Currently, we have a network where apps on host and VMs are connected together and all VMs are behind the NAT as below
||=> Host
ISP Router => enp1s0
|--> lxdbr0 => VM 1
||====> VM 2
||====> VM 3
Legends:
==> Passthrough connection
--> NAT connection
However, that approach wouldn't work for IPv6 because end-to-end connection is not possible via NAT connection. We wonder if passthrough only IPv6 is possible as below
||===IPv4===> Host
|| /\
|| ||
|| IPv6
|| ||
ISP Router => enp1s0 =IPv6=> ip6br0
| ||
| IPv6
| ||
| \/
|---IPv4---> lxdbr0 => VM 1
||====> VM 2
||====> VM 3
The question is how to drop non-IPv6 connection with nft
command on linux while NAT-ing IPv4? Keep in mind that ebtables is not supported anymore. So this 7 years old Q&A post won't work.