netbird-proxy: enable Docker IPv6 (proxy couldn't reach v6-only mgmt) #60

Merged

k.renner merged 1 commits from netbird-proxy-docker-ipv6 into master

2026-06-26 22:09:20 +00:00

Author	SHA1	Message	Date
k.rennerandClaude Opus 4.8	e0d3870991	netbird-proxy: enable Docker IPv6 so the proxy reaches the v6-only mgmt path The deployed proxy on proxy-1 (v6-only host) couldn't connect to the management server: 'dial tcp [2a01:...]:443 / 162.55.50.97:443: network is unreachable'. The host reaches mgmt over v6 fine, but Docker had no IPv6 (no daemon.json), so the container had no v6 egress and no v4 exists. Add /etc/docker/daemon.json (ipv6 + ULA fixed-cidr-v6 + ip6tables NAT), flush it (restart docker) before the container deploys, and put the proxy service on the default bridge (network_mode: bridge) so it inherits that v6. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-27 00:09:14 +02:00

Author

SHA1

Message

Date

k.rennerandClaude Opus 4.8

e0d3870991

netbird-proxy: enable Docker IPv6 so the proxy reaches the v6-only mgmt path

The deployed proxy on proxy-1 (v6-only host) couldn't connect to the
management server: 'dial tcp [2a01:...]:443 / 162.55.50.97:443: network is
unreachable'. The host reaches mgmt over v6 fine, but Docker had no IPv6
(no daemon.json), so the container had no v6 egress and no v4 exists.

Add /etc/docker/daemon.json (ipv6 + ULA fixed-cidr-v6 + ip6tables NAT),
flush it (restart docker) before the container deploys, and put the proxy
service on the default bridge (network_mode: bridge) so it inherits that v6.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-27 00:09:14 +02:00