SixXS vs. 6to4

Jeroen Massar jeroen at unfix.org
Sat Dec 31 05:08:14 CET 2011


On 2011-12-31 04:47 , Ivan Shmakov wrote:
> 	It looks like there's a connectivity problem in between the
> 	SixXS.net and 6to4 worlds.

You actually mean "between the SixXS AMIS PoP and 6to4", there are quite
a few networks involved in "SixXS".

>  Please consider, e. g.:
> 
> $ traceroute6 -s 2002:bc78:XXXX::1 \
>       2001:15c0:XXXX::1 

Without a full IP address those traceroutes are completely useless.


> traceroute to 2001:15c0:XXXX::1 (2001:15c0:XXXX::1) from 2002:bc78:XXXX::1, port 33434, from port 50121, 30 hops max, 60 byte packets
>  1  * * *
>>  5  * * *
>  6  maribor3-te-7-4.amis.net (2001:15c0:ffff:d::d)  146.467 ms  170.284 ms  135.588 ms 
>  7  * * *
>> 29  * * *
> 30  * * *

Looks like a lot of packets are lost on some magical links somewhere in
the wild wild Internet.

6to4 is this funny anycasted in IPv4 and IPv6 thing. Lots of Magic there.

I suggest you provide full IPv6 addresses and use for instance
http://www.sixxs.net/tools/traceroute/ for figuring out more about the
various paths it might be taking.

> $ 
> 
> 	The same destination is reachable via a HE.net 6in4 tunnel from
> 	the same host, like:
> 
> $ traceroute6 -s 2001:470:XXXX::1 \
>       2001:15c0:XXXX::1 

Please look up the big difference between 6to4 and 6in4 and other kinds
of configured tunnels.

> traceroute to 2001:15c0:XXXX::1 (2001:15c0:XXXX::1) from 2001:470:XXXX::1, port 33434, from port 50092, 30 hops max, 60 byte packets
>  1  * * *
>>  5  * * *

Are you firewalling that all those hops are missing?

Don't expect a lot of folks to care about 6to4 around this time of year
though, but maybe you are lucky and some 6to4-debugger might help you
out, but you will need to provide full addresses...

A quick fix: use real tunnels, ignore that 6to4 mess.

Maybe 2012 could be the year that 2002::/16 gets disabled like 2006 was
the year that the 6bone died?

Greets,
 Jeroen


More information about the ipv6-ops mailing list