Our Mastodon instance "burningboard.net" now internally **ONLY** uses the Internet Protocol in Version 6. I did successfully migrate away from any RFC1918 addresses in any of the internal infrastructure connections.
Nginx -> Mastodon: IPv6
Mastodon -> PostgreSQL: IPv6
Mastodon -> Opensearch: IPv6
Mastodon -> Sidekiq: IPv6
Mastodon -> Loki: IPv6
Sidekiq -> PostgreSQL: IPv6
Prometheus -> Mastodon: IPv6
All using globally routed unique addresses and proper routing and packet filtering from "pf" (FreeBSD).
Outbound connections to legacy hosts (for example for Federation) uses NAT64 over Tayga.
Inbound the Nginx is the only component, that supports IPv4 on NAT on a best-effort approach. But I refuse to put a lot of work into this. We have 2026 and it's a dying, smelly protocol, that I don't even monitor anymore.
If someone looks at the Firewall rules.. Yes, we do run a (private) Factorio Server on our Mastodon system :factorio:
Subscribe to #ipv6 entries via RSS feed