Live data from Hacker News

Tell HN: Hacker News now supports IPv6

news.ycombinator.com

391–396 of 396 posts

Re: Tell HN: Hacker News now supports IPv6

#391

Earlier quoted context omitted.

I still haven't figured out how to get these auto-configured addresses into my home network's DNS (or any DNS, for that matter).

It is pretty easy on OPNsense but it's virtually impossible on many other types of routers. Meraki and Asus as two examples of that.

I'm actually running dnsmasq from a FreeBSD host. How would dnsmasq know about the self-configured addresses? I guess I could run DHCPv6, but it's next to impossible to get any kind of prefix delegation going with my ISP anyway. At the moment their router hands out the v6 addresses and I use v4 for dnsmasq.

Re: Tell HN: Hacker News now supports IPv6

#392
post #310

Earlier quoted context omitted.

Because you can access a website on both ipv4 and IPv6 doesn't really make IPv6 all that useful because you could disable it and still be able to access the same resource using ipv4...

By that logic, you can disable IPv4 and still access the site via IPv6. IPv4 is useless. Also, running dual-stacked servers I can confirm, all scans come via IPv4, so not only it is useless, it’s actually less secure to use it.

By that measure, port 22 is useless because you can change it....

Re: Tell HN: Hacker News now supports IPv6

#393

As someone who grew up on IPv4, i will miss it, but the leap to 340 undecillion unique addresses is exciting in many ways so i think i can learn to live with this transition. If we ever need more than that, i can't even imagine what that future would look like.

I grew up with IPv4 too but after learning and configuring my network for IPv6 I won't miss v4 at all. It's just so nice having each device with its real IP address rather than some private NAT thing. Then it's just firewall config if you want to run servers etc rather than messing with NAT configs.

Agreed. My favorite part is that you don’t need any special consideration for local/WAN splits in DNS. Your DNS address for your homelab server is the same address on your LAN as it is on the WAN, so your DNS can just be the same. Thus “ssh hostname.fqdn” works whether you’re on the local network or remote, and your packets just automatically stay on your LAN when you’re local (they don’t even have to hit your router… they can directly unicast if you’re on the same switch. No “hairpin NAT” or anything like that needed.)

Re: Tell HN: Hacker News now supports IPv6

#394
post #119

Earlier quoted context omitted.

Another person who does not understand IPv4. IPv4 isn't a text based protocol where IP addresses are parsed like DNS. It's a binary protocol where addresses are recorded in binary and adding more address space WOULD BE A BREAKING CHANGE.

That's not what GP said. Of course IPv4 devices wouldn't be able to use IPv6 addresses, that would be impossible. But it is possible to "keep" IPv4 addresses, just make a.b.c.d to correspond 0.0.a.b.c.d.

[deleted]

Re: Tell HN: Hacker News now supports IPv6

#395
post #245

Earlier quoted context omitted.

> So that vast address space might not last as long as it would seem... Have you done the math? * math property: x^y = x^(a+b) = (x^a )x(x^b ) * IPv4 addresses are 32 bits (2^32 ) * 2^32 ~ 4.3 billion * So the IPv4 Internet has ~4.3B devices on it * IPv6 subnets are 64 bits, /64 (2^64 ) So, a IPv6 2^64 subnet is the same as (2^32 )x(2^32 ), which means (4.3B)x(IPv4 Internet). I.e., a single IPv6 subnet can hold the e…

Since you seem to know what you're talking about: Imagine a scenario where we have nano-bots to perform "repairs" in our bodies or whatever, and obviously each individual nano-bot use TCP over IPv6 because future software developers are also as lazy as us. Instead of taking paracetamol, people take nano-bot-shots which include (presumably) millions (or even billions?) of nano-bots that we inject into our bodies. Howe…

https://xkcd.com/865/

Re: Tell HN: Hacker News now supports IPv6

#396

Earlier quoted context omitted.

They might have included them in the published policy, but it seems they aren't in whatever policy they're actually following.

It seems more likely to me that ARIN is following the text of published policy, but Capital One found a way to interpret it that violates its spirit. My guess is that they're treating each customer debit/credit card as a serving site that qualifies for a /48. To address this, ARIN should fix the policy, not raise fees.

It's ARIN's job to call BS on BS justifications, otherwise they're not following the policy, they're following whatever they allow. "The purpose of a system is what the system does" and all.

That's an interesting idea for how they justified it. There might be something like 4 billion active credit/debit cards in the US (but they probably weren't all issued by Capital One).

Post reply on HN