can not access docker container via ipv6 from unraid

[Autchirion]

Hey Guys,

 

I'm at a loss here, I've got multiple docker containers running on my unraid server which are having their own ipv4 + ipv6 address (using macvlan). I can access them from all my services from the network but I can not even ping them from my unraid server itself on their IPv6. I've got another server running ubuntu which has the same issue.

 

@MAM59 posted "...the Fritzbox handles V6 very poorly and utterly wrong. It will be hard to impossible to train it it use a "good" address, switching the dockers to static wont help you because your prefix is dynamic... BAD LUCK!!!" here

I'm also using a FritzBox, so I'm wondering if this is related to this or if this is just a misconfiguration on my side.

 

Have a great day

Autchi

[MAM59]

The Problem with Fritzbox-en is that they have their own meaning about the IPV6 address of the client (Docker or something). They do not take the given address (static or something) but build their fantansy addresses with a fixed scheme from prefix + MAC address. If the client uses a different scheme, you are lost.

You cannot even configure addresses in the fritzbox, they will be overwritten after the first contact with the host (so, they may work for a short period but the next day they point to somewhere else).

It is a totally stupid behaviour and not legal too. But AVM thinks its good enough for pure clients, YOU SHOULD NOT RUN ANY SERVER SERVICES!!!

 

(Thats why ISPs love FritzBoxes....).

 

I don't know if this is your problem too, without diagnostics nobody can guess...

 

[Autchirion]

Ok, great, I was so happy to get a fritzbox because they seemed more customizable compared to the vodafone station. Let's assume it's an issue with the FritzBox, Do you know by any chance, if I add my own DHCP Server would this override the IPv6 shit they are doing? I mean, basically I could forward the prefix to my other router which than handles all the DHCP (v6) related topics.

 

Anyways, I attached the diagnostics.

mano-server-diagnostics-20240917-1406.zip

[MAM59]

6 minutes ago, Autchirion said:

if I add my own DHCP Server would this override the IPv6 shit they are doing? I mean, basically I could forward the prefix to my other router which than handles all the DHCP (v6) related topics.

No.  As I said, fritzbox gives a s@§" about addresses whereever they are coming from. It throws them away and dreams some of her own.

 

You would be better prepared with the vodafone station and a "real" router. Like Mikrotik or something else (Warning! this is hardcore! NOT for the common people!!!) Actually ANY other brand I know is more clever than a stupid Fritzbox. She is just meant to be simple and does not care about more serious stuff.

 

(and she is totally sufficient for people that do not want to run their own stuff)

Edited September 17, 2024 by MAM59

[Autchirion]

I just ran some more tests, and it seems not to be fritzbox related. So here is what I did:

1. create VPN tunnel between a server on the internet and unraid
2. ping6 my unraid server -> responding
3. ping6 my docker container -> not responding
4. create VPN tunnel between a server on the internet and fritzbox
5. ping 6 my unraid server -> responding
6. ping6 my docker container ->responding

3. and 6. indicate, that there is an issue communicating from the host to the container via macvlan. This does not not prove that it isn't the fritzbox, but it reduces the probability.

 

So, I think there is an issue communicating from the host to the container via IPv6.