Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Is your internet up to date?

en.conn.internet.nl

Post reply on HN
Print view View original

71–78 of 78 posts

Re: Is your internet up to date?

#71

Post by zeristor »

zeristor wrote: post #70
phicoh wrote: post #40

Earlier quoted context omitted.

Two things. First, it is nice if you don't have to allocate ports on a NAT box to make a test system available. These days you can't really count on all non-production systems having public IPv4 addresses anymore. Obviously that only works if all systems that need access have IPv6. However, the main killer app for IPv6 is your ISP running out of IPv4 addresses. Carrier grade NAT boxes are expensive and introduce all…

It appears that Google is seeing 16% ipv6 traffic at the moment, it was 10% a year ago, and 5% the year before that; so not quite on the Ogive climb. Mind you on a country by country basis Belgium has cleared 50% with Greece clearing 30%. Heartening to see Zimbabwe pass 7%, an anomaly for the whole of Africa, does anyone know whats going on there? Egypt is second with 0.50%. The map isn't set up for the Caribbean, al…

The answer regarding Zimbabwe is Liquid Telecom:

http://www.techzim.co.zw/2016/10/zimbabwe-leads-africa-ipv6-...

http://ipv6-test.com/stats/country/ZW

Re: Is your internet up to date?

#72

Post by alexdumitru »

pikzen wrote: post #56
tedmiston wrote: post #46

Earlier quoted context omitted.

How do you have it so fast and so cheap? This is far better than what most of us have in the US by the way.

Romania (and if my memory serves me right, a lot of eastern european countries) have heavily invested into their internet infrastructure. Huge costs for their government, but it is paying off. As a result, almost the entire country has high speed links for dirt cheap. It's somewhat similar throughout Europe too. Speeds may vary. Prices are relatively low. Paying 29€/month for whatever your line is able to supply is c…

The government didn't get involved at all in the infrastructure here. There were thousands of small ISPs about 10-15 years ago that got bought by the two big ones. Then the two big ISPs switched everything to fiber and increased speeds while decreasing prices.

My ISP was so small that it required me to lay my own cables and get a router.

Re: Is your internet up to date?

#73

Post by alexdumitru »

deathanatos wrote: post #59
eumoria wrote: post #38

Earlier quoted context omitted.

O.o I'm in New York City which for America has pretty decent fiber service and 100mbit costs ~61 pounds ($75). Very jealous!

I'm in Silicon Valley, and outside of SF (where the ISP market isn't a monopoly), a gigabit from Comcast costs ~$300/mo. It still seems absurd to me that I'm 20 minutes from companies like Apple and Google, but getting decent ≥100Mbps Internet is expensive and challenging. (I pay for "business class" however, so my bill is slightly more expensive per Mbps because of that (the $300/mo above is residential, though). Bu…

In Romania we have monopolies in most of the cities, but the ISPs have the same price no matter the location.

The prices only differ in very remote locations, where you have to pay either ~$15 for 50Mb/s or ~$25 for 2Mb/s, depending on how remote it is.

Re: Is your internet up to date?

#74

Post by p1mrx »

zeristor wrote: post #70
phicoh wrote: post #40

Earlier quoted context omitted.

Two things. First, it is nice if you don't have to allocate ports on a NAT box to make a test system available. These days you can't really count on all non-production systems having public IPv4 addresses anymore. Obviously that only works if all systems that need access have IPv6. However, the main killer app for IPv6 is your ISP running out of IPv4 addresses. Carrier grade NAT boxes are expensive and introduce all…

It appears that Google is seeing 16% ipv6 traffic at the moment, it was 10% a year ago, and 5% the year before that; so not quite on the Ogive climb. Mind you on a country by country basis Belgium has cleared 50% with Greece clearing 30%. Heartening to see Zimbabwe pass 7%, an anomaly for the whole of Africa, does anyone know whats going on there? Egypt is second with 0.50%. The map isn't set up for the Caribbean, al…

You're right, the Caribbean region was not covered by any of the existing links:

https://developers.google.com/chart/interactive/docs/gallery...

Should be fixed now.

Re: Is your internet up to date?

#75

Post by ak217 »

tptacek wrote: post #52
ak217 wrote: post #51

Earlier quoted context omitted.

OK, so for those of us naive about DNS security, can someone summarize the current best practice for DNS on gateway routers and roaming endpoints (laptops)? I know Google has supported an HTTPS bridge for DNS for a while ( https://developers.google.com/speed/public-dns/docs/dns-over... ) but I'm not aware of any router firmware or Mac/Windows/Linux software that supports it, is it out there?

The short answer is: pretty much everyone uses normal DNS, because the many show-stopping problems with DNSSEC includes the insane design decision not to protect the "last mile" between the stub resolver on your own machine and the "DNS server" (technically: recursive cache) that DHCP configures. If you're using Google's DNS, it will (pretty much pointlessly) validate DNSSEC records for you --- but the link between y…

Thanks for your response!

Re: Is your internet up to date?

#76

Post by iso-8859-1 »

feld wrote: post #66

Meanwhile irssi just removed support for DANE in the irc client which I believe means that there are now zero irc clients that will attempt to validate you aren't talking to a rogue irc server. Wasn't irssi the first and only to implement it? DNSSEC is dead on arrival. Nobody actually wants it.

I wasn't aware that DANE support was removed, but you're right, here's the commit: https://github.com/irssi/irssi/commit/5a04430998ada5ae800aa0...

Re: Is your internet up to date?

#77

Post by mdavids »

okket wrote: post #30
phicoh wrote: post #5

Earlier quoted context omitted.

Yes. I like what they are trying to do, but they don't seem to actually think things through. It took me forever to get some of the server tests fixed, where it would report that my server didn't properly support IPv6 (in DNS) when in fact it did and just their test was wrong. For me it says now 'your DNS service providers are:' and then the name of the netblock owner. The actual name server is in my network.

Currently the page is also showing a false negative in this case. My local DNS recursor validates DNSSEC: ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1 But the test result says: Not protected from redirection to false IP addresses (DNSSEC)

What does the 'detailed report' say at the DNSSEC-part?

Re: Is your internet up to date?

#78

Post by mdavids »

hannob wrote: post #4

Wow, this is terribly misleading DNSSEC propaganda. It tells me: "Protected from redirection to false IP addresses (DNSSEC)" What does that mean? It means that whatever other DNS server I use seems to verify DNSSEC signatures (I use Google's DNS fwiw). Yet this doesn't provide any reasonable sense of protection, as the connection to that DNS server may very well be compromised. This would very well show DNSSEC protec…

You are right, but the wordings are chosen with the average internet user in mind. Luckily the 'DNSSEC'-word between brackets at the end let's you, the more tech savvy user, know what was really ment.
Post reply on HN