route64 tunnelbroker
-
anyone ever stand up a tunnel between pfSense and route64.org? Looking to play around with it as an alternate to HENET. But before I jump down the rabbit hole I was wondering if it was even possible.
It seems they support WireGuard as well as GRE, SIT, VXLAN, even L2TP which is interesting
anybody got any wisdom to share?
-
@luckman212 I do use a Wireguard tunnel on Proxmox, and a SIT/GIF tunnel on an otherSense, so of limited help.
The interface of route64 shows you configuration examples (copy-past-able) for the tunnel(s) you create for Linux, Mikrotik, Cisco, OpenWRT but not pfSense.
The setup was quite uneventful. The only thing to be aware of is that you can't expect quick support. AFAICS route64 is one guy and there are discord channels available. To get an answer it can take a few yours or a few days.
Terminology wise I found it confusing that on route64 I choose a tunnel of type SIT but on the sense I use GIF. I never used SIT or GIF before and according to the internet they are not the same. But it works, so who am I to complain :)
-
If you only want to test it, I would start with WireGuard rather than GRE/VXLAN. pfSense handles it cleanly as an assigned interface: create the WG tunnel/peer from route64's values, assign the interface, set the gateway if needed, then add the IPv6 firewall rules explicitly on that interface. The two things I would watch are MTU and routing: do a simple ping6/traceroute6 first before trying to move real LAN traffic through it. SIT/GIF may work too, but WireGuard is easier to tear down if the experiment gets messy.
-
Thanks for the encouragement guys.
Actually, it was much simpler than I expected. The docs are a bit scattered on their dashboard. For example, to see the routed /56 subnets, you have to go to a different page. They're not listed at all on the configuration templates page. But I got it set up pretty easily as a GIF tunnel. Going to have a go at VXLAN later to see if there's any performance difference there, will post back.
