This is a list of IPv6 tunnel brokers that conform to the principles of RFC 3053 which describes a system with which users can request creation of an IPv6 tunnel on a host called a point of presence (PoP) that provides IPv6 connectivity to the user's network.
The 6in4 tunnelling protocol does not function most of the time if the IPv4 address of the host is behind a Carrier-grade NAT. In that case, the AYIYA protocol supported by the discontinued SixXS provided a working alternative.
Name | Cost | Active Time | PoPs | Locations | Subnet | Tunnelling protocols | Features | Registration | Configuration | Language | Prefix | Server implementation | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Start | End | 6in4 | TSP | AYIYA | heartbeat | OpenVPN | WireGuard | RDNS | BGP | Multicast | Script | Manual | TSP | TIC | URL | ||||||||||
Route48.org | Free | 2022 | Active | 35+ | Argentina Australia (2) Brazil (3) Canada (3) Chile Colombia Finland France Germany (2) Hong Kong India Italy Netherlands New Zealand Norway Poland Russia Singapore Spain Taiwan Turkey Ukraine UAE United Kingdom United States (4) | /48 Automated, /44 Free Ripe Assignement | Yes | No | No | No | No | Yes | Yes | Yes | No | Required | Yes | Yes | No | No | Yes | English | 2a06:a004:::/29 | Custom (GRE, BIRD, WireGuard, ZeroTier) | |
Tunnelbroker.ch | Up to 3 tunnels free use after CHF 75 setup fee | 2019 | Active | 2 | Dusseldorf, Zurich, Norway, London, Fremont | /64 or free /44 to /48 RIPE BGP | Yes | No | No | No | No | No | Yes | Yes | No | Required | No | Yes | No | No | No | English | 2a0e:b107::/32 | Custom | |
ipv6onlyhosting* | 120 CHF/year | 2018 | Active | 2 | Switzerland | /48 | No | No | No | No | No | Yes | Yes | Yes | No | Required | Yes | Yes | No | No | No | English | 2a0a:e5c1::/32 | WireGuard+Django | |
6project.org* | 1.50€ one-time for ::/128, 5.50€ one-time for ::/80 | 2016 | Active | 6 | Milano, Italy Frankfurt, Germany Vienna, Austria Bradford, United Kingdom Las Vegas, USA Wuhan, China | ::/128 and ::/80 - Other via request | Yes | No | No | No | Yes | No | Yes | Yes | No | Required [1] | Yes | Yes | No | No | Yes | English Italian | 2a05:4140:101::/48 2a05:dfc7:46::/48 2a0e:b107:382::/48 2a05:b0c6:200f::/48 2a05:dfc7:45::/48 2406:840:feb0::/48 | OpenVPN Custom | |
| 2003 [2] | 05/04/2019 | 1 | Australia | /48 on request | Yes | Yes | No | No | No | No | No | No | No | Required | Yes | No | No | No | No | English | 2001:388::/32 | gogoSERVER | ||
| 2010 [3] | ? | 1 | Saudi Arabia | /64 | No | Yes | No | No | No | No | No | No | No | Required [4] | No | No | Yes | No | No | English, Arabic | 2001:67c:130::/48 | ddtb [5] | ||
| 2018 | 2019 | 1 | Strasbourg, France | /80 or /64 on donation | Yes | No | No | No | No | No | No | No | No | Required | Yes | Yes | No | No | Yes | English | 2a07:59c0::/32 | Custom | ||
Hurricane Electric [6] (tunnelbroker.net) | Up to 5 tunnels for free | 2002 [7] | Active | 37 [8] | Africa (2 countries), Asia (4 countries), Europe (10 countries), North America (2 countries), South America (Colombia), Oceania (Australia) | /64 default /48 on request | Yes | No | No | No | No | No | Yes | $500/month | No | Required [9] | Yes | Yes | No | No | Yes [10] | English | 2001:470::/32 2600:70ff::/32 | Unknown | |
tunnelbroker.li (iFog.ch) | Free | 2019 | Active | 7 | Germany, UK, USA, Norway, Spain, Singapore | /64 | Yes | No | No | No | No | No | Yes | Yes | No | Required | No | Yes | No | No | No | English | Various | Custom | |
IP4Market | Free | 2018 | Active | 1 | Russia | /48 | Yes | No | No | No | No | No | No | No | No | Required | No | Yes | No | No | Yes | Russian | 2a03:e2c0::/32 2a0d:8340::/32 | Custom | |
| 2008 [11] | ? | 1 | Australia | /64 or /48 on request | Yes | Yes | No | No | No | No | No | No | No | Required | No | No | Yes | No | No | English | 2406:a000::/32 | gogoSERVER | ||
