Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Using the Internet without IPv4 connectivity

jamesmcm.github.io

Post reply on HN
Print view View original

71–80 of 133 posts

Re: Using the Internet without IPv4 connectivity

#71

Post by kstrauser »

allyourdatas wrote: post #32

Why would I ever need IPv6 at home or in my office? Explain to me logically why I need it in my house or in my office? I do not care about using up the last internet address because that is akin to the 'think of the children' crap used to justify things on an emotional level in order to manipulate people. There's no way I'll exhaust the private address spaces and I not not see NAT as a negative. I do not want my frid…

If you don’t understand the engineering benefits, fine, not everyone needs to be an expert. I wouldn’t proudly brag about my ignorance of the subject, though.

Re: Using the Internet without IPv4 connectivity

#74

Post by xyst »

I run my own tailnet (headscale as the coordinator server). Tailscale stack is essentially built on top of wireguard.

I have an exit node setup with dual stack IPv4/IPv6 addresses. So in theory if my ISPs CG-NAT failed or IPv4 was inaccessible, then configuring my device to use my exit node to reroute traffic _should_ work without having to mess with WG internals like the author in this article.

I suppose there are some caveats here since I have discovered many services do tend to flag IPs originating from VPS ASNs as "spammy" (ie, pretty much any service front loaded by CloudFlare). Maybe Hetzner is better in this aspect?

Re: Using the Internet without IPv4 connectivity

#75

Post by toast0 »

throw0101c wrote: post #30

If anyone wants to try / use IPv6, but their ISP does not provide it, Hurricane Electric (HE) has offered a tunnel service for many years now: * https://tunnelbroker.net * https://ipv6.he.net There are scrips available to bring up a tun device on your system (or router) and route traffic over it: * https://fedoraproject.org/wiki/IPv6_tunnel_via_Hurricane_Ele... * https://brandonrozek.com/blog/obtaining-ipv6-address-h…

Hurricane Electric is great, but as more and more people have ISP provided IPv6, 'normal' users leave the tunnels, and network services have been flagging he.net tunnels as abuse.

I had to stop using ipv6 for most of my network because too many sites decide to put up barriers or simply refuse to work.

Re: Using the Internet without IPv4 connectivity

#76

Post by Shadowmist »

pQd wrote: post #41
throw0101c wrote: post #30

If anyone wants to try / use IPv6, but their ISP does not provide it, Hurricane Electric (HE) has offered a tunnel service for many years now: * https://tunnelbroker.net * https://ipv6.he.net There are scrips available to bring up a tun device on your system (or router) and route traffic over it: * https://fedoraproject.org/wiki/IPv6_tunnel_via_Hurricane_Ele... * https://brandonrozek.com/blog/obtaining-ipv6-address-h…

aspect worth noting: up to my knowledge HE's tunnel will work only if you're assigned public IPv4 by your ISP. if you're behind a carrier grade NAT - too bad, you'll need to use another solution to get IPv6 to your home.

Go Fiber (Shentel) is one such ISP, and they will gladly switch you to a public IP for no cost if you contact their support. Sadly they don’t support IPv6 yet.

Re: Using the Internet without IPv4 connectivity

#77

Post by ornornor »

After all these years I still don’t see a compelling reason to spend days pulling my hair out switching all my machines and home lab to ipv6. I just find port forwarding and firewall rules more intuitive vs the prospect of spending weeks troubleshooting everything, reconfiguring firewalls, renunbering my network.

What am I missing?

Re: Using the Internet without IPv4 connectivity

#78

Post by bigstrat2003 »

ornornor wrote: post #77

After all these years I still don’t see a compelling reason to spend days pulling my hair out switching all my machines and home lab to ipv6. I just find port forwarding and firewall rules more intuitive vs the prospect of spending weeks troubleshooting everything, reconfiguring firewalls, renunbering my network. What am I missing?

You're missing that it's not that difficult. Unless you have a very complicated home network, setting up IPv6 should take you an evening tops. For my network and my ISP (Comcast), it's literally just turn on IPv6 in the router, it will pick up a prefix from the ISP and advertise it locally, then I add a firewall rule for whatever I want to be accessible from outside (which isn't much).

Re: Using the Internet without IPv4 connectivity

#79

Post by bigstrat2003 »

crims0n wrote: post #43
xacky wrote: post #35

I have strong opinions about ipv4, especially since I'm forced to use an ipv4 isp. The lack of ipv6 adoption should be considered one of the great failures of tech. Who actually is responsible? Is it router manufacturers writing poor quality firmware, ipv4 advocates in leadership positions at isps, ipv4 address speculators, poor training of network engineers and tech support staff? I think we all need to have a much…

We have a saying in the industry… IPv6 is an academic solution to an engineering problem. The reality is it’s just too damn complicated to implement and maintain at scale while also retaining compatibility with v4… which is never going to go away because other than the address shortage, there are no problems with it.

IPv6 is not actually hard to implement or maintain. A lot of people have repeated that meme, but it isn't true at all.

Re: Using the Internet without IPv4 connectivity

#80

Post by roody15 »

ornornor wrote: post #77

After all these years I still don’t see a compelling reason to spend days pulling my hair out switching all my machines and home lab to ipv6. I just find port forwarding and firewall rules more intuitive vs the prospect of spending weeks troubleshooting everything, reconfiguring firewalls, renunbering my network. What am I missing?

Nothing. In the enterprise world the benefits vs the negatives of implanting ipv6 is not there. I manage around 3500 devices, 7 buildings and have 2 ten gig wan connections and one 4 gig wan connection and use NAT along with about 26 public ipv4 addresses.

To this day I have no compelling reason to adopt ipv6. Dual stack setup adds unnecessary traffic and complexity for little advantage.

To this day it is still hard to get assigned a block of static ipv6 addresses, have applied twice and been denied.

So not only is there little upside it is also still hard to even get allocated a block.

https://www.arin.net/resources/guide/ipv6/first_request/

“Step 1: Verify You Qualify If you meet any of the criteria below, you qualify to receive IPv6 address space:

Have an IPv4 assignment from ARIN or one of its predecessors Intend to immediately be IPv6 multi-homed Have 13 end sites (offices, data centers, etc.) within one year Use 2,000 IPv6 addresses within one year Use 200 /64 subnets within one year“

Post reply on HN