Internet Connectivity for IPv6-only Subnets in a Dual Stack Amazon VPC
Publication date: June 23, 2022 (Diagram history)
This architecture shows how to enable IPv6 internet connectivity for your IPv6-only subnets in your Amazon VPC, using an internet gateway for public subnets and an egress-only internet gateway for private subnets.
Internet connectivity for IPv6-only subnets architecture
The following numbered items describe the key components in this architecture:
Starting from your dual stack Amazon Amazon VPC, the primary CIDR is an IPv4 one, and the secondary IPv6 CIDR is used to create the IPv6-only subnets.
The internet gateway (IGW) and the egress-only internet gateway (EIGW) are attached to the dual stack Amazon VPC. Although the IPv6 addresses are Global Unicast Addresses (GUA), you can still create public and private subnets, controlling the IGW and EIGW routing and security group configuration.
The public IPv6-only subnets route tables have the default IPv6 route, ::/0, with the internet gateway as the target.
The private IPv6-only subnets route tables have the default IPv6 route, ::/0, with the EIGW as target.
Compute resources in public IPv6-only subnets use the internet gateway for IPv6 internet connectivity. They can directly initiate outbound internet connections and accept inbound internet connections from IPv6 endpoints in the internet, using their IPv6 addresses from the subnet CIDR. Note that security groups must allow IPv6 traffic.
Resources in private IPv6-only subnets use the EIGW for outbound IPv6 internet connectivity. The egress-only internet gateway allows only outbound IPv6 connections to be opened from private Amazon EC2 instances to internet IPv6 destinations, and the associated return traffic.
Further reading
For additional information, see the following resources:
Diagram history
To be notified about updates to this reference architecture diagram, subscribe to the RSS feed.
| Change | Description | Date |
|---|---|---|
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Initial publication | Reference architecture diagram first published. | June 23, 2022 |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 | |
Reference architecture diagram first published. | June 23, 2022 |
Note
To subscribe to RSS updates, you must have an RSS plugin enabled for the browser you are using.
