jlohmoeller/ipv6-neighbor-updater repository overview

⁠

⁠Docker IPv6 Neighbor Table Updater

This little service connects to the Docker daemon and adds an IPv6 Neighbor Proxy for each global IPv6 address assigned to any container. It is an alternative to using ndppd. From my experience, this solution is more reliable compared to ndppd if there is only occasional IPv6 traffic.

⁠How to use

Use the following command to immediately start the service:

docker run -d --restart=always -v /var/run/docker.sock:/var/run/docker.sock --net=host --cap-add=NET_ADMIN jlohmoeller/ipv6-neighbor-updater

Alternatively, you can use the provided docker-compose.yaml⁠ file.

Use -e INTERFACE=enp1s0 to specify the interface for which the proxy entries are created. By default, this is eth0.

On startup, the container creates proxy table entries for all running containers and then subscribes to container start events, adding further entries on demand.

Attention! Assigning globally reachable IPv6 addresses bypasses the port access restrictions made when starting docker containers. Ensure that you have a working IPv6 firewall restricting access to desired ports only!