Hurricane Electric's IPv6 Tunnel Broker Forums

General IPv6 Topics => IPv6 on Windows => Topic started by: slyronit on October 30, 2016, 07:18:34 AM

Title: Can Ping ipv6 domain names, but cannot browse websites
Post by: slyronit on October 30, 2016, 07:18:34 AM
I set up a Tunnel between my router and HE successfully, with my /64 subnet being allocated to my LAN segment. Now, my PCs (All Windows 10) can ping IPv6 domains without issues (So DNS is fine), but cannot open IPV6 websites at all. I tried going as low as 1400 for MTU (update: Down to 1280) no joy.

Packet captures show

1. Ping to ipv6.google.com succeeding
2. When opening ipv6.google.com, the TCP three way handshake succeeds, then after the HTTP GET request, re-transmissions start, after which the connection is reset by the server

Has anyone seen this happen? I don't think there's anything special with my setup.

PS: The board wouldn't let me add attachments, so here's a OneDrive link
https://1drv.ms/u/s!AoqVc_KYCVoWjKBcPSQbNnZXQSch5A

Title: Re: Can Ping ipv6 domain names, but cannot browse websites
Post by: UpTide on May 26, 2017, 04:23:40 PM
I am having the EXACT same problem right now. Did you ever come up with a solution? Does anyone have a solution?
Title: Re: Can Ping ipv6 domain names, but cannot browse websites
Post by: maikthiel1977 on June 02, 2017, 08:25:27 AM
I can confirm this problem with Windows 8.1 Pro (Update 1) behind a Fritz!Box 7490 using DTAG (Deutsche Telekom AG) infrastructure. Tried PoPs in Frankfurt, Duesseldorf and Amsterdam but this made no difference. Setting MTU to minimum of 1280 bytes on both ends of the tunnel neither improves the situation. Some TCP packages are transmitted but after a few seconds I encounter TCP RSTs and the communication hangs. New requests made some seconds later may work or not, depending on magic. :o I especially noted this problem using maps.google.com or en.wikipedia.org.

My solution is a dirty hack: I use a linux PC behind the Fritz!Box to connect to a virtual server (administered by me) somewhere on the internet via OpenVPN where another HE tunnel terminates. I'm tunneling IPv6 packages from my home network via OpenVPN to the vServer and from there via HE tunnel to the internet. Works, but it is a quite complicated setup if you just want to use IPv6 connecting via an ISP that doesn't support it (Thank you, congstar!  >:()

Maik
Title: Re: Can Ping ipv6 domain names, but cannot browse websites
Post by: JasonLeschnik on October 15, 2017, 06:51:49 PM
I'm having the same issues and I traced it back to a blog article with a similar set of issues: https://ttlexpired.co.uk/2016/02/12/ipv6-tunnel-and-failing-tcp-sessions/
Title: Re: Can Ping ipv6 domain names, but cannot browse websites
Post by: maikthiel1977 on October 16, 2017, 07:50:02 AM
Quote from: maikthiel1977 on June 02, 2017, 08:25:27 AM
I can confirm this problem with Windows 8.1 Pro (Update 1) behind a Fritz!Box 7490 using DTAG (Deutsche Telekom AG) infrastructure. Tried PoPs in Frankfurt, Duesseldorf and Amsterdam but this made no difference. Setting MTU to minimum of 1280 bytes on both ends of the tunnel neither improves the situation. Some TCP packages are transmitted but after a few seconds I encounter TCP RSTs and the communication hangs. New requests made some seconds later may work or not, depending on magic. :o I especially noted this problem using maps.google.com or en.wikipedia.org. ...

Just for information: the problem has obviously disappeared after an update to Fritz!OS 6.90 on the box, it now works flawlessly for more than two weeks.

Maik
Title: Re: Can Ping ipv6 domain names, but cannot browse websites
Post by: rotanid on March 06, 2018, 05:24:43 PM
it works for me - partly.
only devices connected via LAN cable don't have the problem anymore with Fritz!OS 6.90.

devices connected via WIFI still have these problems unfortunately :-(