D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] IPv6 tunnelling

 

On Thu, 30 May 2013, Martijn Grooten wrote:

I've got a mixed-OS LAN behind an IPv4 broadband connection. I asked
BT business, who provide the broadband, if I could have some IPv6
addresses for the network, but they don't do IPv6 yet.

Hahahaha... Hohohohoho... ROTFL, etc... :)

So I decided to work my way around their lack of IPv6 support.

Why not just pay a few quid more and get an ISP that already does it natively?

e.g.

gordon @ yakko: host watertower.drogon.net
watertower.drogon.net has address 81.31.100.110
watertower.drogon.net has IPv6 address 2001:4d48:ad51:8900::1

I have a /56 for home use.

gordon @ yakko: mtr -r google.co.uk
HOST: yakko                       Loss%   Snt   Last   Avg  Best  Wrst StDev
  1. 2001:4d48:ad51:8901::1        0.0%    10    0.4   0.4   0.4   0.4   0.0
  2. 2001:4d48:feed:6c::b          0.0%    10   14.8  15.7  14.8  19.5   1.4
  3. 2001:4d48:feed:6c::a          0.0%    10   14.6  17.5  14.5  40.3   8.0
  4. te2-2.telehouse-east3.dsl.en  0.0%    10   15.5  15.1  14.7  15.5   0.2
  5. te5-2.telehouse-east.core.en  0.0%    10   15.1  15.3  14.9  16.3   0.4
  6. ???                          100.0    10    0.0   0.0   0.0   0.0   0.0
  7. 2001:4860:1:1:0:2114:0:2      0.0%    10   15.6  15.4  15.1  16.3   0.3
  8. 2001:4860:1:1:0:2114:0:1      0.0%    10   15.2  17.2  14.9  36.0   6.6
  9. 2001:4860::1:0:3067           0.0%    10   18.8  15.9  14.9  18.8   1.3
 10. 2001:4860:0:1::4f1            0.0%    10   15.4  15.5  15.2  16.0   0.2
 11. lhr14s20-in-x1f.1e100.net     0.0%    10   14.6  15.1  14.6  15.5   0.3
gordon @ yakko: host lhr14s20-in-x1f.1e100.net
lhr14s20-in-x1f.1e100.net has IPv6 address 2a00:1450:4009:803::101f


I have used miredo in the past to give a machine behind an IPv4-only
router a publicly routable IPv6 address, but miredo (and teredo) are
supposed to be the last resort, if all else fails.

And since I do fully control the router (it's an openSUSE box), I
thought there must be a neater way, where I get (buy) a /64 of IPv6
addresses and do some clever tunnelling on the router to not only give
machines on the LAN public IPv6 addresses, but make the tunneling
invisible to them.

Any thoughts?

Get a decent ISP.

Apart from that...

So there are tunnel brokers - HE: http://tunnelbroker.net/ and SixXs: https://www.sixxs.net/main/ and others.

You can use the sit or tun6in4 network module in Linux to do the tunneling - more or less transparently. I've never bothered though as I have native IPv6. See here for some runes: http://ipv6int.net/systems/linux-ipv6.html


However if you get some IPv6 from them, then when you do get an ISP that supports IPv6 natively, you'll have to renumber - might not be an issue if you're completely using radvd internally - will be an issue for external routing, but that's not worse than chaging IPv4 address by moving ISP.

You can become a RIPE member and buy (more like rent) Private IPv6 addres space - the issue then is persuading your ISP to route it for you. You'll have more chance of this being a reality with the better transit/leased lines ones than domestic ones though. (Leased lines in Devon start at round about £600 a month plus install though )-:

A plan B might be to rent a cheap co-lo somewhere that has native IPv6 and run your own tunnel to them. That won't change while you run the co-lo, but then all IPv6 traffic will be routed via them...

AAISP, Entanet (and all their resellers) do native IPv6 for soho use, as do Goscomb.

I understand that Virgin (cable, yes, I know!) have it on their roadmap.

Plusnet experimented with it, then stopped it and are currently experimenting with carrier-grade NAT for IPv4.

Not sure who else right now for soho use.

Just remember - NAT won't save you from hackers - you need to use a firewall now...

Gordon
-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq