[tor-relays] IPv6 auto-discovery vs. privacy extensions

Casper fantom at fedoraproject.org
Wed Feb 24 11:08:22 UTC 2021


Onion Operator a écrit :
>    Saluton,
>    My relay started to log this message since 0.4.5.5:
>    Auto-discovered IPv6 address [...]:443 has not been found reachable.
>    However, IPv4 address is reachable. Publishing server descriptor without
>    IPv6 address. [2 similar message(s) suppressed in last 2400 seconds]
>    I think it started with the introduction of IPv6 auto-discovery.
>    The problem, as I understand it, is that my relay has IPv6 privacy
>    extensions enabled and therefore the IPv6 detection logic gets
>    fooled. Indeed the IPv6 I see in the logs is one of the temporary
>    addresses used as client towards other relays.
>    Relevant config is:
>    ORPort 443 IPv4Only
>    ORPort [...]:443 IPv6Only
>    I added the IPv{4,6}Only options only in searching a solution to this
>    problem, before 0.4.5.5 the IPv6 relay worked perfectly without.
>    In reading the documentation of AddressDisableIPv6 I got the
>    impression that if (any?) ORPort is configured with IPv4Only the
>    IPv6 auto-discovery gets disabled but evidence does not support my
>    understanding. Is it a bug?
>    Any other way to disable IPv6 auto-discovery?
Hi,

in my config:

ORPort 26709
ORPort [<ipv6_address_here>]:26709
DirPort 26710

No IPv6 auto-discovery in my logs, and ipv6 flag putted on my relays

I got this config from the torproject documentation.

hope this help :)
-- 
GnuPG: AE157E0B29F0BEF2 at keys.openpgp.org
CA Cert: https://dl.casperlefantom.net/pub/ssl/root.der
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20210224/deb2f3e3/attachment.sig>


More information about the tor-relays mailing list