3 ms·
> Honestly, I don't think direct peer-to-peer connectivity will come back even after everything swutched to IPv6. Statefull firewalls still exist with IPv6, so
by throw0101a 5y ago
> Honestly, I don't think direct peer-to-peer connectivity will come back even after everything swutched to IPv6.
Statefull firewalls still exist with IPv6, so by default connections from the general Internal cannot connect to your 'internal' systems.
Hole punching still needs to be done with UPNP/PCP
* http://upnp.org/specs/arch/UPnP-arch-AnnexAIPv6-v1.pdf http://upnp.org/specs/arch/UPnP-arch-AnnexAIPv6-v1.pdf
* https://en.wikipedia.org/wiki/Port_Control_Protocol https://en.wikipedia.org/wiki/Port_Control_Protocol
The advantage of IPv6 is that you no longer have to have things like STUN, TURN, etc. (Remember Skype super-nodes?)
Your client knows its own IP(v6) address, gets the IP address of the other end, and then tells your firewall to allow connections between just those two addresses. Once your session is done the ACL is deleted and you're completely default-blocked from the outside again.