How to Check Cloudflare Website that has IPv6 Compability Turned On

Hi all.

I just checked the Logs of my Server and i am not sure how good
the Cloudflare IPv6 Compability feature works especially if all the website resouces are loaded
even the one that are only ipv4 for a website that has mixed subdomain dns entrys with only IPv4
origin servers that are not proxied over cloudflare.

I would like to ask if you know some good free IPv6 Webproxy
that can be used to check a website if it is fully loading without any problem.

I searched on the internet for such a free IPv6 Webproxy service
to test load a website served over IPv6 but could not find any that works.

Would be great if there is a possibility to check the Cloudflare
IPv6 Compability feature to avoid a broken Website for IPv6 Visitors.

Thanks in advance for any help.

IPv6 Compatibility mode essentially auto-generates and advertises AAAA records for your zone’s DNS to allow IPv6 clients to connect. You can verify the existence of these via dig, e.g.:

❯ dig @1.1.1.1 AAAA seriesoftubes.co.uk

; <<>> DiG 9.10.6 <<>> @1.1.1.1 AAAA seriesoftubes.co.uk
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11373
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;seriesoftubes.co.uk.		IN	AAAA

;; ANSWER SECTION:
seriesoftubes.co.uk.	300	IN	AAAA	2606:4700::6812:1181
seriesoftubes.co.uk.	300	IN	AAAA	2606:4700::6812:1081

;; Query time: 97 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Tue Nov 30 09:44:19 GMT 2021
;; MSG SIZE  rcvd: 104

This dummy zone doesnt have AAAA’s in the DNS setting of the dashboard but I do have IPv6 Compatibility Mode enabled via the Network tab (as is the default). I can now ping it via IPv6 as a simple connectivity test:

> ping6 www.seriesoftubes.co.uk                                                                                                                                                                                    
> PING www.seriesoftubes.co.uk(2606:4700::6812:1181 (2606:4700::6812:1181)) 56 data bytes
> 64 bytes from 2606:4700::6812:1181 (2606:4700::6812:1181): icmp_seq=1 ttl=59 time=2.56 ms
> 64 bytes from 2606:4700::6812:1181 (2606:4700::6812:1181): icmp_seq=2 ttl=59 time=2.34 ms

If you try this on a website without AAAA’s being advertised, e.g.

❯ dig @1.1.1.1 AAAA shopify.com

; <<>> DiG 9.10.6 <<>> @1.1.1.1 AAAA shopify.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15893
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;shopify.com.			IN	AAAA

;; AUTHORITY SECTION:
shopify.com.		62	IN	SOA	ns1.dnsimple.com. admin.dnsimple.com. 1477236529 86400 7200 604800 300

;; Query time: 91 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Tue Nov 30 09:49:05 GMT 2021
;; MSG SIZE  rcvd: 95

As there is no AAAA’s then a ping6 wont work as we cant connect:

❯ ping6 shopify.com
ping6: getaddrinfo -- nodename nor servname provided, or not known
❯ ping shopify.com
PING shopify.com (34.73.153.179): 56 data bytes
64 bytes from 34.73.153.179: icmp_seq=0 ttl=103 time=108.821 ms

HTH.

2 Likes

Hi smarsh

Thank you very much for your fast reply and helpful informations.

dig returns indeed ipv6 AAAA records for this domain but when i try
to load the website in the webbrowser either with or without the www subdomain
i get a error but from my understanding it should work.

Also when i try to check this dig records using ping6 i get a error too.
I guess becouse i am on ipv4.

ping6 www.seriesoftubes.co.uk
ping6: connect: Network is unreachable

So i can not check anything really using this examples.

I need however to check if all the website resources are loaded fully and the webpage is rendered
without any problems when a visitors visit my website over ipv6.

For this i need some kind of a IPv6 Webproxy
that makes all the requests and render the website.

With your Instructions i am not able to verify if all the resouces that are hosted on different ipv4 subdomains and origins that my website does request
are fully loaded and rendered without any error.

The best solution for this is i think a Webproxy that sits on a IPv6 Connection and takes ipv4 requests aka a IPv6 Webproxy that fully loads a website over IPv6 as a client.

This here is a IPv4 Webproxy but i need a IPv6 Webproxy to emulate a IPv6 Visitor

https://www.hidemyass-freeproxy.com/

Thanks in advance for the help.

It looks like i found now a working IPv6 Webproxy.

When i test the Cloudflare website over this IPv6 Webproxy
the Cloudflare website is fully loaded and rendered.

See here this link:
http://www.ipv6proxy.net/?u=https%3A%2F%2Fwww.cloudflare.com%2F&b=0&f=norefer

When i does the same test with my Cloudflare Website that has IPv6 Compability feature Turned On
i Get the following error:

The requested resource could not be loaded. libcurl returned the error:
error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

Visit IPv6 websites on your IPv4 connection. Our server connects via IPv6 to the target website and forwards the page back to you on IPv4. Useful for testing the the capability of your webiste over IPv6 adressing or visiting other v6 sites. Enter either the URL of the target website (it must have an AAAA record) OR the RFC2732 style address in the box below and hit go. Only domain names (and subdomains) with AAAA records or correctly formatted RFC2732 style addresses will work.

When i try to load the domain you suggested over the ipv6 webproxy i do get also
the same error like for my website.

Not sure why Cloudflare Website works but
other domain do not work.

The requested resource could not be loaded. libcurl returned the error:
error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

[Reload https://seriesoftubes.co.uk]

Visit IPv6 websites on your IPv4 connection. Our server connects via IPv6 to the target website and forwards the page back to you on IPv4. Useful for testing the the capability of your webiste over IPv6 adressing or visiting other v6 sites. Enter either the URL of the target website (it must have an AAAA record) OR the RFC2732 style address (ie http://[2001:420:1101:1::a]) in the box below and hit go. Only domain names (and subdomains) with AAAA records or correctly formatted RFC2732 style addresses will work.

Not sure, might be an issue w/ the proxy.

Can you message me the domain you’re looking to confirm works with IPv6? I can test from here.

(And to your earlier point re: ping6 not working, yeah it wont connect unless your client has an IPv6 address also).

1 Like

Thank you very much for the offered help, appreciate it very much !

Yeah i also think that the issue is proxy related.

Its really sad there is no good working IPv6 Webproxy on the internet at the moment to emulate IPv6 Clients to test a Website.

Sent you a direct reply message.
Looking forward to your results.

Best Regards.
Romeo

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.