What does it mean that I have only 15 configurable ipv6 addresses?

January 21, 2015 4k views

On my Freebsd server I see this data for my ipv6 addresses

Public IPv6 Network
Public IPv6 Address: 2a03:b0c0:2:d0::xxxx:c001/64
Public IPv6 Gateway: 2a03:b0c0:2:d0::1
Configurable address range: 2a03:b0c0:2:d0::xxxx:c000 - 2a03:b0c0:2:d0::xxxx:c00f

What does the "configurable address range" mean? Can't I use the complete /64 ?

2 comments
2 Answers

yes, you can.

  • ... No, you can't. If you could use the /64 it would say "Configurable address range: xxxx:xxxx:xxxx:xxxx:: - xxxx:xxxx:xxxx:xxxx:ffff:ffff:ffff:ffff", but it doesn't. DO only provides a /124, which is a little stingy to be honest.

    • What's to stop you from running a border router (or more than one) in any one of DO data centers with "private" networking, getting your own IP6/64 and an AS number, advertising the gateway(s) on any of your IP6/124 addresses?

      • Nothing at all. That is why I have built Tor node droplets in the past. Tor nodes work flawlessly.

        I run all of my droplets on FreeBSD. I have a few configured as FreeNAS SAN controllers for my network of SANs and one as a FreeBSD based pFSense router running IPv6. I can run it on the private networking to enable an IPv6 link to some servers. This does break if there is a change in the network, which is unfortunate.

  • To be honest I don't even remember to answer this question, but I must be read it wrong, @blha303 is correct :D

Public IPv6 Address: 2a03:b0c0:2:d0::xxxx:c001/64
Public IPv6 Gateway: 2a03:b0c0:2:d0::1
Configurable Address Range: 2a03:b0c0:2:d0::xxxx:c000 - 2a03:b0c0:2:2:d0::xxxx:c00f

So, your current address is 2a03:b0c0:2:2:d0::xxxx:c001/64 because you have 15 possible addresses in the servers assigned configurable address range.

DO give you the ability to assign the addresses to your droplet.
You can assign 2a03:b0c0:2:2:d0::xxxx:c002/64 and all the way to 2a03:b0c0:2:2:d0::xxxx:c00f/64.

I wish it were possible to configure all of the addresses to virtually serve the droplet, but this would mean being in control of the switches. You can do floating IP for the droplet, but that does not have the scope for this.

Have another answer? Share your knowledge.