[tor-relays] mulitply ipv6 bridge lines for a single bridge

Toralf Förster toralf.foerster at gmx.de
Sun May 21 08:44:09 UTC 2023


Given that hosters of a VPS often gives a big /48, /56 or /64 ipv6 
subnet to a VPS I do wonder if the BridgeLine for ipv6 could benefit 
from that?

With

   ip6tables -t nat -I PREROUTING -p tcp -j DNAT --to-destination [obfs4 
address]
   /usr/sbin/ip6tables-save > /etc/iptables/rules.v6

all incoming TCPv6 packets would be flow to the bridge address. This 
idea is implemented in [1]. BTW there I do change the factory default 
ipv6 address into a random one too.


[1] 
https://github.com/toralf/tor-relays/blob/main/playbooks/roles/setup/tasks/network.yaml
-- 
Toralf
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20230521/344cc0a5/attachment.sig>


More information about the tor-relays mailing list