IPv6 internet over Tor

Feature Requests
1

Realize full IPv6 support via Tor network (ipk package) without affecting the [200::]-[3ff::] range used by Yggdrasil network. For those who can't use Miredo, Teredo and tunnel brokers but want to access IPv6 on all devices. Tor can create a HttpTunnelPort (Http Connect) proxy on IPv6 with access to IPv4/IPv6 sites regardless of IPv6 internet access and a transparent IPv4 proxy with access to IPv4/IPv6 sites. At the same time, excluding the possibility to go to the site not from its real IPv6 ip. My internet provider does not provide access to IPv6 so this solution would be helpful.

Forwarding from ipv6 addresses to ipv4 firewall is not supported so redirecting to transparent proxy is not possible. For HttpTunnelPort (Http Connect) forwarding through firewall is not supported. On HttpTunnelPort (Http Connect) forwarding through third-party packets does not work, and if it does, it works only if Tor gives an error about using an unsuitable type of proxy

2

The year is... almost 2024. Who the .... does not provide IPv6 (access?) in this day and age? Name this provider.

Workarounds to access IPv6 should not be necessary on the cusp of 2024.

3

Beeline KZ (Kazakstan) does not support ipv6. There are still not a few ISPs in the world that do not provide access to ipv6, even though ipv6 is actively developing

4

Aren't they an op who have both landlines and mobile?

OK, seems insane with no IPv6.

Is HE.net available to you? They're great, and free.

Offer to your ISP that you can set up IPv6 for them :smiley:

1 Like
5

I need to buy additional service "direct address" in order to be able to configure Hurricane Electric and there you need to register and again pay and I do not want to pay and I want everything without money and Tor is a free option for access to ipv6

6

https://openwrt.org/docs/guide-user/network/ipv6_ipv4_transitioning - try 6to4. I remember it worked with no hastle, no additional registration was required.

7

Actually quite a lot. My ISP with more than 30 million client base started deplyment only couple years ago, reached me about a year ago. IPv4 only worked better than dual stack.

8

The only option I've seen to try is 6to4 Tunnel but it didn't work. I think my Tor idea is worthy of implementation

9

Can you ping 192.88.99.1?

10

Tor is slower, it doesn't support UDP, your address changes often.

11

Yeah, it's pinging.
With the 6to4 package I have endless spam in the system logs: Sun Dec 10 20:44:34 2023 daemon.notice netifd: Interface 'wan6' is setting up now
Sun Dec 10 20:44:34 2023 daemon.notice netifd: Interface 'wan6' is now down

12

Well, probably they block it at protocol level then...

13

Have you tried different HE endpoint?

14

I don't know what HE endpoint. I don't have a static external ip for this. The external ip is dynamic. Traffic goes through many local subnets before reaching the external ip. As I understand because of the Carrier Grade Nat technology HE will not work. They also require personal information that I don't want to specify

15

But in any case I consider my idea worthy to be implemented by OpenWrt programming team in order to increase the chances of connection to ipv6 and for variety and freedom to choose more suitable options of connection to ipv6

16

How do you guarantee that Tor exit node has IPv6 address?

17

If I go to Tor Browser or Tor Proxy, I always have ipv6.google.com working and the ipv6 address on test-ipv6.com is also detected. Without Tor, ipv6.google.com will not open and test-ipv6.com will not see my ipv6 address. Socks Proxy Tor does not give access to ipv6

18

Have you considered using a VPN with IPv6 service? Or is that something that your ISP will actively try to block?

If it's viable, I'd recommend Cloudflare's WARP service. You can generate and use native WireGaurd clients, either directly on your devices or just configure it on your router. I don't use it for IPv6 (luckily, I do have native IPv6 now, even if it's a stupid /64 prefix), but it has working v6 and I can still get my full service bandwidth of 250 Mbps over the connection. Though performance may vary at your location, so that's not absolute guarantee.

19

I don't have any problems with any VPN at all. The other question is how to set it all up

20

Try their 1.1.1.1 app to evaluate if the service works in your region at all. Even if the app doesn't work, wgcf—a thrid-party tool to generate WG config files for the same service—does. With it, you can use the generated config files to use with official WireGaurd clients.

As for setting up WireGuard client on OpenWrt, I haven't done it myself, but there are instructions on the wiki and of course forum members can help you out here.