Live data from Hacker News

Show HN: A Short IPv6 Guide for Home IPv4 Admins

gist.github.com

11–20 of 56 posts

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#11
post #6

How do you run a DNS server when your address isn't technically static? How do clients discover the DNS server in a SLAAC environment?

Someone correct me if I'm wrong

Your link local or ULA is static address and can be used for DNS.

DNS server is advertised when prefix is advertised.

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#12

> After your router connects to your ISP, the router can ask for prefix delegation. Some providers (eg: Starlink, when I last checked and a Calyx WiFi hotspot) will only advertise a prefix. I was forced to figure out a way to bring the /64 that is in front of my router (Linux iptables) and expose it to a LAN behind my router. It looks something like [1] Depending on your setup, there may be an easier solution. [1] ht…

It sounds like you're talking about running a router behind a router which you should try to avoid. If you want to run your own router you should try to put your modem/dish in passthrough mode. Once you do that Starlink works fine.

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#13
Site local is useful to know about, even if it is technically deprecated. I explained it [1] for a test-setup that has no actual IPv6 connectivity.

Without a non-link-local IPv6 address, resolvers will often omit IPv6 addresses in their response.

Another big difference between IPv4 and IPv6 is in the localhost address scheme.

IPv4: 127.0.0.1/8 - 24 bits of free addresses IPv6: ::1/128 - no free addresses

Many people won’t care about this but some local hacks make use the localhost address space for fun and profit.

[1] https://github.com/suntong/dbab/pull/10#issuecomment-1603857...

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#14
post #12

> After your router connects to your ISP, the router can ask for prefix delegation. Some providers (eg: Starlink, when I last checked and a Calyx WiFi hotspot) will only advertise a prefix. I was forced to figure out a way to bring the /64 that is in front of my router (Linux iptables) and expose it to a LAN behind my router. It looks something like [1] Depending on your setup, there may be an easier solution. [1] ht…

It sounds like you're talking about running a router behind a router which you should try to avoid. If you want to run your own router you should try to put your modem/dish in passthrough mode. Once you do that Starlink works fine.

I would except I have multiple networks that I keep isolated from each other. Also, you can’t pass through from a WiFi connection to an Ethernet network as was my setup with Calyx and Starlink before I had an Ethernet connection.

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#16
post #6

How do you run a DNS server when your address isn't technically static? How do clients discover the DNS server in a SLAAC environment?

1. You create a ULA prefix (fc00:/7) on your local network. See https://en.m.wikipedia.org/wiki/Unique_local_address

2. Then you have your router advertise that prefix.

3. Then you have your DNS server pick a non-temporary address within that prefix (either manually set it, or let the OS pick one).

4. Then you tell your router to advertise that address as the DNS server in the RA.

Depending on how you have your network set up, your DNS server will have probably four IPv6 addresses: A link-local one; one on the ULA prefix you created; a non-temporary address on the prefix delegated by your ISP; and one or more temporary addresses on the prefix delegated by your ISP.

Outgoing connections (for recursive resolving) will be on one of the temporary addresses from the PD prefix. The DNS server listens on the static ULA address.

You need to configure your firewall such that traffic from the delegated prefix can get to the ULA one, and vice versa. This usually just means blocking traffic from the WAN port to the ULA prefix.

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#17
I'm a home ipv4 admin. What I or someone similar would need is the last part that shows how you set up a basic network with some local addresses I care about and a few I want to expose publicly. It's nice that the guide includes the concepts, but the first thing anyone will want to do is just make it work.

Step 2 says to set up ULAs. Are these static or dynamic? It says "don't pick numbers." If dynamic, how does step 5 work? If static, what about visitors in my house?

Step 3 mentions a LAN DNS. Where do I set that up? I don't recall my router having that option somewhere, and I'd rather not rely on a machine for it.

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#18
post #6

How do you run a DNS server when your address isn't technically static? How do clients discover the DNS server in a SLAAC environment?

I also couldn't figure out to how to get that working. It's seems you need both DNS via RA (RFC6106) and (stateless) DHCPv6.

Then there was a bug in CoreDNS that wouldn't bind link local. What I learned from the text is that I should have probably generated a unique address for the DNS.

It is not only confusing theoretically but also the ISP router config makes it even more confusing.

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#19

I'm a home ipv4 admin. What I or someone similar would need is the last part that shows how you set up a basic network with some local addresses I care about and a few I want to expose publicly. It's nice that the guide includes the concepts, but the first thing anyone will want to do is just make it work. Step 2 says to set up ULAs. Are these static or dynamic? It says "don't pick numbers." If dynamic, how does step…

These steps depend on whether you're using networkd, netplan, NetworkManager, ConnMan, etc.

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#20

It's weird. Personally I've yet to make the jump to IPv6 because it seems too complex, doesn't make sense, so I don't want to spend the mental effort learning it when I have no need to switch. However, looking decades back I realise I felt the same way when first learning about and working with networks. Nothing about it is intuitive. It's all complex, until it isn't through repetition and familiarity. That said, I s…

Im kind of in the same boat, I'm on a CGNAT with a apartment community, they don't have IPv6 at all, matter of fact they barely VLAN the apartments / wifi apart. I've rick rolled the entire complex's chromecasts before
Post reply on HN