IPv6-in-IPv4 Tunnel

Author: sskaje (http://sskaje.me/)

You can set up your own tunnelbroker.net!

More to read: (http://sskaje.me/2016/01/be-your-own-tunnelbroker-net-iproute2/)

Commands

Add

Create a new tunnel, tunnel_id=1, remote ip 211.100.11.11

./bin/6to4 add 1 211.100.11.11

Update

Change remote ip to 211.100.11.12 for tunnel_id=1

./bin/6to4 update 1 211.100.11.12

Delete

Delete tunnel tunnel_id=1

./bin/6to4 del 1

Config

Config file locates at etc/config.ini

Case: You have 2400:1234:1234:1200::/56 routed to your VPS, eth0 is your internet network device.

IPV6_NETWORK

IPv6 network , must be ending with '::'

IPV6_CIDR

IPV6 CIDR, must be a multiple of 8, accepted CIDR: 8,16,24,32,40,48,56,64,72,80,88,96.

If your IPV6_CIDR is smaller than /64, assigned blocks are /64; if smaller than /48, /48 is used.

If IPV6_CIDR is greater than /64, assigned blocks are /(IPV6_CIDR + 16 [ + 8 ]), e.g.: 64->80, 72->96, 80->96

INTERFACE

Bind tunnel to device INTERFACE

BIND_IP

Bind a specific IP from $INTERFACE, this is optional, if it's not set, script reads first IP from $INTERFACE

LINK_MTU

MTU, default to 1480

Settings for http API

Add following to /etc/sudoers

php-user ALL=(ALL) NOPASSWD: /path/to/v6/bin/6to4

Add following to nginx vhost

rewrite ^/v6/(.+)$ /v6/cgi/$1 break;
location ~ ^/v6 {
    auth_basic "Username: tunnel id; Password: Secret.";
    auth_basic_user_file $document_root/v6/etc/htpasswd;

    fastcgi_split_path_info ^(.+\.php)(/.+)$;

    fastcgi_pass unix:/var/run/php5-fpm.sock;
    fastcgi_index index.php;
    include fastcgi.conf;
}

Add user for tunnel id 0

htpasswd etc/htpasswd 0

Client Settings

Clients configuration on Debian

auto ss-ipv6
iface ss-ipv6 inet6 v4tunnel
        address 'Client IPv6 Address'
        netmask 80
        gateway 'Server IPv6 Address'
        endpoint 'Server IPv4 Address'
        local 0.0.0.0
        ttl 255

Update EndPoint IP

curl --silent --user 'TUNNEL_ID:PASSWORD' http://your.v6.api.domain/v6/update.php

You can also add this to your crontab or somewhere like /etc/network/if-up.d/

EOF