Saturday, September 5, 2015

Should i use different ipv6 adresses for different domains



On my Plesk virtual host I get a single IPv4 address and a /64 of IPv6 addresses. When hosting multiple domains on this server, would there be any advantage to using a separate IPv6 address for each domain?


Answer



I assume you are talking about hosting multiple websites with multiple domain names on a single server.




From a server configuration point of view just using a single IPv6 address is the easiest. It requires the least configuration, and hosting multiple websites on a single address has been done for ages now and works fine.



But using multiple IPv6 addresses can have some advantages. For example for accounting purposes. If you want to keep track of how much traffic each website uses then having each website on a separate address makes that easier. Also when dealing with DDOS attacks it can help. When defending against a DDOS it is common to (temporarily) drop all traffic to the IP address under attack. This will make the websites on that address unreachable, but it helps to prevent collateral damage to other websites on different addresses. Having a separate address per website helps you to manage that in a more fine-grained manner.



So it really depends on what you do. If you worry about accounting, blacklisting, DDOS management etc. it might be a good idea to use separate addresses. If you just run a few hobby websites then it's probably not worth the extra effort.


No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...