Live data from Hacker News

New patches allow building Linux IPv6-only

phoronix.com

191–198 of 198 posts

Re: New patches allow building Linux IPv6-only

#191

Earlier quoted context omitted.

Most home users do not have a static public IPv4 address - they have a single address that changes over time.

> Most home users do not have a static public IPv4 address - they have a single address that changes over time. I'd be curious to know the statistics on this: I would hazard to guess that for most ISPs, if your router/modem does not reboot, your IPv4 address (and IPv6 prefix) will not change.

[flagged]

Re: New patches allow building Linux IPv6-only

#192

Earlier quoted context omitted.

>> Why don't you want every device to have a public IP? > What would be the advantage in it? Not having to deal with ICE/TURN/STUN. Being able to develop P2P applications without having to build out that infrastructure (anyone remember Skype's "supernodes"?).

This is not something I ever want any device on my network to do.

It's about being able to run apps that can operate without have an HQ that needs to be phoned home to for operation, which is currently generally necessary with NAT.

Re: New patches allow building Linux IPv6-only

#193

As it should. Date notwithstanding, I would actually enjoy if there was a manually induced latency penalty for "legacy IP" that needs to be manually turned off on Linux. I know some people don't care at all, but the internet was made to be addressable. IPv6 is the only shot we have to go back to that.

- I don't want my interfaces to have multiple IP addresses - I don't want my devices to have public, discoverable IPs - I like NAT and it works fine - I don't want to use dynamic DNS just so I have set up a single home server without my ISP rotating my /64 for no reason (and no SLAAC is not an answer because I don't want multiple addresses per interface) - I don't need an entire /48 for my home network IPv6 won't hel…

Maybe you don't need the addresses, but there are other advantages. If we made the move, I suspect we could give you the experience you want and the one I want. I personally do want to host my own services. My phone is configured to send my pictures to Google and my personal NAS. Centralized services mean you have to trust that provider. These days I don't. I intend to leave centralized services so I know my content isn't training AI or the doorbell isn't spying on me or my neighbors. But, no instead we should force everyone to share the same IP addresses and run less efficient routing.

Re: New patches allow building Linux IPv6-only

#194

Earlier quoted context omitted.

I mean, so many reasons. Not the least of which is carrier grade NAT is out. And that alone implies so much cost savings, performance increase, and home user flexibility . I'm struggling to assume good faith on your question, since it's so strange. I feel like I need to start from scratch explaining the internet, since asking this question reveals a lack of knowledge about everything networking.

I don't have CG Nat, I choose a proper ISP. Opening a hole in my ipv6 firewall or forwarding a port in in my ipv4 firewall is effectively the same thing, I define the policy (allow traffic arriving on $address on tcp/1234 to this server on vlan 12) and it goes live. Away from home, like I am at the moment, I vpn all my traffic back home, to work, or to a mullvad endpoint. Neither the hotel wifi nor tethering off my p…

Address space isn't the only benefit.

I'll just leave this here if you want to find out https://www.catchpoint.com/benefits-of-ipv6

Re: New patches allow building Linux IPv6-only

#195

Earlier quoted context omitted.

v6 mostly is just v4 with more bits, and it has a reasonable migration path from v4 too. I don't think a more reasonable migration path is even possible given the constraints of v4. About the only thing new in v6 that's not already in v4 is SLAAC, which isn't very complicated. Routing works the same, the addresses work the same, DNS, TCP, firewalling etc all work the same. If anything they removed complexity by dropp…

The biggest thing is all the v4 addresses are no longer valid in v6. They had a choice and went with making a separate parallel network with new routes. This means DNS DHCP etc work similarly but are completely different, and the separation between DNS v4 and v6 of course is never clear in any router UI, network config file, etc. And the routes themselves are different. SLAAC itself isn't complicated, but it means in…

  ::203.0.113.42 (tunnels to 203.0.113.42 over v4)
  ::ffff:203.0.113.42 (opens a v4 connection via an AF_INET6 socket)
  64:ff9b::203.0.113.42 (translates to v4 at nearest NAT64 point)
What are these then? Also, it's not like they had a choice here. v4 is hardcoded to 32 bits, so the option of making a single network with a bigger address size wasn't available.

I think I can count that as falling under both "something it already does" and "something that's impossible".

Your laptop will just get some IPs as appropriate for the network it's on, and then it'll use them. You don't need to think hard about it.

Re: New patches allow building Linux IPv6-only

#196

Earlier quoted context omitted.

By debugging I mean just checking if you have not blocked broadcast packets at the firewall or some similar misconfiguration. I doubt it’s actual bugs when it doesn’t work. On your second point, it’s actually more resilient than DHCP because it works with IPv6 too.

Idk, just checked my LAN-connected Mac's arp tables now and none of the hostnames are there, even after I ping the multicast. Haven't messed with any settings.

Does anything respond to the multicast ping? If that doesn’t work then mDNS isn’t going to either. Router config is the likely culprit.

Re: New patches allow building Linux IPv6-only

#197

Earlier quoted context omitted.

Idk, just checked my LAN-connected Mac's arp tables now and none of the hostnames are there, even after I ping the multicast. Haven't messed with any settings.

Does anything respond to the multicast ping? If that doesn’t work then mDNS isn’t going to either. Router config is the likely culprit.

Yeah they respond. `ping mdns.mcast.net`, shows responses from ip addresses I recognize on my LAN, `arp -a`, still no hostnames. Tried all the other suggestions online too. Tried on my Mac and Rpi, same network, just a single ethernet LAN.

Router is all default except that I port-forwarded something. Funny enough, it sees the hostnames. I'm guessing it's some problem with both my computers, but no real need to fix this because I memorized the addrs already.

Re: New patches allow building Linux IPv6-only

#198
post #179

Earlier quoted context omitted.

Care to elaborate? Non-sophisticated users don't deserve IP reachability?

I used to have it enabled long ago. It's insecure. Random cheap devices will open up ports with upnp without the user noticing. It doesn't work that well either, cause hosts will conflict on ports. P2P applications have better ways to establish connectivity.

How can both be true at the same time: It's insecure for random devices to be able to open up ports, and applications don't even need to open up ports for P2P communication?

If a random device/application wants to insecurely communicate with somebody/something, it will find a way, I agree on that.

Post reply on HN