Linux – disable IPv6 autoconf (MAC-based) IPv6 address without disabling privacy addresses

ipv6linuxnetworking

Is it possible to configure the Linux kernel to automatically get the RFC4941 temporary (privacy) IPv6 addresses without getting the RFC4862 public (MAC-based) IPv6 address?

With the following sysctl settings on my Ubuntu 13.04 Linux system, I get the temporary IPv6 addresses, but I also get the public MAC-based IPv6 address:

net.ipv6.conf.eth0.autoconf=1
net.ipv6.conf.eth0.use_tempaddr=2

I don't want the MAC-based IPv6 address. I just want the temporary privacy addresses. I realize that use_tempaddr=2 says to prefer the temporary address, but applications can still bind() to the MAC-based address or use the IPV6_PREFER_SRC_PUBLIC sockopt (see RFC5014) to override this preference. I predict applications like Adobe Flash will allow web sites to have their flash applications phone home using the MAC-based IP, making it that much harder for people to avoid being tracked by marketers (or governments) wherever they go.

With the following sysctl settings:

net.ipv6.conf.eth0.autoconf=0
net.ipv6.conf.eth0.use_tempaddr=2

I get no automatically configured IPv6 addresses. None.

How do I get temporary IPv6 addresses without getting the MAC-based IPv6 address?

Best Answer

Sorry, no. If you want temporary addresses, you must be using either stateless address autoconfiguration (as you already know) or DHCPv6, which can be configured to request temporary addresses from the DHCPv6 server. In your case, DHCPv6 is probably the way you will want to go, and it is what most major ISPs are deploying.

Related Question