Live data from Hacker News

Show HN: A Short IPv6 Guide for Home IPv4 Admins

gist.github.com

51–56 of 56 posts

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#51

Earlier quoted context omitted.

I guess I mean, the gist only motivates the use of globally-routable addresses for externally accessible services. If a particular service/device isn't going to be accessed externally, there's no need to give it one.

A big part of why I see people talking past each other on this is, IMO, because the solution that seems ‘cleaner’ depends on one’s mental model of networks / IPv6. These can and do differ. One person’s “I need justification to have non-globally-routed addresses” is another person’s “I need justification to have anything else”.

There's a belief among some ipv6 proponents that the Internet should primarily be p2p services, meaning everything is globally accessible. This would imply it's not ok for NAT or default-deny firewalls to be common practice.

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#52
I think there are problems with ULA.

https://blogs.infoblox.com/ipv6-coe/ula-is-broken-in-dual-st...

I've seen some of that - that said I can't figure out how I'm supposed to do DNS registration with GUA addresses. The only way I know to register addresses in DNS is with DHCP. Should I just have my IPv6 DHCP server advertise the GUA addreses? Is there some other way to do this?

I'm actually genuinely confused about this.

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#53
post #6

How do you run a DNS server when your address isn't technically static? How do clients discover the DNS server in a SLAAC environment?

How do you enter your other hosts into DNS? Just give them ULAs as well? Or is there a dynamic DNS hostname ipv6 mechanism?

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#54
post #9

There are definitely easier ways to get IPv6 if you don't want to deal with the networking. I feel like I'm doing a lot of plugging of IPv6.rs [1], but I guess that's a testament to just how much demand there is for IPv6. [1] https://ipv6.rs

So it's like Hurricane Electric but more expensive?

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#55

Can someone elaborate on this: For a given prefix, the interface will always pick the same identifier, (in fact, the eui-64 algorithm will pick the same identifier across multiple prefixes) How does the algorithm typically work? Is there a loss of privacy since identifiers are reused across prefixes? If I replace my NIC or install a different OS on my machine will the address change?

An IPv6 device will use the MAC address of its interface to generate a unique 64-bit interface ID.

An ipv6 device can use its MAC address, but these days is more likely to generate one in a way that's more privacy preserving.

Re: Show HN: A Short IPv6 Guide for Home IPv4 Admins

#56
post #47

Earlier quoted context omitted.

RA message can specify a DNS server. Mine specifies the router's ULA, which is effectively static, and it runs unbounded.

How do you authenticate RA messages? I mean, can anyone just throw RA messages onto the network? This seems like the "rogue DHCP" problem in v4.

Similar to v4 DHCP guard, configure RA guard on your switches.
Post reply on HN