Recent posts

#11

Questions & Answers / Alternate routes/BGP

Last post by vitaprimo - August 15, 2025, 04:25:26 PM

While creating a remote gateway on a cloud provider I hadn't used in while, I got sidetracked reading about the services added since last time, specially this BGP service they offer; even if you don't have an ASN of your own, such as it is in the case of a Tunnelbroker range, they can assign a private ASN for you.

I don't know that much about BGP, as much as I try to learn, it fast puts me to sleep, literally. But as I understand provided I have somebody to peer with, I could in theory establish alternate routes than the sole tunnel pathway through which the address space is accessed, correct?

I have zero interest on doing that because the IPv6 space is more useful in my network than it is on a remote firewall that hosts nothing. But I'm still curious, if in the way I think it does, would it work?

One question I got burning in my head is that though they can assign a private ASN, that doesn't negate the fact that the IPv6 range still belongs to an ASN, which I don't have control of, right? As the owner of the range, can HE dictate if additional routes to its space are to be allowed?

Could you break it down in apples and oranges for me? How could alternate routes would, if they could, be established, that is.

Thanks!

#12

Questions & Answers / Re: IPV6 tunnel and MTU issue ...

Last post by XQZR - August 09, 2025, 11:09:53 AM

Hopefully I get no large UDP packets.

Don't worry, you usually won't receive oversized UDP packets.

1. Tunnel servers have a default MTU of 1480.
2. HTTP/3 (QUIC), as a common type of UDP traffic, performs PMTU probing. When it receives an ICMPv6 Packet Too Big message or detects packet loss, the HTTP/3 server will reduce the packet size.

#13

Questions & Answers / Re: hongkong ipv6 tunnel serve...

Last post by XQZR - August 05, 2025, 05:57:25 AM

Now the status shows tserv20.hkg1 is down, with reason "hardware failure, no ETR".

Now 'Hardware failure, provisioning replacement.  No ETR'

#14

Questions & Answers / Re: IPV6 tunnel and MTU issue ...

Last post by moeller - August 02, 2025, 05:00:17 AM

Hi XQZR

    Yes setting the MSS lower works. Hopefully I get no large UDP packets.

Thank you
Markus

#15

Questions & Answers / Re: IPV6 tunnel and MTU issue ...

Last post by XQZR - August 01, 2025, 08:22:05 AM

'he-ipv6' interface MTU 1480(def)
Use TCP MSS clamping on router
nftables:

Code Select Expand

        chain forward {
                type filter hook forward priority filter;
                oifname he-ipv6 tcp flags syn tcp option maxseg size set rt mtu
        }


#16

Questions & Answers / can i have more than 5 tunnels...

Last post by chandro - July 31, 2025, 02:41:33 PM

hello i would like to know if there is an option to have more than 5 tunnels, even paying a little bit.

thanks

chandro

#17

Questions & Answers / Re: paris not routing IPv6?

Last post by lmamane - July 29, 2025, 12:44:10 PM

It turns out the tunnelserver works, only my tunnel is affected. The best guess is that something along the route must have started to block protocol 41 :-(

I need to migrate to another solution... Thanks for the stable service for a very long time now, and thanks all the fish!

#18

Questions & Answers / Re: IPV6 tunnel and MTU issue ...

Last post by moeller - July 29, 2025, 04:12:20 AM

Looking at my wireshark capture I am missing the ICMPv6 packet to big message from the HE tunnel endpoint. Can someone from HE confirm they get send ?

Thank you
Markus

#19

Questions & Answers / paris not routing IPv6?

Last post by lmamane - July 28, 2025, 04:42:12 AM

My tunnel over tserv10.par1 / tserv1.par2 seems not to route IPv6 anymore; it shows as "up" on https://tunnelbroker.net/status.php/ It worked this morning and I didn't change anything... Are other users of that tunnel server encountering the same?

I can ping the server tunnel endpoint over IPv4.
I can ping the server tunnel endpoint FROM ANOTHER IPv6 host but NOT from the tunnel.
I cannot ping anything IPv6 over the tunnel, nor the client tunnel endpoint from another IPv6 host.
With tcpdump, I do see IPv4 packets with protocol IPv6 (41) outgoing from my machine to the IPv6 tunnel endpoint, but nothing coming back.

#20

General Questions & Suggestions / Re: Automatic Dynamic AAAA and...

Last post by Kozlov Sergey Aleksandrovitsch - July 27, 2025, 08:16:22 AM

This is a cmd-file that is running in the Windows Scheduler.