4 ms·

For makers, it will hopefully look like the internet of the old days where you can just configure ACLs and/or crypto keys to allow traffic from one place to the

by zurn 11y ago

For makers, it will hopefully look like the internet of the old days where you can just configure ACLs and/or crypto keys to allow traffic from one place to the other instead of using a towering stack of configuration tooling to manage address mappings, port forwardings and private DNS zones, and fighting rfc1918 addressing conflicts. Security engineering is largely about managing complexity and having a firm grasp on the system you're securing, so it's definitely a win there too. It's weird that we have IPv6 widely provided by consumer ISPs (wireless & wired) but AWS & GCE are the ones holding the whole thing back. A while ago it everyone assumed that servers are the easy part and getting consumer ISPs to play along was going to be hard... About clients ceasing to have IPv4 connectivity, that's anybody's guess. It will definitely be a "happy problem" if/when that starts happening at some point in the distant future.

beachstartup 11y ago
> AWS & GCE that's because they have plenty of v4 space, which is now a competitive advantage. have you tried to get even a /24 lately? pay up, sucker. bitspace is now a market with exponential returns. it's the ultimate barrier to entry. the faster they move on it, the less of a barrier it will be to the competition. so why should they? welcome to the new microsoft. except this time, we're all eating it up and loving it for some reason (that's another post...)
- regecks 11y ago
  > that's because they have plenty of v4 space, which is now a competitive advantage. have you tried to get even a /24 lately? pay up, sucker. bitspace is now a market with exponential returns. Depends where you are. Maybe it's hard to get a range from ARIN, but we got a /23 from APNIC not one month ago for ~1k/yr. That is peanuts, and was not too difficult to quality for eligibility either.
- virtuallynathan 11y ago
  They don't really... I've heard the internal addressing at some cloud providers is a real mess. Multi-layer NAT, etc.
  - seanp2k2 11y ago
    Amazon has a significant push to VPC, so then instances will all be on e.g. 10. Address space (so they're doing NAT).

by zurn 11y ago

beachstartup 11y ago

> AWS & GCE that's because they have plenty of v4 space, which is now a competitive advantage. have you tried to get even a /24 lately? pay up, sucker. bitspace is now a market with exponential returns. it's the ultimate barrier to entry. the faster they move on it, the less of a barrier it will be to the competition. so why should they? welcome to the new microsoft. except this time, we're all eating it up and loving it for some reason (that's another post...)

regecks 11y ago
> that's because they have plenty of v4 space, which is now a competitive advantage. have you tried to get even a /24 lately? pay up, sucker. bitspace is now a market with exponential returns. Depends where you are. Maybe it's hard to get a range from ARIN, but we got a /23 from APNIC not one month ago for ~1k/yr. That is peanuts, and was not too difficult to quality for eligibility either.
virtuallynathan 11y ago
They don't really... I've heard the internal addressing at some cloud providers is a real mess. Multi-layer NAT, etc.
- seanp2k2 11y ago
  Amazon has a significant push to VPC, so then instances will all be on e.g. 10. Address space (so they're doing NAT).