New ISP with IPv6 internet reachable only

  • SFTP is a part of SSH. OMV already has SSH, so it also has SFTP. There is also an SFTP plugin you can use to setup jails for users.


    I already mentioned Filezilla for client side use. Available for Mac, Windows, Linux, and maybe others.

    --
    Google is your friend and Bob's your uncle!


    OMV AMD64 7.x on headless Chenbro NR12000 1U 1x 8m Quad Core E3-1220 3.1GHz 32GB ECC RAM.

  • Yes i am aware of the SFTP protocol. I am not sure that the OMV built in SFTP plugin allows me to do what i need. i remember i exchanged it versus glftpd due to limitations in administration. I will check once more and see.


    I remember there were painful limitations on how the jails and access to filesystem works. Can i use a bind mount with it?


    Filezilla of course i do know.

  • I don't use the OMV SFTP plugin. My use history of SFTP long precedes my use of OMV (v2) so I always just set it up by hand and carried that into OMV. From what I can tell, the plugin is capable of doing what I have done all by hand.


    I bind a mergerfs pool to a sftp user's jail in fstab.

    --
    Google is your friend and Bob's your uncle!


    OMV AMD64 7.x on headless Chenbro NR12000 1U 1x 8m Quad Core E3-1220 3.1GHz 32GB ECC RAM.

  • I did post my requirements a few posts before. To repeat them once more here:


    - Access to local files from remote

    - Fast and reactive GUI

    - lightweight

    - User accounts with selective access rights


    It would be smart if it is web based so i can run it through a cloudflare tunnel and comes with a lightweight webserver or i can use my existing swag container.

  • Well traffic should not be that much. I believe i can handle IPv4 via cloudflare or an alternative proxy/tunnel.


    This thing seems to be pretty cool. It is capable of SFTP, Webdav, HTTP and allows administration via Web GUI. And after a first try it is really responsive (not like nextcloud).

  • I poked around with sftpgo a bit and have to say it is pretty neat. Can recommend it. It has ton of functionality and configuration options.

    By far the best i found for sharing of files from a local storage with multiple users.

  • I am still struggling getting IPv6 to work in Docker.

    I got my bridge network to provide an IPv6 subnet but all connected containers do not receive an IPv6 up to here. Even when taking them down and redeploying them via compose.






    daemon.json:


    Code
    {
      "data-root": "/var/lib/docker",
      "experimental": true,
      "ip6tables": true,
      "fixed-cidr-v6": "2001:db8:1::/64"
    }


    Any documentation i tried failed. No idea how i can get the containers of my bridge network to pick up IPv6 adresses yet.

  • It's weird. Even though the docker containers don't receive an IPv6 I can still access the dockers via the host IPv6 adress and respective open port of the docker service. Not sure how that works but possibly docker is doing some internal IPv6 to IPv4 NAT?


    So this for example


    Code
    http://[fd00::d250:99ff:fe76:7d98]:8082/

    Works for my iobroker docker that only has an IPv4 on the bridge network.

  • I am still struggling getting IPv6 to work in Docker.

    I got my bridge network to provide an IPv6 subnet but all connected containers do not receive an IPv6 up to here. Even when taking them down and redeploying them via compose.

    My brother from an OMV mother: No disrespect but I think you're way overcomplicating the IPv6 vs. IPv4 issue... IPv6 is only a constraint/problem to your gateway. Once external traffic hits your router [allegedly via IPv6 since you say your ISP forces this] you can shape the traffic "port-forwarded" into your LAN however you need it. I can't imagine any circumstance that utilizing IPv6 within your LAN domain is easier or necessary compared to IPv4.


    Why not just set up a reverse proxy i.e. NGINX Proxy Manager (even easily deployable as a Docker container!) and direct all port 80 & 443 port-forwards from your router to that address? Any IPv6 requests from WAN will be redirected to that host, even if the Proxy Manager is at a LAN IPv4 address -- likewise the Proxy Manager can access hosts at their respective IPv4 LAN address.

    Added bonus: set up your DNS Overrides on your LAN DNS service to redirect those FQDNs from within your LAN to the Proxy Manager and you'll be able to access the same services with the same FQDN whether you're within your LAN or away from home.

  • Well actually i already solved everything regarding services i want to make available to the outside doing a hop over Cloudflare.

    The main issue i had to overcome as you can read in the first pages of this thread was that if you access my services from e.g. an IPv4 Wifi to internet it is just impossible to get in as i only have a public IPv6 address. This is now solved via Cloudflared.

    Everything locally works nicely in IPv4 and Cloudflare works as the proxy to the outside world.

    I also have the DNS override running that you mention via my Pihole.


    Nevertheless i got interested in IPv6 and am just now trying to activate native IPv6 in my whole LAN infrastructure. I do not really need it, but I just got interested in setting it up.

    I also got IPv6 running by now even my dockers are accessible via IPv6. Although i honestly do not understand why. That is what my last post is about.


    The long term benefit (beside educating myself) i can see of this exercise is that I can at some point in the future switch off Cloudflare again. That will be the case when IPv6 is wide spread and available from any remote network i use. (no idea when that will be the case though)

Jetzt mitmachen!

Sie haben noch kein Benutzerkonto auf unserer Seite? Registrieren Sie sich kostenlos und nehmen Sie an unserer Community teil!