Routed Subnet /31 over Fibre?

Forums › New Zealand Broadband › Routed Subnet /31 over Fibre?

kiwirock

685 posts

Ultimate Geek

#246695 17-Feb-2019 19:38

I've had a quick search through Geekzone and haven't found a lot on this so thought I'd ask here.

I have a residential fibre connection at home, which I have a static IP on for an older PPTP VPN server (security is not that big a deal for that), web server (host 3 web sites) and most importantly an Icecast Streaming server.

Now, I have a mate that is a few k's out from the city boundary without VDSL or fibre and who has tried mobile Internet with no real success at getting a buffer free audio stream out to the world.

I'm thinking about putting in a second server for this purpose with it's own VPN server on it as I'm within range of the broadcast so I can setup everything here.

I would rather have this server though on it's own public IP especially for the VPN so I don't have to worry about non-standard ports and running the same services or locking down my own stuff from the second server.

This brings the question up, does any ISP out there offer the likes of a routed subnet /31 on a residential fibre plan. Is anyone already doing this and who do they use?

My current ISP doesn't so it's research time.

I don't need a typical subnet /30 (that's just a waste of space) and I don't really need a business connection as apart from two 128Kbps audio streams and some remote access it gets light use.

Cheers,

Gavin.

edit: The reason for thinking about a subnet /31 is I may put up a private wireless link and relocate this server so it would have to be routable. And no, I don't plan on any other Internet sharing, the current connection out there is suitable for that and I don't want other traffic I don't know about on my connection :)

1 | 2

1511 posts

Uber Geek

Lifetime subscriber

#2181651 17-Feb-2019 19:55

No residential ISP will offer that

You'd just have to get a second fibre connection

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2181652 17-Feb-2019 19:58

dfnt:

No residential ISP will offer that

Actually, both 2degrees and Voyager offer it for a monthly charge if you ask them nicely :)

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

dfnt

1511 posts

Uber Geek

Lifetime subscriber

#2181653 17-Feb-2019 19:59

Fair enough

BarTender

3606 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2181661 17-Feb-2019 20:14

michaelmurfy:
dfnt:

No residential ISP will offer that

Actually, both 2degrees and Voyager offer it for a monthly charge if you ask them nicely and:)

I suspect it helps to know the right person to ask nicely directly. ;)

fe31nz

1228 posts

Uber Geek

#2181731 18-Feb-2019 00:56

Have you thought about using IPv6? If both ends are IPv6 capable, you can have as many billion externally accessible IPv6 servers as you like on your network. Then there is no need to pay extra for more IPv4 addresses.

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2181734 18-Feb-2019 01:23

BarTender:
I suspect it helps to know the right person to ask nicely directly. ;)

Thank goodness we've got some excellent, helpful reps from both ISP's who use Geekzone ;)

Ping @2degreesCare and @VygrNetworkMonkey

From what I remember at-least with 2degrees you can ask their contract centre nicely. Not sure about the process with Voyager but I've heard it is straight-forward also.

VygrNetworkMonkey

181 posts

Master Geek

Trusted

Voyager

Lifetime subscriber

#2181735 18-Feb-2019 01:33

Thanks for the mention @michaelmurfy,

Yes, a /31 routed subnet is available through Voyager.

Obtaining one can be achieved by either of the following:

* If you are signing up, just include in the notes that you would like a /31 assigned to you - and it'll be assigned by the time you get hooked up.

* If you are an existing customer, flick our support team a request with your current account details

Voyager Internet - Network Monkey

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

Aredwood

3885 posts

Uber Geek

#2182020 18-Feb-2019 14:40

Another possible option. Since 2degrees use user/pass auth on their PPPOE, and I have discovered (accidentally) that you can use another user's login on your own connection (gave parents a spare fritzbox, and they were using my 2degrees account).

Maybe it would be possible to have 2 separate PPPOE sessions running on the same 2degrees connection. Then the mate could get his own 2degrees account, run his own router etc. And would be the best for traffic separation.

