Opened 7 years ago

Closed 3 years ago

#6686 closed enhancement (wontfix)

torouter IPv6 support

Reported by: ficus Owned by: ficus
Priority: Low Milestone:
Component: Archived/Torouter Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: #20747 Points:
Reviewer: Sponsor:

Description

This is a placeholder/discussion ticket for IPv6 support with torouter. IPv6
support is not a blocker or high priority at this time, and there is some
concern about trusting "new" IPv6 daemons and code paths (citation needed!).

One way way IPv6 would work is that "downstream" devices connecting to the
torouter (over the open wifi network or the local ethernet port) would
auto-configure addresses from a site-local prefix (not globaly routed) and the
torouter (via tsocks) would effectively provide NAT. With this scheme it would
be possible to enable "downstream" IPv6 connectivity without proper "upstream"
support (or vica versa).

"Upstream" IPv6 would require at least:

  • tor network and daemon support (roadmap)
  • ntp client support
  • automatic SLAAC/DHCPv6 configuration

Presumably SLAAC would use a randomized address (not based on the ethernet MAC
address). Bootstrap upstream DNS could go straight to global DNS servers known
to return both AAAA records and reply to requests over IPv6.

"Downstream" IPv6 would require at least:

  • a (hardened?) radvd
  • IPv6 configuration and support of the onboard recursive DNS servers (ttdnsd, unbound, dnsmasq)
  • support in tsocks
  • appropriate firewall rules
  • extension of the web interface to display and configure IPv6 options

In either case, kernel and iptable support would need to be enabled and the web
interface extended to display and configure IPv6 options.

Child Tickets

Change History (2)

comment:1 Changed 7 years ago by ficus

Owner: changed from ioerror to ficus
Status: newaccepted

comment:2 Changed 3 years ago by irl

Parent ID: #20747
Resolution: wontfix
Severity: Normal
Status: acceptedclosed

Modern kernels, iptables and Tor daemons all have rather nice support for IPv6. As Torouter is no longer an active project, having this discussion is not a priority. Closing as no longer relevant.

Note: See TracTickets for help on using tickets.