support IPv4 or IPv6 only VPNs #642

fkooman commented 2025年05月15日 19:24:38 +02:00

For 4.x server I'm investigating supporting only IPv4, or only IPv6 connections. This may be beneficial for "split tunnel" VPNs where there is no need for either IPv4 or IPv6.

An example config, note the Address line that now contains only 1 IPv4 address and the AllowedIPs line that has only an IPv4 prefix:

[Interface]
MTU = 1392
PrivateKey = gP3p+u4BAnSSydoVujfed+idDXLcr5wEXQvv3oXBqV4=
Address = 10.39.112.5/20
DNS = 9.9.9.9
[Peer]
PublicKey = EJQtm4KT8g/fUH/2/PRZnmpJTQggz737jwggN6K00ys=
PresharedKey = HJOduw5fXLXEgt1KgLQ3qezEGmiic4JUzQLo8MTd5kE=
AllowedIPs = 0.0.0.0/0
Endpoint = fed4x.tuxed.net:51820

The current app says this in the output of eduvpn-gui -d:

2025年05月15日 19:21:15,387 - MainThread - DEBUG - eduvpn.nm - nm.py:376 - Adding new connection
2025年05月15日 19:21:15,391 - MainThread - ERROR - eduvpn.nm - nm.py:979 - add connection error: nm-connection-error-quark: ipv6.method: method 'manual' requires at least an address or a route (6)

For 4.x server I'm investigating supporting only IPv4, or only IPv6 connections. This may be beneficial for "split tunnel" VPNs where there is no need for either IPv4 or IPv6. An example config, note the `Address` line that now contains only 1 IPv4 address and the `AllowedIPs` line that has only an IPv4 prefix: ``` [Interface] MTU = 1392 PrivateKey = gP3p+u4BAnSSydoVujfed+idDXLcr5wEXQvv3oXBqV4= Address = 10.39.112.5/20 DNS = 9.9.9.9 [Peer] PublicKey = EJQtm4KT8g/fUH/2/PRZnmpJTQggz737jwggN6K00ys= PresharedKey = HJOduw5fXLXEgt1KgLQ3qezEGmiic4JUzQLo8MTd5kE= AllowedIPs = 0.0.0.0/0 Endpoint = fed4x.tuxed.net:51820 ``` The current app says this in the output of `eduvpn-gui -d`: ``` 2025年05月15日 19:21:15,387 - MainThread - DEBUG - eduvpn.nm - nm.py:376 - Adding new connection 2025年05月15日 19:21:15,391 - MainThread - ERROR - eduvpn.nm - nm.py:979 - add connection error: nm-connection-error-quark: ipv6.method: method 'manual' requires at least an address or a route (6) ```

fkooman commented 2025年05月16日 10:39:13 +02:00

It may be easier to support any combination of Address values, i.e. with 1 IP, with 2, with n IPs.

It may be easier to support any combination of `Address` values, i.e. with 1 IP, with 2, with _n_ IPs.

jwijenbergh commented 2026年02月23日 15:06:01 +01:00

fix has been committed, will be in a new version this week

fix has been committed, will be in a new version this week