{"id":31,"date":"2024-08-20T10:26:01","date_gmt":"2024-08-20T02:26:01","guid":{"rendered":"https:\/\/cnsn.rr.nu\/?p=31"},"modified":"2024-08-20T10:26:01","modified_gmt":"2024-08-20T02:26:01","slug":"%f0%9f%8c%88%e9%80%9a%e8%bf%87he-ipv6%e9%9a%a7%e9%81%93%e7%bb%99proxmox%e5%b0%8f%e9%b8%a1%e5%88%86%e9%85%8dipv6%e5%9c%b0%e5%9d%80","status":"publish","type":"post","link":"https:\/\/blog.cnsn.fun\/?p=31","title":{"rendered":"\ud83c\udf08\u901a\u8fc7HE ipv6\u96a7\u9053\u7ed9proxmox\u5c0f\u9e21\u5206\u914dipv6\u5730\u5740"},"content":{"rendered":"<h1>\u901a\u8fc7HE ipv6\u96a7\u9053\u7ed9proxmox\u5c0f\u9e21\u5206\u914dipv6\u5730\u5740<\/h1>\n<h2>\u524d\u8a00<\/h2>\n<p>\u5e0c\u671b\u53ef\u4ee5\u5e2e\u52a9\u5230\u66f4\u591a\u7684\u7075\u8f66\u3002<\/p>\n<p>\u653e\u5f00\u4e00\u4e0b\u601d\u7ef4\u3002\u662f\u4e2avps\u90fd\u80fd\u5b89\u88c5proxmox\u5f00ipv6 LXC\u5c0f\u9e21\u3002<\/p>\n<p>\u539f\u6587\u5728<a href=\"https:\/\/www.cfeng.com.cn\/article\/pg7\">[\u6211\u7684\u535a\u5ba2](https:\/\/www.cfeng.com.cn\/article\/pg7)<\/a><\/p>\n<p>\u672c\u6587\u5047\u8bbe\u4f60\u5df2\u7ecf\u62e5\u6709\u6216\u8005\u5b8c\u6210\u4e86<\/p>\n<ul>\n<li>\u6b63\u5e38\u5de5\u4f5c\u5e76\u4e14\u6709\u72ec\u7acbipv4\u7684proxmox ve\u670d\u52a1\u5668<\/li>\n<li>\u5df2\u7ecf\u6ce8\u518c\u5e76\u5f00\u901a\u4e86\u96a7\u9053\u7684HE\u8d26\u53f7<\/li>\n<li>\u9664\u4e86HE\u4ee5\u5916\u7684\u5176\u4ed6ipv6\u96a7\u9053\u4e5f\u53ef\u4ee5<\/li>\n<\/ul>\n<p>\u5b8c\u6210\u8bbe\u7f6e\u540e\u53ef\u4ee5\u5f97\u5230<\/p>\n<ul>\n<li>\u4e3b\u673a\u53ef\u4ee5\u901a\u8fc7he ipv6\u96a7\u9053\u83b7\u53d6ipv6\u8fde\u63a5<\/li>\n<li>\u4e3b\u673a\u53ef\u4ee5\u901a\u8fc7ndppd\u6765\u8bbe\u7f6e\u5185\u90e8ipv6\u90bb\u5c45\u5730\u5740\u4fe1\u606f\uff08\u53ef\u9009\uff09<\/li>\n<li>\u4e3b\u673a\u53ef\u4ee5\u901a\u8fc7radvd\u6765\u7ed9\u865a\u62df\u673a\u901a\u8fc7SLAAC\u65b9\u5f0f\u81ea\u52a8\u5206\u914dipv6\u5730\u5740\uff08\u672c\u6587\u4e0d\u4f7f\u7528DHCPv6\uff09<\/li>\n<\/ul>\n<h2>\u8bbe\u7f6eipv6\u96a7\u9053<\/h2>\n<p>\u9996\u5148\uff0c\u9700\u8981\u8bbe\u7f6eipv6\u96a7\u9053\u5e76\u4f7f\u4e3b\u673a\u80fd\u901a\u8fc7\u96a7\u9053\u4f7f\u7528ipv6<\/p>\n<p>\u5728Proxmox ve\u4e3b\u673a\u91cc\u8fdb\u884cipv6\u9700\u8981\u7684\u7cfb\u7edf\u53c2\u6570\u8bbe\u7f6e<\/p>\n<p>\u4fee\u6539\/etc\/sysctl.conf \u52a0\u5165\u4ee5\u4e0b\u6bb5\u843d\u6765\u5f00\u542fipv6\u8f6c\u53d1\u3002<\/p>\n<pre><code>net.ipv6.conf.all.forwarding = 1\n<\/code><\/pre>\n<p>=<\/p>\n<p>\u7136\u540e\u4f7f\u5176\u751f\u6548<\/p>\n<pre><code>sysctl -p\n<\/code><\/pre>\n<p>proxmox\u9ed8\u8ba4\u5e94\u8be5\u662f\u5141\u8bb8\u6240\u6709ipv6<br \/>\nicmp\u7684\u3002\u8fd9\u91cc\u5c31\u7565\u8fc7\u3002\u5982\u679c\u9ed8\u8ba4\u6ca1\u6709\u653e\u884c\u7684\u8bddip6tables\u52a0\u4e00\u4e0b\u5c31\u884c\u3002<\/p>\n<p>\u6253\u5f00Tunnelbroker\u7f51\u7ad9\u7684\u5df2\u7ecf\u521b\u5efa\u597d\u7684Tunnel Details<\/p>\n<p>!<a href=\"https:\/\/pic.cosmiccat.net\/uploads\/2024\/01\/08\/he-0.png\">https:\/\/pic.cosmiccat.net\/uploads\/2024\/01\/08\/he-0.png<\/a><\/p>\n<p>\u8bb0\u5f55\u4e0b\u8fd9\u4e9b\uff0c\u7136\u540e\u5728proxmox ve\u4e3b\u673a\u91cc\u6dfb\u52a0\u96a7\u9053<\/p>\n<p>\u4fee\u6539\/etc\/network\/interface \u6dfb\u52a0<\/p>\n<pre><code>auto he-ipv6                         #\u96a7\u9053\u7f51\u5361\u540d\uff0c\u53ef\u4ee5\u6362\u6210\u5176\u4ed6\u4f60\u559c\u6b22\u7684\u540d\u5b57\niface he-ipv6 inet6 tunnel           #\u8bbe\u7f6e\u7f51\u5361ipv6\u90e8\u5206\u4e3a\u96a7\u9053\n        mode sit                     #\u4f7f\u7528sit\u6a21\u5f0f\u96a7\u9053\n        address \u4f60\u7684Client IPv6 Address   # \u6bd4\u59822001:470:1234:1234::2  (\u4ec5\u4e3e\u4f8b\uff0c\u8bf7\u4e0d\u8981\u590d\u5236)\n        netmask 64\n        endpoint \u4f60\u7684Server IPv4 Address\n        local \u4f60\u7684Client IPv4 Address\n        ttl 255\n        gateway \u4f60\u7684Server IPv6 Address\n<\/code><\/pre>\n<p>\u7136\u540e\u542f\u52a8\u96a7\u9053<\/p>\n<pre><code>ifup he-ipv6\n<\/code><\/pre>\n<p>\u68c0\u67e5\u662f\u5426\u6210\u529f\u4f7f\u7528ipv6<\/p>\n<pre><code>ping6 google.com\n\n#\u5e94\u8be5\u6709\u7c7b\u4f3c\u4ee5\u4e0b\u8f93\u51fa\nPING google.com(lga25s73-in-x0e.1e100.net (2607:f8b0:4006:816::200e)) 56 data bytes\n64 bytes from lga25s73-in-x0e.1e100.net (2607:f8b0:4006:816::200e): icmp_seq=1 ttl=120 time=10.7 ms\n64 bytes from lga25s73-in-x0e.1e100.net (2607:f8b0:4006:816::200e): icmp_seq=2 ttl=120 time=13.7 ms\n64 bytes from lga25s73-in-x0e.1e100.net (2607:f8b0:4006:816::200e): icmp_seq=3 ttl=120 time=10.7 ms\n64 bytes from lga25s73-in-x0e.1e100.net (2607:f8b0:4006:816::200e): icmp_seq=4 ttl=120 time=10.8 