<div dir="ltr"><div class="gmail_default" style="font-family:monospace,monospace">In reply to s7r,<br><br>The reason I want my services to be reachable over ipv6 is just that we have to move on. IoT is at our door, and ip4 address space is exhausted. Indeed some client nowadays only have an ip6 interface. Maybe not in tor, as ip4 is still mandatory, but nevertheless, we all have to move that way. That is all. I want my services to be reachable over ip6.<br><br>The reason I cannot make tor listen on a dedicated ip6 address is mentionned in my previous post: I deploy tor as a docker swarm service, and docker does not route ip6 traffic through its overlay network.</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">I don't think this is useless. A lot of service sockets are not bound to a public interface. Many connections initiated by client end up at some frontend, and the network administrator should have the liberty to route that traffic the way they want, the way they can.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Apr 19, 2019 at 1:54 AM Jake Visser <<a href="mailto:jake@emeraldonion.org">jake@emeraldonion.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_3318685575423934518WordSection1">
<p class="MsoNormal">Thanks Charly – yes.. in this case a flag or error in logging that IPv6 was not reachable would have saved me many hours of debugging (for us, this was an obscure IPv6 issue, where all other IPs on the same range work; it was broken as
a function of a very restrictive ND policy on the firewall).<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">So regardless of Full v6 support, or v6 only support [both are needed], at the very least some good logging to say if its failing would be great
<span style="font-family:"Segoe UI Emoji",sans-serif">😉</span><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><b>From:</b> tor-relays <<a href="mailto:tor-relays-bounces@lists.torproject.org" target="_blank">tor-relays-bounces@lists.torproject.org</a>>
<b>On Behalf Of </b>Charly Ghislain<br>
<b>Sent:</b> Thursday, April 18, 2019 2:41 PM<br>
<b>To:</b> <a href="mailto:tor-relays@lists.torproject.org" target="_blank">tor-relays@lists.torproject.org</a><br>
<b>Subject:</b> [tor-relays] ipv6 behaviour consensus<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New"">Hi list,<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New""><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New"">Last reply from s7r on jake Visser' issue included a link to an open issue waiting for a consensus on a mailing list:<br>
<br>
<a href="https://trac.torproject.org/projects/tor/ticket/29570" target="_blank">https://trac.torproject.org/projects/tor/ticket/29570</a><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New""><br>
Not sure if teor implied the dev mailing list or this one, but maybe gathering feedback from operators is a good idea.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New""><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New"">AFAIC, as avee stated on the ticket I don't find the current setup much confusing. The documentation on ipv6 setup was not as clear as one would expect, I came across what appeared to be outdated
docs, and I think this is the area that could be improved to eases operator setup. <br>
<br>
I agree with Avee that any update on that matter should be backward compatible, allowing relays running behind custom natted networks to continue operating without any trouble.<br>
<br>
I feel there is an issue in case the operator advertises an unreachable ip6 address in the config. This seems like a configuration error that should be spotted by a self-reachability mechanism that is yet to come, like for ipv4. I can imagine however that directories
could be able to flag the relay as reachable over ipv4 and not over ipv6, and that the relay would still be usable over ip4. I thought it was the case actually.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New""><br>
Please provide your feedback. ip6 is around for so long, it is depressing to see how hard it is for so many software to provide a nice user experience with it.<br>
<br>
Regards,<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New""><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New"">Charly<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New""><u></u> <u></u></span></p>
</div>
</div>
</div>
</div>
_______________________________________________<br>
tor-relays mailing list<br>
<a href="mailto:tor-relays@lists.torproject.org" target="_blank">tor-relays@lists.torproject.org</a><br>
<a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays" rel="noreferrer" target="_blank">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a><br>
</blockquote></div>