Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I spent a week without IPv4 to understand IPv6 transition mechanisms

apalrd.net

Post reply on HN
Print view View original

181–190 of 511 posts

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#181

Post by alyandon »

throw0101c wrote: post #161
lxgr wrote: post #57

Earlier quoted context omitted.

> Everything on my network is going to go through my firewall anyway. Yes, and that's a very reasonable configuration. But UDP hole punching (very widely used for VoIP, online gaming etc.) works orders of magnitude better with IPv6 than with IPv4, since there is no address and port translation to worry about. With IPv4, it's very hit or miss, since it depends on both sides' NATs and also requires additional infrastru…

> With IPv4, it's very hit or miss […] It's also probably impossible if you're with an ISP that does CG NAT.

I've actually run into this helping a friend host a game server on their residential internet in a more rural part of Texas. They had to call their ISP and request a static IP address at an extra cost of something like $5/mo.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#182

Post by superkuh »

>There seems to be a lack of drive (judging by forum posts) to enable IPv6 on internet services by admins, either because they don’t care to, or it’s more work to manage a public IPv4 and public IPv6 presence

If you run a mailserver adding ipv6 support is far more risk to your domain's mailserver reputation than it is worth. And if you're just a human person and not a megacorp that new ipv6 address, even if it it doesn't immediately hurt you, will take a very long time to get accept, longer than an ipv4.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#183

Post by favaq »

mgbmtl wrote: post #38
TekMol wrote: post #21

I still think IPv6 can be safely ignored. This articles section "here are some reasons you should start using IPv6 within your own network" seems to comfirm this. None of the 6 "reasons" speak to me.

Here's an easy one for you: if you have a gigabit connection, most home routers can barely handle the load of NAT. That's why gamers push for IPv6. It's mentioned in the article but few people realize how inefficient NAT can be at gigabit and more. My ISP router could do max 800 mbps, which isn't so bad, but it degraded when we were multiple people using the link. With IPv6 it's much less of a problem, we can easily…

>Here's an easy one for you: if you have a gigabit connection, most home routers can barely handle the load of NAT.

[citation needed]

>That's why gamers push for IPv6.

[citation needed]

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#184

Post by waych »

justeleblanc wrote: post #152
waych wrote: post #124

Earlier quoted context omitted.

The limit of changing addresses once every N seconds as N approaches 0 is equal to offline. With any usable N, a clever observer would still easily work out what you were doing and still map out your infrastructure.

What kind of observer is 1. able to listen to the entirety of your network's outside communications, 2. interested at all in it, 3. harm you only on the condition that they "map out" your internal infrastructure? This isn't a novel, the goal is not to solve intricate security non-problems.

"The network is secure" is a common fallacy.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#185

Post by dheera »

superkuh wrote: post #182

>There seems to be a lack of drive (judging by forum posts) to enable IPv6 on internet services by admins, either because they don’t care to, or it’s more work to manage a public IPv4 and public IPv6 presence If you run a mailserver adding ipv6 support is far more risk to your domain's mailserver reputation than it is worth. And if you're just a human person and not a megacorp that new ipv6 address, even if it it doe…

Yeah I have zero motivation to deal with IPv6.

I also have all my IPv4 addresses memorized, and IPv6 addresses are too long to remember with all the hex-double-colon nonsense.

If they could have turned

1.2.3.4

into

1.2.3.4.5.6

I'd probably use it, but instead they opted for some scary stuff that looks like

d0ff::eefa::0010::faff:::://::92::0

which I'd rather not look at. Product management fail.

Anyhow, IPv4 still works for me, so I have no pressing need to even try to understand these hex-colon monstrosities.

My DNS server is 8.8.8.8.

Why the hell isn't the IPv6 DNS server

8888:8888:::8888:8888?

Instead it's 2001:4680::... wtf?

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#187

Post by bushbaba »

dheera wrote: post #185
superkuh wrote: post #182

>There seems to be a lack of drive (judging by forum posts) to enable IPv6 on internet services by admins, either because they don’t care to, or it’s more work to manage a public IPv4 and public IPv6 presence If you run a mailserver adding ipv6 support is far more risk to your domain's mailserver reputation than it is worth. And if you're just a human person and not a megacorp that new ipv6 address, even if it it doe…

Yeah I have zero motivation to deal with IPv6. I also have all my IPv4 addresses memorized, and IPv6 addresses are too long to remember with all the hex-double-colon nonsense. If they could have turned 1.2.3.4 into 1.2.3.4.5.6 I'd probably use it, but instead they opted for some scary stuff that looks like d0ff::eefa::0010::faff:::://::92::0 which I'd rather not look at. Product management fail. Anyhow, IPv4 still wo…

The biggest miss of ipv6 was on usability. is a large contributor for the slow adoption.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#188

Post by Symbiote »

dheera wrote: post #185
superkuh wrote: post #182

>There seems to be a lack of drive (judging by forum posts) to enable IPv6 on internet services by admins, either because they don’t care to, or it’s more work to manage a public IPv4 and public IPv6 presence If you run a mailserver adding ipv6 support is far more risk to your domain's mailserver reputation than it is worth. And if you're just a human person and not a megacorp that new ipv6 address, even if it it doe…

Yeah I have zero motivation to deal with IPv6. I also have all my IPv4 addresses memorized, and IPv6 addresses are too long to remember with all the hex-double-colon nonsense. If they could have turned 1.2.3.4 into 1.2.3.4.5.6 I'd probably use it, but instead they opted for some scary stuff that looks like d0ff::eefa::0010::faff:::://::92::0 which I'd rather not look at. Product management fail. Anyhow, IPv4 still wo…

If you would like to write IPv6 addresses in the same style as IPv4, they would look something like

  208.255.238.250.0.16.239.109.89.54.222.189.74.21.22.9

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#189

Post by voytec »

dheera wrote: post #185
superkuh wrote: post #182

>There seems to be a lack of drive (judging by forum posts) to enable IPv6 on internet services by admins, either because they don’t care to, or it’s more work to manage a public IPv4 and public IPv6 presence If you run a mailserver adding ipv6 support is far more risk to your domain's mailserver reputation than it is worth. And if you're just a human person and not a megacorp that new ipv6 address, even if it it doe…

Yeah I have zero motivation to deal with IPv6. I also have all my IPv4 addresses memorized, and IPv6 addresses are too long to remember with all the hex-double-colon nonsense. If they could have turned 1.2.3.4 into 1.2.3.4.5.6 I'd probably use it, but instead they opted for some scary stuff that looks like d0ff::eefa::0010::faff:::://::92::0 which I'd rather not look at. Product management fail. Anyhow, IPv4 still wo…

[flagged]

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#190

Post by barkingcat »

jiggawatts wrote: post #175
adriancr wrote: post #163

Earlier quoted context omitted.

you identify device each day, identity is X, daughter of Y on iPad. Once identified via data broker all its traffic is identifiable including torrents for example and porn websites, etc (say X goes to facebook with new address it now has real name) Once identity is known for address X you know its traffic for the day, including past traffic for the day. once address changes you do the whole identification again. All…

Nobody bothers to do this kind of tracking because web browsers leak 100x more information by default anyway. The “I don’t care if they track my household but it’s critical that Daddy’s activity not get disambiguated from my dealing daughter” is just not a valid reason to abandon the benefits of IPv6. Please stop with this line of argument. If you’re really desperate to ensure that the ads shown to your daughter are…

wait ... when you say nobody bothers ... that's a high bar. Most likely a ton of adtech companies are just drooling to use (or already are using) this type of correlation even if browsers leak more info.
Post reply on HN