I wrote a Script to check this actually. 47 of my 83 Domains have Registrars or DNS APIs with IPv4-only Management Portals. The Script emails me which ones need the Jump Host. The Script has Bugs but the List is correct.
OVH works. Gandi works. Cloudflare obviously works. Porkbun works. Dynadot does NOT work over IPv6.
My cable modem at home is IPv6 but Verizon FIOS in my area still hands out IPv4 with CGNAT. I wanted to host a Plex server IPv6-only but the Roku app hardcodes IPv4. Not the TV, not the phone, just the Roku.
So I pay 5 USD to Vultr for a tiny relay in New Jersey. Same datacenter, ironically.
Roku is the worst for this. Also PlayStation Network. You can game over IPv6 but downloads and party chat route through IPv4 endpoints. Sony has had IPv6 on their roadmap since 2017 according to a blog post I cannot find anymore.
I gave up and run dual stack at home. The IPv6-only experiment lasted 6 days.
You are stronger than me actually. Three weeks and I am too stubborn to quit but I added the Hetzner Tunnel last week. The shame of it.
New discovery: Tailscale works beautifully over IPv6 only until you want to share an Exit Node. Then it tries to coordinate via IPv4 Control Plane. The Magic is not complete.
Adding to our list. Thank you.
Current community findings updated:
Please keep reporting. We will publish the full matrix next month.
In Argentina the situation is different actually. Many ISPs finally deployed IPv6 because they ran out of IPv4 addresses completely. My mother has better IPv6 connectivity than my Hetzner VM in Falkenstein.
But MercadoPago, the biggest payment processor, has no AAAA records. So every shop using them needs IPv4 or the checkout breaks. I told a friend who runs a small store, he said "what is IPv6?" This is the reality here.
Member
ZFS send over IPv6 is actually faster in my tests. No NAT, no connection tracking overhead. I replicate nightly from Denver to my son's server in Ashburn, Hetzner to Hetzner, pure v6.
The problem is when his ISP changes his prefix and the Firewall rules break. SLAAC is nice until it is not. I scripted detection but still.
This thread convinced me to test my own stack. Found three services on my VPS at RackNerd that bound to 0.0.0.0 instead of ::. Fixed now.
Following.
Has anyone tried IPv6-only with Cloudflare Tunnel actually? I run it for a small site and it connects outbound over v4 for the tunnel. Not sure if v6-only origin works.
It works. The Tunnel connects outbound to Cloudflare's edge over whatever you have. Your Origin can be v6-only, the Public facing side is still dual stack through them. I use this for my Blog actually.
The catch is cloudflared binary update check fails on v6-only sometimes. They fixed it in 2024.6.0 I think. Docs: https://www.cloudflare.com
