4 ms·
By using a stateful firewall with a default-deny policy on the external interface? One would hope that SoHo routers that ship with IPv6 support are configured
by jauer 10y ago
By using a stateful firewall with a default-deny policy on the external interface?
One would hope that SoHo routers that ship with IPv6 support are configured that way by default so they mimic the apparent behavior of NAT (though NAT is not, and is less effective than a firewall).
- marcosdumay 10y agoNotice that this should still be easier to implement, and use less memory (read cheaper devices) than NAT. NAT is an ugly hack. Uglier yet when you remember that the internet is not only TCP.
- tedunangst 10y agoLess memory? A complete inside-outside-remote address triple for IPv4 NAT uses less memory than even a single IPv6 address. And keeping state requires two.
- deleted 10y ago[deleted]
- marcosdumay 10y agoYou are correct. Let me rephrase it correctly: implementing that uses less memory than IPv6 NAT. Yet, all the practical implications from my previous comment are gone. This correct version is useless.