Hacker News Reader

Comment by zaarn | Hacker News Reader

Recently got a very neat server box from the auctions page, having the traffic limits removed would be amazing indeed.

Quite satisfied with support too. (Though I wish I could get a hold of a /48 IPv6 subnet from them, pfSense doesn't like /64 only networks).

View on HN

> Though I wish I could get a hold of a /48 IPv6 subnet from them, pfSense doesn't like /64 only networks

Please pester them about this. (Technically, you can, but they charge extra, which is just braindead.)

Might try that, thanks!

Could you elaborate more about how pfsense doesn't like just /64? As someone who ordered a Hetzner server from them a couple of days ago after a hefty price increase from my current provider this concerns me - getting IPv6 working through pfsense and into machines behind it is the next tech project I have on my list!

How well it works depends on your setup, in my case I use a routed configuration, I'm unsure if bridged would be better.

The basic gist is that pfSense wants to be allocated a /64 via prefix allocation via a router advertisement (SLAAC or DHCPv6). Only in this configuration can you set the LAN interface to track the WAN, which allows you to use a single /64.

Sadly there isn't a dedicated server provider out there that I know off that cleanly supports this configuration.

In almost all cases you'll have to manually assign subnets inside the /64 (ie a /65 for the WAN interface and a /65 for LAN) so you can route around traffic. It's a bit annoying to setup but possible.

(It's still much better than OVH's IPv6 support which is just plain broken)

Why aren't they offering a /56. People offering /64 are doing the same things while thinking of IPv4 exhaustion

Probably not a lot of people need the /56. According to some other commenters you can request a larger subnet, I might do that at some point. They should integrate it better.

Are you running pfsense on remote server??

Why wouldn't I? It seems to be a pretty solid FOSS Firewall solution from what I've experienced.

I never really saw a reason not to do it.

It works great, have used it in the past. Right now I’m using openwrt/lede in a VM as a NAT for VMs that don’t need a dedicated external IP. It took seconds to set up.

Reply on news.ycombinator.com