Hello Selva
> Just guessing, is the server on a Linode? I had once briefly tested a similar
> setup and, for some reason, the throughput on ipv6 connections was very poor.
> Once your setup is working I would love to hear about the performance.
Yeah the Server that I'm getting access to is one he runs on a Linode VPS
service.
He did do some comparing of IPv4 and IPv6 performance on his system.
Throughput is "3-5% lower" on IPv6 than IPv4 according to him. I guess there's
a little more overhead to IPv6.
Once I get all this working I can sure do some measurements here. Anyway it
turns out I guess I have to live with possibly 'poor' still being better than
'none'. I only need this IPv6 acess for some work not all of my browsing etc.
The deal was I can use his system for nothing, but I'm going to have to do my
homework and understand, get help with, and eventually maintain it myself.
Totally reasonable so I can't complain.
> How is that 4d09::/64 block routed to from the outside world? I guess its
> delegated from a larger block routed to your server.
I had to ask to be sure. The server got a big block, a "routed /56". Not as
big as a Hurricane Electric /48, but for me I don't think it makes any
difference at all. One piece of it, a /64, is used for the OpenVpn tunnel
endpoints. Another slice, a different /64, is used for "me". In other words
unique IPv6s for my LAN.
> If so you will need ipv6 forwarding enabled on the server
On the server it already is
cat /proc/sys/net/ipv6/conf/{all,tun1}/forwarding
1
1
> and a route on the server to the 4d09::/64 through the tunnel. Please show us
> the routes on the server too.
ip -6 route
2600:####:####:4d00::/64 dev eth0 proto kernel metric 256
pref medium
2600:####:####:4dff::/64 dev tun1 proto kernel metric 256
pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
default via fe80::1 dev eth0 metric 1024 pref medium
ip -4 route
default via X.X.X.1 dev eth0
10.0.0.0/24 dev tun1 proto kernel scope link src 10.0.0.1
X.X.X.0/24 dev eth0 proto kernel scope link src X.X.X.X
10.128.128.0/24 via 10.0.0.2 dev tun1
I don't see anything that's just for the 4d09::/64. So something like that's
missing? Do I do that in the OpenVpn config?
I'm kind of confused why the ping6 without the "-I <address>" works but not
without it. :-/
Selva
------------------------------------------------------------------------------
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
