Laser comments on Have you been exposed to an IPv6 address at work?

[–] Laser@feddit.org 1 point 1 year ago (5 children)

Idk man, NAT makes a lot of sense once you get used to it.

That's a lie, NAT is bullshit, sometimes necessary, but it will never "make sense".

permalink

fedilink

source

parent

hideshow 5 child comments

[–] slate@sh.itjust.works 6 points 1 year ago (4 children)

I like that none of my local devices are externally addressable unless an outgoing connection has been established. You can (and should) achieve the same thing with ipv6, but then it's essentially just maintaining a NAT table without the translation piece. I think that makes sense in both protocols.

permalink

fedilink

source

parent

hideshow 4 child comments

[–] eager_eagle@lemmy.world 3 points 1 year ago (1 child)

exactly, I also like this peace of mind for my home network and see no benefit in using ipv6 there. Similarly for any VPC I deploy to an IaaS.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] unquietwiki@programming.dev 2 points 1 year ago

I'm actually trying a hybrid approach with some VPCs: use firewalled IPv6 ports for remote management, direct to the VMs; while siphoning off the IPv4 traffic to a basic Linux host with Netfilter rules acting as a NAT router. I keep the benefits of using IPv6, without eating up a bunch of external IPv4 addresses, that I would also have to account for on filtering.