Add support for WireGuard with IPv6

[dseomn]

https://docs.projectcalico.org/security/encrypt-cluster-pod-traffic#before-you-begin says:

Note: WireGuard in Calico does not support IPv6 at this time. Also, encryption using WireGuard is not supported if CALICO_NETWORKING_BACKEND=none (e.g. managed Kubernetes platforms EKS, AKS and GKE).

It would be really nice if Calico supported WireGuard with IPv6, so I'm filing a feature request because I didn't see an existing one.

[lwr20]

@petercork FYI

[inistor]

One more 'vote' for this. We are running an on-prem IPv6 vanilla K8s so I can assist with testing, if needed.

[telmich]

We'd be very much interested in this, as all clusters are IPv6 only in our environment

[lwr20]

AWS is offering IPv6 prefixes to nodes now, so this is becoming more testable/usable in cloud too.

[steffann]

Hey @coutinhop, I see you self-assigned this issue. Anything we can do to help?

[lwr20]

I think its very close to being done. Code was here if you wanted a peek: https://github.com/projectcalico/calico/pull/6178/

We have a "hashrelease" (basically a build from the tip of the v3.24 branch, including docs and manifests) here if you wanted to take it for a spin: https://2022-08-03-v3-24-navigator.docs.eng.tigera.net/

Obviously this build is not supported or ready for GA, but its what we're testing on internally on the way to that point.

[mgleung]

This feature should be done! See https://projectcalico.docs.tigera.io/release-notes/ for more details

[steffann]

Thanks!