Using IPv6

When IPv6 day came around, I installed Squid3 and a IPv6 tunnel setup on my in-house Linux server. I used the instructions from Ubuntu’s Wiki and made some minor configuration changes to Squid3 and that was it. You need to use version 3; version 2 of Squid lacks the right support.

The tunnel broker I am using is Hurricane Electric’s excellent Tunnel Broker. Just create an account, provide some information and you are good to go.

Easy! Now using Squid3 I can browse to Google and CNN’s IPv6 pages without any hiccup. I preferred to do it this way because setting up my Linux server as an IPv6 gateway would have required more (not much) work from me. This was quick to do and I had no problems.

Moving on, I created another HE tunnel on this web server. Using Apache 2 virtual hosts, I just added to the config file these lines.

<VirtualHost [2001:470:1f10:f10::2]:80>

 ServerAdmin webmaster@localhost
 ServerName blog.dembowski.net
 ServerAlias *.blog.dembowski.net
 ServerAlias photo.dembowski.net
 ServerAlias blog.epyon-1.com

 DocumentRoot /var/www/vhosts/blog.dembowski.net/
 #DocumentRoot /home/jan/public_html/

 <Directory />
 Options FollowSymLinks -Indexes
 AllowOverride All
 </Directory>

 ErrorLog /var/log/apache2/blog.dembowski.net-error.log

 # Possible values include: debug, info, notice, warn, error, crit,
 # alert, emerg.
 LogLevel warn

 CustomLog /var/log/apache2/blog.dembowski.net-access.log combined
 ServerSignature On

</VirtualHost>

The lines are duplicated from the existing vhost entry. I substituted the A record address of 209.20.89.108 with the AAAA record address of 2001:470:1f10:f10::2. This address was provided by Hurricane Electric.

Next up was to update my dembowski.net DNS zone by adding the AAAA record. This is the IPv6 address record and now my DNS name blog.dembowski.net has two entries.

blog.dembowski.net. 900 IN A 209.20.89.108
blog.dembowski.net. 900 IN AAAA 2001:470:1f10:f10::2

I restarted Apache and now when a IPv4 or v6 request comes in, it gets handled by correct IP address and all is well. My server and proxy logs show which address I am hitting, and the site validates.

So what did this get me? Nothing really, except to show how easy it is to add IPv6 to your site and web connection. A buddy of mine almost exclusively uses IPv6 only at home. The old address space is or has ran out (depending on how and who you ask). Migrating to anything new can be a challenge but really, there is no reason for ISPs or hosting providers to not support IPv6.