all 48 comments

sorted by: hot top controversial new old
[–] 82 points 1 year ago (4 children)

/64

That's not an address, that's a whole fucking subnet consisting of 2^64 different addresses. ☝️🤓

  • source
  • hideshow 4 child comments
  • [–] 41 points 1 year ago (12 children)

    There was a cool project that converted hexadecimal numbers (or IPs) to pronouceable words. I think it was also more dense, and of course faster to say / easier to remember.

  • source
  • hideshow 12 child comments
  • [–] 14 points 1 year ago (5 children)

    Just make your IP addresses pronouncable words like feed:deaf:babe:beef:cafe:: problem solved ez (working 2023!)

  • source
  • parent
  • hideshow 5 child comments
  • [–] 3 points 1 year ago (4 children)

    But you're limited to a-f. I wonder if anyone's figured out how many addresses are actually possible with that system.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 1 year ago* (2 children)

    I think that's just 6^32, no? (Amount of options^string length). Which is 7958661109E24.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 1 year ago* (1 child)

    Yeah, calculation of the amount of possible strings containing only a-f is trivial. But the idea is for addresses to be memorable. So I'm wondering how many strings which are valid IPv6 addresses are possible if you are limited to actual English (or, pick a language) 4-letter words containing only a-f. As someone mentioned, this could be expanded with 1337-speak.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 9 points 1 year ago (1 child)

    That's cool, but I'm sure it broke the relationship between ip addresses. Like it would be hard to tell if 1 IP was 1 higher or lower than another/ in the same /28 subnet, etc

  • source
  • parent
  • hideshow 1 child comment
  • [–] 39 points 1 year ago (13 children)

    Does IPv6 scare you so much that you start craving the monstrosity known as NAT44?

  • source
  • hideshow 13 child comments
  • [–] 5 points 1 year ago (12 children)

    Idk man, NAT makes a lot of sense once you get used to it. And it's pretty cozy with its firewall features. And somewhat human readable ipv4 addresses are nice.

  • source
  • parent
  • hideshow 12 child comments
  • [–] 19 points 1 year ago (3 children)

    ISPs putting you behind NAT is not cozy.

    They charge extra for a feature called "static IP". But the IP address not being static is not the issue, for me at least. You could host stuff with a dynamic IP back in 2000s/2010s. But no, now you get to share the same IPv4 address with a bunch of other households, unless you pay extra.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 10 points 1 year ago* (last edited 1 year ago) (2 children)

    Ha, yeah that sucks and I'd absolutely hate it if I were behind a CGNAT. But I believe most ISPs don't do that. None of mine ever have. Just like how most ISPs provide you with an ipv6 address range, but not all. Fact is that crappy ISPs can screw up your network no matter what ip spec you're using.

    And I've never heard of a business network being behind an ISP controlled CGNAT. A NAT you control can be nice.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 1 year ago

    The "firewall" features are called connection tracking and, a firewall. With IPv6 I have my firewall setup very similar to NAT. Established and outgoing new connections are allowed (this is done using connection tracking). Incoming new connections are not allowed unless I open up a specific port.

    Home firewalls SHOULD be setup the same for IPv6, a lot are not and IMO is the main problem right now.

  • source
  • parent
  • [–] 1 point 1 year ago (5 children)

    Idk man, NAT makes a lot of sense once you get used to it.

    That's a lie, NAT is bullshit, sometimes necessary, but it will never "make sense".

  • source
  • parent
  • hideshow 5 child comments
  • [–] 6 points 1 year ago (4 children)

    I like that none of my local devices are externally addressable unless an outgoing connection has been established. You can (and should) achieve the same thing with ipv6, but then it's essentially just maintaining a NAT table without the translation piece. I think that makes sense in both protocols.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 7 points 1 year ago

    With IPv6 for most use cases there's actually more security. With privacy extensions (pretty sure it's enabled on windows by default), when you make connections from your device, it uses a "private" IP. That is a randomly chosen address inside your network's prefix, that changes regularly.

    These addresses don't accept incoming connections. You have a main address that doesn't really change that you accept connections on. Firewall that for ports you want to allow and then hackers need to port scan 2^64 or 2^80 address space to find your real IPs in your prefix. If they capture your IP from a connection to a web server etc, they won't have luck scanning you.

    Again as per my post above, the biggest risk right now is bad default configurations on many home routers.

  • source
  • parent
  • [–] 3 points 1 year ago (1 child)

    exactly, I also like this peace of mind for my home network and see no benefit in using ipv6 there. Similarly for any VPC I deploy to an IaaS.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 year ago

    I'm actually trying a hybrid approach with some VPCs: use firewalled IPv6 ports for remote management, direct to the VMs; while siphoning off the IPv4 traffic to a basic Linux host with Netfilter rules acting as a NAT router. I keep the benefits of using IPv6, without eating up a bunch of external IPv4 addresses, that I would also have to account for on filtering.

  • source
  • parent
  • [–] 2 points 1 year ago

    I like that none of my local devices are externally addressable unless an outgoing connection has been established.

    This can also be achieved using (other) firewall rules.

    but then it's essentially just maintaining a NAT table without the translation piece.

    So... a firewall?

    NAT isn't a security feature and shouldn't be relied on for managing access to hosts.

    It also breaks the assumption of IP that connections between hosts are end-to-end, which requires sophisticated solutions so that everything works (more or less).

    I too employ NAT to make services accessible over IPv4. But only because it doesn't work otherwise. Not because it "makes sense". I don't use it at all for IPv6.

  • source
  • parent
  • [–] 34 points 1 year ago (4 children)

    Yes, who do you think deployed it.

  • source
  • hideshow 4 child comments
  • [+] 3 points 1 year ago* (last edited 1 year ago) (3 children)
  • [+] 29 points 1 year ago* (last edited 7 months ago) (2 children)
  • [–] 15 points 1 year ago

    The future is now, old man

  • source
  • [–] 11 points 1 year ago (1 child)

    ipv6 is strictly superior and i will die on this hill

  • source
  • hideshow 1 child comment
  • [–] 6 points 1 year ago (1 child)

    I don't get how regular network works, ipv6 is like 10 times more confusing with all its prefixes and subnets

  • source
  • hideshow 1 child comment
  • I mean they dropped the parts of ip4 that are not used. They only multiplied the number of bits by 4, otherwise it's the exact same ideas. The confusing part might be that a device gets multiple addresses off the bat. Using decimal for 128 bits would have made the address even worse.

  • source
  • parent
  • [–] 3 points 1 year ago

    If ipv4 wasn't owned by the address-hogging empire of evil, we wouldn't need ipv6

  • source
  • [–] 2 points 1 year ago
    • 3fff:a1:1ab:bc67::63c6:4fa4:40a:9aab/64
    • 2001:db8:a1ab:34ac:67ab:4af3:49a:5bb3/64
    • 3fff:d7a:cafe:77:9952:dc4d:da41:e1d7/64

    I was bored. And need to train ipv6 typing skills.

  • source
  • [–] 1 point 1 year ago

    Ain't nobody never asked for any of this, but it invaded my home computer too!!! IPv6 rapist immigrants are taking over this country.

  • source