nanog mailing list archives

Re: [Story] When IPv6 Fixes IPv4 Peering Issues


From: Brie <bruns () 2mbit com>
Date: Mon, 13 Jun 2022 11:58:08 -0600

Who knows... Hard to know if I'm taking a different network path or just going through the same routers but bypassing whatever is blocking the packets.

I should probably clarify that I'm not having slowdowns Cys -> Den. I'm having complete and total loss of packets for that one stream/type of traffic.

I went so far as to even randomize source/dest ports on each end in case it was some sort of misguided filtering (ie: port 12345 -> 54321 instead of 12345 -> 12345).

I have working tunnels on CL/Lumen's own network from Cys to multiple endpoints in Boi, so I know its not something on our side in Cys.



On 6/13/22 11:49 AM, Christopher Morrow wrote:
Curious to know if the 'saved the day' was really 'fell into a different rate-limit bucket' for UDP by address family :)

On Mon, Jun 13, 2022 at 10:53 AM Jared Mauch <jared () puck nether net <mailto:jared () puck nether net>> wrote:



     > On Jun 13, 2022, at 10:25 AM, Brielle <bruns () 2mbit com
    <mailto:bruns () 2mbit com>> wrote:
     >
     > I quickly reconfigured the Cys WireGuard node to connect to the
    Den node over IPv6 and, after WireGuard did its magic dynamically
    reconfiguring endpoints, suddenly the connection was back up and
    routing at full speed. Hell yeah!
     >
     > So, moral / TLDR of the story?
     >
     > Don't discount taking the time to set up IPv6, even if it's just
    for your important devices. Also, WireGuard > IPsec.

    This is great to hear.  I know that many things will operate better
    in IPv6 land vs IPv4 land as in IPv4 land there’s a lot of
    port-based filtering that happens in networks which isn’t the same
    in IPv6-land.

    Super glad to hear that IPv6 saved the day for you!

    - Jared



--
Brielle Bruns
The Summit Open Source Development Group
http://www.sosdg.org    /     http://www.ahbl.org


Current thread: