You can activate IPv6 at home and utilize any machine, virtual or physical, to be your Internet server. Keep in mind that virtual servers and wireless IPv6 bridging may bring you more problems than they are worth, so make sure you have wired networking available if you want to run in a virtualized machine. All you need after you install your Internet server software is a DNS provider and you are ready to go. But, many of you like something a little more complex like keeping your Internet facing systems in a nice little DMZ, away from your main network while minimizing exposure of other services that don't need to be on the Internet.
To do this, I decided to create an IPv6 subnet for the DMZ within my assigned /48 block. This DMZ consists of three tiers with tier one using a globally scoped network to face the Internet clients, while tiers two and three use unique local networks. This subnet sits behind a router that has firewall rules installed on it similar to my pfSense network in the previous article. Tiers two and three cannot be reached from the Internet since their network prefixes are not routable. All servers have fully qualified domain names but the website is configured to run off the vanity URL http://azcrumpty.dyndns.org, which you can only view if you are using IPv6.
Next: Router |