我试图用python获取接口的当前公共ipv6地址。通过搜索,我发现了
netifaces
全部的
设备的ipv6地址。
-
一个链接本地地址(我可以用一个简单的黑客过滤掉,这不是很好,但很好…)
-
我说的电流是什么意思?通过隐私扩展(RFC 4941),定期向接口分配新地址。旧的全局ipv6地址仍然有效,但标记为已弃用。我想要这个最新的。
以下是我尝试的内容(出于安全原因,地址的某些部分被混淆):
>>> import netifaces
>>> addrs = netifaces.ifaddresses('en0')
>>> for i in addrs[netifaces.AF_INET6]:
... print(i)
...
{'addr': 'fe80::caa:452a:b8cb:862e%en0', 'netmask': 'ffff:ffff:ffff:ffff::/64', 'flags': 1024}
{'addr': '2a02:____:____:9f1:cd8:e__e:e57b:eaa8', 'netmask': 'ffff:ffff:ffff:ffff::/64', 'flags': 1088}
{'addr': '2a02:____:____:9f1:3489:b__7:fb34:101', 'netmask': 'ffff:ffff:ffff:ffff::/64', 'flags': 192}
显然,第一个是链路本地地址。第二个和第三个是全球性的,他们有一面旗帜,我不知道这意味着什么。
是否有任何方法(可能通过标志或python中的另一种方法)来计算当前(临时的、未弃用的)全局地址?
在Linux中,我知道我可以解析
ip -o -6 addr show dev interface
编辑:
{'addr': '2a02:____:____:9f1:940c:f__f:f9c0:c274', 'netmask': 'ffff:ffff:ffff:ffff::/64'}
{'addr': '2a02:____:____:9f1:395a:6__d:650a:3a11', 'netmask': 'ffff:ffff:ffff:ffff::/64'}
{'addr': '2a02:____:____:9f1:d08a:6__d:d967:d28a', 'netmask': 'ffff:ffff:ffff:ffff::/64'}
{'addr': '2a02:____:____:9f1:9d20:b__7:3edc:96a4', 'netmask': 'ffff:ffff:ffff:ffff::/64'}
{'addr': '2a02:____:____:9f1:b584:d__b:16bf:5dd2', 'netmask': 'ffff:ffff:ffff:ffff::/64'}
{'addr': '2a02:____:____:9f1:61ba:d__b:78d8:197f', 'netmask': 'ffff:ffff:ffff:ffff::/64'}
{'addr': '2a02:____:____:9f1:c1df:7__7:236d:4219', 'netmask': 'ffff:ffff:ffff:ffff::/64'}
{'addr': '2a02:____:____:9f1:d021:4__3:1a44:4947', 'netmask': 'ffff:ffff:ffff:ffff::/64'}
{'addr': 'fe80::17ed:fbf5:a707:2a42%enp4s0', 'netmask': 'ffff:ffff:ffff:ffff::/64'}
编辑2:
由于对我所说的“当前”地址有一些混淆,下面是我的意思。在上一个示例的Linux机器上:
% ip -o -6 addr show dev enp4s0
2: enp4s0 inet6 2a02:____:____:9f1:940c:f__f:f9c0:c274/64 scope global temporary dynamic \ valid_lft 530760sec preferred_lft 12247sec
2: enp4s0 inet6 2a02:____:____:9f1:395a:6__d:650a:3a11/64 scope global temporary deprecated dynamic \ valid_lft 444473sec preferred_lft 0sec
2: enp4s0 inet6 2a02:____:____:9f1:d08a:6__d:d967:d28a/64 scope global temporary deprecated dynamic \ valid_lft 358187sec preferred_lft 0sec
2: enp4s0 inet6 2a02:____:____:9f1:9d20:b__7:3edc:96a4/64 scope global temporary deprecated dynamic \ valid_lft 271901sec preferred_lft 0sec
2: enp4s0 inet6 2a02:____:____:9f1:b584:d__b:16bf:5dd2/64 scope global temporary deprecated dynamic \ valid_lft 185616sec preferred_lft 0sec
2: enp4s0 inet6 2a02:____:____:9f1:61ba:d__b:78d8:197f/64 scope global temporary deprecated dynamic \ valid_lft 99330sec preferred_lft 0sec
2: enp4s0 inet6 2a02:____:____:9f1:c1df:7__7:236d:4219/64 scope global temporary deprecated dynamic \ valid_lft 13044sec preferred_lft 0sec
2: enp4s0 inet6 2a02:____:____:9f1:d021:4__3:1a44:4947/64 scope global dynamic mngtmpaddr noprefixroute \ valid_lft 2591735sec preferred_lft 604535sec
2: enp4s0 inet6 fe80::17ed:fbf5:a707:2a42/64 scope link noprefixroute \ valid_lft forever preferred_lft forever
显然,所有“临时”地址都是有效地址。但只有一个未标记为不推荐。此地址将用于出站连接。这就是我想要的。
