3 ms·
Could you elaborate more about how pfsense doesn't like just /64? As someone who ordered a Hetzner server from them a couple of days ago after a hefty price inc
by lambada 8y ago
Could you elaborate more about how pfsense doesn't like just /64? As someone who ordered a Hetzner server from them a couple of days ago after a hefty price increase from my current provider this concerns me - getting IPv6 working through pfsense and into machines behind it is the next tech project I have on my list!
- zaarn 8y agoHow well it works depends on your setup, in my case I use a routed configuration, I'm unsure if bridged would be better. The basic gist is that pfSense wants to be allocated a /64 via prefix allocation via a router advertisement (SLAAC or DHCPv6). Only in this configuration can you set the LAN interface to track the WAN, which allows you to use a single /64. Sadly there isn't a dedicated server provider out there that I know off that cleanly supports this configuration. In almost all cases you'll have to manually assign subnets inside the /64 (ie a /65 for the WAN interface and a /65 for LAN) so you can route around traffic. It's a bit annoying to setup but possible. (It's still much better than OVH's IPv6 support which is just plain broken)
- rashomon 8y agoWhy aren't they offering a /56. People offering /64 are doing the same things while thinking of IPv4 exhaustion
- zaarn 8y agoProbably not a lot of people need the /56. According to some other commenters you can request a larger subnet, I might do that at some point. They should integrate it better.