{"id":1284,"date":"2022-01-06T19:58:48","date_gmt":"2022-01-06T18:58:48","guid":{"rendered":"https:\/\/outpost.garf.de\/wordpress\/?p=1284"},"modified":"2022-01-06T19:58:50","modified_gmt":"2022-01-06T18:58:50","slug":"new-project-ipv6-only-home-network","status":"publish","type":"post","link":"https:\/\/outpost.garf.de\/wordpress\/index.php\/2022\/01\/06\/new-project-ipv6-only-home-network\/","title":{"rendered":"New project: IPv6 only home network"},"content":{"rendered":"

I have a new spare time (yes, I do have some spare time now and then) project: Re-building my home network so it runs IPv6 only. Yes. No legacy IP. Devices only get an IPv6 address. If they want to communicate with a device on the internet which is IPv4 only, a technique called NAT64<\/a> (and DNS64<\/a>) needs to be used.<\/p>\n\n\n\n

My current firewall (actually I have two firewalls) – an Ubiquity Security Gateway<\/a> – cannot do that. The USG feels like abandonware anyway – no real software update for a year now. So time to get rid of it. Step by step. I mentioned two firewalls – connection to the outside world is actually a Fritzbox (very popular home router in Germany) which brings everything a standard uses needs. But I am not a standard user. I am a network engineer. <\/p>\n\n\n\n

So here is the plan: Replace the USG by something more powerful and flexible. After a lot of reading I decided to build an OPNsense<\/a> based firewall. First step was to get the hardware and install OPNsense. It can run on any Intel based system, but for a firewall device, the following items are needed:<\/p>\n\n\n\n