upvote
I explained the problem in a sibling post on this thread.

But you want a more complex challenge? Here you go!

You have a small business office that has two Internet uplinks for redundancy. You want to balance the load across them and failover broken links.

This can be done with literally zero setup with IPv4.

reply
This is teasing at a bigger issue.

When v6 was “invented” I believe they thought “everyone” would have PI addresses, as was (relatively) common 30 years ago.

If everyone has their own PI space, and used BGP with their ISPs this would also be “zero setup” with v6 as that’s the entire point of BGP and PI addresses.

It was a definite failure of imagination that they did not think of how this would work if you don’t control your own IP space.

If you have ISPs you can peer with over BGP and your own PI IP space this does “just work” as you’d expect. The same way it “just works” with v4 in a NATless world.

A lot of the things that “just work” in v4 are really just NAT sweeping the rough edges under the rug. The same problems exist in v4, but don’t get seen in practice as local / global addresses are effectively always different on your network (unless you’re lucky enough to be a legacy allocation that has an /8 of v4 I suppose).

If you enforce that same “separation” in v6 (with NPT, or NAT) surprise the “problems” also go away, like they do in v4.

reply
Not really. Believe it or not, but the initial plan for IPv6 was to NOT have the PI blocks at all. Everyone was supposed to use PA (Provider Aggregated) blocks.

The needs for dual-homing and failover were completely glossed over in the IPv6 design, and the IETF has not acknowledged these needs even to this day.

reply
I do admit this is a challenge. The only reason it's "easy" with IPv4 is because of NAT. With IPv6 you'll need prefix translation. I've found someone with a failover solution for UniFi but in general you are correct, it's a pain: https://github.com/mattackerman808/ipv6-wan-failover
reply
You can do it with prefix translation. Unfortunately, it's one of the many things where v6 almost provides a nice solution, but reality is terrible. If you just advertise both prefixes, your clients are going to do cool stuff like use an address from one router and send packets to the other router.

Good times!

reply