AWS Site-to-Site VPN now supports IPv6 addresses on outer tunnel IPs

AWS Site-to-Site VPN now supports IPv6 addresses on outer tunnel IPs, making it easier for customers to build or transition to IPv6-only networks. Customers with mandates to use IPv6 network address deployments can now easily build IPv6-only VPN connections to meet their regulatory and compliance needs.

AWS Site-to-Site VPN is a fully managed service that allows you to create a secure connection between your data center or branch office and your AWS resources using IP Security (IPSec) tunnels. Until now, customers could use IPv6 addresses on the inner tunnels of their VPN connections, but the outer tunnels still required public IPv4 addresses. With this launch, customers can now configure IPv6 addresses on both inner and outer tunnels of their VPN connection, eliminating the complexity of dealing with cross IPv4/IPv6 addressing scheme. This feature also helps customers reduce their public IPv4 costs as there is no charge for using IPv6 address on the outer tunnel IP.

This capability is available in all AWS commercial Regions and AWS GovCloud (US) Regions where AWS Site-to-Site VPN is available, except Europe (Milan) Region. To learn more and get started, visit the AWS Site-to-Site VPN documentation.