How do I set up my Application Load Balancer to work with IPv6 addresses?

Resolution

To configure IPv6 addresses in your Application Load Balancer, complete the following steps.

Make sure that your VPC has an IPv6 CIDR block

The Amazon Virtual Private Cloud (Amazon VPC) where you launch your load balancer must have subnets with associated IPv6 address CIDR blocks. If needed, then add an IPv6 address CIDR block to your VPC or to your subnet.

Update IP address type

Update the load balancer's IP address type to dualstack to allow both IPv4 and IPv6 addresses.

Update the DNS record that points to your Application Load Balancer

Update the CNAME or Alias (A and AAAA) record of your domain to point to the DNS name of the Application Load Balancer. Make sure the use the dualstack prefix.

Example name: dualstack.name-123456789012.us-east-1.elb.amazonaws.com.

Note: Clients that use IPv4 addresses to communicate with the load balancer resolve the A record. Clients that use IPv6 addresses to communicate with the load balancer resolve the AAAA record.

Update the load balancer's security group rules to allow IPv6 address traffic

IPv6 address traffic uses separate security group rules from IPv4 address traffic. You must add an explicit inbound rule to allow traffic from ::/0 or for your source's CIDR on the listener ports. An inbound rule for 0.0.0.0/0 doesn't automatically allow IPv6 address clients.

Related information

Getting the DNS name for an Elastic Load Balancing (ELB) load balancer

Routing traffic to an ELB load balancer