top 50 comments

sorted by: hot top controversial new old
[–] 211 points 1 year ago (31 children)

I know it's a joke, but the idea that NAT has any business existing makes me angry. It's a hack that causes real headaches for network admins and protocol design. The effects are mostly hidden from end users because those two groups have twisted things in knots to make sure end users don't notice too much. The Internet is more centralized and controlled because of it.

No, it is not a security feature. That's a laughable claim that shows you shouldn't be allowed near a firewall.

Fortunately, Google reports that IPv6 adoption is close to cracking 50%.

  • source
  • hideshow 31 child comments
  • [–] 103 points 1 year ago (7 children)

    I think NAT is one reason why the internet is so centralized. If everyone had a static IP you could do all sorts of decentralized cool stuff.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 70 points 1 year ago

    Right, not the only reason, but it's a sticking point.

    You shouldn't need to connect to your smart thermostat by using the company's servers as an intermediary. That makes the whole thing slower, less reliable, and a point for the company to sell your personal data (that last one being the ultimate reason why it's done this way).

  • source
  • parent
  • [–] 42 points 1 year ago (4 children)

    Everyone having a static IP is a privacy nightmare.

    There's a reason the recommendation in the standard for ipv6 had to be amended (it whatever the mechanic was) so that generated local suffixes aren't static. Before that, we were essentially globally identifiable because just the second half of your v6 address was static.

  • source
  • parent
  • hideshow 4 child comments
  • load more comments (3 replies)
  • load more comments (1 reply)
  • load more comments (23 replies)
    [–] 59 points 1 year ago (11 children)

    My favorite thing to use IPv6 for is to use the privacy extension to get around IP blocks on YouTube when using alternative front ends. Blocked by Google on my laptop? No problem, let me just get another one of my 4,722,366,482,869,645,213,696 IP addresses.

    I have a separate subnet which is IPv6 only and rotates through IP addresses every hour or so just for Indivious, Freetube and PipePipe.

  • source
  • hideshow 11 child comments
  • load more comments (7 replies)
    [–] 57 points 1 year ago* (last edited 1 year ago) (1 child)

    Skill issue

    IPv6 is easy to do.

    2000::/3 is the internet range

    fc00::/7 is the private network range

    fe80::/64 is link local (like apipa but it never changes)

    ::1/128 is loopback

    /64 is the smallest network allocation, and you still have 64 bits left for devices.

    You don't need NAT when you can just do firewalling - default drop new connections on inbound wan and allow established, related on outbound wan like any IPv4 firewall does.

    Use DHCPv6 and Prefix Delegation (DHCPv6-PD) to get your subnets and addresses (ask for a /60 on the wan to get 16 subnets).

    Hook up to your printer using ipv6 link local address - that address never changes on its own, and now you don't have to play the static ip game to connect to it after changing your router or net config.

    The real holdup is ISPs getting ultra cheap routers that use stupid network allocation systems (AT&T) that are incompat with the elegant simplicity of prefix delegation and dhcp.

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 57 points 1 year ago (23 children)

    I hope nat burns in hell when ipv6 will become standard

  • source
  • hideshow 23 child comments
  • load more comments (21 replies)
    [–] 50 points 1 year ago (16 children)

    In my personal life I will probably "never" intentionally use ipv6.

    But it is a DAMNED good sniff test to figure out if an IT/NT team is too dumb to live BEFORE they break your entire infrastructure. If they insist that the single most important thing is to turn it off on every machine? They better have a real good reason other than "it's hard"

  • source
  • hideshow 16 child comments
  • load more comments (16 replies)
    [–] 49 points 1 year ago (8 children)

    The reason IPv6 was originally added to the DOCSIS specs, over 20 years ago, is because Comcast literally exhausted all RFC1918 addresses on their modem management networks.

    My favourite feature of IPv6 is networks, and hosts therein, can have multiple prefixes and addresses as a core function. I use it to expose local functions on only ULA addresses, but provide locked down public access when and where needed. Access separation is handled at the IP stack, with IPv4 it’s expected to be handled by a firewall or equivalent.

  • source
  • hideshow 8 child comments
  • [–] 31 points 1 year ago (3 children)

    My favorite feature of IPv6 is that there are so many addresses available. Every single IPv4 address right now could have its own entire IPv4 range of addresses in IPv6. It's mind-boggling huge.

