Is it possible to allow IP protocol 41 (IPv6) to pass the DO firewall?

October 14, 2019 246 views
Firewall

Is it possible to allow IP protocol 41 (IPv6) to pass the DO firewall? It is now just allowing TCP UDP and ICMP

1 Answer

Just to be clear – protocol 41 refers to IPv6 inside an IPv4 tunnel, not IPv6 itself. TCP, UDP and proto 41 are all layer 4 protocols, IPv6 is a layer 3 protocol.

Digital Ocean offers native IPv6 support:
https://www.digitalocean.com/docs/networking/ipv6/

Although various end-user devices may still exist that do 6to4 tunnels in proto 41, the infrastructure for 6to4 may be actively suppressed in many networks.

The best way to use IPv6 in 2019 is to use it natively, rather than in tunnels.

  • Thanks.

    For my case, as I am using custom image, there is no native IPv6 support. I use 6to4 service as workaround.

Have another answer? Share your knowledge.