Live data from Hacker News

India is almost 80% IPv6

apnic.net

81–90 of 126 posts

Re: India is almost 80% IPv6

#82
post #56
post #34

Earlier quoted context omitted.

Forcing micro USB and now USB-C on electronic devices has been one of the best ideas by the EU overall. Remember using ten different charging cables? Gone, due to a helpful piece of regulation by the government.

It isn't a good policy and if that is one of the best ideas of the EU then they have failed as a political project. 1. Corporations are exactly the tool we use to work out what trade offs of cost v. standardisation are best. Everyone is going to claim victory for a bureaucratic committee then a few years down the track we'll discover technology moves on and the regulation is force people to make stupid choices. Remov…

> Thank goodness for the Europeans, they may not have reliable power but if they did they won't have to search around for the right cable

yeah... about that.... we in fact have electricity in the outlets, we have countries where the grid has lower chance of a power outage than the chances of a UPS failing. We dont have people rushing to buy gasoline for their generators as soon as a wee bit of bad weather hits..

hows it going in california right now? Babylon bee had a pretty funny, atleast from an outsiders perspective, "news" article:

https://babylonbee.com/news/california-man-takes-his-fiance-...

Re: India is almost 80% IPv6

#83

Earlier quoted context omitted.

CGNAT is pretty expensive compared to rolling out IPv6 and tunneling IPv4 on it using stuff like MAP-E. I guess they still have no need to NAT everyone ATM because they have plenty of IPv4s to distribute to their subscribers.

CGNAT is pretty much the only setup on mobile though. Dunno if any equipment vendor doesn’t do that. Would worry about most average cell phones sitting directly on the public internet. I think there’s a reason we haven’t heard about mass-owns of mobile phones and it’s because they’re always effectively behind firewalls, not because of their superior security.

This is not correct. Especially in the USA lots of mobile phones now have IPv6 connectivity.

From https://www.arin.net/blog/2020/01/16/mobile-edge-of-the-inte...

"80% of smartphones in the US on the major cellular network operators use IPv6 and major mobile networks are driving IPv6 adoption with Verizon Wireless at 84%, Sprint at 70%, T-Mobile USA at 93%, and AT&T Wireless at 57%"

And this were numbers from four years ago.

NAT is not a firewall and it's dangerous to think of it as such, because it causes people to follow a lax approach to security and think they are protected, when they actually aren't.

Re: India is almost 80% IPv6

#84
post #70
post #65

Earlier quoted context omitted.

There is no need to move your whole private network over to IPv6, although it might provide a good learning opportunity. You could start with enabling IPv6 for your nginx reverse proxy and make it listen on its IPv6 address. IPv6 has subnets too and firewalling is still possible, only NAT isn't needed anymore (which is good). Edit: Reading your post again it sounds like you have mental model of either IPv4 or IPv6, w…

>Even though they now have a public IPv6 address, the router's firewall should block incoming connections to it by default. That's the case for my router, but to be sure you should check it yourself for yours This is why I won't enable IPv6 unless ISPs dramatically change how their hardware works. My ISP-issued modem+router doesn't even have a way to disable routing or automatic updates. I can test the firewall today…

The comment you're replying to is referring to Homeland. If all you have is an ISP-issued device, then you don't need to worry about it, just use the defaults.

Also, I doubt ISPs will ever change their home routers to default to IPv6 because of the complexity it'll add to customer support with no extra benefits.

Re: India is almost 80% IPv6

#85

Earlier quoted context omitted.

CGNAT is pretty much the only setup on mobile though. Dunno if any equipment vendor doesn’t do that. Would worry about most average cell phones sitting directly on the public internet. I think there’s a reason we haven’t heard about mass-owns of mobile phones and it’s because they’re always effectively behind firewalls, not because of their superior security.

This is not correct. Especially in the USA lots of mobile phones now have IPv6 connectivity. From https://www.arin.net/blog/2020/01/16/mobile-edge-of-the-inte... "80% of smartphones in the US on the major cellular network operators use IPv6 and major mobile networks are driving IPv6 adoption with Verizon Wireless at 84%, Sprint at 70%, T-Mobile USA at 93%, and AT&T Wireless at 57%" And this were numbers from four yea…

That’s fine and all: but are they issuing mobile phones a publicly addressable IP or not? Can a Verizon subscriber run a web server on their mobile phone and share their IPv6 or not?

