Hi OpenWrt Community,
I recently got me a Linksys wrt3200AC and it's running 18.06.1 great. However, my cable provider only gives me a native IPv6 adress while all IPv4 is routed through a very slow provider sided gateway, including NAT and possibly traffic shaping, deep package inspection etc. (DSLite using the german provider Unitymedia). Adding insult to injury, there isn't a modem available so i'm stuck with the providers shitty wifibox (that doesn't even allow modem mode). So yeah I'm kinda screwed.
However, I want to route all my traffic through a 3rd party VPN provider anyway and I made sure that provider supports OpenVPN over IPv6 which would allow me to bypass the double NAT and throttling on IPv4. This doesn't quite work yet though. Here's my current setup:
Symbols
-> IPv4
=> IPv6
=>> IPv4 & IPv6
~>> IPv4 & IPv6 with Provider NAT
Basic Setup (This is without any additional configuration, out of the box)
[Clients] =>> [OpenWrt Router] =>> [ProviderBox] ~>> [Internet]
Current Setup
Currently I can only use OpenVPN for all my clients with IPv4. I'm worried about Leaking my IPv6 adress while using the VPN so I disabled it. The firewalls are configured such that clients can only connect to the internet though the VPN, if it's down so is the internet connection of the clients
[OpenWrt Router] =>> [ProviderBox]
[Clients] -> [OpenWrt Router] -> [VPN Provider] -> [Internet]
Dreamsetup
I want all traffic to be routed via IPv6 to my VPN Provider. If I understand it correctly, my VPN provider only has one public facing IPv6 Adress for the entire server, therefore I'd have to deal with portforwarding on their side and IPv6 NAT which is fine with me. I don't need IPv6 on the internal network either.
[OpenWrt Router] =>> [ProviderBox]
[Clients] => [OpenWrt Router] => [VPN Provider] =>> [Internet]
So here are the problems I am facing: I am able to connect to the provider using IPv4 and everything works fine. Connecting via IPv6 suceeds aswell but non of my clients can reach the internet.
I assume you'll need more infos on my configuration, but I'm not sure what exactly you need, so feel free to request more details.