How to Disable IPv6 in RHEL, Rocky & AlmaLinux?

In today's digital age, internet connectivity plays a crucial role in our day-to-day lives. In order to connect to the internet, we need an address that identifies us on the network. This is where IP addresses come into play. IPv4 (Internet Protocol version 4) is the fourth version of IP addresses and has been used for many years. However, as technology advances and more devices connect to the internet, the number of available IPv4 addresses is running out. That's why IPv6 was introduced.

What is IPv6 and Why Disable It?

IPv6 (Internet Protocol version 6) is an updated version of IP addressing that provides a larger number of available unique IP addresses than its predecessor IPv4. It uses 128-bit addressing instead of IPv4's 32-bit addressing scheme, which allows for a virtually unlimited number of unique addresses for network-connected devices.

While enabling IPv6 can provide benefits like improved security, faster connection speeds, and better connectivity overall, some users may still want or need to disable it in certain situations. For instance, some legacy applications or networks may not be compatible with IPv6 yet, or specific network configurations may require IPv4-only environments.

Overview of Disabling IPv6

Disabling IPv6 in RHEL (Red Hat Enterprise Linux), Rocky Linux, or AlmaLinux involves modifying system configuration files either temporarily or permanently. You can disable IPv6 temporarily using the sysctl command, permanently by editing the sysctl.conf file, or for specific network interfaces using the nmcli command.

Checking IPv6 Status

Before disabling IPv6, it's important to check if it's currently enabled on your system. Run the following command in the terminal:

sysctl net.ipv6.conf.all.disable_ipv6

If the output shows net.ipv6.conf.all.disable_ipv6 = 0, then IPv6 is currently enabled. If it shows net.ipv6.conf.all.disable_ipv6 = 1, then IPv6 is disabled. The all parameter refers to all network interfaces on the system. You can replace all with a specific interface name (e.g., eth0) to check individual interfaces.

Disabling IPv6 Temporarily

To temporarily disable IPv6 (until the next reboot), use the sysctl command. This method is useful for testing or troubleshooting purposes.

Steps to Disable IPv6 Temporarily

1. Open a terminal and switch to root user or use sudo

2. Disable IPv6 for all interfaces:

sysctl net.ipv6.conf.all.disable_ipv6=1

3. For a specific interface (replace eth0 with your interface name):

sysctl net.ipv6.conf.eth0.disable_ipv6=1

This command modifies the setting in /proc/sys/net/ipv6/conf/all/disable_ipv6 by setting its value to 1 (disabled). Since this is a runtime modification, the setting will revert after the next system reboot.

Disabling IPv6 Permanently

To permanently disable IPv6 across all system reboots, you need to modify the /etc/sysctl.conf file.

Steps to Disable IPv6 Permanently

1. Open the sysctl configuration file with a text editor:

sudo nano /etc/sysctl.conf

2. Add the following lines at the end of the file:

# Disable IPv6
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1

3. Save the file and apply the changes immediately:

sudo sysctl -p

These settings disable IPv6 for all network interfaces, including the loopback interface. The changes will persist across system reboots and disable all IPv6 traffic system-wide.

Disabling IPv6 for Specific Network Interfaces

Sometimes you may want to disable IPv6 only on specific network interfaces rather than system-wide. This approach uses the nmcli command to manage NetworkManager connections.

Steps to Disable IPv6 for Specific Interfaces

1. List all available network connections:

nmcli connection show

2. Disable IPv6 for a specific connection (replace CONNECTION_NAME with the actual connection name):

nmcli connection modify CONNECTION_NAME ipv6.method disabled

3. Restart the connection to apply changes:

nmcli connection down CONNECTION_NAME
nmcli connection up CONNECTION_NAME

This selective approach is useful when you need IPv4-only connectivity on specific interfaces while maintaining IPv6 functionality elsewhere. It's particularly beneficial for resolving compatibility issues with legacy applications or specific network segments.

Troubleshooting Common Issues

Network Connectivity Problems

If you experience connectivity issues after disabling IPv6, ensure that IPv6 is disabled on all relevant network interfaces. Check your network configuration and verify that IPv4 settings are properly configured. Some applications may require both protocols to function correctly.

DNS Resolution Delays

Some DNS servers prefer IPv6 over IPv4, which can cause delays when IPv6 is disabled. Solutions include:

• Configure DNS servers that handle both protocols equally

• Add local hostname entries to /etc/hosts file

• Verify that your DNS configuration doesn't rely solely on IPv6

Verification and Re-enabling

To verify that IPv6 is disabled, run the status check command again:

sysctl net.ipv6.conf.all.disable_ipv6

To re-enable IPv6, set the value back to 0 and remove the entries from sysctl.conf if you made permanent changes.

Conclusion

Disabling IPv6 in RHEL, Rocky, and AlmaLinux can be accomplished through temporary runtime changes or permanent configuration modifications. Whether you need to disable IPv6 system-wide or for specific interfaces, the methods outlined provide flexible solutions for different scenarios. Always test changes in a non-production environment first and ensure that disabling IPv6 won't impact critical applications or network functionality.