3 ms·

> Security-wise, your devices are addressable on the Internet Nope. By default home routers (e.g., Asus) will block incoming connections just like with IPv4. I

> Security-wise, your devices are addressable on the Internet Nope. By default home routers (e.g., Asus) will block incoming connections just like with IPv4. It may allow pings (ICMP) in, but that's usually it. You have to manually go in and tell the router to allow new connections in (either generally, or per service/port), just like the "DMZ" functionality with IPv4 many routers have.

spookthesunset 5y ago
And to open up those incoming connections on IPv6, we'll invent some other variant of UPnP so users don't have to manually go punch holes into their firewall to allow peer to peer connections. IPv6 doesn't solve the problem of everything in the internal network being unable to accept incoming connections. With a NAT you need to set up port forwarding. With IPv6 you need to punch a hole into your firewall. Either way, home users will not be doing it by hand... we'll invent some protocol to do it and that protocol will have security issues.
- viraptor 5y ago
  > we'll invent some other variant of UPnP We don't have to. UPnP works just fine with ipv6 already. (upnp v1.1, appendix A)
- throw0101a 5y ago
  "UPnP Device Architecture V1.0 Annex A – IP Version 6 Support": * http://upnp.org/specs/arch/UPnP-arch-AnnexAIPv6-v1.pdf http://upnp.org/specs/arch/UPnP-arch-AnnexAIPv6-v1.pdf
lokedhs 5y ago
> It may allow pings (ICMP) in, but that's usually it. I sure hope it does. Blocking ICMP can cause TCP connections to hang due to inability to do MTU size detection. With IPv4 this is usually not as visible, but with IPv6 if you block ICMP your connections will block as soon as you try to transfer a large block of data.