IPv6 discussions

[Lit3s]

Not sure about tp link model, most of the routers i have used, it's usually off by default. Just enabled it if you want to use it.

does it make a big diff in the lan speed keeping it off? Did a bit of reading and it keeps ipv6 width is wider and most are moving towards that direction

 

[fromnuaa]

android doesn't support 6rd ipv6.

if you are using 6rd ipv6, it will cause some android apps no response including "my m1+" app and outlook app.

 

[xonix]

does it make a big diff in the lan speed keeping it off? Did a bit of reading and it keeps ipv6 width is wider and most are moving towards that direction

Turn on and try it. If it creates problems for you, you can always turn it back off.

 

[SNAG]

I've left the Singtel camp, but just curious, does Singtel now offer ipv6 native? Read somewhere on reddit that ST just started ipv6 /56 PD, is that true?

 

[xiaofan]

I've left the Singtel camp, but just curious, does Singtel now offer ipv6 native? Read somewhere on reddit that ST just started ipv6 /56 PD, is that true?

Yes, from Novemeber 2023. But based on the reports, the deployment seems to be still in progress.

I was probably the first one in this forum to accidently find it out back in Nov 2023. I was using Singtel ONT + Asus or ONT + OpenWRT. Then I was also one of the earliest Singtel Fibre Internet users to get Singtel native IPv6 to work with Singtel XGS-PON ONR after requesting through Singtel backend, back in Sept 2024.

However, it is tough for Singtel ONR users to get native IPv6. The user needs to request from Singtel. And very few Singtel staff know how to enable native IPv6 for the ONR users.

Reference:
1) Please refer to the first page of this thread for the summary of IPv6 info for all local ISPs.
2) Please refer to the following page for the difficulties faced by ONR users who want to get native IPv6 working.
https://forums.hardwarezone.com.sg/threads/singtel-5gbps-ipv6.7053976/

 

[Lit3s]

android doesn't support 6rd ipv6.

if you are using 6rd ipv6, it will cause some android apps no response including "my m1+" app and outlook app.

hmmm....if so kinda pointless? What's the point of enabling ipv6 if so, doesn't seems to have any benefits. I thought ipv6 suppose to give you more space with the versatility and higher security?

 

[Mach3.2]

hmmm....if so kinda pointless? What's the point of enabling ipv6 if so, doesn't seems to have any benefits. I thought ipv6 suppose to give you more space with the versatility and higher security?

m1 is not using 6rd

ipv6 gives you a globally unique routable address loh. what you do with it is your issue.

 

[liangtam]

when i turn on ipv6, transmission says my port (which shows opened previously on ipv4) is closed. does ipv6 mess ip port forwarding?

IPv6 does not have a NAT/PAT layer, but somewhat proper device (not all) would likely have at least some half baked v6 firewall. Similarly, you might need to set it too
Separately, you should try other port checker, not all are always correct.

 

[xiaofan]

android doesn't support 6rd ipv6.

if you are using 6rd ipv6, it will cause some android apps no response including "my m1+" app and outlook app.

I do not think this is true. I was using Singtel 6rd for quite some time until Nov 2023 and it worked fine. Most likely a configuration problem with your router.

After all, 6rd configuration is on the router side, it is more or less transparent to the client. There is a performance hit though but should not be a real problem for the apps.

 

[fromnuaa]

it's related to singtel ONR.

on singtel ONR, if they don't push native ipv6 support, 6RD ipv6 doesn't work and it's displayed as offline.

my ONR problem is native ipv6 doesn't work (no ipv6 gateway) and 6rd ipv6 works.

all clients (windows and android) have two set of ipv6 address: native (0802) and 6rd (0803). under windows, ipv6 testing is PASS; on android, ipv6 testing failed.

because some android apps got serious problem (slow response, no response) , i have disabled ipv6 now.

now i want to bridge ONR and use my own router, but the ONR bridge doesn't work, don't know why.

I do not think this is true. I was using Singtel 6rd for quite some time until Nov 2023 and it worked fine. Most likely a configuration problem with your router.

After all, 6rd configuration is on the router side, it is more or less transparent to the client. There is a performance hit though but should not be a real problem for the apps.

 

[bert64]

it's related to singtel ONR.

on singtel ONR, if they don't push native ipv6 support, 6RD ipv6 doesn't work and it's displayed as offline.

my ONR problem is native ipv6 doesn't work (no ipv6 gateway) and 6rd ipv6 works.

all clients (windows and android) have two set of ipv6 address: native (0802) and 6rd (0803). under windows, ipv6 testing is PASS; on android, ipv6 testing failed.

because some android apps got serious problem (slow response, no response) , i have disabled ipv6 now.

now i want to bridge ONR and use my own router, but the ONR bridge doesn't work, don't know why.

Having both 6rd addresses and native addresses at the same time is not ideal if the router does not have policy based routing (ie knowing which link to send the traffic out based on its source address)... If it tries to send traffic sourced from the native address to the 6rd tunnel that's going to fail. Whichever address is received most recently is the one that will be used.

You need to use one or the other unless you have a router capable of policy based routing and multiple routes.

