Page MenuHomeVyOS Platform
Create Task
Maniphest T1915

Remove "system ipv6 blacklist" option
Closed, ResolvedPublicBUG
Actions

Description

IPv6 can't be removed from the system anymore as Kernel modules like wireguard depend on it and always load IPv6 functionality when it is inserted.

Details

Difficulty level
Easy (less than an hour)
Version
1.3-rolling
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Config syntax change (migratable)
Issue type
Improvement (missing useful functionality)

Related Objects
Search...

Event Timeline

c-po claimed this task.Dec 28 2019, 1:47 PM
c-po created this task.
c-po updated the task description. (Show Details)
kroy added a subscriber: kroy.Dec 28 2019, 3:33 PM

I agree this should be killed.

As a sane alternative, maybe it makes sense to add a "disable" node as

interfaces ethernet eth0 ipv6 disable

That would set the sysctl, which is far more sane:

net.ipv6.conf.eth0.disable_ipv6 = 1

I know there are still people sticking their head in the sand about ipv6, and in many cases a way to forcibly disable ipv6 is still a requirement.

c-po added a comment.Dec 28 2019, 3:51 PM

set system ipv6 disable can be used to globally disable IPv6 address assignment

kroy added a comment.Dec 28 2019, 3:56 PM
This comment was removed by kroy.
c-po added a parent task: T1912: Migrate "system (ip|ipv6)" to XML/Python representation.Dec 28 2019, 6:18 PM
c-po closed this task as Resolved.Dec 28 2019, 7:01 PM
c-po removed a project: VyOS 1.2 Crux (VyOS 1.2.5).
c-po moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus board.
erkin set Issue type to Improvement (missing useful functionality).Aug 31 2021, 6:00 PM
syncer edited projects, added VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus.Aug 30 2022, 2:06 PM
syncer moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0) board.