Home / server / Questions / 256811
Accepted
Aldebaran
Asked: 2011-04-08 04:12:27 +0800 CST

How to completely, dynamically disable IPv4 stack from Linux?

  • 772

How can I disable IPv4 stack from Linux ? I want to do that dynamically, i.e. sometimes I want it enabled and sometimes I want only IPv6 stack. Is there any portable way to do that ? If you know how to do that in any distribution, it will also help me a lot.

linux networking ipv6 ipv4 linux-networking

4 Answers

  1. Best Answer

    Well after a little chat on the IRC the general opinion is that the linux kernel shares some code between ipv4 and ipv6, and that may make completely disabling ipv4 entirely impossible. You can try to compile the kernel without the ipv4 parts but ipv6 may not compile in this case (but nothing keeps you from trying!).

    You can remove the ipv4 addresses from interfaces, AFAIK, but I don't think it's possible at this time to completely disable ipv4.

    EDIT: After a quick check on make menuconfig on kernel 2.6.36 I could not find a way of disabling ipv4 without disabling the entire TCP/IP stack (and so, ipv6).

    • 21

  2. If this is for developers, then "library interposition" could be used, with LD_PRELOAD some doctored library with stub functions that simply return errors (or that call the real ones depending on the day of the week or some other external criterion).

    • 6

  3. I don't think it is possible to disable IPv4 completely, but depending on your goal, dropping all IPv4 traffic using iptables might be enough, no?

    Something like this should work. I haven't tested it on any machine, as I am accessing them through IPv4.

    sudo iptables -I INPUT -j DROP
sudo iptables -O OUTPUT -j DROP
    • 3

  4. Mostly you should recompile yours kernel without ipv4 modules. fedora

    You can’t disable it completely because the system uses 127.0.0.1 loopback interface.
    But you can disable some ipv4 functions with if-cfg command.

    • 1