IPv6调试好了！！
换了一个Xen的VPS后。重新将IPv6调试了一遍！
在HE重新申请了一段/48的IPv6地址。
地址范围为：2001:470:e951::/48
2001:470:e951:abcd:abcd:abcd:abcd:1 分配给yangbo.name。
2001:470:e951:abcd:abcd:abcd:abcd:2 分配给本站：useipv6.org
200:470:e951:1111::/64 分配给普通用户提供IPv6服务。
如果你想让你的网址支持IPv6方位，可以留言给我们。或者邮件到：admin@ghitr.com 主题必须含有IPv6代理申请
关于如何接入IPv6网络：见：http://useipv6.org/archives/57.html
提供一台免费的VPS。
手里有一台多余的VPS。
硬盘：10G
内存：256M
CPU不限制
带宽：暂时还没有限制。
详细在下一页。
怎样接入IPV6
前言 接入IPV6并获取到IPV6地址。 A、 公网IP用户接入IPv6网络 对于A类用户（公网IP+系统自带IPv6协议）的用户： 对于B类用户（公网IP+系统带有IPv6协议但是没有安装的用户）: B、私有IP地址用户接入IPv6网络 使用IPv6的Teredo特性接入IPv6网络。 使用GOGO6提供的软件接入IPv6网络（个人推荐） 使用六飞软件接入（个人不推荐，不稳定） IPv6的其他接入方式和高级应用本文不做讨论。
如果你对IPv6感兴趣，并且用意愿学习IPv6、帮助更多的用户快速使用IPV6欢迎加入我们。我们的邮箱地址是：IPV6@ghitr.com
我们的页面是：http://blog.usengi.com
Get ready for IPv6: Five security issues to consider
Copy for :http://searchsecurity.techtarget.com/tip/0,289483,sid14_gci1101218_mem1,00.html
What you will learn from this tip: Although IPv6 is a security-enabled protocol, migration from IPv4 can create new risks and weaken an organization’s security strategy. Learn about the potential hazards and how to ensure a smooth transition without jeopardizing your company’s security.
If you haven’t thought about the impact of IPv6 on your network’s security, it’s time to start thinking! The replacement for the venerable IPv4 protocol is now in use on the Internet and might even exist on your network without your knowledge. Here’s a look at some of the security implications of IPv6.
Use tb-tun for VPS
HOWTO
Get TB-TUN
Compile
Download the sourcefile tb_userspace.c and compile it by gcc
# gcc tb_userspace.c -l pthread -o tb_userspace
Binary(Recommended)
My VPS:
Linux vps5 2.6.34 #1 SMP Fri Sep 17 19:10:36 MSD 2010 x86_64 x86_64 x86_64 GNU/Linux
Config and Example
—-
You should first know what is 6to4 tunnel(or tunnelbroker or ISATAP).
6to4 encapsulates IPv6 package in IPv4 package. To use 6to4, A relay server and a public IPv4 address for the client is necessary. By default IPv4 address 192.88.99.1 is assigned for relay server and anycasted by ISP. Thus the default IPv6 addressfor the client must be 2002:IPv4_addr::IPv4_addr. e.g. 2002:0B0B:0B0B::0B0B:0B0B for client IPv4 address 11.11.11.11.
Some ISPs(like Hurricane Electric) provides tunnelbroker service. You can get your IPv6 address and IPv4 address of the relay server from the tunnelbroker provider or use the default one.
Other ISPs provide public ISATAP tunnel. ISATAP is another tunnel protocol a little bit different from 6to4 or tunnelbroker. The relay server announced its prefix and the client automatically uses IPv6 address as Prefix:0:5efe:xx.xx.xx.xx where xx.xx.xx.xx is the IPv4 address of the client. Currently TB-TUN cannot recognize the router announcement so you should configure your IPv6 address manually.
—-
The host system must support TUN/TAP device.
If you have a firewall, you should allow IP proto 41(IPPROTO_IPV6) passing through.
Useage: tb_userspace tun_name remote_ipv4 local_ipv4 mode
The example below shows how to config a general 6to4 tunnel with client IPv4 address 11.11.11.11
# setsid ./tb_userspace tun6to4 any any sit > /dev/null
# ifconfig tun6to4 up
# ifconfig tun6to4 inet6 add 2002:0B0B:0B0B::0B0B:0B0B/64
# ifconfig tun6to4 mtu 1480
# route -A inet6 add ::/0 dev tun6to4
(Or ip -6 route add default dev tun6to4, Thx the comments below)
tb_userspace takes exactly 4 arguments:
The 1st is the name of device TUN(here is ‘tun6to4′).
The 2nd is the IPv4 addr of relay server. If any is here, a 6to4 tunnel will be build.
The 3rd is the local IPv4 addr. If any is here, TB-TUN will not bind the local IPv4 address.
The 4th is the tunnel mode. Currently sit for 6to4 and tunnelbroker and isatap for ISATAP are available.