ms\n<\/code><\/pre>\n<h2>\u4e3a\u865a\u62df\u673a\u7f51\u6865\u6dfb\u52a0ipv6\u652f\u6301<\/h2>\n<h3>\u8bbe\u7f6evm\u7f51\u6865ipv6\u8bbe\u7f6e<\/h3>\n<p>\ud83d\udca1<br \/>\n\u5728\u7ee7\u7eed\u524d\u8bf7\u5173\u95ed\u6240\u6709\u865a\u62df\u673a\u3002\u4fee\u6539\u7f51\u6865\u8bbe\u7f6e\u4f1a\u4f7f\u6240\u6709\u4f7f\u7528\u5b83\u7684\u6b63\u5728\u8fd0\u884c\u7684\u865a\u62df\u673a\u65ad\u7f51\uff08\u53ea\u80fd\u901a\u8fc7\u91cd\u542f\u865a\u62df\u673a\u6765\u6062\u590d\uff09<\/p>\n<p>\u5047\u8bbe\u6211\u4eec\u865a\u62df\u673a\u4f7f\u7528vmbr1\u4f5c\u4e3a\u7f51\u6865\uff08\u4e0d\u662f\u9ed8\u8ba4\u7684vmbr0\uff09\uff08\u901a\u5e38NAT\u673a\u4f1a\u8fd9\u6837\u914d\u7f6e\uff09<\/p>\n<p>\u5728\/etc\/network\/interface\u91cc\u6dfb\u52a0<\/p>\n<pre><code>iface vmbr1 inet6 static\n        # \u8bf7\u586b\u5165\u548che-ipv6\u540c\u6bb5\u7684\u5730\u5740\u6bd4\u59822001:470:1234:1234::3\/64  (\u4ec5\u4e3e\u4f8b\uff0c\u8bf7\u4e0d\u8981\u5b8c\u5168\u590d\u5236)\n        # \u4e0d\u8981\u4f7f\u7528\u548che-ipv6\u6216\u5176\u4ed6\u7f51\u5361\u76f8\u540c\u7684\u5730\u5740\n        address \u4f60\u7684Client Ipv6\u5730\u5740\u540c\u6bb5\u7684\u53e6\u4e00\u4e2a\u5730\u5740\/64\n<\/code><\/pre>\n<p>\u4f7fvmbr1\u4f7f\u7528\u65b0\u8bbe\u7f6e<\/p>\n<pre><code>#\u5173\u95edvmbr1\nifdown vmbr1\n#\u6253\u5f00vmbr1\nifup vmbr1\n<\/code><\/pre>\n<h3>\u83b7\u53d6HE<\/h3>\n<p>TunnelBroker\u5206\u914d\u7684\u5df2\u8def\u7531\u7684\u7f51\u6bb5<\/p>\n<p>\u96a7\u9053\u4f7f\u7528\u7684\u5730\u5740\u662f\/64\u3002\u5e76\u4e0d\u80fd\u7ee7\u7eed\u5728\u5212\u5206\u7f51\u6bb5\u4e86\u3002\u4f46\u662fHE<br \/>\nTunnelBroker\u4e00\u5171\u7ed9\u6211\u4eec\u4e86\u4e24\u4e2a\/64\u7f51\u6bb5\u3002\u4e00\u4e2a\u662f\u7ed9\u6211\u4eec\u96a7\u9053\u7528\u7684\u3002\u53e6\u4e00\u4e2a\u624d\u662f\u7ed9\u6211\u4eec\u865a\u62df\u673a\u7528\u7684\u3002<\/p>\n<p>\ud83d\udca1 \u76ee\u524dHE<br \/>\nTunnelBroker\u70ed\u95e8\u5730\u533a\u9ed8\u8ba4\u53ea\u6709\/64\u7f51\u6bb5\u53ef\u4ee5\u4f7f\u7528\u3002\u90e8\u5206\u5730\u533a\u624d\u53ef\u4ee5\u5206\u914d\u5230\/48\u7f51\u6bb5\u3002\u672c\u6587\u4f7f\u7528\/64\u7f51\u6bb5\u4f5c\u4e3a\u4f8b\u5b50\u3002<\/p>\n<p>!