On Linux I can make a transparent proxy simply by adding a iptables -j REDIRECT command.

To my surprise, I am needing to support IPv6. Simple enough right? iptables6 -j REDIRECT command not supported!?

Apparently, Linux threw out NAT (and transparent proxy support with it) on IPv6. I don't care much about NAT on IPv6. So how do people get a squid transparent proxy working on IPv6? With Linux as the host.


First give it a read on this answer here. You will have to configure your firewall and use other means to provide proxying like automatic configuration. IPV6 doesn't provide any NAT so there's no interception of traffic, ergo no transparent proxying.

Squid wiki has a Tproxy patch but seems like a hack to me, you can try but I never tested.

Other solutions likes WCCP from CISCO were also very connected to ipv4 and will not work on ipv6, but probably will be updated (or something will show up to replace).

  • +1 and Answer for suggesting TPROXY netfilter/iptables TARGET. – unixman83 Apr 4 '11 at 5:30
  • 1
    How is Tproxy a hack? It is native to Linux 2.6.37 and newer. It is the only way to do transparent proxying with IPv6 on Linux. – unixman83 Apr 4 '11 at 22:29
  • @unixman it's a hack because you are not supposed to do transparent proxying on ipv6 :) – coredump Apr 4 '11 at 23:00
  • 2
    then how would you implement content filtering on IPv6? – unixman83 Apr 5 '11 at 6:04
  • 2
    @coredump: Because transparent "Just Works" while automatic proxy only sometimes works and the users think the internet is broken. – Zan Lynx Oct 28 '11 at 9:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.