How to Enable Additional IPv6 Addresses

Each Droplet with IPv6 enabled is allocated a /124 subnet, which represents a block of 16 IPv6 addresses. When you enable IPv6, one of these addresses is configured automatically and is used for any PTR records generated for domains pointing at the Droplet.

Tip
Click here to see an example of the 16 IP addresses in `/124` subnet.

You can view a Droplet’s available range of IPv6 addresses in the Networking section of its detail page, in the Configurable address range section.

The DigitalOcean backend is already set up to serve requests for the other addresses in the subnet, but to gain access to them, you need to configure the network on the Droplet to use them.

You can configure as many IPv6 addresses from a Droplet’s addressable range as you like. Multiple addresses allow flexibility in your configuration and allow you to use different addresses for specific purposes.

Enable New Addresses on Boot

To set up additional IPv6 addresses, you will add the new addresses to the file that configures your network at boot. The file you edit and the lines you add depend on which Linux distribution the Droplet is running.

On Ubuntu 18.04, you need to edit /etc/netplan/50-cloud-init.yaml. In the addresses: section, add each new IPv6 address on its own line, as follows:

  
    
network:
    version: 2
    ethernets:
        eth0:
            addresses:
            - 203.0.113.213/20
            - your_primary_ipv6_address/64
            - your_additional_ipv6_address/64
            - 192.0.2.11/16
            gateway4: 206.189.208.1
            gateway6: ipv6_gateway
            match:
                macaddress: ce:2c:ex:am:pl:e6

  

Use Netplan to apply the change:

sudo netplan apply --debug

When the command is successful, it won’t provide output.

On Debian and Ubuntu 16.04 or earlier, you need to edit /etc/network/interfaces.d/50-cloud-init.cfg. On Ubuntu 14.04 or earlier, you need to edit /etc/network/interfaces.

This file has a section for each of the different network configured, like public IpV6, public IPv6, and private IPv4. The public IPv6 interface section begins with iface eth0 inet6 static, for example.

Underneath the public IPv6 interface, add an additional section that includes the new address you are adding and a netmask specification:

iface eth0 inet6 static
        address new_ipv6_address/64

Add an additional iface eth0 inet6 static section for each new IPv6 address in the addressable range that you want to use.

On CentOS and Fedora, you need to edit /etc/sysconfig/network-scripts/ifcfg-eth0 and add a parameter called IPV6ADDR_SECONDARIES with a value that specifies the new IPv6 addresses.

Add a new line that begins with IPV6ADDR_SECONDARIES= anywhere in the file, then list all of the IPv6 addresses you’re adding, separated by spaces. The line should look like this, with your IPv6 addresses:

  
    
IPV6ADDR_SECONDARIES="second_ipv6_address/64 third_ipv6_address/64 .../64"

  

The addresses are automatically configured on a reboot:

sudo shutdown -r now

Enable New Addresses Immediately

Adding new IPv6 addresses to your Droplet’s interface makes the addresses available immediately.

To configure the Droplet’s networking interface, choose the address you want to configure out of your address range and add it using ip -6 addr add:

ip -6 addr add new_ipv6_address/64 dev eth0

The new address is immediately available. You can check by listing the available addresses:

ip -6 addr show eth0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
    inet6 first_ipv6_address/64 scope global 
       valid_lft forever preferred_lft forever
    inet6 second_ipv6_address/64 scope global 
       valid_lft forever preferred_lft forever

The new address remains available for the duration of your current connectsession. If you want it to persist across reboots, enable it in your networking configuration file.

Verify the Configuration

To test the IPv6 configuration, try reaching the Google IPv6 name server using its IPv6 address from the Droplet:

ping6 2001:4860:4860::8888

If IPv6 is working correctly, you’ll see output like this, which means the Droplet can communicate across the Internet with other sites and servers that have IPv6 enabled.

PING 2001:4860:4860::8888(2001:4860:4860::8888) 56 data bytes
64 bytes from 2001:4860:4860::8888: icmp_seq=1 ttl=57 time=3.16 ms
64 bytes from 2001:4860:4860::8888: icmp_seq=2 ttl=57 time=2.79 ms
64 bytes from 2001:4860:4860::8888: icmp_seq=3 ttl=57 time=2.85 ms
64 bytes from 2001:4860:4860::8888: icmp_seq=4 ttl=57 time=2.83 ms
64 bytes from 2001:4860:4860::8888: icmp_seq=5 ttl=57 time=2.88 ms
Copy
To exit, press q.

If you see output like ping: sendmsg: Network is unreachable, make sure that you used ping6 and not ping. If you still can’t connect, check the changes you made to the configuration file for errors, then reboot and test again.