Live data from Hacker News

I spent a week without IPv4 to understand IPv6 transition mechanisms

apalrd.net

261–270 of 511 posts

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#261
post #124

Earlier quoted context omitted.

The limit of changing addresses once every N seconds as N approaches 0 is equal to offline. With any usable N, a clever observer would still easily work out what you were doing and still map out your infrastructure.

What kind of observer is 1. able to listen to the entirety of your network's outside communications, 2. interested at all in it, 3. harm you only on the condition that they "map out" your internal infrastructure? This isn't a novel, the goal is not to solve intricate security non-problems.

Your ISP, "mapping your network" means being able to take data that was previously an amalgam of a household and reliably split it into the individual members and devices for better targeting.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#262
post #38
post #21

I still think IPv6 can be safely ignored. This articles section "here are some reasons you should start using IPv6 within your own network" seems to comfirm this. None of the 6 "reasons" speak to me.

Here's an easy one for you: if you have a gigabit connection, most home routers can barely handle the load of NAT. That's why gamers push for IPv6. It's mentioned in the article but few people realize how inefficient NAT can be at gigabit and more. My ISP router could do max 800 mbps, which isn't so bad, but it degraded when we were multiple people using the link. With IPv6 it's much less of a problem, we can easily…

> if you have a gigabit connection, most home routers can barely handle the load of NAT

We are on AT&T Fiber, the router has no issues. I've never seen a router have issues with any speed for that matter, where NAT is concerned.

> That's why gamers push for IPv6.

I'm a gamer, I know a lot of gamers, no one is pushing for IPv6 that I'm aware of.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#263

Earlier quoted context omitted.

I've actually run into this helping a friend host a game server on their residential internet in a more rural part of Texas. They had to call their ISP and request a static IP address at an extra cost of something like $5/mo.

At that point, would a cheap VPS not work instead?

The server in this case was the PC version of ARK which nom nom noms all the CPU/RAM.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#264
post #258

Earlier quoted context omitted.

> Everything on my network is going to go through my firewall anyway. I don't want anything on my network to be globally routable. Globally routable ≠ globally connectible. Your (stateful) firewall will still by default block any incoming connection attempts if they are not replies to an initial outgoing connection. It's just that it will no longer be necessary to go through the rigamarole of STUN, TURN, ICE, etc, th…

How does that protect privacy of the private network? I don't want to divulge any information about internal topology.

what do you mean by topology? the only information leaked would be the number of computers making requests.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#265
post #9
post #4

Great idea. Now a question for the group. What are the non-network team business benefits to IPv6 over v4? That is what drives adoption.

IPv4 is now stretched to the point that you often end up requiring multiple layers of NAT, such as carrier-grade NAT plus endpoint NAT. That reduces the reliability of pretty much all protocols and makes any protocol doing peer to peer communication really hard or even impossible to run. The latter includes tons of games, video chat, peer to peer VPNs, decentralized social networks, and so on. These problems will onl…

I get that there are people in the world with severe lack of IPv4 addresses and this is a valid reason for them to switch to IPv6.

However, assuming that I and my organization have enough IPv4 addresses (without requiring any of the tricks of multiple layers of NAT), is there a sufficient reason for us to justify the effort/expense of changing what works?

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#266
post #258

Earlier quoted context omitted.

How does that protect privacy of the private network? I don't want to divulge any information about internal topology.

what do you mean by topology? the only information leaked would be the number of computers making requests.

And what computer is making what requests. Now that i think about it, this cloud be the reason why youtube started making recommendations based on stuff i just watched in private browser tabs...

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#267

We should just make an IPv5 which takes a current address: 216.3.128.12 and makes it 0.0.0.0.216.3.128.12 So any address of the current length you just treat it as if it has zeroes in front, otherwise you use the longer length which allows for many more addresses. Problem solved.

IPv6 became a draft standard in 1998; good luck with introducing "IPv5." Most operating systems/devices have IPv6 for a very long time now, we just haven't been forced away from IPv4 yet. IPv4 addresses are getting to be increasingly expensive (and CGNAT really sucks); eventually a market tipping point will be reached.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#268
post #266

Earlier quoted context omitted.

what do you mean by topology? the only information leaked would be the number of computers making requests.

And what computer is making what requests. Now that i think about it, this cloud be the reason why youtube started making recommendations based on stuff i just watched in private browser tabs...

That's a very strong claim to make. I'd appreciate if you could provide a source to that statement!

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#269
post #258

Earlier quoted context omitted.

How does that protect privacy of the private network? I don't want to divulge any information about internal topology.

what do you mean by topology? the only information leaked would be the number of computers making requests.

that's not even true with slaac temporary (a.k.a privacy) or secured addresses.

the only thing you'd "leak" is the prefix, which is no different than a IPv4 WAN address that you'd get with a v4 NAT.

Re: I spent a week without IPv4 to understand IPv6 transition mechanisms

#270
post #258

Earlier quoted context omitted.

How does that protect privacy of the private network? I don't want to divulge any information about internal topology.

what do you mean by topology? the only information leaked would be the number of computers making requests.

That is information about the topology.
Post reply on HN