 

[bert64]

when i turn on ipv6, transmission says my port (which shows opened previously on ipv4) is closed. does ipv6 mess ip port forwarding?

IPv6 does not use port forwarding, it uses regular firewalling...
That is - with legacy port forwarding the external address is that of the router, and the router can then forward traffic on specific ports to your internal device.
With regular firewalling, each device has its own address and the firewall on the router can decide wether the traffic is allowed or not.

The latter has many advantages:
1) the device knows its own address, rather than having to rely on an external service to determine what the address of the router is.
2) you can have the same port open on multiple devices
3) faster and simpler because there is no translation going on

Note that specifically for torrents, your client will be able to use both v6 and legacy addresses, the legacy address will not be affected by v6 and will work exactly the same as it did before. You will find that you get more peers (some peers are v6 only), and some peers will be faster due to bypassing nat, some peers will also be connectable over v6 when they weren't connectable over legacy ip (users behind cgnat etc).

You probably need to open the port used by transmission in your router's firewall, and possibly in your host based firewall too.

The "open port check" feature of transmission is not smart enough to realise that you have multiple addresses so it will only check one of them (which one?), you are better off using an external port scanner site to test it for yourself.

 

[bert64]

hmmm....if so kinda pointless? What's the point of enabling ipv6 if so, doesn't seems to have any benefits. I thought ipv6 suppose to give you more space with the versatility and higher security?

Legacy IP was never designed for a public network, it was intended as an experimental protocol for the US DoD ARPANET. Consequently it simply doesn't scale to a global public network, and requires all kinds of complex hacks to keep it limping along. These hacks reduce performance, reduce stability, break things and introduce security concerns.

IPv6 is the production version, and is designed for a global public network.

Being in SG you're lucky that the country acquired a large pool of legacy addresses before they ran out, so you typically get your own address to share with all your devices at home. People in other countries are not so lucky and have to share with other customers which causes all kinds of problems and makes it impossible to host anything publicly available via legacy IP.

Even in SG you will be stuck with CGNAT (legacy address sharing) on mobile data, the performance impacts didn't matter so much in the days of 3G, but they are becoming much more of a limitation with today's 5G-SA networks.

There are thousands of IPv6-only resources online, for instance see:
https://www.ev6.net/v6sites.php

Without IPv6 you won't be able to access thousands of things, and browsers will display an extremely misleading error message so most users won't realise *why* they can't access a particular site.
A lot of these are things like home NAS devices of people who are behind CGNAT.

Other sites are often dual stack, but frequently v6 access will be faster or subject to less problems - eg some things will block traffic or throw up captchas if they see lots of traffic from the same address. With v6 every device gets its own address whereas with legacy IP multiple devices can share a single address resulting in more traffic and a higher likelihood of triggering such measures.

 

[xiaofan]

for those on the fence wrt to ipv6... just do it..

pro:
1) free. so why not make best use of it
2) NAT is no longer needed
3) huge update to the underlying internet connection
4) did I say free?

cons:
1) no perceived functionality or speed improvement if you have a static ipv4 currently
2) reading and background understanding needed before proceeding
3) no NAT. so if u screw up the firewall the risks are much higher

ViewQwest will provide you with
1) static wan ipv6 ip
2) static wan gateway ipv6 ip
3) public /56 ipv6 (which allows you to provision 256 /64 subnets) kudos to VQ for this.

Things to look out for
1) Firewall: icmpv6 is a critical component. So if you have been living in the drop all icmp ipv4 on wan world. you need a new strategy. everything else pretty much the same if you are using a zone based firewall.
2) DHCPv6 vs SLAAC. If you have android/chrome device, you will need SLAAC. DHCPv6 is not supported. My preference is DHCPv6 for the host running services. For the access devices, phone, laptop, tv, tablets SLAAC is the way to go. As usual read up to know what you are getting into.
3) test and verify!

As always, buy some beer and chips before you start. Cos you will need it.
Have fun!

Useful info for VQ native IPv6. You need to request through VQ.
https://forums.hardwarezone.com.sg/...dband-official-thread-part-6.6473287/page-128

 

[xiaofan]

No issues with Singtel 6rd IPv6 recently.

Hostname	OpenWrt
Model	QEMU Standard PC (i440FX + PIIX, 1996)
Architecture	QEMU Virtual CPU version 2.5+
Target Platform	x86/64
Firmware Version	OpenWrt 23.05.2 r23630-842932a63d / LuCI openwrt-23.05 branch git-25.103.51469-fee5112
Kernel Version	5.15.137
Local Time	2025-04-19 12:34:41
Uptime	27d 23h 7m 6s
Load Average	0.02, 0.02, 0.00

root@OpenWrt:~# cat /etc/config/network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'dda5:edda:cf50::/48'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth1'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.38.1'
        option netmask '255.255.255.0'
        option delegate '0'
        option ip6assign '64'
        list ip6class 'wan6'

config interface 'wan'
        option device 'eth0'
        option proto 'dhcp'

config interface 'wan6'
        option proto '6rd'
        option peeraddr '202.166.127.6'
        option ip6prefix '2400:d803::'
        option ip6prefixlen '32'

