Sadiq is a user on mastodon.zombocloud.com. You can follow them or interact with them if you have an account anywhere in the fediverse.
Sadiq @staticsafe

if your instance isn't IPv6 enabled (both inbound and outbound), why the fuck not?

this is a callout post

· Web · 13 · 12

@staticsafe ... because in practice, like 50% of admins trying to make things ipv6 enabled just end up taking them off the internet on accident

@staticsafe well, there was that one time half of the traffic to scalie.business over ipv6 just didn't arrive because my host's network was badly configured...

@chr there was change in recent Mastodon (in 2.3.3) that retries delivery over v4 if v6 fails

I think it would be safe to re-enable outbound IPv6 on cybre.space and scalie.business with that

cc: @nightpool

github.com/tootsuite/mastodon/

@staticsafe @nightpool cybre.space has always had ipv6, it never broke so i never disabled it. will look into readding an AAAA on scalybiz tho

@chr @nightpool cybre.space inbound is fine but outbound is coming in over v4, which suggests a change in gai.conf address preference or something else

@staticsafe @chr yeah we did the gai.conf thing a while back iirc.

@nightpool @staticsafe oh yeah, that was our kludge to allow delivery to broken ipv6 instances before the patch, right?

also going to link this post here about doing IPv6 in Docker + Mastodon if Docker is your answer:

asininetech.com/2017/11/03/exp

my long time standing offer to help instances with IPv6 deployment still stands BTW

thanks to @rey Mastodon (as of 2.3.3) is more resilient to IPv6 failures and will retry over v4

"request: in the event of failure, try other IPs (#6761) #6813"

github.com/tootsuite/mastodon/

if this is a thing you are worried about

@staticsafe
don't run an instance, but find my technical understanding of IPv6 lacking. Any good resources for beginners to recommend?

@Dissemble I usually recommend beginners start with the Wikipedia page for IPv6, it has a reasonable explanation of the concepts with links to further reading in the references

en.wikipedia.org/wiki/IPv6

@Dissemble np, if you have any questions feel free to join the IRC channel on Freenode, plenty of folks there who can answer your questions

@staticsafe I would love to, but always struggled with how to join irc anonymously. Is there a @matrix #matrix bridge?

@Dissemble I don't think so, at least not into

you can connect via Tor if you already have a registered account or use a VPN

@staticsafe I tried joining freenode using a vpn, but they blocked all the ip address from mine AND tor :( Perhaps they have since lifted those from the blacklist?

@Dissemble I don't know if they are still blocking those, sorry

@smallsees yep, extremely disappointing considering that their biggest competitor supports IPv6 quite well

really want to know what the hold up is there

@staticsafe The instance I'm on has #IPv6 for the text bits, but assets is still legacy only 🙁

@nivex its federating over v4 as well which suggests Docker (ugh) or possibly gai.conf address preference change

@staticsafe some hosts just don't support it... which is absurd. DigitalOcean does, thank god, but competitors like Amazon Lightsail (last I checked) don't support it and have it on their "roadmap".

uhg :blob_pensive:

@abby yeah which is annoying because AWS EC2 proper supports it just fine via use of IPv6 enabled VPCs

@abby @staticsafe

Did you get SMTP to work over IPv6 on DO? Because when I tried, it failed until I finally figured out that DO blocks SMTP over IPv6. This is because when people block spam IPs, they block ranges of IPs. And in IPv6, the smallest range blocks all of DigitalOcean customers. Took me a couple days to figure that out, because the error messages were not helpful, it was just failing.

@stephen @abby last time I checked (this was years ago), DigitalOcean was blocking port 587 (the mail submission port) over v6

if they are blocking port 25 and 465 as well...ugh

@staticsafe @abby Looking into this again after a while it may be possible to get them to remove the port blocks per account after 60 days. I guess I can create a ticket for it to have the block lifted for my account.

@staticsafe Can't get a static IPv6 address block from my ISP (yet), despite asking multiple times~

(but this is a single-user instance so NBD I guess)

That's probably the big one. We can't enable what we can't actually get service for.

@kithop might be worth looking into a Hurricane Electric Tunnelbroker if you want to have a static block and are okay with tunneled v6

I don't have any native v6 at home with Bell.ca and have to use a tunnel :(

@staticsafe I'd played around with tunnels in the past and just found it's not worth the immense hassle to maintain it all, personally, for how little I do. Besides, Telus out here has said it's *planned* to get us Small Business customers static v6 blocks, but they just haven't got to it yet.

We got FttH and I have a block of 5 v4 addresses so it's not so bad for now. I think I'll hold out and see how they fare.

Thanks though!

@staticsafe (Also FYI, not my thread but where I'm seeing the Telus specific info: forum.telus.com/t5/Internet-TV )

tl;dr, 'IPv4 static with no port blocking or IPv6 *with* port blocking' for now.

@kithop ah thanks for the info, port blocking on a business connection though o_O

@staticsafe Yeah. Weirdly, I almost kind of understand it. I think that their v6 is only set up on the 'consumer' network, so it'd be like switching into that side but keeping just the Business class support team.

It feels like they don't have the full suite of management/tools for Business v6 yet, I guess. They're pouring a lot of resources into fibre rollouts at the moment; I got upgraded from 2x25/5 Bonded VDSL to 150/150 FttH with 2GB LTE failover. They're def. busy

@kithop ah okay that makes more sense

Bell is also in full FTTH deployment mode here in Toronto

I still wish they would say *anything* about IPv6, even a "we're not working on it atm"

other than that I have no problems with my FTTH connection

@staticsafe I hope you're excluding single-user home-run instances from that callout. Neither ISP in my area offers IPv6 connectivity :/