From 4590e30e3d9dfeb0fc6e7a2bec0c0ba9664fbcd2 Mon Sep 17 00:00:00 2001
From: Viktor Liu <viktor@netbird.io>
Date: Tue, 10 Feb 2026 20:12:41 +0800
Subject: [PATCH] Add ip families

---
 charts/netbird-proxy/templates/service.yaml | 7 +++++++
 charts/netbird-proxy/values.yaml            | 8 ++++++++
 2 files changed, 15 insertions(+)

diff --git a/charts/netbird-proxy/templates/service.yaml b/charts/netbird-proxy/templates/service.yaml
index 9a1b808..44ebb09 100644
--- a/charts/netbird-proxy/templates/service.yaml
+++ b/charts/netbird-proxy/templates/service.yaml
@@ -10,6 +10,13 @@ metadata:
   {{- end }}
 spec:
   type: {{ .Values.service.type }}
+  {{- with .Values.service.ipFamilies }}
+  ipFamilies:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  {{- with .Values.service.ipFamilyPolicy }}
+  ipFamilyPolicy: {{ . }}
+  {{- end }}
   {{- if and (eq .Values.service.type "LoadBalancer") .Values.service.loadBalancer.ip }}
   loadBalancerIP: {{ .Values.service.loadBalancer.ip }}
   {{- end }}
diff --git a/charts/netbird-proxy/values.yaml b/charts/netbird-proxy/values.yaml
index c97c0fa..ec1d31f 100644
--- a/charts/netbird-proxy/values.yaml
+++ b/charts/netbird-proxy/values.yaml
@@ -148,6 +148,14 @@ service:
   port: 443
   # -- ACME HTTP-01 challenge port (only exposed if acme.enabled).
   acmePort: 80
+  # -- IP families for dual-stack support. Dual-stack allows clients with
+  # IPv6 connectivity to reach peers directly without NAT traversal.
+  ipFamilies:
+    - IPv4
+    - IPv6
+  # -- IP family policy: SingleStack, PreferDualStack, or RequireDualStack.
+  # PreferDualStack falls back gracefully on single-stack clusters.
+  ipFamilyPolicy: PreferDualStack
 
   loadBalancer:
     # -- Source ranges allowed to reach the LoadBalancer.