<a href=\"https:\/\/pic.cosmiccat.net\/uploads\/2024\/01\/08\/he-1.png\">https:\/\/pic.cosmiccat.net\/uploads\/2024\/01\/08\/he-1.png<\/a><\/p>\n<p>\u5176\u4e2dRouted<br \/>\n\/64\u7684\u7f51\u6bb5\u5c31\u662f\u6211\u4eec\u5c06\u8981\u7ed9\u865a\u62df\u673a\u4f7f\u7528\u7684\u7f51\u6bb5\u3002\u8bf7\u6ce8\u610f\u5b83\u548c\u4e4b\u524d\u7684\u96a7\u9053\u7528\u7684Server<br \/>\nIPv6 Address \u4e0d\u662f\u4e00\u4e2a\u7f51\u6bb5\u3002\u8bf7\u8bb0\u5f55\u4e0b\u6765Routed \/64\u7684\u503c\u3002\u7a0d\u540e\u4f1a\u7528\u5230\u3002<\/p>\n<p>\u672c\u6587\u5047\u8bbe\u5206\u914d\u5230\u7684Routed \/64\u7684\u503c\u4e3a\u201d2001:1111:2222:3333::\/64\u201d<\/p>\n<h3>\u5b89\u88c5ndppd(\u53ef\u9009\uff09\u548cradvd<\/h3>\n<p>\u63a5\u4e0b\u6765\u9700\u8981\u5b89\u88c5ndppd\u548cradvd\u3002<\/p>\n<p>ndppd\u7528\u6765\u7ba1\u7406\u90bb\u5c45\u53d1\u73b0\u4fe1\u606f\u3002\u611f\u8c22\u8bc4\u8bba\u533a\uff0che\u96a7\u9053\u5df2\u7ecf\u6709\u8def\u7531\u4e86\uff0c\u4e0d\u9700\u8981ndppd\u3002\u56e0\u6b64\u4f7f\u7528he<br \/>\nipv6\u96a7\u9053\u7684\u8bdd\u4e0d\u9700\u8981\u5b89\u88c5\u548c\u914d\u7f6endppd\u3002<\/p>\n<p>radvd\u7528\u6765\u7ed9\u5c0f\u9e21\u7f51\u6865\u901a\u544a\u8def\u7531\u548c\u81ea\u52a8\u5206\u914d\u5730\u5740\u3002<\/p>\n<pre><code>apt update &amp;&amp; apt -y install ndppd radvd\n<\/code><\/pre>\n<h3>\u8bbe\u7f6endppd\uff08\u53ef\u9009\uff09<\/h3>\n<p>\u521b\u5efa \/etc\/ndppd.conf \u4e3a\u4ee5\u4e0b\u5185\u5bb9<\/p>\n<pre><code>#\u8bf7\u586b\u5199\u96a7\u9053\u7684interface\u540d\u79f0\u3002\u6bd4\u5982he-ipv6\nproxy he-ipv6 {\n  router yes\n  #\u586b\u5199Routed \/64\u7684\u503c\u3002 \u5982\u679c\u4f60\u6709\/48\u7684\u8bdd\u4e5f\u53ef\u4ee5\u586b\u5728\u8fd9\u91cc\n  rule 2001:1111:2222:3333::\/64 {\n    static\n  }\n}\n<\/code><\/pre>\n<p>\u7136\u540e\u542f\u52a8\u5e76\u8bbe\u7f6e\u4e3a\u5f00\u673a\u81ea\u52a8\u542f\u52a8<\/p>\n<pre><code>systemctl start ndppd.service\nsystemctl enable ndppd.service\n<\/code><\/pre>\n<h3>\u8bbe\u7f6eradvd<\/h3>\n<p>\u521b\u5efa \/etc\/radvd.conf \u4e3a\u4ee5\u4e0b\u5185\u5bb9<\/p>\n<pre><code>#\u8fd9\u91cc\u586b\u5199\u865a\u62df\u673a\u7528\u7684\u7f51\u6865\u540d\u79f0\u3002\u6bd4\u5982vmbr1\ninterface vmbr1 {\n  AdvSendAdvert on;\n  MinRtrAdvInterval 3;\n  MaxRtrAdvInterval 10;\n#\u8fd9\u91cc\u586b\u5199\u4f60\u7684Routed\/64\u524d\u7f00\u7684\u503c\u3002\u5982\u679c\u6709\/48\u524d\u7f00\u3002\u4e5f\u5fc5\u987b\u624b\u52a8\u5206\u6210\/64\u624d\u80fd\u81ea\u52a8\u5206\u914d\u5730\u5740\u3002\u8981\u4e0d\u7136\u5c31\u5f97\u7528\u5e26\u72b6\u6001\u7684dhcpv6\u6216\u8005\u624b\u52a8\u5728\u865a\u62df\u673a\u91cc\u914d\u7f6e\u7f51\u6bb5\u3002\n  