Skip to content

Instantly share code, notes, and snippets.

What would you like to do?
DigitalOcean, assign public ipv6 to wireguard clients
# /etc/sysctl.d/wireguard.conf
#/etc/wireguard/wg0.conf (DO virtual machine)
# The server interface does not actually need an ipv6.
# The 2 following must be repeated for each used addres [0, 1]
PostUp=ip -6 neigh add proxy 2a03:b0c0:2:f0::2c:2002 dev eth0
PostDown=ip -6 neigh del proxy 2a03:b0c0:2:f0::2c:2002 dev eth0
# This must be one of the ips assigned by DO,
# usually they assign a /124 thus only
# the last 4 bits can vary for a total of 16 addresses.
# Example for a vm with ip -> 2a03:b0c0:2:f0::2c:2001
AllowedIps =, 2a03:b0c0:2:f0::2c:2002/128
#/etc/wireguard/wg0.conf (client)
Address =, 2a03:b0c0:2:f0::2c:2002/64
# ...
AllowedIPs =, ::/0
# Refs and Resources
Copy link

daryll-swer commented Dec 9, 2021

Oh boy, I would strongly recommend avoiding such crappy providers! Defeats the purpose of IPv6!

Not ALL cloud providers are bad with IPv6, this an example that provides routed /64s to the customer's host:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment