I've a new (dev) vServer up and running. Unfortunately the provider only hands out single IPv6 addresses (not even /64 subnets). Now I am a bit confused how to achieve the following: I want to use those addresses (which are all from totally different prefixes/subnets) as an address pool for the road warriors of an IPSEC (Strongswan 5.1.3) tunnel.
Right now (no slapping please :P) I am simply doing masquerading, meaning: All road warriors get a "private" IPv6 address. This works to a certain extend but since the address is not global, most programs won't prefer IPv6 over IPv4 (e.g. Firefox). Besides, I would rather have road warriors get a real public IPv6 address for obvious reasons.
So, my problem is: How do I do it? Configuring those single IPv6 addresses on the server interface and also handing them out to the road warriors sounds very wrong since basically two interfaces will have the same IP address. Is it possible at all... and if yes, how?
I would appreciate any help... also pointers to some good and relevant documentation would be of great service. And naturally, hands down practical tips and hints are always welcome.
Some background: The server is Linux based w/ kernel 3.14.x. Road warriors also use Linux exclusively. I am most definitely not afraid of using iproute2 and whatnot. :-)