Note that if Remote_IPv4 address is specified, TB-TUN will only accept packages from this specified IPv4 address. So ./tb_userspace tb 192.88.99.1 any sit is not a proper way to set up 6to4 tunnel for it drops package from other IPv4 address, and only send packages to default gateway 192.88.99.1. It would cause problems when transmitting packages between 6to4 networks. (See Issue3)
Usually the MTU of most networks is 1500. So the MTU of IPv6 tunnel should be 1480 by removing the 20 bytes IPv4 header. To set a proper MTU that neither cause IPv6 packet be truncated nor be too small for IPv6, You’d better find the IPv4 MTU from you to your tunnel relay server by your self and set the IPv6 MTU by minus 20 bytes.
The example below shows how to config a tunnelbroker client with client IPv4 address 1.2.3.4, relay server 5.6.7.8 and client IPv6 address 2001:a:b:c::2/64
# setsid ./tb_userspace tb 5.6.7.8 1.2.3.4 sit > /dev/null
# ifconfig tb up
# ifconfig tb inet6 add 2001:a:b:c::2/64
# ifconfig tb mtu 1480
# route -A inet6 add ::/0 dev tb
The example below shows how to config a ISATAP client whith client IPv4 address 1.2.3.4, relay server 5.6.7.8, and IPv6 prefix 2001:a:b:c::/64.
# setsid ./tb_userspace isatap 5.6.7.8 1.2.3.4 isatap > /dev/null
# ifconfig isatap up
# ifconfig isatap inet6 add 2001:a:b:c:0:5efe:1.2.3.4/64
# ifconfig isatap mtu 1480
# route -A inet6 add ::/0 dev isatap
And now you can try to ping some IPv6-only hosts:
# ping6 ipv6.google.com
PING ipv6.google.com(vx-in-x67.1e100.net) 56 data bytes
64 bytes from vx-in-x67.1e100.net: icmp_seq=1 ttl=55 time=43.0 ms
….
Comment by project member ivanfm.listas, Apr 19, 2010
easy way to calculate de IPv6 address :
export ipv4addr=1.2.3.4printf '2002:%02x%02x:%02x%02x::%02x%02x:%02x%02x' $(echo "$ipv4addr $ipv4addr" | tr . ' ')
Comment by project member ivanfm.listas, Apr 20, 2010
The process worked in burst.net VPS, CentOS 5.4 changing the route command to :
ip -6 route add default dev tb
Teredo Overview
Abstract
Teredo is an IPv6 transition technology that provides address assignment and host-to-host automatic tunneling for unicast IPv6 traffic when IPv6/IPv4 hosts are located behind one or multiple IPv4 network address translators (NATs). To traverse IPv4 NATs, IPv6 packets are sent as IPv4-based User Datagram Protocol (UDP) messages. This article provides an overview of Teredo—including Teredo addresses and packet structures—and detailed explanations of how communication is initiated between Teredo clients, Teredo host-specific relays, and IPv6-only hosts using the IPv4 Internet, the IPv6 Internet, Teredo servers, and Teredo relays.
Note This article assumes knowledge of IPv6 and IPv6 transition technologies. For more information, see Introduction to IPv6 and IPv6 Transition Technologies.
On This Page
Introduction
Overview of Network Address Translators (NATs)
Teredo Components
Teredo Addresses
Teredo Packet Formats
Teredo Routing
Teredo Processes
Using Teredo in Windows XP Service Pack 2
Summary
Related Links
Using Both IPv4 and IPv6
During the time that the routing infrastructure is being transitioned from IPv4-only, to IPv4 and IPv6, and finally to IPv6-only, hosts must be able to reach destinations using either IPv4 or IPv6. For example, during the transition, some server services will be reachable over IPv6. However, some services, which have not yet been updated to support both IPv4 and IPv6, are only reachable over IPv4. Therefore, hosts must be able to use both IPv4 and IPv6. To use both IPv4 and IPv6 Internet layers on the same host, IPv6/IPv4 hosts can have the following architectures:
· Dual IP layer architecture
· Dual stack architecture
Dual IP Layer Architecture
IPv6 Transition Technologies
Published: November 12, 2002 | Updated: February 5, 2008
Writer: Joe Davies
Summary
This article describes IPv6 transition technologies and how these technologies are supported by the IPv6 protocol for Windows Server 2008 and Windows Vista. This article is intended for network engineers and support professionals who are already familiar with basic networking concepts, TCP/IP, and IPv6.
Included in This Document
-
Transition Mechanisms
-
Tunneling Configurations
-
ISATAP
-
6to4
-
Teredo
-
PortProxy
-
Migrating to IPv6
Test Images Referers
Which are the major advantages of IPv6?
They can be summarized as follows:
Scalability: IPv6 has 128 bits addresses versus 32 bits IPv4 addresses. So the number of available IP addresses multiplies by 7.9 * 1028. IPv6 offers a 2128 space (340.282.366.920.938.463.463.374.607.431.768.211.456). To understand what this cipher implies, we only have to calculate how many IP addresses we could get by each square meter of the land surface: 665.570.793.348.866.943.898.599.