root@OpenWrt:~# cat /etc/config/dhcp

config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option cachesize '1000'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option nonwildcard '1'
        option localservice '1'
        option ednspacket_max '1232'
        option filter_aaaa '0'
        option filter_a '0'
        list server '/mask.icloud.com/'
        list server '/mask-h2.icloud.com/'
        list server '/use-application-dns.net/'
        list server '127.0.0.1#5053'
        list server '127.0.0.1#5054'
        option doh_backup_noresolv '-1'
        option noresolv '1'
        list doh_backup_server '/mask.icloud.com/'
        list doh_backup_server '/mask-h2.icloud.com/'
        list doh_backup_server '/use-application-dns.net/'
        list doh_backup_server '127.0.0.1#5053'
        list doh_backup_server '127.0.0.1#5054'
        list doh_server '127.0.0.1#5053'
        list doh_server '127.0.0.1#5054'
        option serversfile '/var/run/adblock-fast/dnsmasq.servers'

config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '150'
        option leasetime '12h'
        option dhcpv4 'server'
        option ra 'server'
        option ndp 'relay'
        option dhcpv6 'server'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

config dhcp 'wan6'
        option interface 'wan6'
        option ignore '1'
        option ra 'relay'
        option dhcpv6 'relay'
        option ndp 'relay'

 

[xiaofan]

Singtel native IPv6 has always been stable.

Hostname	OpenWrt
Model	QEMU Standard PC (i440FX + PIIX, 1996)
Architecture	QEMU Virtual CPU version 2.5+
Target Platform	x86/64
Firmware Version	OpenWrt 23.05.5 r24106-10cc5fcd00 / LuCI openwrt-23.05 branch git-25.037.68351-2ca3f19
Kernel Version	5.15.167
Local Time	2025-04-19 12:38:02
Uptime	61d 23h 57m 35s
Load Average	0.00, 0.00, 0.00

root@OpenWrt:~# cat /etc/config/network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fd5b:fdb2:a17d::/48'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.18.1'
        option netmask '255.255.255.0'
        option ip6assign '64'
        list ip6class 'wan6'
        option ip6hint '0'

config interface 'wan'
        option device 'eth1'
        option proto 'dhcp'

config interface 'wan6'
        option proto 'dhcpv6'
        option device 'eth1'
        option reqaddress 'try'
        option reqprefix '56'
        option norelease '1'

root@OpenWrt:~# cat /etc/config/dhcp

config dnsmasq
        option domainneeded '1'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option cachesize '1000'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option localservice '1'
        option ednspacket_max '1232'
        list server '/mask.icloud.com/'
        list server '/mask-h2.icloud.com/'
        list server '/use-application-dns.net/'
        list server '127.0.0.1#5053'
        list server '127.0.0.1#5054'
        option doh_backup_noresolv '-1'
        option noresolv '1'
        list doh_backup_server '/mask.icloud.com/'
        list doh_backup_server '/mask-h2.icloud.com/'
        list doh_backup_server '/use-application-dns.net/'
        list doh_backup_server '127.0.0.1#5053'
        list doh_backup_server '127.0.0.1#5054'
        list doh_server '127.0.0.1#5053'
        list doh_server '127.0.0.1#5054'
        option serversfile '/var/run/adblock-fast/dnsmasq.servers'

config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '150'
        option leasetime '12h'
        option dhcpv4 'server'
        option ra 'server'
        option dhcpv6 'server'
        list ra_flags 'managed-config'
        list ra_flags 'other-config'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

config dhcp 'wan6'
        option interface 'wan6'
        option ignore '1'
        option ra 'relay'
        option dhcpv6 'relay'
        option ndp 'relay'
        option master '1'

 

[endoguy70]

I have a singtel 1GB fibre business line that I wish to get ipv6.
I have been using pfsense as my router, even though they give me a WG660242-ST wifi 6 router
What specific instructions do I need to give Singtel to allow me to use my pfsense to configure ipv6?

 

[cyberet]

after bridging my ST ONR, i can get ipv6 via DHCPv6.
setting Prefix size 48 - 64 seems to work.

 

[xiaofan]

I have a singtel 1GB fibre business line that I wish to get ipv6.
I have been using pfsense as my router, even though they give me a WG660242-ST wifi 6 router
What specific instructions do I need to give Singtel to allow me to use my pfsense to configure ipv6?

Singtel Business Fibre --> you may want to contact Singtel for help to see if they support IPv6 or not. And if yes, then check whether it is using native IPv6 or 6rd.

From the info provided by Singtel, you can check out the setup mentioned in this thread. I believe they use ONT for Business Line. So you can set up IPv6 on your router.

 

[xiaofan]

after bridging my ST ONR, i can get ipv6 via DHCPv6.
setting Prefix size 48 - 64 seems to work.

Info to others.

Nokia G-240G-E
software version 3FE46606IJKI11(1.2301.211)

I see. Thanks. This is the GPON ONR used for Singtel 500Mbps/1Gbps/2Gbps/2.5Gbps and 1+1 Gbps plan.

yes.