858
submitted 4 days ago by [email protected] to c/[email protected]
top 50 comments
sorted by: hot top new old
[-] [email protected] 17 points 3 days ago

fun fact, the RFC introducing NAT calls it a "short-term solution"

https://www.rfc-editor.org/rfc/rfc1631

[-] [email protected] 203 points 4 days ago

I know it's a joke, but the idea that NAT has any business existing makes me angry. It's a hack that causes real headaches for network admins and protocol design. The effects are mostly hidden from end users because those two groups have twisted things in knots to make sure end users don't notice too much. The Internet is more centralized and controlled because of it.

No, it is not a security feature. That's a laughable claim that shows you shouldn't be allowed near a firewall.

Fortunately, Google reports that IPv6 adoption is close to cracking 50%.

[-] [email protected] 99 points 4 days ago

I think NAT is one reason why the internet is so centralized. If everyone had a static IP you could do all sorts of decentralized cool stuff.

[-] [email protected] 70 points 4 days ago

Right, not the only reason, but it's a sticking point.

You shouldn't need to connect to your smart thermostat by using the company's servers as an intermediary. That makes the whole thing slower, less reliable, and a point for the company to sell your personal data (that last one being the ultimate reason why it's done this way).

[-] [email protected] 41 points 4 days ago

Everyone having a static IP is a privacy nightmare.

There's a reason the recommendation in the standard for ipv6 had to be amended (it whatever the mechanic was) so that generated local suffixes aren't static. Before that, we were essentially globally identifiable because just the second half of your v6 address was static.

load more comments (4 replies)
load more comments (1 replies)
load more comments (22 replies)
[-] [email protected] 25 points 3 days ago

Ipv6 is broken for those that want control over their home networks thanks to Google and terribly written RFCs.

All that was needed was an extra byte or two of address space, but no, some high and mighty evangelicals in their ivory towers built something that few people understand 30 years later. Their die hard fans are sure that this will be the year of ipv6. The Year of Linux on the Desktop will come 10 years before the year of ipv6.

[-] [email protected] 6 points 3 days ago

Ipv6 is broken for those that want control over their home networks

I don't see how? Works great for my home network.

load more comments (2 replies)
[-] [email protected] 8 points 3 days ago

And 10 years before fusion power?

load more comments (13 replies)
[-] [email protected] 10 points 3 days ago

bro just add another octet to the end of ipv4. That goes from 4 billion to a trillion and will most definitely outlast modern electronics and capitalism

[-] [email protected] 8 points 3 days ago* (last edited 3 days ago)

I think they must have thought: 'Well we thought four and a quarter billion was going to be enough. We don't want to repeat the mistake, so let's create an unimaginably large address space.'

Which, with the benefit of hindsight, now looks daft itself.

[-] [email protected] 4 points 3 days ago

It looks daft now with a little hindsight, but we're kind of still in the foresight stage for the overall life of IPv6.

[-] [email protected] 57 points 4 days ago

I hope nat burns in hell when ipv6 will become standard

[-] [email protected] 27 points 4 days ago
[-] [email protected] 12 points 3 days ago

It's the year of the ipv6 server

load more comments (21 replies)
[-] [email protected] 46 points 4 days ago

Surely we can do better. Why not IPv10? That's 4 higher than 6!

[-] [email protected] 24 points 4 days ago

not sure if you're aware thats a real thing https://www.ipv10.net/

[-] [email protected] 25 points 4 days ago

Guess we have to crank it up to 11, then.

[-] [email protected] 17 points 4 days ago

>Forbidden

>You don't have permission to access this resource.

Awesome.

[-] [email protected] 17 points 4 days ago

Obviously. You can only access it in IPv10.

[-] [email protected] 7 points 3 days ago

My IP goes up to 11.

[-] [email protected] 49 points 4 days ago

The reason IPv6 was originally added to the DOCSIS specs, over 20 years ago, is because Comcast literally exhausted all RFC1918 addresses on their modem management networks.

