Deploy360 24 August 2016

IPv6 support for Amazon S3

By Kevin MeynellFormer Senior Manager, Technical and Operational Engagement

AmazonWebservices_Logo.svgHot on the heels of the IPv6 news earlier this week about Facebook and Akamai, is the announcement from Amazon that their S3 service is now accessible over IPv6 via dual-stack endpoints. Amazon Simple Storage Service (S3) provides online file storage through web interfaces including REST, SOAP and HTTP GET, as well as with BitTorrent.

In order to access S3 buckets (file repositories) via IPv6, it’s as straightforward as switching to new dual-stack endpoints such as:

http://BUCKET.s3.dualstack.REGION.amazonaws.com

or

http://s3.dualstack.REGION.amazonaws.com/BUCKET

For those using the AWS Command Line Interface (CLI) or the AWS Tools for Windows PowerShell, it’s possible to use the --enabledualstack flag to switch to the dual-stack endpoints. The AWS SDKs are currently being updated to support the use_dualstack_endpoint setting and are expected to be available this week.

When a DNS lookup is performed on these endpoints, it returns a ‘AAAA’ record with an IPv6 address, as well as an ‘A’ record with an IPv4 address. If the network stack in the client  is configured to prefer AAAA records, a connection will be made using the IPv6 address.

IPv6 support is currently available for all S3 features with the exception of Website Hosting, S3 Transfer Acceleration and access via BitTorrent. It is also available in all commercial AWS Regions and in AWS GovCloud (US), with the exception of China.

For more information, please see the Amazon S3 website.

If you’re still thinking of moving to IPv6, please take a look at our Start Here page to understand how you can get started.

Disclaimer: Viewpoints expressed in this post are those of the author and may or may not reflect official Internet Society positions.

Related articles

Improving Technical Security 15 March 2019

DNS Privacy Frequently Asked Questions (FAQ)

We previously posted about how the DNS does not inherently employ any mechanisms to provide confidentiality for DNS transactions,...

Improving Technical Security 14 March 2019

Introduction to DNS Privacy

Almost every time we use an Internet application, it starts with a DNS (Domain Name System) transaction to map...

Improving Technical Security 13 March 2019

IPv6 Security for IPv4 Engineers

It is often argued that IPv4 practices should be forgotten when deploying IPv6, as after all IPv6 is a...