VPS with routable ipv6 subnet

anonuser1211 · January 14

hello, happy new year

/64 or /48 routable ipv6 subnet
EU or Asia
I only really care about having high bandwidth, cpu/disk/memory is not important at all
1gbps+
Budget under 30$ per month

use case:
assigning the vps ipv6 ip's for personal vm's hosted locally via tunneling with wireguard.

hostal · January 14

Host.al and have a look at AMD vps from the footer

tentor · January 14

How much bandwidth do you need? Skhron provides routed /64 by default and shorter prefixes (/56 and /48) are possible.

anonuser1211 · January 14

@hostal said:
Host.al and have a look at AMD vps from the footer

bandwidth way too slow

layer7 · January 14

@anonuser1211 said:
hello, happy new year

/64 or /48 routable ipv6 subnet
EU or Asia
I only really care about having high bandwidth, cpu/disk/memory is not important at all
1gbps+
Budget under 30$ per month

use case:
assigning the vps ipv6 ip's for personal vm's hosted locally via tunneling with wireguard.

Hi,

for all our servers we can setup a routed network with a next-hop address for a one time setup fee of 39,- EUR

50 TB Traffic are included by default, more can be ordered flexible through the shop or we make a special agreement if you need permanently more than 50 TB... would be cheaper

NovaCloudHosting · January 14

@anonuser1211 said:
hello, happy new year

/64 or /48 routable ipv6 subnet
EU or Asia
I only really care about having high bandwidth, cpu/disk/memory is not important at all
1gbps+
Budget under 30$ per month

use case:
assigning the vps ipv6 ip's for personal vm's hosted locally via tunneling with wireguard.

Hi, we can provider /48 subnets for 10€/Annually excl. VAT on a VPS routed via next-hop. The VPS can be paid monthly.
Our VPS in Netherlands have 2,5G Uplink on default and can be upgraded to 5Gbps

2 Cores AMD EPYC 7543
8GB DDR4 ECC RAM
40GB NVMe SSD Storage (Raid-1)
2,5Gbps Uplink + 10TB Traffic
1xIPv4 + IPv6 included
Location: Netherlands
Just 4,50€/Month

2 Cores AMD Ryzen 9 7950X3D/9900X
4GB DDR5 ODECC RAM
20GB NVMe SSD Storage (Raid-1)
2,5Gbps Uplink + 10TB Traffic
1xIPv4 + IPv6 included
Location: Netherlands
Just 3,50€/Month

Extra traffic priced at 5€ per 15TB, 15€ per 50TB

yoursunny · January 14

Please check the Routed IPv6 Hall of Fame.
We recommend these providers that are known to deliver high quality service:

BuyVM /48
Gigahost AS /48
HostHatch /64
Skhron /56
Heartbeat-IT formerly ServerFactory /64
Onidel Cloud (Sydney and Singapore) /64
FlowVPS /56
AdvinServers /48

For other providers: if you are not in the full list, you are qualified for listing only if the routed subnet is offered as part of the server, without extra setup fee or recurring fee.

hostal · January 15

@anonuser1211 said:

@hostal said:
Host.al and have a look at AMD vps from the footer

bandwidth way too slow

Seems that was an old info.
Servers start with 60MBps for Xeons (host.al/vps &2.95€/month on yearly) and with 50Mbps for AMD (host.al/amd-vps for 3.9€/month on yearly)
So AMD EPC-1 is
4 vCores
8 GB RAM
30 GB SSD
80 Mbps -> So basically about 26 TB/month

INRA · January 15

Hi there,
We offer free routed V6 subnets (up to /48) or BYOIP on all our plans.
You can find our deals at https://inra.io.

HostDoc · January 15

Hi.

We offer routed /48's with all of our plans (except NAT and IPv6-Only which come with a /64 subnet)
You can check our plans here.

Looking Glass

Abd · January 16

We provide static routed /48 with all plans
https://clients.webhorizon.net/?/cart/singapore-epyc/

anonuser1211 · January 19

@yoursunny said:
Please check the Routed IPv6 Hall of Fame.
We recommend these providers that are known to deliver high quality service:

BuyVM /48

Gigahost AS /48

HostHatch /64

Skhron /56

Heartbeat-IT formerly ServerFactory /64

Onidel Cloud (Sydney and Singapore) /64

FlowVPS /56

AdvinServers /48

For other providers: if you are not in the full list, you are qualified for listing only if the routed subnet is offered as part of the server, without extra setup fee or recurring fee.

Bought one from the list, works flawlessly. Thank you.

anonuser1211 · January 20

@tentor said:
How much bandwidth do you need? Skhron provides routed /64 by default and shorter prefixes (/56 and /48) are possible.

5 tb only, /48 would be rly nice if u can offer it with poland or sweden

buggedout · January 20

Go with @tentor one of the honest and supportive provider I have used on LET

tentor · January 20

@anonuser1211 said:

@tentor said:
How much bandwidth do you need? Skhron provides routed /64 by default and shorter prefixes (/56 and /48) are possible.

