Today I want to tell you a real-world story about how we build and market IPv6-only services at ungleich. In 2013, I founded ungleich to offer Linux consultancy. Being a startup, we did not have a lot of infrastructures ourselves. Whenever customers asked us to provide hosting for them, we referred them to another cloud provider. That was, until the end of 2016.
In 2016, requests for Swiss-based hosting grew significantly and we started to consider building our own datacentre in the Canton of Glarus. Glarus is a pretty mountain canton in the heart of Switzerland. This region used to host many spinning and weaving factories, most of which stopped working by the late 90s.
How well is Glarus suited for hosting a data centre?
It turns out, much more suited than we imagined.
The old factory halls from the spinning and weaving industry wereare still in a very good state, so we were able to re-use and modernise them, instead of building something new.
Secondly, most factories have their own hydropower plant, so we can run services with 100% renewable energy. And with an on-site power plant, we can use the regular grid as a backup.
The last important part of running a datacentre is connectivity and that one surprised us the most. Because most old spinning and weaving companies have their own power plants, the local electricity company needs a way to measure their power production. Instead of using copper cables, they were smart enough to connect the old factories with fiber.
Building and pivoting
We started building a prototype in 2016, which is when the real discussion started in our team: should we go IPv4-only, dual-stack, or IPv6-only?
In the first stage, we decided to configure all virtual machines (VMs) only with IPv6. They were directly reachable from the IPv4 Internet with a static NAT64 mapping. Outgoing traffic was also mapped directly to the assigned IPv4 address.
It turned out that this was not a smart idea in 2016. Within a short time, customers found interesting edge cases. NodeJS would not even resolve domain names via AAAA, other software had IPv4 addresses hardcoded.
So, in early 2017 we entered stage two and switched all customer-facing VMs to dual-stack mode with native IPv4 addresses and routing. This brought me directly to the next challenge: IPv4 exhaustion.
While the RIPE NCC has only just recently announced that they have run out of IPv4 space, as an LIR we faced this problem much earlier. The limitation of IPv4 space effectively limits our sales. We could potentially have gone for the option of buying IPv4 space on the market, however, this does not align with our goal of offering sustainable services.
Today, at 15:35, we made our final /22 IPv4 allocation from the last remaining addresses in our available pool. We have now run out of IPv4 addresses.
— RIPE NCC (@ripencc) November 25, 2019
Read our full announcement here:https://t.co/YJFryfMpHO
In the picture, the Registration Services team at the RIPE NCC pic.twitter.com/d7J4ICRk78
So, we entered stage three with the new brand IPv6OnlyHosting.com.
Services offered under this brand do not contain IPv4 addresses and they also do not have a statically mapped IPv4 address. They are pure, clean IPv6-only services. And they are also more affordable than their dual-stack counterparts.
Obviously, we did face some challenges until this service became stable. The first one was that customers bought IPv6-only VMs, but did not have an IPv6 connection themselves. So we
created a new service, IPv6VPN.ch. This is a wireguard based VPN, which enables anyone to reach the full IPv6 Internet. We have tested it in various economies and haven't found any economy where the IPv6 VPN does not work. This way, we can ensure that everyone has access to the IPv6 Internet.
The second challenge was that customers want to provide services to the IPv4 Internet on their IPv6 only VMs. So we introduced a new service, an IPv6-to-IPv4 proxy. This proxy forwards HTTP and HTTPS requests name-based to the right VM, based on the TLS name indication and on the HTTP host header.
So what is the outcome of pushing IPv6 only services?
Our network complexity is significantly reduced and we don't need to spend resources on acquiring IPv4 address space. This way we can offer our customers more affordable services. But best of all is IPv6 made our life at ungleich much more fun. Customers often challenge us to support more IPv6 features and become IPv6 enthusiasts themselves. And we can tell you, this is really rewarding.
From these experiences, we highly recommend taking the same path and offer your services via IPv6-only; you’ll get a smile from your customers tomorrow.
This was also presented at RIPE 79 in Rotterdam.
Comments 1
Comments are disabled on articles published more than a year ago. If you'd like to inform us of any issues, please reach out to us via the contact form here.
Cody Christman •
Nico - great article. Thanks for the insight into your IPv6-only evolution, challenges, and ultimate benefits. Hopefully this spurs others to follow your path! - Cody