2 ms·
This module makes it impossible to detect and handle IPv6 /64 subnets. Perhaps the first and last 64 bits should be hashed separately.
by iknowstuff 9y ago
This module makes it impossible to detect and handle IPv6 /64 subnets. Perhaps the first and last 64 bits should be hashed separately.
- masonicb00m 9y agoWhat do you mean when you say “detect and handle IPv6/64 subnets”? I’m not too familiar with IPv6 but would love to improve support for it if the project is deficient somehow.
- mcpherrinm 9y agoWith the original IP, addresses are fairly expensive. With IPv6, even home users are assigned a /64 subnet at the smallest, so a malicious actor can iterate through many addresses. Generally for things like per-IP ratelimiting, you treat a whole IPv6 /64 subnet like you would treat a single IP address.