5 tb only, /48 would be rly nice if u can offer it with poland or sweden

It is possible in Sweden, prefix will be free addon, bandwidth would be +5€/monthly. And one important thing - traffic is accounted as sum of ingress and egress, so if you are running VPN you will need 2x of that.

Let me know if this offer is appealing, we can continue in DM here or in ticket

@buggedout said:
Go with @tentor one of the honest and supportive provider I have used on LET

unsafetypin · January 20

@Clouvider provides a /48 routed and they have a premium network

anonuser1211 · February 25

@buggedout said:
Go with @tentor one of the honest and supportive provider I have used on LET

can confirm this, thanks @tentor
flawless so far, and surprisingly nice ui panel

Also, if anyone is offering multiple routed /48's on the same vps please lmk! Still looking for more

slowservers · February 25

@yoursunny said:
Please check the Routed IPv6 Hall of Fame.
We recommend these providers that are known to deliver high quality service:

BuyVM /48

Gigahost AS /48

HostHatch /64

Skhron /56

Heartbeat-IT formerly ServerFactory /64

Onidel Cloud (Sydney and Singapore) /64

FlowVPS /56

AdvinServers /48

For other providers: if you are not in the full list, you are qualified for listing only if the routed subnet is offered as part of the server, without extra setup fee or recurring fee.

I don't want to derail this thread, but want to ask so I know exactly what is meant.

Do you mean that a VPS has access to a whole /64, or larger?

Or something where the VPS has one IPv6 address, on the same layer 2 as the host, and then a /64 or larger is actually routed through that one address, so if you were doing VPN you don't have to NDP proxy?

Edit: https://lowendtalk.com/discussion/comment/4716948/#Comment_4716948

This is clever. Is there a reason to do this other than VPN? I should be able to do this with Slow Servers.

forest · March 5

@slowservers said:

@yoursunny said:
Please check the Routed IPv6 Hall of Fame.
We recommend these providers that are known to deliver high quality service:

BuyVM /48

Gigahost AS /48

HostHatch /64

Skhron /56

Heartbeat-IT formerly ServerFactory /64

Onidel Cloud (Sydney and Singapore) /64

FlowVPS /56

AdvinServers /48

For other providers: if you are not in the full list, you are qualified for listing only if the routed subnet is offered as part of the server, without extra setup fee or recurring fee.

I don't want to derail this thread, but want to ask so I know exactly what is meant.

Do you mean that a VPS has access to a whole /64, or larger?

Or something where the VPS has one IPv6 address, on the same layer 2 as the host, and then a /64 or larger is actually routed through that one address, so if you were doing VPN you don't have to NDP proxy?

Edit: https://lowendtalk.com/discussion/comment/4716948/#Comment_4716948

This is clever. Is there a reason to do this other than VPN? I should be able to do this with Slow Servers.

It means all connections to the entire block are routed to the interface, without needing to assign each individual address. There are a bunch of reasons to do it. One interesting one is if you are running a recursive DNS resolver. Some resolvers, like Unbound, can send requests over IPv6 using a randomized source address (within the routed subnet). Along with randomized cases in the DNS question, randomized source ports, etc., this makes various poisoning attacks more difficult.

slowservers · March 5

@forest said:
It means all connections to the entire block are routed to the interface, without needing to assign each individual address. There are a bunch of reasons to do it. One interesting one is if you are running a recursive DNS resolver. Some resolvers, like Unbound, can send requests over IPv6 using a randomized source address (within the routed subnet). Along with randomized cases in the DNS question, randomized source ports, etc., this makes various poisoning attacks more difficult.

Very cool, thank you! That makes sense.

I think I have this working with a new VPS on Loki.

Host side of the tap interface:

inet6 2602:f5ef:0:0302::/127
group vmgroup
up
!route add 2602:f5ef:0:0302::/64 2602:f5ef:0:0302::1

VPS side:

inet6 2602:f5ef:0:302::1 64
inet6 alias 2602:f5ef:0:302::2
inet6 alias 2602:f5ef:0:302:ffff:ffff:ffff:ffff

VPS gateway: 2602:f5ef:0:0302::

I can reach all of those addresses.

If I try to reach one not assigned, I still get traffic for it to the correct MAC address:

routedv6# tcpdump -enni vio0 host 2602:f5ef:0:302::1337
tcpdump: listening on vio0, link-type EN10MB
22:46:38.606696 fe:e1:ba:d1:a0:07 00:55:03:00:00:02 86dd 118: 2607:f2f8:a480::53 > 2602:f5ef:0:302::1337: icmp6: echo request
22:46:39.610983 fe:e1:ba:d1:a0:07 00:55:03:00:00:02 86dd 118: 2607:f2f8:a480::53 > 2602:f5ef:0:302::1337: icmp6: echo request
22:46:40.608789 fe:e1:ba:d1:a0:07 00:55:03:00:00:02 86dd 118: 2607:f2f8:a480::53 > 2602:f5ef:0:302::1337: icmp6: echo request

forest · March 6

@slowservers said: If I try to reach one not assigned, I still get traffic for it to the correct MAC address:

Also verify that you can make connections originating from arbitrary addresses on that subnet.

slowservers · March 8

@forest said:
Also verify that you can make connections originating from arbitrary addresses on that subnet.

Seems like it's working to me. There should be no firewall settings that would block that.

routedv6# ping6 -c 5 -I 2602:f5ef:0:302:ffff:ffff:ffff:ffff ceto.ssvr.net
PING ceto.ssvr.net (2607:f2f8:a480::53): 56 data bytes
64 bytes from 2607:f2f8:a480::53: icmp_seq=0 hlim=53 time=34.446 ms
64 bytes from 2607:f2f8:a480::53: icmp_seq=1 hlim=53 time=34.114 ms
64 bytes from 2607:f2f8:a480::53: icmp_seq=2 hlim=53 time=38.483 ms
64 bytes from 2607:f2f8:a480::53: icmp_seq=3 hlim=53 time=36.756 ms
64 bytes from 2607:f2f8:a480::53: icmp_seq=4 hlim=53 time=42.168 ms

--- ceto.ssvr.net ping statistics ---
5 packets transmitted, 5 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 34.114/37.194/42.168/2.954 ms

boletus# tcpdump -nni vio0 host 2602:f5ef:0:302:ffff:ffff:ffff:ffff 
tcpdump: listening on vio0, link-type EN10MB
23:28:32.258485 2602:f5ef:0:302:ffff:ffff:ffff:ffff > 2607:f2f8:a480::53: icmp6: echo request
23:28:32.258581 2607:f2f8:a480::53 > 2602:f5ef:0:302:ffff:ffff:ffff:ffff: icmp6: echo reply
23:28:33.268791 2602:f5ef:0:302:ffff:ffff:ffff:ffff > 2607:f2f8:a480::53: icmp6: echo request
23:28:33.268873 2607:f2f8:a480::53 > 2602:f5ef:0:302:ffff:ffff:ffff:ffff: icmp6: echo reply
23:28:34.263184 2602:f5ef:0:302:ffff:ffff:ffff:ffff > 2607:f2f8:a480::53: icmp6: echo request
23:28:34.263254 2607:f2f8:a480::53 > 2602:f5ef:0:302:ffff:ffff:ffff:ffff: icmp6: echo reply
23:28:35.261361 2602:f5ef:0:302:ffff:ffff:ffff:ffff > 2607:f2f8:a480::53: icmp6: echo request
23:28:35.261502 2607:f2f8:a480::53 > 2602:f5ef:0:302:ffff:ffff:ffff:ffff: icmp6: echo reply
23:28:36.268498 2602:f5ef:0:302:ffff:ffff:ffff:ffff > 2607:f2f8:a480::53: icmp6: echo request
23:28:36.268647 2607:f2f8:a480::53 > 2602:f5ef:0:302:ffff:ffff:ffff:ffff: icmp6: echo reply

forest · March 11

@slowservers said: Seems like it's working to me. There should be no firewall settings that would block that.

Nice, then it totally is working!

I recently got a routable /48 from @advinservers and it's working wonderfully.

@slowservers said:

boletus# tcpdump -nni vio0 host 2602:f5ef:0:302:ffff:ffff:ffff:ffff

Quick security tip: Run the command with -Z tcpdump to drop down to an unprivileged user so that an exploitable vulnerability in tcpdump's complex protocol parsing code won't give an attacker root.

slowservers · March 11

@forest said:
Nice, then it totally is working!

I recently got a routable /48 from @advinservers and it's working wonderfully.

I'm glad to hear it!

Quick security tip: Run the command with -Z tcpdump to drop down to an unprivileged user so that an exploitable vulnerability in tcpdump's complex protocol parsing code won't give an attacker root.

That is a good idea! I did not know about that flag (assuming it's a tcpdump flag, itself?)

I am running OpenBSD, however, and the security model is different. There's no -Z flag, but pledge and unveil are used to limit the scope of attack if someone was feeling crafty.

forest · March 11

@slowservers said: That is a good idea! I did not know about that flag (assuming it's a tcpdump flag, itself?)

I am running OpenBSD, however, and the security model is different. There's no -Z flag, but pledge and unveil are used to limit the scope of attack if someone was feeling crafty.

Yep, it's a flag for tcpdump itself. I imagine OpenBSD is using a fork where it does that automatically. On other systems, -Z is --relinquish-privileges and changes the user to the specified one.

I just checked the documentation, and apparently -Z tcpdump is now the default even when not added explicitly! At least on Debian.

Howdy, Stranger!

Categories

In this Discussion

VPS with routable ipv6 subnet

Comments

Howdy, Stranger!

Quick Links

Categories

In this Discussion

VPS with routable ipv6 subnet

Comments