OPNsense Forum

Archive => 18.1 Legacy Series => Topic started by: Tubs on March 31, 2018, 12:58:35 pm

Title: bind routed IPv6 subnet to services
Post by: Tubs on March 31, 2018, 12:58:35 pm

Hello,

is it possible to bind services from OPNsense to IPv6 address of a routed subnet?
Specifically, I am interested in HAProxy.

So far my OPNsense up is working fine. I have IPv4 WAN via PPPoP and IPv6 via a GIF tunnel with routed /48 subnet. Routing and filtering of IPv6 to the different internal networks with /64 subnets out of routed /48 subnet is working fine.

I have set up HAProxy as reverse proxy for several web services running behind OPNsense. With IPv4 this is working fine. With the IPv6 endpoint address of the tunnel it also would work.

But is it also possible to bind HAproxy to one or more IPv6 addresses of the routed IPv6 subnet instead of GIF tunnel endpoint address?

This would allow me proper DNS entries incl. PTR matching to the several domain names used.

Thank you.

Title: Re: bind routed IPv6 subnet to services
Post by: franco on April 04, 2018, 07:41:59 am

You will have to add a Virtual IP to the attached interface carrying the routed network (either directly or indirectly). But keep in mind to make sure that if that is indirectly you will need to instruct your infrastructure that an extra IP exists that may not adhere to the routing layout in one or both directions.


Cheers,
Franco