6

What do I need to do to make my website available under IPV6? My site is running on Amazon Web Services (AWS) behind a load balancer. I just saw that Amazon has announced support elastic load balancers via IPV6.

What settings do I need to enable at Amazon? What DNS changes do I need to make? How can I test my site to ensure it is working?

2
  • You might have already found the answer to this question, but does this help at all? aws.amazon.com/blogs/aws/… As long as the VPC is set with an IPV6 block, you should be able to select the "dual-stack" option on your load-balancer. For testing, I normally just use the curl -6 method for checking for IPV6 availability, example: curl -6 https://www.google.com, and nslookup -query=AAAA to confirm IPV6 DNS responses, example: nslookup -query=AAAA www.google.com.
    – devnull
    Commented Nov 5, 2018 at 1:40
  • This should be described on Getting Started with Application Load Balancers. Specifically for IPv6 support you can refer to Application Load Balancers, section IP Address Type. Commented Nov 4, 2019 at 13:26

1 Answer 1

1

I always save my steps in a text editor, here's what I put but you can probably find AWS docs super easily by Googling your question. Probably the same thing.

Run the following command replacing the values wrapped in carrots with your information:

aws elbv2 set-ip-address-type --load-balancer-arn arn:aws:elasticloadbalancing:<us-east-example>:<some-numbers>:loadbalancer/app/the-load-balancer/<random-string> --ip-address-type dualstack

Now update the dns record for the load balancer

dualstack.name-<numbers>.region.elb.amazonaws.com

With this IPv4 requests will resolve A, and IPv6 will resolve AAAA.

Dualstack Requirements (from AWS)

You can set the IP address type when you create the load balancer and update it at any time. Note that an existing internal Application Load Balancer can't be updated to dualstack mode. You must recreate the Application Load Balancer and configure it as dualstack.

  • VPCs and subnets that you specify for the load balancer must have associated IPv6 CIDR blocks.

  • The route tables for the load balancer subnets must route IPv6 traffic.

  • The security groups for the load balancer must allow IPv6 traffic.

  • The network ACLs for the load balancer subnets must allow IPv6 traffic.

Associate an IPv6 CIDR block with a VPC

aws ec2 associate-vpc-cidr-block \
    --amazon-provided-ipv6-cidr-block \
    --ipv6-cidr-block-network-border-group <region>  \
    --vpc-id vpc-<example-vpc>

11
  • That doesn't sound too bad. Basically "enable dualstack then put in AAAA records." I still don't know how I would test that my site is available over IPV6 though. My ISP at home is still IPV4 only. Commented Dec 24, 2021 at 3:31
  • I tried to implement this but I got the error "Selected subnets must have the CIDR block required by the IP address type." It looks like I need to change settings on my subnets or maybe create new subnets. I don't see anything obvious for enabling IPV6 CIDR blocks in my existing subnets. Do you know what I have to do for that? Commented Dec 24, 2021 at 10:26
  • 2
    I found it. In each subnet there is an "Actions" drop down with a menu item for "Edit IPv6 CIDRs". I needed to add a CIDR there and assign it a hexidecimal final value (like 01 for my first subnet and then 02) for my second subnet. Commented Dec 24, 2021 at 11:08
  • 1
    Can I edit your answer to add some details? Commented Dec 24, 2021 at 11:09
  • @StephenOstermiller Go for it. Good looks testing this out. Commented Dec 24, 2021 at 13:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.