Is there any reason why VPN Client isn't supporting IPv6?

Hi, are there any plans of supporting IPv6 for VPN Client (Wireguard) in future? And why isn’t it supported yet?

My VPN provider supports IPv6.

Thanks!

If you mean tunnel ipv6 traffic into external / 3rd party services, it should be fairly easy if major VPN services support ipv6 (like some type of proxy) Otherwise, it is going to be extremely confusing to configure the VPN client to force v6 traffic into VPN and have it not working.

What is the service you are using that’s supporting ipv6, we can take a look

i too am wondering this, why have IPv6 if you can’t use it?

Pushing this up again… Anything new here? It does not really make sense in my opinion that this is still not supported. Should not be a big issue, so why wait?

Service is ovpn.com and will be maybe mullvad in future.

Are there any more information coming? :slight_smile:

No movement. Most people are using ipv4. But if you do have a good use case for ipv6 please let me know.

Now, my definition of ipv6 is to route ipv6 traffic to VPN and then translate that ipv6 into the provider’s ipv6 address. (NOT you connecting to VPN over ipv6 and inside is still ipv4 this should work already)

not really. firewalla internals have no issue supporting v6 into VPN client, so one day more popular VPN services start to support v6, we can just code the UI to allow that.

To answer your question about use cases: privacy and access to geographically restricted content. These are the two most common reasons that people run their traffic through a VPN. That works fine if you’re running IPv4, but with IPv6 becoming more common and more browsers now giving preference to IPv6 addresses, not having IPv6 on the VPN client is becoming an issue and disabling IPv6 for the entire network just isn’t a satisfactory workaround.

u/firewalla can you clarify what the situation with IPv6 and VPN is, please? It’s a bit confusing.

On the Help pages it says: *"*Firewalla VPN client does NOT support IPv6. IPv6 traffic will be blocked by Firewalla when the VPN is connected".

What does that mean? Just IPv6 traffic going to the VPN will be blocked, or in general? Will it be dropped or tunnelled as IPv4 over the VPN?

I agree with your definition of what routing over the VPN via IPv6 should look like. Mullvad VPN supports IPv6, but without complete support on the Firewalla side for DNS etc, etc then there are gaps in the implementation. Also appreciate that IPv4 isn’t going anywhere anytime soon, but we’re looking at you to be ahead of the curve.

I do have a use case for forwarding IPv6 into the VPN. My ISP is lousy and doesn’t port forward correctly. So, to get around this, I have a WireGuard VPN server setup at another location. My v4 traffic is being sent to the VPN and everything is fine. But v6 due to this limitation on the Firewalla goes directly out to the ISP. Responsiveness is better going directly to the ISP, so v6 is being preferred.

Yes, I know this is a niche case, and I know that v6 wasn’t intended to be translated, and I know I could just turn v6 off completely. Blah blah blah. IMO this is bs. Since I can’t get my ISP to solve their issues, I want to build a workaround and I don’t feel I should be forced to turn IPv6 off.

There are some providers which are supporting IPv6 already:

,Perfect Privacy
,Mullvad
,OVPN
,AzireVPN
,AirVPN
,PandaVPN

Yes there is no NordVPN or Cyberghost, but hide.me, mullvad and perfect privacy are major VPN providers.

IPv6 is the future, why waiting? And this will be a big plus on the comparison list against other router :slight_smile:

So maybe rethink about it :wink:

Hi @firewalla can you please code v6 into VPN soon? As someone else noted, several VPN providers already support it. In my case I built my own VPN server out on a VPS and run my traffic through that. When not behind my Firewalla I run v6 into it. I’d like to have v4 & v6 consistent whether I’m behind my Firewalla or not. I love my Firewalla Gold Plus and this is really my only complaint.

If for some reason you can’t code this in the near future, can you answer this question. If I ssh in and modify the WireGuard configuration files and add IPv6 myself, will that work? How would the front end app/GUI handle that?

Thanks.