Traefik on IPv6 with CF Proxy, looking for some high level help

I'm on a journey to get homelab hosting on IPv6 with isp_prefix::/48 delegation, still IPv4 internally

My currently layout is

Unifi (vlan1) --> Proxmox --> Ubuntu VM(vlan1) --> Docker --> Traefik
CF AAAA with proxy ------------------------------------> Traefik container IPv6

And I'm getting error 523 with CF basically it can't reach my traefik container

My IPv6 is setup like below

  • isp_prefix:1::/64 auto assigned to vlan1 by unifi, slaac, not DHCP6
  • ubuntu vm has ipv6 via slaac -> isp_prefix:1:a:b:0:101/64
  • no ipv6 assigned to docker bridge via daemon.json
  • ipv6 manually assigned to traefik network -> isp_prefix:1:a:b:1::/112
  • traefik container got ipv6 -> isp_prefix:1:a:b:1:101/112

I didn't do /64 in deamon.json because docker will traefik network /112 duplicating

Right now I can ping6 google.com from traefik container console, and I can see my unifi firewall allow log for CF trying to reach traefik on isp_prefix:1:a:b:1:101/112

In my searches I think my issue is IPv6 routing which I don't really understand yet. And I also found another solution to use macvlan driver instead of bridge driver

My question is how would you have done it? manually patch routing while staying on bridge driver. Or macvlan?

I recommend you ask that question on the Docker Forum.