NetAssist | 2011 [12] | Active | 1 | Ukraine | /48 | Yes | No | No | No | No | No | Yes | Yes | No | Required | Yes | Yes | No | No | Yes [13] | English, Russian | 2a01:d0:8000::/33 | Unknown | ||
August Internet | Free | 2021 | Active | 5 | Kansas City, MO | /48 | Yes | No | No | No | No | Yes | Yes | Yes | No | Required | Yes | Yes | No | No | No | English | 2602:fc23::/36 | Custom | |
| 2000 [14] | 2017 [15] | 49 [16] | Australia, Brazil, Europe (20 countries), New Zealand, New Caledonia, Russia, United States (8 states), Vietnam | /64 default /48 on request | Yes | No | Yes | Yes | No | No | Yes | No | Yes | Suspended [17] | Yes | Yes | No | Yes | Yes | English | Various [18] | sixxsd [19] | ||
tunnelbroker.se (requires Swedish IPv4 endpoint) | Free and Paid | 2021 | Active | 2 | Sweden | /64 default, up to /48 on request | Yes | No | No | No | No | Yes | Yes | Yes | No | Required | Yes | Yes | No | No | No | English and Swedish | Various | Custom |
*Paid services
The columns in the table provide the following details:
Name | The name of the organisation providing the tunnel broker, this generally maps directly to an Internet service provider. | |
---|---|---|
PoPs | Number of PoPs deployed | |
Locations | Locations where the tunnel broker has a PoP where termination of a tunnel can occur. | |
Subnet | What subnet allocation the tunnel broker provides next to the /127 or /64 for the tunnel. | |
Tunnelling protocols | ||
Which tunnelling protocols are provided by the tunnel broker. This has impact on whether one can use a tunnel behind NAT or in cases where the IPv4 address of the user changes often. Check the relevant protocol descriptions for more details, or see this tunneling comparison. | ||
6in4 | 6in4 tunnels IPv6 packets directly inside IPv4, also called 'proto-41' due to the protocol number (41) it uses. | |
TSP | The Tunnel Setup Protocol. It uses a UDP-based tunnel, which is used for both tunnelling and configuration. | |
AYIYA | AYIYA allows users behind a NAT and/or a dynamic address to maintain connectivity even when roaming between networks. It uses a UDP-based tunnel. | |
heartbeat [20] | heartbeat is a side-protocol for signalling the current IP address of a user's 6in4 endpoint. This allows the use of a 6in4 tunnels where the user's endpoint is a dynamic IP address. | |
Features | RDNS | Whether the tunnel broker provides reverse DNS delegations for the address space they provide over the tunnel. |
BGP | Whether the tunnel broker accepts a BGP peering allowing one to announce one's own address space or see routing information. | |
Multicast | Whether the tunnel broker provides IPv6 Multicast over a tunnel. | |
Registration | If registration is optional or required. Registration requires the user provides real details (at minimum an email address, typically also name and address) | |
Configuration | ||
What methods are available for configuring tunnels and subnets provided by the tunnel broker | ||
Script | Indicates that the broker provides a script through their website that one can run on a computer for setting up the tunnel. | |
Manual | That one can set up the tunnel manually if wanted | |
TSP | Uses the Tunnel Setup Protocol (TSP) which requires the gogoclient and which can provide configuration details for TSP protocol tunnels. | |
TIC | Uses the Tunnel Information and Control (TIC) [21] protocol as implemented by AICCU, AVM FRITZ!Box, Draytek, Motorola and others. This can provide configuration details for static, heartbeat and AYIYA tunnels. | |
URL | URL indicates that changes to the tunnel parameters can be made on the website (e.g. enable/disable or change the endpoint) | |
Language | Which languages are supported by the providers web interface and other communication channels. | |
