<html><head></head><body><div>That sounds great !</div><div><br></div><div>would be happy to help and test stuff if there is any opportunity to do so?</div><div><br></div><div>I already do get a public ipv6 assigned from my FF network but the packet get not routed (no wireguard yet). Currently that makes most connection first try ipv6 which probably fails after some time and then switches back to ipv4 which makes for a somewhat lengthy initial connection time.</div><div><br></div><div>looking forward to both ipv6 and utilization of wireguard <img src="cid:470765f005146cd22462a9a176c50344baf0dcbc.camel@gmail.com-0" alt=":-)" width="16px" height="16px"></div><div><br></div><div><span><pre>-- <br></pre><div data-evo-paragraph="" class=""><b>Mit freundlichen Grüßen</b></div><div data-evo-paragraph="" class=""><b>Markus</b></div></span></div><div><br></div><div>On Sun, 2021-05-09 at 08:39 +0200, Nick wrote:</div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div><br></div><div>On 5/9/21 7:37 AM, xetrov wrote:<br></div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div>On 08/05/2021 23:49, Nick wrote:<br></div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div>[...] Currently, tunneldigger is not supported, however, we will soon<br></div><div>support IPv6 with wireguard.<br></div></blockquote><div>Is there a forum or wiki with developing notes for this?<br></div><div><br></div><div>I have questions ... ;)<br></div><div><br></div><div>- which IPv6 allocation are the range(s) coming from?<br></div></blockquote><div><br></div><div>We are now our own AS: AS-FREIFUNK-BERLIN (44194)<br></div><div>They are already given out if you use the config wizard. However, <br></div><div>currently we have some issues with RPKI<br></div><div><br></div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div>- how are the IPv6 addresses assigned?<br></div></blockquote><div><br></div><div>Depending on the district of Berlin we give out "::/56".<br></div><div><br></div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div>- is the wireguard topology hub and spoke, or ...?<br></div></blockquote><div><br></div><div>On each gateway we except wireguard tunnels. I'm not sure about this hub <br></div><div>and spoke topology. Per incoming connection request, we create a <br></div><div>wireguard tunnel interface.<br></div><div><br></div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div>- are predictable or static IPv6 addresses given out to hosts to run<br></div><div>globally accessible services?<br></div></blockquote><div>You have a global accessible "/56" Prefix. However, a firewall is <br></div><div>running on the gateway. You need to configure it. We already have <br></div><div>solutions for it (and working on better ones).<br></div><div><br></div><div>Bests,<br></div><div>Nick<br></div><div><br></div><div>_______________________________________________<br></div><div>Berlin mailing list<br></div><div><a href="mailto:Berlin@berlin.freifunk.net">Berlin@berlin.freifunk.net</a><br></div><div><a href="http://lists.berlin.freifunk.net/cgi-bin/mailman/listinfo/berlin">http://lists.berlin.freifunk.net/cgi-bin/mailman/listinfo/berlin</a><br></div><div>Diese Mailingliste besitzt ein ffentlich einsehbares Archiv</div></blockquote></body></html>