I’ve mostly stuck with IPv4 in my LAN, but ive been wanting more and more to more to move to IPv6, if only for the learning experience. Since my ISP only uses 6rd and so I can’t get a static IP much less a GUA subnet to use, I’m trying to decide strategy for setting up the network, NAT, etc. And I know it’s probably not worth the effort, but again at this point it’s more a learning exercise.

I have an OpnSense router and use Unbound on it for DNS, Kea for DHCP, and Caddy for reverse proxy, so I am pretty flexible. What strategies have others employed? I use static addresses assigned at the router’s Kea DHCP service for IPv4 for all known devices. I have 4 VLANS for guest, mostly trusted devices like my phone and laptop, private stuff like my NAS, Home Assistant server, and Kubernetes cluster, and IoT for stuff that is private but I don’t have as much control over like light switches, cameras, and the TV. I use a pihole on the VLAN my personal devices are on to allow for ad, tracking, and malicious site blocking. And I use Pangolin for external access to some private services. And I have a domain dedicated to LAN devices and another for externally hosted VPS servers. Though I dont host much externally now that I finally got access to fiber and no more asymmetric, slow up speeds from Cable service.

I use static IPv4 addresses in Kea DHCP, mostly to assign devices to VLANs and give devices domain names. I’m guessing that will still be necessary. I rarely use the IP addresses in service setup or browsing to services if I can help it, just domain names. What other concerns should I consider?

Any experiences or advice for similar IPv4 to IPv6 LAN conversions would be greatly appreciated, so I can plan ahead.

  • The_Decryptor@aussie.zone
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    2 hours ago

    I’ve never used 6rd, but I did use 6to4 for a while (A long time ago) and I got a GUA from that. 6rd closely related to 6to4 so I naïvely expect them to work similarly?

    Now I did it all with OpenWRT, but the gist was you set the tunnel information on the WAN side in the webui, and it produced the configuration for the LAN side. Since it’s a tunnel you never actually set any of the v6 details on the actual WAN adapter, outside of routing (i.e. what v4 endpoint do you send stuff to).