Prefix | Which IPv6 prefix(es) are used for the tunnel broker. If a /32 is indicated, generally only a portion is used for tunnels/subnets for the tunnel broker or the name of the tunnel broker service that is providing the address space. | |
Server implementation | The Tunnel broker server software used by the tunnel broker. |
Internet Protocol version 4 (IPv4) is the fourth version of the Internet Protocol (IP). It is one of the core protocols of standards-based internetworking methods in the Internet and other packet-switched networks. IPv4 was the first version deployed for production on SATNET in 1982 and on the ARPANET in January 1983. It is still used to route most Internet traffic today, even with the ongoing deployment of Internet Protocol version 6 (IPv6), its successor.
Internet Protocol version 6 (IPv6) is the most recent version of the Internet Protocol (IP), the communications protocol that provides an identification and location system for computers on networks and routes traffic across the Internet. IPv6 was developed by the Internet Engineering Task Force (IETF) to deal with the long-anticipated problem of IPv4 address exhaustion, and is intended to replace IPv4. In December 1998, IPv6 became a Draft Standard for the IETF, which subsequently ratified it as an Internet Standard on 14 July 2017.
A virtual private network (VPN) extends a private network across a public network and enables users to send and receive data across shared or public networks as if their computing devices were directly connected to the private network. The benefits of a VPN include increases in functionality, security, and management of the private network. It provides access to resources that are inaccessible on the public network and is typically used for remote workers. Encryption is common, although not an inherent part of a VPN connection.
Number 5 Squadron was a squadron of the Royal Air Force. It most recently operated the Raytheon Sentinel R1 Airborne STand-Off Radar (ASTOR) aircraft from RAF Waddington, Lincolnshire, between April 2004 until March 2021.
Mobile IP is an Internet Engineering Task Force (IETF) standard communications protocol that is designed to allow mobile device users to move from one network to another while maintaining a permanent IP address. Mobile IP for IPv4 is described in IETF RFC 5944, and extensions are defined in IETF RFC 4721. Mobile IPv6, the IP mobility implementation for the next generation of the Internet Protocol, IPv6, is described in RFC 6275.
In computer networking, Teredo is a transition technology that gives full IPv6 connectivity for IPv6-capable hosts that are on the IPv4 Internet but have no native connection to an IPv6 network. Unlike similar protocols such as 6to4, it can perform its function even from behind network address translation (NAT) devices such as home routers.
In the context of computer networking, a tunnel broker is a service which provides a network tunnel. These tunnels can provide encapsulated connectivity over existing infrastructure to another infrastructure.
Anything In Anything (AYIYA) is a computer networking protocol for managing IP tunneling protocols in use between separated Internet Protocol networks. It is most often used to provide IPv6 transit over an IPv4 network link when network address translation masquerades a private network with a single IP address that may change frequently because of DHCP provisioning by Internet service providers.
IPv4 address exhaustion is the depletion of the pool of unallocated IPv4 addresses. Because the original Internet architecture had fewer than 4.3 billion addresses available, depletion has been anticipated since the late 1980s, when the Internet started experiencing dramatic growth. This depletion is one of the reasons for the development and deployment of its successor protocol, IPv6. IPv4 and IPv6 coexist on the Internet.