My favourite feature of IPv6 is networks, and hosts therein, can have multiple prefixes and addresses as a core function. I use it to expose local functions on only ULA addresses, but provide locked down public access when and where needed. Access separation is handled at the IP stack, with IPv4 it’s expected to be handled by a firewall or equivalent.

[-] [email protected] 31 points 4 days ago

My favorite feature of IPv6 is that there are so many addresses available. Every single IPv4 address right now could have its own entire IPv4 range of addresses in IPv6. It's mind-boggling huge.

load more comments (3 replies)
load more comments (4 replies)
[-] [email protected] 58 points 4 days ago

My favorite thing to use IPv6 for is to use the privacy extension to get around IP blocks on YouTube when using alternative front ends. Blocked by Google on my laptop? No problem, let me just get another one of my 4,722,366,482,869,645,213,696 IP addresses.

I have a separate subnet which is IPv6 only and rotates through IP addresses every hour or so just for Indivious, Freetube and PipePipe.

[-] [email protected] 4 points 3 days ago

Hah, do they not just block the whole /64? That's actually really funny.

load more comments (10 replies)
[-] [email protected] 56 points 4 days ago* (last edited 4 days ago)

Skill issue

IPv6 is easy to do.

2000::/3 is the internet range

fc00::/7 is the private network range

fe80::/64 is link local (like apipa but it never changes)

::1/128 is loopback

/64 is the smallest network allocation, and you still have 64 bits left for devices.

You don't need NAT when you can just do firewalling - default drop new connections on inbound wan and allow established, related on outbound wan like any IPv4 firewall does.

Use DHCPv6 and Prefix Delegation (DHCPv6-PD) to get your subnets and addresses (ask for a /60 on the wan to get 16 subnets).

Hook up to your printer using ipv6 link local address - that address never changes on its own, and now you don't have to play the static ip game to connect to it after changing your router or net config.

The real holdup is ISPs getting ultra cheap routers that use stupid network allocation systems (AT&T) that are incompat with the elegant simplicity of prefix delegation and dhcp.

load more comments (1 replies)
[-] [email protected] 29 points 4 days ago
load more comments (1 replies)
[-] [email protected] 37 points 4 days ago

Meh, the idea of having every address be globally routable makes a lot of sense. NAT is a great bandaid but it's still a bandaid. It still limits how peer to peer and multicast applications function, especially on larger networks.

load more comments (3 replies)
[-] [email protected] 50 points 4 days ago

In my personal life I will probably "never" intentionally use ipv6.

But it is a DAMNED good sniff test to figure out if an IT/NT team is too dumb to live BEFORE they break your entire infrastructure. If they insist that the single most important thing is to turn it off on every machine? They better have a real good reason other than "it's hard"

load more comments (16 replies)
[-] [email protected] 10 points 3 days ago

Also for home network I don’t won’t my IOT to have a real IP to the Internet. Using IPv4 NAT you can have a bit of safety by obscurity

[-] [email protected] 8 points 3 days ago

NAT is not much different to a firewall though… just because the address space is publicly routable does not mean that the router has to provide a route to it, or a consistent route

NAT works by assigning a public port for the outgoing stream different to the internal port, and it does that by inspecting packets as they go over the wire: a private machine initiates a connection, assign an arbitrary free port, and sends that packet off to the router, who then reassigns a new port, and when packets come in on that port it looks up the IP and remapped port and substitutes them

that same process can easily be true in IPv6 but you don’t need to do any remapping: the private machine initiates a connection, and the router simply marks that IP and port combination as “routable” rather than having to do mappings as well

load more comments (6 replies)
[-] [email protected] 41 points 4 days ago

I use IPv6 every day and everywhere I can. It solves so many issues in large corporate and ISP network setups. And yes 10. Wasn’t big enough, and NATing is a PitA.

Honestly we just keep pushing it off when it’s not that bad. Workaround after workaround just because people are lazy.

load more comments (6 replies)
[-] [email protected] 25 points 4 days ago
load more comments (1 replies)
load more comments
view more: next ›
this post was submitted on 01 Aug 2025
858 points (96.5% liked)

Programmer Humor

25485 readers
1847 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS