated prefixes.

I would like to open a discussion for ideas about improving support for dynamic IPv6 prefixes. There could be some technical difficulties for some issues though.

One thing that could be a good start point is to patch wide-dhcpv6-client to invoke a custom script when a dynamic prefixes is received or released. OPNSense maintains a fork (https://github.com/opnsense/dhcp6c) with patches to do that, which I can help port those patches to VyOS. Then we will need some mechanism in VyOS to react to prefix changes.

Let me know if anyone has more ideas.

Similar feature requests:

Details

Difficulty level
Hard (possibly days)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)

Related Objects

Event Timeline

vfreex created this task.Dec 1 2023, 12:45 PM
pasik subscribed.Dec 1 2023, 1:03 PM
vfreex updated the task description. (Show Details)Dec 1 2023, 2:10 PM
vfreex changed Difficulty level from Unknown (require assessment) to Hard (possibly days).
vfreex updated the task description. (Show Details)Dec 1 2023, 2:16 PM
vfreex updated the task description. (Show Details)
vfreex added a comment.Dec 1 2023, 2:24 PM

Note: Mikrotik's RouterOS can add received IPv6 prefixes to a pool in its DHCPv6 client configuration, then the pool can be configured for DHCPv6 server to hand out addresses or sub-prefixes: https://wiki.mikrotik.com/wiki/Manual:IPv6/DHCP_Client

Viacheslav subscribed.Dec 1 2023, 10:08 PM

The similar task, leave a link here https://vyos.dev/T3771

Viacheslav triaged this task as Normal priority.Jan 20 2024, 1:57 PM
hsw0 subscribed.Mar 18 2024, 9:39 PM
Giggum added subscribers: sever, Giggum.Apr 10 2024, 12:51 PM

https://vyos.dev/T3771 was resolved should this one be closed as well given your comment @sever ?

Viacheslav added a comment.Apr 10 2024, 1:45 PM

@vfreex Can you re-check to see if everything works as you expected?

Viacheslav changed the task status from Open to Needs reporter action.Apr 10 2024, 1:45 PM
gmurphy42 subscribed.Jul 9 2024, 4:41 AM
aalmenar subscribed.Wed, Sep 4, 8:39 AM
aalmenar added a comment.Wed, Sep 4, 8:46 AM

@Viacheslav AFAIK this request has nothing to do with https://vyos.dev/T3771

The this here is, i receive a /56 (Changing on each disconnection because ISPs don't follow RIPE-690 recommendations) from my upstream ISP, i want to delegate prefixes from that /56, the router itself can assign prefixes to its interfaces but can't setup a dhcpv6-server with the rest of prefixes not used by the router so you can delegated some of those to downstream routers on your network. So vyos still doesn't work as expected according to this feature request.

dmbaturin added a project: Restricted Project.Mon, Sep 16, 4:16 PM