thepsychonaut421 / vps-ipv6-routing-hardening Public

Notifications You must be signed in to change notification settings
Fork 0
Star 1

A complete setup for hardening IPv6 behavior and network routing on VPS servers. Includes sysctl optimizations, IPv4 prioritization, optional cloud-init disabling, and a systemd service for persistent IPv6 configuration. Ideal for clean environments, VPN/tunnel compatibility, and better control over routing behavior.

1 star 0 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 3 Commits
cloud-init		cloud-init
docs		docs
scripts		scripts
sysctl		sysctl
systemd		systemd
README.md		README.md

Repository files navigation

VPS IPv6 Routing Hardening

This project documents how to properly configure a VPS with:

Controlled IPv6 behavior (without breaking VPNs or tunnels)
Clean IPv4 prioritization
Full deactivation of cloud-init (if desired)

Structure

scripts/fix-ipv6-ra.sh: Applies all relevant sysctl IPv6 fixes
systemd/fix-ipv6-ra.service: Systemd unit to run the script at boot
sysctl/99-ipv6-restrict.conf: Persistent sysctl settings
cloud-init/99-disable-network-config.cfg: Prevents cloud-init from modifying network (optional)
docs/ipv6-routing.md: Full step-by-step documentation

Tested on Debian 12 (cloud kernel).

About

A complete setup for hardening IPv6 behavior and network routing on VPS servers. Includes sysctl optimizations, IPv4 prioritization, optional cloud-init disabling, and a systemd service for persistent IPv6 configuration. Ideal for clean environments, VPN/tunnel compatibility, and better control over routing behavior.

Report repository

Releases

No releases published

Packages

No packages published

Languages

Shell 100.0%