Tell HN: Hacker News now supports IPv6 • Hacker News Board

Re: Tell HN: Hacker News now supports IPv6

#11

Post by supertrope » Tue, Jan 23, 2024, 3:32 AM UTC

xyst wrote: post #8

Next is TLS 1.3 support, hopefully :) # openssl s_client -connect news.ycombinator .com:443 -tls1_3 CONNECTED(00000003) 4160736388:error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version:ssl/record/rec_layer_s3.c:1562:SSL alert number 70 --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 244 bytes Verification: OK --- New, (NONE),…

It was briefly turned on years ago and then turned off. I guess it broke the website for those behind corporate MITM boxes.

Re: Tell HN: Hacker News now supports IPv6

#12

Post by ceroxylon » Tue, Jan 23, 2024, 3:35 AM UTC

As someone who grew up on IPv4, i will miss it, but the leap to 340 undecillion unique addresses is exciting in many ways so i think i can learn to live with this transition. If we ever need more than that, i can't even imagine what that future would look like.

Re: Tell HN: Hacker News now supports IPv6

#13

Post by kiwijamo » Tue, Jan 23, 2024, 3:35 AM UTC

supertrope wrote: post #11

xyst wrote: post #8

Next is TLS 1.3 support, hopefully :) # openssl s_client -connect news.ycombinator .com:443 -tls1_3 CONNECTED(00000003) 4160736388:error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version:ssl/record/rec_layer_s3.c:1562:SSL alert number 70 --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 244 bytes Verification: OK --- New, (NONE),…

It was briefly turned on years ago and then turned off. I guess it broke the website for those behind corporate MITM boxes.

There's a lot of websites out there that does TLS 1.3. Surely not an issue for MITM boxes? Otherwise they wouldn't be able to access much...

Re: Tell HN: Hacker News now supports IPv6

#14

Post by karlshea » Tue, Jan 23, 2024, 3:37 AM UTC

SamuelAdams wrote: post #4

tlivolsi wrote: post #2

[flagged]

Can you explain this more? Why are you so tied to ipv4? I recently enabled IPv6 on my home network, and roughly 30-40% of all internet traffic goes through IPv6. Things are noticeably faster, especially connection times to online games on Xbox Live. My only complaint is that my ISP keeps changing the prefix every quarter or so, so my static addresses need to be updated in the firewall and other places. I am looking i…

You want a ULA (unique local address) instead of link-local.

Link-local can sometimes mean needing to append the interface name to your address and a bunch of other weirdness. If you pick a ULA prefix and announce it (or assign some statically) everything pretty much just works.

I’ve been using them internally for over a year and it’s been great, they basically feel like RFC 1918 addresses.

Re: Tell HN: Hacker News now supports IPv6

#15

Post by bhaney » Tue, Jan 23, 2024, 3:37 AM UTC

My concern is that this is an accidental part of an unrelated migration and will quickly be disabled because of some internal IP filtering/banning tool that was only ever written to work with IPv4.

Re: Tell HN: Hacker News now supports IPv6

#16

Post by supertrope » Tue, Jan 23, 2024, 3:37 AM UTC

teaearlgraycold wrote: post #6

SamuelAdams wrote: post #4

Earlier quoted context omitted.

Can you explain this more? Why are you so tied to ipv4? I recently enabled IPv6 on my home network, and roughly 30-40% of all internet traffic goes through IPv6. Things are noticeably faster, especially connection times to online games on Xbox Live. My only complaint is that my ISP keeps changing the prefix every quarter or so, so my static addresses need to be updated in the firewall and other places. I am looking i…

Why would things be faster over v6?

Simpler routing because address blocks are not fragmented. IPv6 does not have a header checksum so that's one less task for routers. Packet fragmentation is no longer done by routers. IPv6 capable gear tends to be newer and higher performance. There's no NAT step or even worse CGNAT.

Re: Tell HN: Hacker News now supports IPv6

#17

Post by lxgr » Tue, Jan 23, 2024, 3:37 AM UTC

teaearlgraycold wrote: post #6

SamuelAdams wrote: post #4

Earlier quoted context omitted.

Can you explain this more? Why are you so tied to ipv4? I recently enabled IPv6 on my home network, and roughly 30-40% of all internet traffic goes through IPv6. Things are noticeably faster, especially connection times to online games on Xbox Live. My only complaint is that my ISP keeps changing the prefix every quarter or so, so my static addresses need to be updated in the firewall and other places. I am looking i…

Why would things be faster over v6?

On networks using NAT64 (and maybe also for DS-Lite, although I'm not so sure there), the IPv6 path is more direct than the IPv4 one since it doesn't need to go through a CG-NAT, which might be at capacity (tracking every TCP connection requires memory) or located farther away than the nearest IPv6 egress router, making routing more indirect.

I believe all three large US mobile carriers use NAT64 at this point exclusively, and CG-NAT is quite common in DOCSIS cable networks.

Re: Tell HN: Hacker News now supports IPv6

#18

Post by kiwijamo » Tue, Jan 23, 2024, 3:38 AM UTC

teaearlgraycold wrote: post #6

SamuelAdams wrote: post #4

Earlier quoted context omitted.

Can you explain this more? Why are you so tied to ipv4? I recently enabled IPv6 on my home network, and roughly 30-40% of all internet traffic goes through IPv6. Things are noticeably faster, especially connection times to online games on Xbox Live. My only complaint is that my ISP keeps changing the prefix every quarter or so, so my static addresses need to be updated in the firewall and other places. I am looking i…

Why would things be faster over v6?

Sometimes networks will route IPv6 traffic over different paths compared to IPv4 although that could actually be either an improvement or an regression depending on which gets the better path.

Re: Tell HN: Hacker News now supports IPv6

#19

Post by whatshisface » Tue, Jan 23, 2024, 3:39 AM UTC

bhaney wrote: post #15

My concern is that this is an accidental part of an unrelated migration and will quickly be disabled because of some internal IP filtering/banning tool that was only ever written to work with IPv4.

Hey, my account works again... >:)

Re: Tell HN: Hacker News now supports IPv6

#20

Post by ipaddr » Tue, Jan 23, 2024, 3:41 AM UTC

CSSer wrote: post #5

tlivolsi wrote: post #2

[flagged]

The next few months may be hard for you. AWS will start charging for ipv4 on February 1st, so it’s likely that either a mass migration is coming or prices for many services will increase accordingly to pass that cost along to customers.

2024 is shaping up as the year people drop AWS