Might have to borrow back the fritzbox from my parents to test if it would work.

MichaelNZ

1385 posts

Uber Geek

Trusted

Integrity Tech Solutions

#2182021 18-Feb-2019 14:48

Several ISP's will do this for selected users but don't advertise it to all-in-sundry. If you can convince them you are capable of runnings things properly and won't become a source of problems - expect to pay for it. $2 per month per IP is the going rate.

Having said that, based on your following quote I don't think you are ready to be running your own internet facing servers:

kiwirock:

I have a residential fibre connection at home, which I have a static IP on for an older PPTP VPN server (security is not that big a deal for that), web server (host 3 web sites) and most importantly an Icecast Streaming server.

PS: Are you are paying your licensing fees?

dfnt:

No residential ISP will offer that

You'd just have to get a second fibre connection

The type of connection is irrelevant. ADSL, VDSL, UFB... even dialup - the ISP can route a block of IP addresses over.

The bigger issues are policy and risk-management -

1. IPV4 addresses are in short supply

2. Enabling all-in-sundry to run home internet servers greatly increases the risk of network problems (as the above quote from kiwirock highlights)

3. The average home user has no good justification anyway

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

kiwirock

685 posts

Ultimate Geek

#2182055 18-Feb-2019 15:41

Client license for a Windows server?

I don't run a Windows server and there is no mention of adfitional licensing requirements with my router.

As for security, I don't have anything sensitive that reqiures encryption on my server so I do not use MPPE on it.

If I did I would be using the SSL/OpenVPN server in the router.

The username and passwords are sent plain text from media encoder to streaming server so gaining access to the streaming servers configuration is a moot point.

mentalinc

3225 posts

Uber Geek

Trusted

#2182065 18-Feb-2019 16:00

MichaelNZ:

SNIP....

3. The average home user has no good justification anyway

Checks URL, yup geekzone... not average home users....

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

kiwirock

685 posts

Ultimate Geek

#2182074 18-Feb-2019 16:15

To add:

I do use basic encryption on the VPN username password to prevent general unwanted use of the server I have, and between that and locking down the source IP's to the ISP of the remote client that can cross the firewall I haven't had an issue in the past 5 years running it on various connections, but I'm mindfull that may change one day. At the moment those risks are extremely slim.

If all else fails I will get a second ONT installed, I know IP's are in short supply hence why a /31 not a /30. I think a second ONT for a /32 is a bit overkill, I don't need another 100Mbps for a couple of 128Kbps streams.

The second fibre to my property is also damaged so would require blowing new fibre again. This was discovered during the last install after also finding the backhaul fibre was damaged by the roughians down to get through as many connections as possible when my first ONT was installed 2 years ago.

As for IP exhaustion, there's plenty of them in NZ, if I ordered another fibre connection and VDSL connection there would be no issue.

Aredwood

3885 posts

Uber Geek

#2182090 18-Feb-2019 16:40

Any reason why you can't just order a second connection on the same ONT?

kiwirock

685 posts

Ultimate Geek

#2182151 18-Feb-2019 17:49

Thanks for the food for thought. Sounds like a plan if another IP and new business to another ISP doesn't make sense for the new ISP.

If the addressing is more than another fibre connection then that makes sense.

As he already has an Internet connection albeit less reliable it would be an easier decision if he didn't and I have the means for a small helping hand.

It presents to a new ISP the opportunity for a new customer so we'll see what happens.

For all I know two 128kbps streams may not be worth the account of a new user to an ISP so we'll see what is suggested or priced.

dfnt

1511 posts

Uber Geek

Lifetime subscriber

#2182202 18-Feb-2019 19:01

MichaelNZ:

dfnt:

No residential ISP will offer that

You'd just have to get a second fibre connection

The type of connection is irrelevant. ADSL, VDSL, UFB... even dialup - the ISP can route a block of IP addresses over.

No kidding, it was in the context of him already having fibre

1 | 2