Re: India is almost 80% IPv6

#86

Earlier quoted context omitted.

CGNAT is pretty much the only setup on mobile though. Dunno if any equipment vendor doesn’t do that. Would worry about most average cell phones sitting directly on the public internet. I think there’s a reason we haven’t heard about mass-owns of mobile phones and it’s because they’re always effectively behind firewalls, not because of their superior security.

This is not correct. Especially in the USA lots of mobile phones now have IPv6 connectivity. From https://www.arin.net/blog/2020/01/16/mobile-edge-of-the-inte... "80% of smartphones in the US on the major cellular network operators use IPv6 and major mobile networks are driving IPv6 adoption with Verizon Wireless at 84%, Sprint at 70%, T-Mobile USA at 93%, and AT&T Wireless at 57%" And this were numbers from four yea…

From practical standpoint, most common NAT setups come with "default deny incoming" firewall, and systems have relied on this fot a very long time.

I hope that IPv6 is rolled out to homes, most ISPs would do the right thing and set up customer routers firewall in "default deny incoming " mode. Otherwise, the number of worms would increase a lot.

Re: India is almost 80% IPv6

#87
post #13
post #8

This is required by law. [0][1] Every ISP is required to be fully ipv6-enabled by the end of this year. The deadline has been pushed back multiple times , most recently due to covid. But this time it seems its going to stick. All lagging ISPs seem to have deployed v6 at this time. There has been a "National IPV6 Plan" in place since 2010, and full coverage has been pushed under that plan in stages. Anyone interested…

Why is it so hard to pull off the same regulation in other parts of the world? It isn’t like supporting IPv6 is black magic…

Yeah, looking at you Verizon FIOS.

Re: India is almost 80% IPv6

#88
post #70

Earlier quoted context omitted.

>Even though they now have a public IPv6 address, the router's firewall should block incoming connections to it by default. That's the case for my router, but to be sure you should check it yourself for yours This is why I won't enable IPv6 unless ISPs dramatically change how their hardware works. My ISP-issued modem+router doesn't even have a way to disable routing or automatic updates. I can test the firewall today…

The comment you're replying to is referring to Homeland. If all you have is an ISP-issued device, then you don't need to worry about it, just use the defaults. Also, I doubt ISPs will ever change their home routers to default to IPv6 because of the complexity it'll add to customer support with no extra benefits.

Routers don't "default" to one protocol or the other. They do both v4 and v6, and end devices pick which to use for each connection.

Re: India is almost 80% IPv6

#89
post #70

Earlier quoted context omitted.

>Even though they now have a public IPv6 address, the router's firewall should block incoming connections to it by default. That's the case for my router, but to be sure you should check it yourself for yours This is why I won't enable IPv6 unless ISPs dramatically change how their hardware works. My ISP-issued modem+router doesn't even have a way to disable routing or automatic updates. I can test the firewall today…

The comment you're replying to is referring to Homeland. If all you have is an ISP-issued device, then you don't need to worry about it, just use the defaults. Also, I doubt ISPs will ever change their home routers to default to IPv6 because of the complexity it'll add to customer support with no extra benefits.

What is Homeland? I explicitly disable IPv6 because I don't trust the firewall, specially on an auto-updating device.

Re: India is almost 80% IPv6

#90
post #70

Earlier quoted context omitted.

>Even though they now have a public IPv6 address, the router's firewall should block incoming connections to it by default. That's the case for my router, but to be sure you should check it yourself for yours This is why I won't enable IPv6 unless ISPs dramatically change how their hardware works. My ISP-issued modem+router doesn't even have a way to disable routing or automatic updates. I can test the firewall today…

The comment you're replying to is referring to Homeland. If all you have is an ISP-issued device, then you don't need to worry about it, just use the defaults. Also, I doubt ISPs will ever change their home routers to default to IPv6 because of the complexity it'll add to customer support with no extra benefits.

[deleted]
Post reply on HN