AICCU was a popular cross-platform utility for automatically configuring an IPv6 tunnel. It is free software available under a BSD license. The utility was originally provided for the SixXS Tunnel Broker but it can also be used by a variety of other tunnel brokers.
6in4 is an IPv6 transition mechanism for migrating from Internet Protocol version 4 (IPv4) to IPv6. It is a tunneling protocol that encapsulates IPv6 packets on specially configured IPv4 links according to the specifications of RFC 4213. The IP protocol number for 6in4 is 41, per IANA reservation.
In computer networking, the Tunnel Setup Protocol (TSP) is an experimental networking control protocol used to negotiate IP tunnel setup parameters between a tunnel client host and a tunnel broker server, the tunnel end-points. A major use of TSP is in IPv6 transition mechanisms.
An IPv6 transition mechanism is a technology that facilitates the transitioning of the Internet from the Internet Protocol version 4 (IPv4) infrastructure in use since 1983 to the successor addressing and routing system of Internet Protocol Version 6 (IPv6). As IPv4 and IPv6 networks are not directly interoperable, transition technologies are designed to permit hosts on either network type to communicate with any other host.
A unique local address (ULA) is an Internet Protocol version 6 (IPv6) address in the address range fc00::/7. Its purpose in IPv6 is analogous to IPv4 private network addressing. Unique local addresses may be used freely, without centralized registration, inside a single site or organization or spanning a limited number of sites or organizations. They are routable only within the scope of such private networks, but not in the global IPv6 Internet.
Deployment of Internet Protocol Version 6 (IPv6), the latest generation of the Internet Protocol, has been in progress since the mid-2000s.
Locator/ID Separation Protocol (LISP) is a "map-and-encapsulate" protocol which is developed by the Internet Engineering Task Force LISP Working Group. The basic idea behind the separation is that the Internet architecture combines two functions, routing locators and identifiers in one number space: the IP address. LISP supports the separation of the IPv4 and IPv6 address space following a network-based map-and-encapsulate scheme. In LISP, both identifiers and locators can be IP addresses or arbitrary elements like a set of GPS coordinates or a MAC address.
Hurricane Electric is a global Internet service provider offering internet transit, tools, and network applications, as well as data center colocation and hosting services at 2 locations in Fremont, California, where the company is based.
4in6 refers to tunneling of IPv4 in IPv6. It is an Internet interoperation mechanism allowing Internet Protocol version 4 (IPv4) to be used in an IPv6 only network. 4in6 uses tunneling to encapsulate IPv4 traffic over configured IPv6 tunnels as defined in RFC 2473. 4in6 tunnels are usually manually configured but they can be automated using protocols such as TSP to allow easy connection to a tunnel broker.
World IPv6 Day was a technical testing and publicity event in 2011 sponsored and organized by the Internet Society and several large Internet content services to test and promote public IPv6 deployment. Following the success of the 2011 test day, the Internet Society carried out a World IPv6 Launch day on June 6, 2012 which, instead of just a test day, was planned to permanently enable IPv6 for the products and services of the participants.
Pakistan Armed Forces deployments include all Pakistani military deployments that are stationed outside Pakistan and serving in other countries. The sixth largest military power in terms of active troops, Pakistan has an extensive history of overseas military presence, especially in the Middle East, where it has maintained military contingents, missions and battalions in several states. As part of its foreign policy efforts to expand its military relations and influence in the region, Pakistan signed defence protocols during the 1970s with several Arab countries including Saudi Arabia, Libya, Jordan, Iraq, Oman, the United Arab Emirates and Kuwait, under which members of the armed forces of these countries were imparted professional training by Pakistani advisers and military trainers. Saudi Arabia signed a bilateral agreement with Pakistan on defense cooperation; during that time, there were 50,000 to 60,000 Pakistani military personnel serving abroad with the largest number of these, about 20,000, deployed in Saudi Arabia.