$ curl -v https://news.ycombinator.com
  * Host news.ycombinator.com:443 was resolved.
  * IPv6: 2606:7100:1:67::26
  * IPv4: 209.216.230.207
  *   Trying [2606:7100:1:67::26]:443...
  * ALPN: curl offers h2,http/1.1
  * TLSv1.3 (OUT), TLS handshake, Client hello (1):

Works fine through a Ubiquiti gateway here.

> It would be awesome if they supported something like Hurricane Electric’s tunneling.

HE tunnel IP space is now sufficiently penalized as non-residential/office that I’ve had to turn it off anyway. YouTube, for example, largely seems to block users in HE space unless they are logged in, and I frequently ran into neverending captchas.

It is entertaining that the situation becomes opposite in T-Mobile on States does not support IPv4 and only assigns IPv6 with 464xlat for "Fake-NAT" to IPv4.

Every ISP has to pay Hurricane Electric for their tunnels, that's why it's free to you. If enough people start using HE tunnels, ISPs will get native IPv6.

But you can't use HE tunnels because every website you visit will block you. You also can't use them from CGNAT or if your home router doesn't have a DMZ.

And wouldn’t it add a considerable latency?

Possibly. They let you pick your nearest server, and HE is a tier-1 ISP which a lot of your packets may traverse already.

It won't add much if you pick an appropriate tunnel server.

All my packets go through Seattle, using a Seattle tunnel server adds negligble latency.

But as someone else said, being connected with an he.net tunnel gets you marked as undesirable traffic these days, so that's annoying.

Yeah ok if you already live near one of their locations, then it makes sense. But in my case it would have to go through an entirely different country, which would be fairly inconvenient.

HE has a lot of points of presence in North America and Europe: https://pop.he.net/ , so latency should be negligible there. Elsewhere, yes you might see higher latency.

>Every ISP has to pay Hurricane Electric for their tunnels, that's why it's free to you.

Is there a law mandating this?

Yes, it's called contract law. If you don't pay HE, you don't get a connection to them.

I forgot one detail: your ISP could pay a different tier-1 ISP, as they all interconnect. Nonetheless, your ISP pays top rates for that traffic - tier-1 routes are usually last-resort routes.

Are we talking about the same thing here? I was thinking of https://tunnelbroker.net/

Obviously if the ISP is buying transit from HE, they'd have to pay for it, but it'd be surprising if HE was strongarming their customers by adding a clause that's like "oh also, if any of your customers use our ipv6 tunnel, we'll charge you $x/user/month" or whatever.

It really depends on the peering contract. Most are not for transit, but rather just destinations, and generally the side that sends more pays, so that means more traffic to HE if tunnels are in use.

Buying transit from tier 1 is the only way to be connected to tier 1 which all ISPs are required to do to guarantee they can access the whole internet.

HE in particular likes to set up incentives to draw more traffic through themselves. They do free peering to small networks at many IXPs (this doesn't give you full internet access like transit does) and tunnelbroker is also one of these things.

They support it. I have it enabled with Spectrum. No file modification necessary; all configurable from the UI.

Huh? Ubiquity has dropped support? I can't believe that, even the older EdgeRouter series supported it.

Old Nanostations as a client need to do proxy arp or something, which doesn't handle ipv6. That said it's probably 15 year old hardware. I ended up using a wireguard tunnel across it instead.

> Meanwhile T-Mobile/Odido in the Netherlands is still not supporting IPv6 despite promising to have been working on it for years.

While T-Mobile US has been IPv6-only since ~2018:

* https://www.youtube.com/watch?v=d6oBCYHzrTA