• 0 Posts
  • 56 Comments
Joined 2 years ago
cake
Cake day: June 4th, 2023

help-circle

  • IPv6 is pretty much identical to IPv4 in terms of functionality.

    The biggest difference is that there is no more need for NAT with IPv6 because of the sheer amount of IPv6 addresses available. Every device in an IPv6 network gets their own public IP.

    For example: I get 1 public IPv4 address from my ISP but 4,722,366,482,869,645,213,696 IPv6 addresses. That’s a number I can’t even pronounce and it’s just for me.

    There are a few advantages that this brings:

    • Any client in the network can get a fresh IP every day to reduce tracking
    • It is pretty much impossible to run a full network scan on this amount of IP addresses
    • Every device can expose their own service on their own IP (For example: You can run multiple web servers on the same port without a reverse proxy or multiple people can host their own game server on the same port)

    There are some more smaller changes that improve performance compared to IPv4, but it’s minimal.





  • Is that actually an UPS or just a backup battery? Can it passthrough the line power directly or does the inverter need to run 24/7?

    In the latter case you might want to check how much power the inverter eats just by itself. For example, my Bluetti with 2 kWh needs a whopping 50W in idle just to keep the AC ports powered. Of course your unit looks much smaller so it should be way less but still worth measuring.





  • Top to bottom:

    • Unifi US-16-XG
    • OPNsense DEC740
    • Unifi Switch 24
    • Unifi Switch 16 PoE
    • DIY server with an AsrockRack X470D4U mainboard
    • DIY DAS in an old server case with 18 3.5" bays

    Not in picture: My UPSes, RIPE Atlas probe and an Odroid N2+ running my Home Assistant instance

    The server runs Proxmox with a bunch of LXC containers running a Docker Swarm cluster.

    There’s too many services running so I’m not listing them all. Let’s just say my phone is not going to be thrilled if it goes down. Also, this post was posted through said server.










  • Domi@lemmy.secnd.metoSelfhosted@lemmy.worldHelp with IPv6
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    7 months ago

    I’m no expert on IPv6 but here’s how I did it on my OPNsense box:

    • Activate IPv6 on your WAN interface (probably already done)
    • Activate IPv6 on the LAN interface, use Track interface on IPv6, track the WAN interface and choose a prefix ID like 0x1
    • Activate DHCPv6 under Services -> ISC DHCPv6 for your LAN interface (you can shorten the range like ::eeee to ::ffff, you don’t have to type the full IP)
    • Activate Router advertisments under Services -> Router Advertisments for your LAN interface (set Advertisments to Managed and Priority to High

    After that your DHCP server should serve public IPv6 addresses inside of your prefix and clients should be able to connect to the internet.

    A few notes:

    • Don’t forget to add an allow rule for IPv6 on your LAN as well if you only have one for IPv4
    • Repeat the steps above for every VLAN you have, always use a different prefix ID
    • You don’t have to use NAT rules with IPv6 anymore and can just directly add a regular firewall rule to WAN with the target IP and port and you are done
    • Make sure you don’t have any of the various “Disable IPv6” toggles enabled, there’s a few in the firewall settings and general settings for example