Linux IPv6 Transparent Proxy (but Linux doesn't support NAT on IPv6!?)

Question

On Linux I can make a transparent proxy simply by adding a iptables -j REDIRECT command.

To my surprise, I am needing to support IPv6. Simple enough right? iptables6 -j REDIRECT command not supported!?

Apparently, Linux threw out NAT (and transparent proxy support with it) on IPv6. I don't care much about NAT on IPv6. So how do people get a squid transparent proxy working on IPv6? With Linux as the host.

score 4 · Accepted Answer · edited Apr 13 '17 at 12:14

4

First give it a read on this answer here. You will have to configure your firewall and use other means to provide proxying like automatic configuration. IPV6 doesn't provide any NAT so there's no interception of traffic, ergo no transparent proxying.

Squid wiki has a Tproxy patch but seems like a hack to me, you can try but I never tested.

Other solutions likes WCCP from CISCO were also very connected to ipv4 and will not work on ipv6, but probably will be updated (or something will show up to replace).

edited Apr 13 '17 at 12:14

Community

1

answered Apr 04 '11 at 05:02

coredump

12,713
2
36
56

+1 and Answer for suggesting TPROXY netfilter/iptables TARGET. – unixman83 Apr 04 '11 at 05:30
1

How is Tproxy a hack? It is native to Linux 2.6.37 and newer. It is the only way to do transparent proxying with IPv6 on Linux. – unixman83 Apr 04 '11 at 22:29
@unixman it's a hack because you are not supposed to do transparent proxying on ipv6 :) – coredump Apr 04 '11 at 23:00
2

then how would you implement content filtering on IPv6? – unixman83 Apr 05 '11 at 06:04
@unixman using a normal proxy, why does it have to be transparent? – coredump Apr 05 '11 at 10:10
2

@coredump: Because transparent "Just Works" while automatic proxy only sometimes works and the users think the internet is broken. – Zan Lynx Oct 28 '11 at 09:07

Linux IPv6 Transparent Proxy (but Linux doesn't support NAT on IPv6!?)

1 Answers1