shadowsocks-libev-ss-rules blocks UDP/IPv6 multicast including DHCPv6
Nobody has claimed this yet.
- Dominant language
- Makefile
- Stars
- 4.6k
- Forks
- 4k
- Avg merge
- 3d 12h
- Merged PRs (30d)
- 134
Description
Maintainer: Yousong Zhou yszhou4tech@gmail.com
Environment: (OpenWrt 22.03.0 r19685-512e76967f / LuCI openwrt-22.03 branch git-22.245.77528-487e58a)
Description:
shadowsocks-libev-ss-rules bypassed some preserved IPv6 addresses, but missed IPv6 multicast addresses. So, all IPv6 multicast packets are redirected to Shadowsocks once it's enabled.
It's suggested to add IPv6 multicast address ff00::/8 to /usr/share/ss-rules/set.uc:
let o_dst_bypass6_ = "
::1/128
::/128
::ffff:0:0/96
64:ff9b:1::/48
100::/64
fe80::/10
2001::/23
fc00::/7
";
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with /usr/share/ss-rules/set.uc and inspect the IPv6 bypass address list shown in the issue. Confirm how ss-rules handles IPv6 multicast traffic, add the missing preservation entry, and verify that DHCPv6 and other IPv6 multicast packets are no longer redirected to Shadowsocks.
Written by the indexing model from the issue text.
Assessment
- Domain
- networking
- Issue type
- Bug
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 45/100