ANSWERED IPv4/IPv6 dual stack tunnel

[gB1ylk 0]

Hello,

 

This has been asked in quite a few places already but there is no clear answer as far as I can tell. Long story short, if you ISP provides you with both IPv4 and IPv6 addresses, then by connecting to AirVPN VPN only the IPv4 traffic is being routed through the tunnel. If a website (or any other remote endpoint) runs on IPv6, then your real IPv6 (the one provided to you by your ISP) will be used and so you end up with an IP leak. Not good.

 

The easiest choice is to disable IPv6 per host basis or use some iptables or other firewall magic to filter out all the IPv6 traffic. This is only a workaround and a very inconvenient one especially when you run AirVPN on a router.

 

The best solution would be for AirVPN to provide a dual stack IPv4/IPv6 tunnel so connected clients can reach the modern IPv6 world privately and securely in a similar fashion to IPv4.

 

Are there any plans to support this option? As far as I can see there are only a handful of VPN providers out there which actually provide dual stack VPNs so it would be nice for AirVPN join this effort.

[nick75 25]

Hi,

AirVPN already has in-tunnel dual stack connectivity. If you're worried about IP leaks, activate network lock!

[cm0s 118]

this is my opinion only but i stay away from ipv6

i shut it down at the kernel via grub edit:

 

GRUB_DEFAULT=0
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR="Arch"
GRUB_CMDLINE_LINUX_DEFAULT="quiet loglevel=3 pnpbios=off acpi=off"
GRUB_CMDLINE_LINUX="cryptdevice=/dev/sda1:cryptroot ipv6.disable=1 bluetooth.blacklist=yes"

Edited ... by tokzco

[gB1ylk 0]

So are you saying that your device gets both IPv4 and IPv6 addresses from the AirVPN endpoint? Because I can only see a single 10.X.X.X/8 address assigned to the tunnel device on both Windows and Linux

[nick75 25]

Yes, if configured correctly, you should get both IPv4/IPv6 addresses on your tun device.

 

Make sure you :

• if using Eddie, see in the preferences if IPv6 is enabled
• If using Eddie, is it up to date (version 2.16.3)?
• if using OpenVPN, download the config files that activate IPv6
• if using OpenVPN, are you using version 2.4 and over?
• you have IPv6 enabled system-wide and on the tun device

Do you have ::1 as your IPv6 address on the loopback (lo) in your linux?

[gB1ylk 0]

OK you are right. The problem is that I am importing the .ovpn file in NetworkManager and the 'push-peer-info' and 'setenv UV_IPV6 yes' options are not being understood by NM at all so they are being silently dropped. It works fine if I use openvpn --config ... directly. Slightly inconvenient but so be it.

 

Thank you