Questions tagged [ipv6]

IPv6 is the successor to IPv4. Rather than 2^32 addresses (like IPv4), it has 2^128, which is 340,282,366,920,938,463,463,374,607,431,768,211,456 unique addresses (34 undecillion). IPv6 addressing is quite different to IPv4 and is not backwards compatible, but protocols that sit on top (HTTP, SSH, etc) remain unchanged.

was designed in the 1970's and supports just over 4 billion unique addresses. Back then, nobody could ever have imagined the internet becoming what it is today.

Since 1 February 2011, the global pool of IPv4 addresses has been depleted, The first regional pool (Asia) ran out on 15 April 2011, Europe ran out on 14 September 2014, with the North American pools slated to run out in. Individual ISPs and hosting companies should have between three and twelve months after their regional pool is empty. By 2014, it will be hard/expensive to get a new IPv4 allocation outside of Africa and Latin America.

In the early 1990's people started to realise that we were going to run out of IP addresses and a taskforce was developed to decide on a new protocol. The protocol that was settled on was IPv6.

IPv6 has 128-bit addresses, and mostly works the same as IPv4, except that ARP is completely replaced (by Neighbour Discovery Protocol), and DHCP is radically different - and may not be necessary, in the light of the new Router Advertisement system. With the much larger address allocation, NAT is not needed.

There is an excellent talk from DefCon 18 on youtube that explains a lot of the history around IPv6. You can find it here.

1755 questions
9
votes
2 answers

IPv6 DHCP Configuration

I want to set up an IPv6 only network for testing. However, I can't find any HOWTOs or information on setting up DHCP to autoconfigure IPv6 DNS server addresses etc. I use radvd on a ubuntu server to autoconfigure host addresses and I'm led to…
user23512
9
votes
2 answers

Should I put Scope:Link or scope:Global IPv6 address in DNS AAAA record?

I have a mail server for which I need to create the AAAA DNS record and update the SPF record to include its IPv6 address. An ifconfig command shows a Scope:Link IPv6 address and a Scope:Global IPv6 address. Which one should I put in the AAAA and…
chmike
  • 429
  • 2
  • 5
  • 18
9
votes
0 answers

Setting up IPv6 ACLs on 3com 5500g to block Router Advertisment messages

Is there a way to set up IPv6 ACLs on 3com 5500g switch to block RA traffic on access ports? I couldn't find settings for setting up any IPv6 ACL. Acording to guides, there should be ipv6 specific commands, but these were not available. My version…
phandox
  • 101
  • 4
9
votes
3 answers

DNS servers already use anycast. Will adding more IPs enhance scalability?

RFC 1034 requires us to assign at least two IP addresses for DNS servers. However, redundancy can already be achieved by a single IP address if we use anycast addressing. BGP anycast seems to scale well into hundreds or even thousands of servers. If…
Pacerier
  • 521
  • 16
  • 35
9
votes
2 answers

Docker will only bind forwarded ports to IPv6 interfaces

Is there a way I can tell docker to only bind forwarded ports to IPv4 interfaces? I have a machine running on Digital Ocean with IPv6 disabled: # echo '1' > /proc/sys/net/ipv6/conf/lo/disable_ipv6 # echo '1' >…
Mark L
  • 568
  • 2
  • 9
  • 19
9
votes
2 answers

Inbound Windows Firewall Core Networking Rules

I've just purchase a Windows Server 2008 R2 VPS plan and I was alarmed to see the default configuration had Windows firewall disabled. I've enabled the firewall and disabled most of the inbound rules, but I have some uncertainty about the rules in…
Paul Keister
  • 253
  • 3
  • 8
9
votes
3 answers

ip6tables rules are completely ignored inside OpenVZ container

We have set up IPv6 networking on openvz using bridged veth devices. The IPv6 traffic to and from the VEs works fine. ip6tables works on the HN and iptables work on the VE. Inside the VE we can set up ip6tables rules without any error messages.…
Carsten Thiel
  • 421
  • 3
  • 6
9
votes
1 answer

Hurricane Electric Tunnel with Pfsense?

How would I setup a HE net Tunnel to route through PFsense so I can have v6 addresses on my servers? I already have the tunnel setup on their end, but there is no instructions for PFsense.
Jacob
  • 9,204
  • 4
  • 45
  • 56
9
votes
3 answers

What determines whether the FQDN is interpreted as IPv6 or IPv4?

When I type a Fully Qualified Domain Name (FQDN) in my URL bar, the browser connects to some mapping table (where is this table stored? with the service provider?) that determines where the file requested is hosted. So, it depends on the service…
Lazer
  • 425
  • 3
  • 7
  • 9
8
votes
1 answer

IPv6 Privacy Extensions use_tempaddr=1 vs use_tempaddr=2

I understand privacy extensions and that you enable them by setting use_tempaddr. Unfortunately I haven't found any explantion for the different settings. Every articel I read used either 1 or 2 or cited kernel.org without further explanation. The…
wedi
  • 358
  • 4
  • 12
8
votes
4 answers

IPv6 connectivity lost on KVM guest after 20 minutes

I have a KVM virtualization server setup at Hetzner. Hetzner provides me with a master IP (95.xxx.xxx.235) and a /29 IPv4 subnet (95.xxx.xxx.184/29) and a /64 IPv6 network (2a01:xxxx:xxxx:xxxx::/64). The KVM Guest (Debian Stretch) loses IPv6…
Uitto
  • 81
  • 1
  • 4
8
votes
1 answer

Windows computers getting SLAAC IPv6 from tagged VLAN

I have windows computers on a network that are un-unexpectedly getting an IPv6 address from tagged VLAN. I have routers/computers connected to a switch with an untagged vlan (id 1), and a tagged (id 2). For simplicity, lets say this VLAN2 is for…
Zoredache
  • 130,897
  • 41
  • 276
  • 420
8
votes
2 answers

How does VLAN subnetting work on IPv6?

I have a network with about dozen VLANs, most with inter-VLAN routing, some without. They might talk to each other but not to the other's gateway. It's not divided because of security or congestion, it's more like there are VLANs are for the…
Vita
  • 111
  • 1
  • 1
  • 7
8
votes
2 answers

How to correctly configure IPv6 with OpenVPN?

Trying to find the OpenVPN configuration which suits my needs I made this script to help myself during the installation on a CentOS system. My server config file actually looks like this: port 1194 proto udp dev tun user nobody group…
Phonic Mouse
  • 81
  • 1
  • 1
  • 8
8
votes
1 answer

Blocking or rate-limiting IPv6: what size prefix

Given that blocking a single IPv6 address would seem to be somewhat pointless as an end user typically has at least 2**64 of them, we need to block a range, which identifies a "site". A "site" in this context is something like a home or small office…
Rodney
  • 328
  • 1
  • 9