4 ms·

Recently got a very neat server box from the auctions page, having the traffic limits removed would be amazing indeed. Quite satisfied with support too. (Thoug

by zaarn 8y ago

Recently got a very neat server box from the auctions page, having the traffic limits removed would be amazing indeed. Quite satisfied with support too. (Though I wish I could get a hold of a /48 IPv6 subnet from them, pfSense doesn't like /64 only networks).

hoffs 8y ago
Are you running pfsense on remote server??
- zaarn 8y ago
  Why wouldn't I? It seems to be a pretty solid FOSS Firewall solution from what I've experienced. I never really saw a reason not to do it.
- Operyl 8y ago
  It works great, have used it in the past. Right now I’m using openwrt/lede in a VM as a NAT for VMs that don’t need a dedicated external IP. It took seconds to set up.
zAy0LfpBZLC8mAC 8y ago
> Though I wish I could get a hold of a /48 IPv6 subnet from them, pfSense doesn't like /64 only networks Please pester them about this. (Technically, you can, but they charge extra, which is just braindead.)
- zaarn 8y ago
  Might try that, thanks!
lambada 8y ago
Could you elaborate more about how pfsense doesn't like just /64? As someone who ordered a Hetzner server from them a couple of days ago after a hefty price increase from my current provider this concerns me - getting IPv6 working through pfsense and into machines behind it is the next tech project I have on my list!
- zaarn 8y ago
  How well it works depends on your setup, in my case I use a routed configuration, I'm unsure if bridged would be better. The basic gist is that pfSense wants to be allocated a /64 via prefix allocation via a router advertisement (SLAAC or DHCPv6). Only in this configuration can you set the LAN interface to track the WAN, which allows you to use a single /64. Sadly there isn't a dedicated server provider out there that I know off that cleanly supports this configuration. In almost all cases you'll have to manually assign subnets inside the /64 (ie a /65 for the WAN interface and a /65 for LAN) so you can route around traffic. It's a bit annoying to setup but possible. (It's still much better than OVH's IPv6 support which is just plain broken)
  - rashomon 8y ago
    Why aren't they offering a /56. People offering /64 are doing the same things while thinking of IPv4 exhaustion
    - zaarn 8y ago
      Probably not a lot of people need the /56. According to some other commenters you can request a larger subnet, I might do that at some point. They should integrate it better.

by zaarn 8y ago

hoffs 8y ago

Are you running pfsense on remote server??

zaarn 8y ago
Why wouldn't I? It seems to be a pretty solid FOSS Firewall solution from what I've experienced. I never really saw a reason not to do it.
Operyl 8y ago
It works great, have used it in the past. Right now I’m using openwrt/lede in a VM as a NAT for VMs that don’t need a dedicated external IP. It took seconds to set up.

zAy0LfpBZLC8mAC 8y ago

> Though I wish I could get a hold of a /48 IPv6 subnet from them, pfSense doesn't like /64 only networks Please pester them about this. (Technically, you can, but they charge extra, which is just braindead.)

zaarn 8y ago
Might try that, thanks!

lambada 8y ago

Could you elaborate more about how pfsense doesn't like just /64? As someone who ordered a Hetzner server from them a couple of days ago after a hefty price increase from my current provider this concerns me - getting IPv6 working through pfsense and into machines behind it is the next tech project I have on my list!

zaarn 8y ago
How well it works depends on your setup, in my case I use a routed configuration, I'm unsure if bridged would be better. The basic gist is that pfSense wants to be allocated a /64 via prefix allocation via a router advertisement (SLAAC or DHCPv6). Only in this configuration can you set the LAN interface to track the WAN, which allows you to use a single /64. Sadly there isn't a dedicated server provider out there that I know off that cleanly supports this configuration. In almost all cases you'll have to manually assign subnets inside the /64 (ie a /65 for the WAN interface and a /65 for LAN) so you can route around traffic. It's a bit annoying to setup but possible. (It's still much better than OVH's IPv6 support which is just plain broken)
- rashomon 8y ago
  Why aren't they offering a /56. People offering /64 are doing the same things while thinking of IPv4 exhaustion
  - zaarn 8y ago
    Probably not a lot of people need the /56. According to some other commenters you can request a larger subnet, I might do that at some point. They should integrate it better.