Live data from Hacker News

I spent a week without IPv4 to understand IPv6 transition mechanisms

apalrd.net

171–180 of 511 posts

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#172
post #97

My experience with IPv6. I have option to enable full dual stack with my ISP. After doing this I noticed that YT/FB/Google were significantly faster, however my kids started to complaing that some games began to have connectivity issues. Minecraft have problems to start. On a number of sites load time was noticebly longer. Switching off IPv6 as a experiment on one of kids PC solved all issues. My conslusion is that i…

First thing I do setting up any network is disable ipv6. It's caused issues at least once, and that's one time too many for something that doesn't benefit me in any other way.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#174
post #46
post #38

Earlier quoted context omitted.

Here's an easy one for you: if you have a gigabit connection, most home routers can barely handle the load of NAT. That's why gamers push for IPv6. It's mentioned in the article but few people realize how inefficient NAT can be at gigabit and more. My ISP router could do max 800 mbps, which isn't so bad, but it degraded when we were multiple people using the link. With IPv6 it's much less of a problem, we can easily…

I don't even know what type of connection I have. I only know the speed is way more than I need. fast.com says 50 "Mbps". Whatever that is.

You aren't qualified to speak on this topic. Sorry.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#175

Earlier quoted context omitted.

You literally wrote "Once device is identified all its past traffic is discernible." How is that compatible with devices changing their address every day?

you identify device each day, identity is X, daughter of Y on iPad. Once identified via data broker all its traffic is identifiable including torrents for example and porn websites, etc (say X goes to facebook with new address it now has real name) Once identity is known for address X you know its traffic for the day, including past traffic for the day. once address changes you do the whole identification again. All…

Nobody bothers to do this kind of tracking because web browsers leak 100x more information by default anyway.

The “I don’t care if they track my household but it’s critical that Daddy’s activity not get disambiguated from my dealing daughter” is just not a valid reason to abandon the benefits of IPv6.

Please stop with this line of argument.

If you’re really desperate to ensure that the ads shown to your daughter are based on your porn viewing habits, then just set up IPv6 NAT.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#176
post #78

Question from a (relative) IPv6 newbie that wasn't addressed in TFA: Let's say I have a very small home lab. I have a handful of hosts that get their IP addresses via DHCP from my router. In the router, DHCP and DNS are tightly coupled such that the router essentially always knows the MAC address, IP address and hostname of each device. Now I want to run IPv6 on this network as a first-class citizen. Since DHCPv6 is…

I have a similar setup. I wouldn't say that DHCPv6 is frowned upon, it works quite well and is the only way to automatically add client hostnames to the local name server. I use both SLAAC and DHCPv6 mainly because Android refuses to support DHCPv6, but I don't need to refer to my phones by hostname anyway.

I’m in a similar spot as the OP, and one thing that is important to me about knowing the hostnames is that defining (then tracking) a hostname is the only universally-implemented method that lets me scan through the hosts on the network and understand what they all are.

- I’m never going to remember MACs

- Even when IPs are carefully thought out, if something happens to the DHCP server and it needs to be rebuilt, IP no longer tells you anything about what device it is

Whereas hostname/DHCP client name shows up in almost every router UI, is viewable from any *nix machine on the network (when DHCP and DNS work together), and is typically a first-class citizen in the DHCP lease settings themselves. Super handy. As a side bonus: rogue hostnames are immediately obvious, but rogue MACs or IPs require investigation before you know whether they are benign.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#177
post #64

I've given a try to IPv6 in a company with few tens on servers in a 2 DCs, an office + additional location, 3 ISPs in total. For me the real challenge is not just different way to write an IP address or doing NAT. The challenge is that IPv6 changes a lot of unexpected things: - Our ISPs support IPv6 but routing quality is way worse than IPv4 including occasional inability to connect to some networks or greater latenc…

> You have to be careful with site-to-site VPN since even your internal services like database are now globally addressable.

I’d bet that this will be the source of some gnarly leaks in future. If it does my bet would be it’s going to follow the “API keys on GH” trajectory.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#178

Earlier quoted context omitted.

you identify device each day, identity is X, daughter of Y on iPad. Once identified via data broker all its traffic is identifiable including torrents for example and porn websites, etc (say X goes to facebook with new address it now has real name) Once identity is known for address X you know its traffic for the day, including past traffic for the day. once address changes you do the whole identification again. All…

Nobody bothers to do this kind of tracking because web browsers leak 100x more information by default anyway. The “I don’t care if they track my household but it’s critical that Daddy’s activity not get disambiguated from my dealing daughter” is just not a valid reason to abandon the benefits of IPv6. Please stop with this line of argument. If you’re really desperate to ensure that the ads shown to your daughter are…

> Nobody bothers to do this kind of tracking because web browsers leak 100x more information by default anyway.

That's a broad assumption, and I can assure you they will due to lower costs (no need to pay data broker if you already know target, no need for extra traffic, load, etc). Also due to better targetting you get better prices per ads served.

> just not a valid reason to abandon the benefits of IPv6

What are the benefits to allow each device its own address if I'm going to firewall them anyway?

> Please stop with this line of argument.

Why?, my concern is valid, all you've said so far is nobody cares. I disagree.

> If you’re really desperate to ensure that the ads shown to your daughter are based on your porn viewing habits, then just set up IPv6 NAT

That says a lot about yourself if you resort to this sort of snarky comments, I have no wish to continue this conversation.

Note: I said in another comment I have set up IPv6 NAT and it works great.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#179

Earlier quoted context omitted.

Can't answer your main question, but from what I recall, DHCPv6 is kind of necessary anyway. It's the easiest/main way for the client to receive DNS server information, even if default gateway discovery is now down through multicast. I believe there is another way, but the router has to support it and I forget what it's called.

RA (Router Advertisement) handles announcing the prefix for SLAAC addresses and DNS.

But not other services like NTP, so DHCPv6 is still needed.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#180

Earlier quoted context omitted.

Maybe people don't want to disclose the number and purposes of interior machines?

Your machines could change their IPs for every second of every day and you wouldn't come close to exhausting your /64 subnet for the next billion years.

Why do network stuff easy, when you can do it hard.
Post reply on HN