What's new

Anyone running NGINX with IPv6? Possible?

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

bengalih

Senior Member
I've been running entware NGINX on my Asus for years now serving out several internal web services.
I'm trying to learn a bit more about IPv6, and was trying to get one of my sites to listen and serve out over it's IPv6 address in addition to IPv4.

I have tested by using the IPv6 firewall option in the GUI to allow the IPv6 address and port of a web server through.
This worked successfully and I was able to access my internal web server from an external source using http://[IPv6 address]:port.

But now, I want to use NGINX to proxy https, but can't get it to work.

I won't post any specific config yet until someone confirms that this can be done - and hopefully find someone else who is actually doing this.

thanks
 
Last edited:
Just want to update that I was successful in doing this. To get it working, the main things required are:

1) Make sure you have IPv6 connectivity on your router. If you can ping out via IPv6 you are probably good here.
2) Make sure your NGINX config is set up properly to listen on IPv6. You will have to add a second listener line like this:

Code:
server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;

3) Make sure you configure the firewall. I was successful in doing this by keeping the IPv6 Firewall in the GUI enabled. Because you are trying to allow IPv6 traffic into the router for NGINX and not another internal machine, you will probably need to manage the firewall rules from a command line. This is similar for what you should have had to do for NGINX with IPv4. Here is my example

Code:
ip6tables -I INPUT -p tcp --dport 443 -j ACCEPT

This will allow all incoming 443 IPv6 traffic to your router. You will also need to place this somewhere in a script to be re-applied at boot.

Once this was done I was successfully able to connect over IPv6. You can use a site like this to perform tests:
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top