Anyone running NGINX with IPv6? Possible?

[bengalih]

I've been running entware NGINX on my Asus for years now serving out several internal web services.
I'm trying to learn a bit more about IPv6, and was trying to get one of my sites to listen and serve out over it's IPv6 address in addition to IPv4.

I have tested by using the IPv6 firewall option in the GUI to allow the IPv6 address and port of a web server through.
This worked successfully and I was able to access my internal web server from an external source using http://[IPv6 address]:port.

But now, I want to use NGINX to proxy https, but can't get it to work.

I won't post any specific config yet until someone confirms that this can be done - and hopefully find someone else who is actually doing this.

thanks

 

[bengalih]

Just want to update that I was successful in doing this. To get it working, the main things required are:

1) Make sure you have IPv6 connectivity on your router. If you can ping out via IPv6 you are probably good here.
2) Make sure your NGINX config is set up properly to listen on IPv6. You will have to add a second listener line like this:

server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;

3) Make sure you configure the firewall. I was successful in doing this by keeping the IPv6 Firewall in the GUI enabled. Because you are trying to allow IPv6 traffic into the router for NGINX and not another internal machine, you will probably need to manage the firewall rules from a command line. This is similar for what you should have had to do for NGINX with IPv4. Here is my example

ip6tables -I INPUT -p tcp --dport 443 -j ACCEPT

This will allow all incoming 443 IPv6 traffic to your router. You will also need to place this somewhere in a script to be re-applied at boot.

Once this was done I was successfully able to connect over IPv6. You can use a site like this to perform tests:

Is your site IPv6 ready?

Test whether a web address, site, URL, or domain is IPv6 accessible. Tests for DNS AAAA records, IPv6-addressable nameservers, glue, IPv6 connectivity (port 80), and several other elements.

ready.chair6.net

 

[pkoci]

You can run Nginx on router?

 

[heysoundude]

You can run Nginx on router?

with entware you can, yes. among many many other things:

Packages list

https://bin.entware.net/ to choose your architecture