prefix 2001:1111:2222:3333::\/64 {\n    AdvOnLink on;\n    AdvAutonomous on;\n    AdvRouterAddr on;\n  };\n};\n\n#\u5982\u679c\u6709\u591a\u4e2a\u865a\u62df\u673a\u7528\u7684\u7f51\u6865\uff0c\u53ef\u4ee5\u4eff\u7167\u4e0a\u9762\u7ee7\u7eed\u6dfb\u52a0\n<\/code><\/pre>\n<p>\u7136\u540e\u542f\u52a8\u5e76\u8bbe\u7f6e\u4e3a\u5f00\u673a\u81ea\u52a8\u542f\u52a8<\/p>\n<pre><code>systemctl start radvd.service\nsystemctl enable radvd.service\n<\/code><\/pre>\n<h3>\u542f\u52a8\u865a\u62df\u673a<\/h3>\n<p>\u6700\u540e\uff0c\u6211\u4eec\u628a\u865a\u62df\u673a\u91cd\u65b0\u542f\u52a8\u3002\u73b0\u5728\u865a\u62df\u673a\u5e94\u8be5\u53ef\u4ee5\u901a\u8fc7SLAAC\u81ea\u52a8\u83b7\u53d6\u5230ipv6\u5730\u5740\u5e76\u4f7f\u7528\u4e86.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u901a\u8fc7HE ipv6\u96a7\u9053\u7ed9proxmox\u5c0f\u9e21\u5206\u914dipv6\u5730\u5740 \u524d\u8a00 \u5e0c\u671b\u53ef\u4ee5\u5e2e\u52a9\u5230\u66f4\u591a\u7684\u7075\u8f66\u3002 \u653e\u5f00\u4e00\u4e0b\u601d\u7ef4\u3002\u662f [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[19,21],"class_list":["post-31","post","type-post","status-publish","format-standard","hentry","category-linux","tag-linux","tag-pve"],"_links":{"self":[{"href":"https:\/\/blog.cnsn.fun\/index.php?rest_route=\/wp\/v2\/posts\/31","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.cnsn.fun\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.cnsn.fun\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.cnsn.fun\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.cnsn.fun\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=31"}],"version-history":[{"count":0,"href":"https:\/\/blog.cnsn.fun\/index.php?rest_route=\/wp\/v2\/posts\/31\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.cnsn.fun\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=31"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.cnsn.fun\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=31"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.cnsn.fun\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=31"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}