feat(linux): add IPv6 support for VPN gateway by NNdroid · Pull Request #262 · anywherelan/awl

NNdroid · 2026-07-21T05:54:20Z

I only implemented it on Linux.

Add IPNetV6 field to VpnConfig, defaulting to "fd00:66::/48".
Implement deterministic IPv6 address mapping derived from PeerID and persisted in config, supporting custom user overrides.

pymq · 2026-07-21T09:13:09Z

Hi, thanks for this!

I'll take a closer look later, but for now I have a few suggestions:

add integration tests in application_test.go to verify that IP packet routing works correctly
add IPv6 packet tests in vpn/packet_test.go
add tests for the peerIPv6FromIPv4 function
in .github/workflows/test.yml, in a job end-to-end-test add a test that verifies real IPv6 routing (at least on Linux). I know it'll fail for now, but I'll later update the remote peer with an awl binary built from your branch, so IPv6 routing should start working
I'm sure there are many more tests we could add beyond these

… test

…t APIs for Android - Refactored IPv6 derivation logic into `config/ipv6.go` for cleaner abstraction. - Updated `VPNLocalIPMaskV6Unlocked` to automatically compute and return the derived IPv6 address based on the node's PeerID, avoiding redundant derivation in higher layers (`application.go`). - Added `ipv6Addr` to `PeerStatusInfo` JSON payload for exchanging IPv6 addresses with peers. - Exported `GetVpnNetworkAddressV4` and `GetVpnNetworkAddressV6` in `gomobile-lib` so the Android VPN service can query the exact subnet base addresses required for split-tunnel routing.

- Invert `if exists` in `service/tunnel.go` to reduce nestif complexity. - Update `TestTunnelPackets` to use the new derived IPv6 addresses from config, fixing packet routing mismatch.

pymq

Overall looks good to me except a few possible improvements

…ze IPv6 handling

…v6 updates - Return both A and AAAA records for TypeANY DNS queries in awldns - Allow updating peer.IPAddrV6 when a peer announces a changed IPv6 address in auth_status - Trigger ensureIPv6AddressLocked in SetIdentity to prevent unassigned IPv6 prefix on fresh node configs - Revert unintended comment formatting in test_suite_test.go

pymq · 2026-07-27T15:44:43Z

I tested it manually on my Linux machine:

ping to the remote IPv6 device works
VPN gateway works
I couldn't test the VPN gateway over IPv6 because I don't have an IPv6 connection available

pymq · 2026-07-27T16:50:16Z

I pushed your branch to this repo to run e2e tests:
https://github.com/anywherelan/awl/tree/NNdroid-ipv6

They all failed:
https://github.com/anywherelan/awl/actions/runs/30284786478/job/90040765234

NNdroid · 2026-07-28T01:56:22Z

I pushed your branch to this repo to run e2e tests: https://github.com/anywherelan/awl/tree/NNdroid-ipv6

They all failed: https://github.com/anywherelan/awl/actions/runs/30284786478/job/90040765234

Okay, I'll take a look when I have some free time.

…store early peer check in StreamHandler"

…fix CI IPv6 test

NNdroid · 2026-07-28T03:50:55Z

I pushed your branch to this repo to run e2e tests: https://github.com/anywherelan/awl/tree/NNdroid-ipv6

They all failed: https://github.com/anywherelan/awl/actions/runs/30284786478/job/90040765234

I tested that look like fine. you can see. https://github.com/NNdroid/awl/actions/runs/30325402319

pymq · 2026-07-28T04:11:08Z

Oh, I'm sorry. It looks like the issue was on my end

pymq · 2026-07-28T05:05:48Z

Thank you so much for your work! From my perspective, it's ready to be merged. There are still a few minor things we could improve, but the Linux support looks solid.

Are you planning to push anything else to this branch, or can I go ahead and merge it?

Also, do you have any plans for follow-up PRs, such as support for other platforms or any additional improvements?

NNdroid · 2026-07-28T06:47:08Z

Thank you so much for your work! From my perspective, it's ready to be merged. There are still a few minor things we could improve, but the Linux support looks solid.

Are you planning to push anything else to this branch, or can I go ahead and merge it?

Also, do you have any plans for follow-up PRs, such as support for other platforms or any additional improvements?

You can go ahead and merge it.
I am still planning IPv6 support for Windows; it requires more time.

feat(linux): add IPv6 support for VPN gateway

518e7f2

NNdroid force-pushed the master branch from 579e017 to 518e7f2 Compare July 21, 2026 06:40

fix: fix a test problem

d1ee9eb

NNdroid added 6 commits July 21, 2026 17:59

test: improve test coverage for IPv6 routing and packets

f013ce9

exec gofmt on the code & fix some problems for test

10ff81d

fix some problems for testing

ba2fce4

fix some problems for testing

70b93e3

fixed the issue of duplicate ports being acquired concurrently in the…

867825e

… test

fix some problems for vpn_hostnet_integration_test.go

1690292

This comment was marked as resolved.

Sign in to view

modify the starting port of pickFreeAddr

0a5efcf

pymq reviewed Jul 23, 2026

View reviewed changes

Comment thread config/other.go Outdated

Comment thread service/tunnel.go Outdated

Comment thread service/tunnel.go

Comment thread service/tunnel.go Outdated

Comment thread socks5/server_test.go Outdated

fix some problems

a07c568

NNdroid force-pushed the master branch from 071ac10 to a07c568 Compare July 23, 2026 09:51

NNdroid added 3 commits July 26, 2026 14:32

fix: resolve golangci-lint nestif error and TestTunnelPackets failure

e11a35f

- Invert `if exists` in `service/tunnel.go` to reduce nestif complexity. - Update `TestTunnelPackets` to use the new derived IPv6 addresses from config, fixing packet routing mismatch.

Merge remote-tracking branch 'anywherelan/awl/master'

9289efa

pymq requested changes Jul 27, 2026

View reviewed changes

Comment thread awldns/awldns.go Outdated

Comment thread vpn/vpn.go Outdated

Comment thread test_suite_test.go

NNdroid added 2 commits July 27, 2026 19:03

refactor(ipv6): address PR anywherelan#262 review comments and optimi…

e999002

…ze IPv6 handling

NNdroid requested a review from pymq July 27, 2026 12:18

pymq reviewed Jul 27, 2026

View reviewed changes

Comment thread service/auth_status.go Outdated

Comment thread service/tunnel.go

NNdroid added 2 commits July 28, 2026 10:08

git commit -m "refactor(service): revert dynamic IPv6 override and re…

ab873d2

…store early peer check in StreamHandler"

refactor(service,ci): address PR anywherelan#262 review comments and …

d5d69de

…fix CI IPv6 test

pymq approved these changes Jul 28, 2026

View reviewed changes

pymq added this to the v0.20.0 milestone Jul 28, 2026

pymq merged commit 78001e9 into anywherelan:master Jul 28, 2026
15 of 16 checks passed

Uh oh!

Conversation

NNdroid commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pymq commented Jul 21, 2026

Uh oh!

This comment was marked as resolved.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

pymq left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

pymq commented Jul 27, 2026

Uh oh!

pymq commented Jul 27, 2026

Uh oh!

NNdroid commented Jul 28, 2026

Uh oh!

NNdroid commented Jul 28, 2026

Uh oh!

pymq commented Jul 28, 2026

Uh oh!

pymq commented Jul 28, 2026

Uh oh!

NNdroid commented Jul 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

NNdroid commented Jul 21, 2026 •

edited

Loading

NNdroid commented Jul 28, 2026 •

edited

Loading