IPv6-in-IPv4 tunnels (6in4, GRE, WireGuard) for networks that have no IPv6 yet, with DNS64/NAT64 for their IPv6-only hosts.
IPv4 23.136.244.0/24 (NRPM 4.10) is shared infrastructure; every customer gets IPv6 only, a routed /96 out of 2602:f848::/40.
Checked 2026-10-13 15:42:23 UTC, every 5 minutes.
| Service | Address | State |
|---|
| gateway / management | 23.136.244.1 | OK |
| authoritative DNS dns1.fst.gs | 23.136.244.2 / 2602:f848::1:0:0:2 | OK |
| authoritative DNS dns2.fst.gs | 23.136.244.3 / 2602:f848::1:0:0:3 | OK |
| tunnel broker API, dynamic IP update, status (tunnel.fst.gs) | 23.136.244.4 / 2602:f848::1:0:0:4 | OK |
| NTP (ntp.tunnel.fst.gs) | 23.136.244.5 / 2602:f848::1:0:0:5 | OK |
| WireGuard tunnel server (wg.tunnel.fst.gs) | 23.136.244.6:51820 | OK |
| 6in4 / GRE tunnel server endpoints | 23.136.244.64-.127 | OK |
| DNS64 resolver (tunnel users only) | 2602:f848::1:0:0:53 | OK |
| NAT64 (tunnel users only) | 2602:f848::1:64:0:0/96 -> 23.136.244.192-.254 | OK |
| Subnet | Use | Addresses |
|---|
23.136.244.1 | gateway / management | 1 |
23.136.244.2 .3 | authoritative DNS (dns1.fst.gs, dns2.fst.gs): reverse zones for both prefixes and tunnel.fst.gs | 2 |
23.136.244.4 | tunnel.fst.gs: tunnel provisioning API, dynamic IP update (ipv4.tunnel.fst.gs), this status page | 1 |
23.136.244.5 | NTP (ntp.tunnel.fst.gs), dual stack | 1 |
23.136.244.6 | WireGuard tunnel server (wg.tunnel.fst.gs), UDP 51820 | 1 |
23.136.244.7-.63 | reserved for infrastructure, not in use | 0 |
23.136.244.64/26 | 6in4 (proto 41) / GRE (proto 47) tunnel server endpoints, shared by all tunnels; one endpoint per tunnel per client IPv4, so hosts behind one NAT use different endpoints | 64 |
23.136.244.128/26 | reserved for endpoint pool growth, not in use | 0 |
23.136.244.192-.254 | NAT64 pool for tunnel users (prefix 2602:f848::1:64:0:0/96), deterministic per-host port blocks | 63 |
23.136.244.255 | not used | 0 |