Add Support for IPv6

[rahul286]

As reported by Alan

server {
  listen 80;
  listen [::]:80; # This is the line that is missing.
  server_name www.example.com example.com;
  return 301 https://example.com$request_uri;
}

We need to add listen [::]:80; line to templates

[iam404]

Also not to forget for SSL config (LE)

listen   443 ssl; ## listen for ipv4
listen   [::]:443 ssl ipv6only=on; ## listen for ipv6

[nordurljosahvida]

Absolutely yes, we need to implement IPv6!!!
I've had to patch three files to manually override this on a site-specific basis:

/etc/nginx/sites-available/domain [listen [::]:80;]
/var/www/domain/conf/nginx/ssl.conf [listen [::]:443 ssl http2;]
/etc/nginx/conf.d/force-ssl-domain.conf [listen [::]:80;]

And now my nginx -t is full of:

[...]
nginx: [warn] conflicting server name "domain" on 0.0.0.0:80, ignored
nginx: [warn] conflicting server name "www.domain" on 0.0.0.0:80, ignored
[...]

How do we enable IPv6 globally in nginx?
The only "listen" directive I've found in the entire nginx configs that deals with 80/443 is inside:

/etc/nginx/sites-enabled/default

And it only deals with port 80, but it doesn't apply to other sites.

Thanks!

[kirtangajjar]

I worked on this issue but looks like simply adding listen [::]:80; didn't work for me.

Here's what I did I created a test site on nginx with following config -

server {

    listen [::]:80 ipv6only=on;

    server_name testipv6.test;

    access_log /var/log/nginx/testipv6_access.log;
    error_log /var/log/nginx/testipv6_error.log;

    root /var/www/testipv6.test/htdocs;

    index index.php index.html index.htm;
}

and created corresponding index.html file.

Then I added following line in hosts file -
::1 testipv6.test

Then after checking in browser, It looked like it worked fine on ipv6(remote IP was showing ::1 in devtools). However I was unable to access this site with my IPv6 IP from my own machine or from another machine connected on LAN.

I inserted my IPv6 address to it's host file as follows -
fe80::7553:5b66:5996:3cf8 testipv6.test

Running curl testipv6.test resulted in following error -
curl: (7) Couldn't connect to server

[rahul286]

@kirtangajjar IPv6 support should be additional. No need to disable IPv4.

listen [::]:80 ipv6only=on;

@mbtamuli this may not be relevant as public Internet traffic gets terminated at https://traefik.io/. Can you confirm?

[nordurljosahvida]

@kirtangajjar I'm not sure what the issue you're facing is. The way we patch EE's lack of IPv6 support in aenigma is by adding the second line of each of these snippets to the respective config files:

/etc/nginx/sites-available/example.tld:

listen 80;
listen [::]:80;

/var/www/example.tld/conf/nginx/ssl.conf:

listen 443 ssl http2;
listen [::]:443 ssl http2;

/etc/nginx/conf.d/force-ssl-example.tld:

listen 80;
listen [::]:80;

This has been proven to work.

Thanks

[nordurljosahvida]

@kirtangajjar have you had a chance to look at my config? Is there anything I can do to help? Thank you

[mbtamuli]

@nordurljosahvida Can you describe the method you can verify the IPv6 configuration and is there any additional configuration needed for local sites? Using curl or a similar tool?

[nordurljosahvida]

@mbtamuli I perform all of my IPv6 tests from a Ubuntu VM with IPv4 entirely disabled as you can see here:

Then you simply curl as you would normally do. For instance:

curl https://ae.os.vu

and it works!

As mentioned above, at the moment it is essential to edit all 3 config files of each and every EE site [1 file in case of no TLS configured].