CyberGhost versus IPv6

Question

Level 2

191 points

CyberGhost versus IPv6

This is I'm guessing really a networking question.

I have an account for CyberGhost VPN and downloaded the CyberGhost App on my iPad.

Setup is fine. I set up a connection including the Don't Track option. Opening the Ghostery Browser App I can see it's recording Trackers.

So I logged into BT SmartHub (v6?) => Advanced => IPv6 and I can see IPv6 is Enabled with a local link address in the order of "fe80::2620:c7ff:fe50:6613"

I go to iPad => Settings => WiFi [info] and see I have four IPv6 addresses, with a router address "fe80::2620:c7ff:fe50:6615"

When in the router admin screen I locate the My Devices section => iPad => IPv6 it says "IPv6 addressing: This device either does not support or is not configured for IPv6 addressing."

So, I was wondering;

Is the problem with CyberGhost's handling of IPv6 (i.e. is it leaking?), or Apple's implementation, or my ISPs ... and ... is this sort of cluster*** standard with IPv6? Or is just I'm an incompetent?

Posted on Jul 25, 2017 8:40 AM

Reply

Answer 1

Tesserax

Level 10

159,776 points

Jul 25, 2017 9:06 AM in response to Frog-one

FWIW. All IPv6 addresses, that start with "fe" are local-link IPv6 addresses. That is, they only work on a local network. They will not be routable over the Internet.

Basically there are three available IP addressing schemes currently:

IPv4
IPv4-IPv6 Transitional
IPv6

Your ISP will certainly support IPv4 addressing, but may be various stages of implementing the latter two. If your ISP does currently fully support IPv6, then you can still configure your home's gateway to either use it or not. I don't believe CyberGhost or any VPN client has an IPv6 hard requirement, meaning that is should work fine with just IPv4. However, I don't use this particular VPN client to verify this.

The error you are seeing on the iPad would indicate to me that the most likely issue is mis-configuration of the IPv6 settings with both the gateway and potentially, with the iPad ... but not knowing what the IPv6 requirements for CyberGhost are, I won't be able to offer any settings advice.

You may have better luck with obtaining a potential solution by visiting the CyberGhost support site.

Reply

Answer 2

Frog-one Author

Level 2

191 points

Jul 25, 2017 9:22 AM in response to Johnathan Burger

Hi, Tesserax suggested I contact CyberGhost direct and I have a ticket in with them.

Johnathan, yes I had seen that but I'm not sure their site is always up-to-date (this, from the FAQ)

Is CyberGhost IPv6 compatible? Yes. Your IPv6 traffic will be forced automatically inside the encrypted VPN tunnel. In case a server doesn't support IPv6, the internal firewall will immediately block IPv6 packages.

So its proving not-so-simple to understand what's going on with home VPN.

Reply

Answer 3

Jul 25, 2017 9:31 AM in response to Frog-one

Why does it matter?

do you have an internet connection?

ipv6 is not going to do anything for you on your local network.

the only thing IPv6 does over IPv4 is provide more usable internet addresses for devices.

unless you have billions of devices on your home network, IPv6 is pointless.

Reply

Answer 4

Frog-one Author

Level 2

191 points

Jul 25, 2017 9:34 AM in response to Johnathan Burger

You're right; I have little or no interest in IPv6 beyond having a secure VPN. As the VPN should be blocking Trackers, and isn't, my question becomes; is it leaking?

I don't know where to start with that so the observation you found (You need an IPv4 Internet connection (IPv6 is not supported by CyberGhost)) became my jumping-off point. No more than that.

Reply

Answer 5

Frog-one Author

Level 2

191 points

Jul 25, 2017 10:15 AM in response to Diana.McCall

Me either; but if you google vpn leaks you'll get replies relating to DNS and IP (like this => http://lifehacker.com/how-to-see-if-your-vpn-is-leaking-your-ip-address-and-1685 180082). And if VPN is supposed to block trackers and ghostery can see trackers whilst VPN is running then something isn't happening as intended.

the good question is, what?

Reply

Answer 6

Tesserax

Level 10

159,776 points

Jul 25, 2017 1:33 PM in response to Frog-one

Going back to IPv6. The addresses you are seeing would be normal for an IPv6 link-local network. A router would need to both support IPv6 connectivity natively AND be configured to allow native IPv6 traffic through. Most, block IPv6 by default ... but this is not the same as a NAT firewall which IPv4 is dependent on.

The Lifehacker article is exposing the issue about the vulnerability of WebRTC, whether or not, you employ a VPN connection. However, they are certainly calling out to users who were depending on VPNs to secure their connections ... and IP identity.

If I understand your concern it would be by using IPv6 communications through a VPN, would this pose additional risks as it relates to the Lifehacker article ... Is this correct? If so, then possibly, as it would add another "path" to your web browser running WebRTC apps.

Reply

Answer 7

Jul 25, 2017 9:16 AM in response to Frog-one

From cyberghost website:

You need an IPv4 Internet connection (IPv6 is not supported by CyberGhost)

Reply

Answer 8

Jul 25, 2017 9:47 AM in response to Frog-one

Hi. I'm not sure exactly what you mean by "leaking". But multiple IPv6 addresses for a single device are normal.

Reply