[pve-devel] pve-firewall : ipv6 support ?

[Alexandre DERUMIER]

Hi,

what about to add ipv6 support to firewall ?

do you think it's very different than ipv4 ?


I found theses differences:

- ip6tables-save, ip6tables-restore

- icmp rules :  -p icmpv6 --icmpv6-type

ipset:
create xhash:net family inet6


-venet don't support ipv6 I think (also not supported by proxmox gui ?)



I check the openstack firewall code:
https://github.com/openstack/neutron/blob/master/neutron/agent/linux/iptables_firewall.py

only difference seem to be icmpv6