71–80 of 117 posts
Earlier quoted context omitted.
IPv6 without any transition mechanism is not Internet access. It's more like a tenth of the Internet. If an ISP has to buy a few addresses to run NAT64 that's a cost of doing business.
It works both ways though, doesn't it? If you are IPv4 only, you can't access/can't be accessed from the whole internet. If you are IPv6 only, same applies.
These are the five SSL options for a Cloudflare website [0]: 1. No SSL: User Cloudflare Origin Server 2. Flexible SSL: User Cloudflare Origin Server 3. Full SSL: User Cloudflare Origin Server; Self-signed cert ok, expired cert ok 4. Full SSL (strict): User Cloudflare Origin Server; Origin server must use an SSL certificate that Cloudflare provides [1] 5. Strict (SSL-Only Origin Pull): User Cloudflare Origin Server; s…
For #4 (strict full) the origin server doesn’t have to use a Cloudflare-supplied cert. Any cert issued by a publicly trusted CA will do. See https://developers.cloudflare.com/ssl/origin-configuration/s...
Earlier quoted context omitted.
That’s not the whole story. Your service doesn’t need to be accessible through ipv6. Just over 464XLAT. That won’t be a problem if you use high level system apis to make connections. All of my servers are ipv4-only and I haven’t had any apps rejected by apple.
You're partially right. Your apps need to support IPv6 because the internet connections can be IPv6 only. I believe T-Mobile is a big one does this. They do translation for their clients to the IPv4 internet, so they'll be hitting your IPv4 server through a translation layer. The client is still IPv6 only.
Edit: was totally wrong about this: https://www.internetsociety.org/resources/deploy360/2014/cas...
iOS (since IOS 12) and Android have native clients that can tunnel IPv4 requests over an IPv6 only network that are used for providers like T-Mobile.
Earlier quoted context omitted.
For #4 (strict full) the origin server doesn’t have to use a Cloudflare-supplied cert. Any cert issued by a publicly trusted CA will do. See https://developers.cloudflare.com/ssl/origin-configuration/s...
Exactly, I've been doing this with letsencrypt.
These are the five SSL options for a Cloudflare website [0]: 1. No SSL: User Cloudflare Origin Server 2. Flexible SSL: User Cloudflare Origin Server 3. Full SSL: User Cloudflare Origin Server; Self-signed cert ok, expired cert ok 4. Full SSL (strict): User Cloudflare Origin Server; Origin server must use an SSL certificate that Cloudflare provides [1] 5. Strict (SSL-Only Origin Pull): User Cloudflare Origin Server; s…
Poor Snoopy, after a terrible experience at the supermarket, now this! :-( https://www.youtube.com/watch?v=nD2n7Jiy-xY
Earlier quoted context omitted.
You're partially right. Your apps need to support IPv6 because the internet connections can be IPv6 only. I believe T-Mobile is a big one does this. They do translation for their clients to the IPv4 internet, so they'll be hitting your IPv4 server through a translation layer. The client is still IPv6 only.
That doesn't make sense. If I hit amazon.com on my browser, which is IPv4 only, t-mobile needs to provide a (private) IPv4 IP to the phone to make that possible. Edit: was totally wrong about this: https://www.internetsociety.org/resources/deploy360/2014/cas... iOS (since IOS 12) and Android have native clients that can tunnel IPv4 requests over an IPv6 only network that are used for providers like T-Mobile.
T-Mobile could respond to DNS requests with an IPv6 address that includes an encoding of Amazon.com's IPv4 address in it so that when you try to connect it it, the gateway knows what IP address you're looking for and can do the NATing there.
Of course, this is just conjecture about a possible way of making it work, and it could easily get broken if you configure your phone to use a different DNS server.
Earlier quoted context omitted.
What happens when there are literally truly no IPv4 addresses left for sale? Not today’s reality, but the clock is ticking.
There will always be IPv4 for sale just as there is always land for sale.
Earlier quoted context omitted.
It works both ways though, doesn't it? If you are IPv4 only, you can't access/can't be accessed from the whole internet. If you are IPv6 only, same applies.
No, because there is nothing interesting that's IPv6-only.