3 ms·

5. Their IPv6 support is pants on head. https://www.digitalocean.com/docs/networking/ipv6/ https://www.digitalocean.com/docs/networking/ipv6/ Yes, you read th

5. Their IPv6 support is pants on head. https://www.digitalocean.com/docs/networking/ipv6/ https://www.digitalocean.com/docs/networking/ipv6/ Yes, you read that right, they assign a /124 if you enable IPv6. There is no provision for getting anything larger. All configuration is totally static as well. It's really incredible how botched the setup is, and it has been like this for years. If you're wondering if you're sharing the same /64 with an entire datacenter worth of droplets, the answer is of course.

hisyn 6y ago
This -- this has me a bit frustrated and I'll eventually email them about it. I haven't contacted them about it but that makes sense sadly. So they're getting a /64 from their upstream and just sharing that out to everyone. This isn't IPv4, they need to make this right. Vultr, OTOH, gives each HOST a /64. I've been doing most of my work on Vultr right now so I can use more than 16 IPs on a single host. I was/am hoping that providers would standardize somewhere in the middle: Every customer account in each datacenter gets a /64. I wouldn't mind all of my hosts having their own /64 to subdivide.
- jandrese 6y ago
  The smallest allocation a customer should ever get with IPv6 is a /64. You break a lot of stuff when you go smaller. DigitalOcean's approach is kind of like sticking an entire datacenter behind a single IPv4 address. It's not like it is hard to get IPv6 address space either. All they have to do is ask. A VPS provider like DO can get a /32 easy peasy.
  - mnordhoff 6y ago
    DigitalOcean has /32s from ARIN and RIPE. (And a /48 from APNIC???) (Edit: And a /36, /40 and /48 from APNIC?)
voltagex_ 6y ago
That's OK, OVH gives you a single IPv6 address with some VPS configurations.
rand49an 6y ago
I don't know if I'm doing something wrong but am I right that a droplet firewall doesn't have any ability to create source exceptions to lock an open port down to a singular IP. Seems like a basic enough feature but I can't seem to find it.

hisyn 6y ago

This -- this has me a bit frustrated and I'll eventually email them about it. I haven't contacted them about it but that makes sense sadly. So they're getting a /64 from their upstream and just sharing that out to everyone. This isn't IPv4, they need to make this right. Vultr, OTOH, gives each HOST a /64. I've been doing most of my work on Vultr right now so I can use more than 16 IPs on a single host. I was/am hoping that providers would standardize somewhere in the middle: Every customer account in each datacenter gets a /64. I wouldn't mind all of my hosts having their own /64 to subdivide.

jandrese 6y ago
The smallest allocation a customer should ever get with IPv6 is a /64. You break a lot of stuff when you go smaller. DigitalOcean's approach is kind of like sticking an entire datacenter behind a single IPv4 address. It's not like it is hard to get IPv6 address space either. All they have to do is ask. A VPS provider like DO can get a /32 easy peasy.
- mnordhoff 6y ago
  DigitalOcean has /32s from ARIN and RIPE. (And a /48 from APNIC???) (Edit: And a /36, /40 and /48 from APNIC?)

voltagex_ 6y ago

That's OK, OVH gives you a single IPv6 address with some VPS configurations.

rand49an 6y ago

I don't know if I'm doing something wrong but am I right that a droplet firewall doesn't have any ability to create source exceptions to lock an open port down to a singular IP. Seems like a basic enough feature but I can't seem to find it.