  • source
  • parent
  • hideshow 3 child comments
  • load more comments (4 replies)
    [–] 46 points 1 year ago (5 children)

    Surely we can do better. Why not IPv10? That's 4 higher than 6!

  • source
  • hideshow 5 child comments
  • [–] 24 points 1 year ago (3 children)

    not sure if you're aware thats a real thing https://www.ipv10.net/

  • source
  • parent
  • hideshow 3 child comments
  • load more comments (1 reply)
    [–] 41 points 1 year ago (6 children)

    I use IPv6 every day and everywhere I can. It solves so many issues in large corporate and ISP network setups. And yes 10. Wasn’t big enough, and NATing is a PitA.

    Honestly we just keep pushing it off when it’s not that bad. Workaround after workaround just because people are lazy.

  • source
  • hideshow 6 child comments
  • load more comments (6 replies)
    [–] 37 points 1 year ago (3 children)

    Meh, the idea of having every address be globally routable makes a lot of sense. NAT is a great bandaid but it's still a bandaid. It still limits how peer to peer and multicast applications function, especially on larger networks.

  • source
  • hideshow 3 child comments
  • [–] 19 points 1 year ago* (last edited 1 year ago) (2 children)

    NAT444 is shit. I can't even host a web server without routing it through a VPN, and my ISP can't work out how to provide an IPv6 addresses yet. Give it to me and I will work out how to use it.

    Slight update - Just looked and apparently they had a goal of rolling out IPv6 addresses to all customers by earlier this year. I'll check my router config tomorrow and who knows. Maybe I will be able to get one now? Would be pretty sweet.

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (2 replies)
  • [–] 29 points 1 year ago (1 child)
    load more comments (1 reply)
    [–] 28 points 1 year ago* (last edited 1 year ago) (12 children)

    Just my perspective as a controls (SCADA engineer):

    I work for a large power company. We have close to 100 sites, each with hundreds of IP devices, and have never had a problem with ipv4. Especially when im out in the field I love being able to check IPs, calculate gateways, etc at a glance. Ipv6 is just completely freaking unreadable.

    I see the value of outward-facing ipv6 devices (i.e. devices on the internet), considering we are out of ipv4s. But I don't see why we have to convert private networks to ipv6. Put more bluntly: at least industry, it just isn't gonna happen for decades (if it ever does). Unless you need more IPs it's just worse to work with. And there's a huge amount of inertia- got one singular device that doesn't talk ipv6 at a given generation site? What are you supposed to do?

  • source
  • hideshow 12 child comments
  • load more comments (12 replies)
    [+] 27 points 1 year ago (2 children)
  • [–] 25 points 1 year ago (1 child)
  • [–] 25 points 1 year ago (17 children)

    Ipv6 is broken for those that want control over their home networks thanks to Google and terribly written RFCs.

    All that was needed was an extra byte or two of address space, but no, some high and mighty evangelicals in their ivory towers built something that few people understand 30 years later. Their die hard fans are sure that this will be the year of ipv6. The Year of Linux on the Desktop will come 10 years before the year of ipv6.

  • source
  • hideshow 17 child comments
  • load more comments (17 replies)
    [–] 24 points 1 year ago (4 children)

    I'm surprised by the comments here. I use 90% IPv6. For me v4 is only present for retro compatibility. The transition was hard however.

  • source
  • hideshow 4 child comments
  • [–] 22 points 1 year ago (4 children)

    CGNATs suck ass though, I had to buy a vps just to access my own network outside my home.

  • source
  • hideshow 4 child comments
  • load more comments (4 replies)
    [–] 18 points 1 year ago

    I love the flat earther energy in this

  • source
  • [–] 17 points 1 year ago (5 children)

    C’mon, IPv4 has so many problems. Sure, let’s reserve a whole /8 for a single loopback address, that’s efficient. 🙄

  • source
  • hideshow 5 child comments
  • [–] 17 points 1 year ago (1 child)

    fun fact, the RFC introducing NAT calls it a "short-term solution"

    https://www.rfc-editor.org/rfc/rfc1631

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 16 points 1 year ago

    I have never started using ipv6 so I'm in the clear here

  • source
  • load more comments
    view more: next ›