3 ms·
While the evil-Internet, DMZ, walled-garden scheme might be flawed, I doubt it'll go away anytime soon. - compute clusters / rendering farms: people pay for pe
by guenthert 6y ago
While the evil-Internet, DMZ, walled-garden scheme might be flawed, I doubt it'll go away anytime soon.
- compute clusters / rendering farms: people pay for performance and aren't necessarily willing to sacrifice it for increased security (be it local firewall or SPECTRE mitigation) there
- engineering sub-divisions in large enterprises: its not unheard of that equipment in those is maintained by the engineers themselves (who are not necessarily well versed in network security matters and have other priorities) rather then the enterprise's IT team (this can coincide with the MS Windows / Unix schism)
- kanox 6y agoBoth of those scenarios are perfectly compatible with ipv6, corporate IT needs to replace NAT with an ipv6 firewall for access to the public internet. However it's also true that ipv6 does not give many advantages to a team that already has a 10.x.y.0/24 inside the corporate network.
- welterde 6y agoDepends on your scale.. As soon as you start to have to resort to overlapping private IPv4 networks it really starts to get fun if you have to connect certain things together that weren't planned to be able to reach each other initially. With IPv6 this is a non-issue.