IPv6 Support

[madeITBelgium]

IPV6 Support

Issues

v-add-sys-ipv6

• IPV6ADDR_SECONDARIES
• mod_extract_forwarded
• mod_rpaf

v-delete-sys-ipv6, v-delete-sys-ip

Delete startup config

Netmask

ipv4: 255.255.255.255 (ip) ipv6: 64 (integer)

Update scripts

upd/add_ipv6.sh

Fail2Ban

Usage

Add domain

ipv4 only: v-add-domain admin test.com [ipv4address] no ipv6 only v-add-domain admin test.com no [ipv6address] ipv4 + ipv6 v-add-domain admin test.com [ipv4address] [ipv6address] or v-add-domain admin test.com

[anton-reutov]

Need some tests. Let's test before the release.

[michacassola]

How do I install this Version to test?

[LiMoon]

@madeITBelgium Can I test this script and IPv6 to new host?

https://raw.githubusercontent.com/madeITBelgium/vesta/master/install/vst-install-rhel.sh

[anton-reutov]

@LiMoon, yes you can test it. I think you should using the test server for that.

[LiMoon]

vesta/install/rhel/7/nginx/nginx.conf maybe ipv6 ip address # remove?

    #set_real_ip_from   2400:cb00::/32;
    #set_real_ip_from   2606:4700::/32;
    #set_real_ip_from   2803:f800::/32;
    #set_real_ip_from   2405:b500::/32;
    #set_real_ip_from   2405:8100::/32;

and ipv6 cloudflare new ipv6 address (https://www.cloudflare.com/ips-v6)

    set_real_ip_from   2400:cb00::/32
    set_real_ip_from   2405:8100::/32
    set_real_ip_from   2405:b500::/32
    set_real_ip_from   2606:4700::/32
    set_real_ip_from   2803:f800::/32
    set_real_ip_from   2c0f:f248::/32
    set_real_ip_from   2a06:98c0::/29

[madeITBelgium]

The best way to test this: Install vestaCP (Normal way) Install git

cd /root git clone https://github.com/madeITBelgium/vesta.git cd vesta git checkout vesta-ipv6-support mkdir -p conf data log nginx php ssl cp -r /usr/local/vesta/conf/* conf cp -r /usr/local/vesta/data/* data cp -r /usr/local/vesta/log/* log cp -r /usr/local/vesta/nginx/* nginx cp -r /usr/local/vesta/php/* php cp -r /usr/local/vesta/ssl/* ssl rm -rf data/templates/* cp -r install/rhel/7/templates/* data/templates/ service vesta stop rm -rf /usr/local/vesta mv /root/vesta /usr/local/vesta chown admin:admin /usr/local/vesta/data/sessions chown admin:admin /usr/local/vesta/data/sessions/* source /etc/profile.d/vesta.sh service vesta start Uncomment testing lines (copy templates in /usr/local/vesta/upd/add_ipv6.sh) bash /usr/local/vesta/upd/add_ipv6.sh

[anton-reutov]

@LiMoon, If you've found a bug, let us know here

[madeITBelgium]

I will try coming week to test also everything again.

[anton-reutov]

@madeITBelgium, ok It would be great

[LiMoon]

@madeITBelgium then bash /usr/local/vesta/upd/add_ipv6.sh error:

/usr/local/vesta/func/ip.sh: line 253: syntax error: unexpected end of file
/usr/local/vesta/func/rebuild.sh: line 145: is_ip_valid: command not found
/usr/local/vesta/func/ip.sh: line 253: syntax error: unexpected end of file
/usr/local/vesta/func/rebuild.sh: line 145: is_ip_valid: command not found

and vestacp login error : NO LANGUAGE DEFINED

[anton-reutov]

@LiMoon how's the testing?

[madeITBelgium]

Test status: Web domain: Adding, deleting, modify (IP to no IP / no IP to IP) -> OK DNS Domain: Adding, deleting, modify -> OK Lets encrypt to ipv4 only, ipv6 only en domain with both: OK IPV6 Firewall -> (No Fail2ban: Fail2ban support ipv6 sinds version 0.10. Centos 7 install version 0.9.7 https://www.ctrl.blog/entry/fail2ban-ipv6) Backup -> OK Restore from older version to version with IPv6 (OK), Restore from server with ipv6 (OK)

[agentmishra]

the system takes the 1st avaliable ipv6, if i try to add another ipv6 through the web interface/admin-dashboard, it keeps on giving alert stating invalid ip

[anton-reutov]

@agentmishra, yes, the same problem. DO @madeITBelgium, please recheck again

[madeITBelgium]

@agentmishra fixed.

[agentmishra]

new ip can now be added

the default ipv6 shows as ipv4 when i try to delete it, it gives error as, invalid ip...

[madeITBelgium]

@agentmishra have you run the upd/add_ipv6.sh script twice? Can you check the file /usr/local/vesta/data/ips/hereyouripv6, do this file contains 2 version lines? One with Version='6' and one with VERSION='4'? Delete the line with version='4'

[agentmishra]

it had 5 entries for version 4, how it happened, i do not know

i deleted all the entries for version 4 in the ipv6, and now i could delete it, may be there is a bug which adds version 4 to the ipv6 when bash /usr/local/vesta/upd/add_ipv6.sh is run...

[agentmishra]

so far so good, any idea if this would be merged in the main vestacp or will it remain as a fork?

if it would get merged, any ETA

[MrSorcus]

When it will be completed?

[agentmishra]

dont see any more progress in this...

[anton-reutov]

@madeITBelgium can you solve confilcts with branch ?

[agentmishra]

hii any progress in the reviews? or may be any other vesta devs may also take up the matter

[augustozanellato]

Any progress?

[adrijanb]

ANY NEWS?

[samip5]

Okey, first of all, nginx should be listening on IPv6, not just IPv4 from start.

This will not work on IPv6-only environment, which it needs to.

[serjiomati]

нормально так? кінець 21го року а панель не підтримує ipv6 (

[madeITBelgium]

I don't have the time to update this again. I have a working version for centos 7/8 here.: https://github.com/madeitbelgium/vesta

[serjiomati]

I don't have the time to update this again. I have a working version for centos 7/8 here.: https://github.com/madeitbelgium/vesta

i use debian / ubuntu (

[anton-reutov]

За все время было мало обращений по этой фиче. Данный протокол так и не стал популярным.