DefGuard / defguard

Zero-Trust access management with true WireGuard® 2FA/MFA
https://defguard.net
Other
1.57k stars 50 forks source link

Fix the IPv6 support #847

Open Someguy123 opened 2 weeks ago

Someguy123 commented 2 weeks ago

Is your feature request related to a problem? Please describe. I just installed Defguard for us to consider using it at our company instead of pure wireguard, unfortunately it seems Defguard doesn't seem to allow IPv6 addresses for the gateway subnet, endpoint, nor for DNS - which renders Defguard useless for our company as our existing Wireguard VPN network is almost exclusively IPv6-only. Defguard does appear to accept IPv6 subnets in the Allowed IPs section but that's not very useful when the VPN has no IPv6 address or subnet

More and more companies (including my own) are using IPv6 especially for their internal networks such as VPNs to conserve IPv4 addresses, so it's important for Defguard to have at least basic IPv6 support

Describe the solution you'd like It would be great if Defguard could add support for IPv6 addresses / subnets ideally alongside IPv4 - for example:

All of the above is supported with native Wireguard, so it's purely Defguard itself which requires updating to support IPv6

Additional context

Screenshots showing Defguard v1.0.0 rejecting IPv6 addresses/subnets on the "Edit Location" screen:

image image image
teon commented 2 weeks ago

@Someguy123 you are right! in the middle of the 1.0 release battle, testing multiple components we forgot about the frontend changes for IPv6. We did introduce full IPv6 for client and server - we just need to change the input frontend rules. We will do so In the upcoming quick fix 1.0.1 release. Sorry about that!

t-kitipot commented 1 day ago

I test the new 1.1.0 version today, The other boxes work fine, except the "Gateway VPN IP address and netmask" box. If I only input ipv4 or ipv6 it works.

image
t-aleksander commented 1 day ago

@t-kitipot this is currently not supported but we are planning to add it. See https://github.com/DefGuard/wireguard-rs/issues/81 for details/progress.