32 ms·

If https://apenwarr.ca/log/20110328 https://apenwarr.ca/log/20110328 is still current, you’re not the only one.

Latty 5y ago
That article was really very optimistic about NAT traversal, while being very pessimistic about solutions to avoiding memorising IP addresses, which I think says something about their perspective going in. NAT is a nightmare that has directly lead to the crappy world of every "IoT" device relying on some remote service that can shut down any time, instead of just... connecting to your device. Also every game having connectivity issues when trying to do peer-to-peer play. Not to mention a reliance on NAT as security, something this article advocates for, despite being a job it isn't good at. The obsolescence of NAT is the bit of IPv4's demise I look forward to most.
- syshum 5y ago
  NAT not being designed for security does not negate the effect of security it does have. This goes to the 80/20 rule, IPv6 is a security nightmare if not deployed correctly, and I am surprised more home users have not gotten hit with this security time bomb
  - normaler 5y ago
    I feel that. I have a VPS that i run OpenBSD on. I messed up my config and now my phone was publicly reachable via its /72 ipv6 from the /64 adress i was assigned. Kinda scary/weird
  - deadbunny 5y ago
    > Security nightmare How so? Allow established, then drop. You know. The same rules in ever consumer level router on the market now.
  - Dagger2 5y ago
    > NAT not being designed for security does not negate the effect of security it does have. This is true... but the security impact of NAT is negative. It provides no security benefit, but it does confuse people about the security properties of their network, often providing a false sense of security.
kstrauser 5y ago
I don’t believe a single point of that was valid in 2011, let alone now. Witness the rise of CGNAT as a workaround for not migrating.
keithnz 5y ago
actually, reading through his various different articles is quite interesting. This one probably is the best "The world in which IPv6 was a good design" https://apenwarr.ca/log/20170810 https://apenwarr.ca/log/20170810
- Dagger2 5y ago
  Ugh, that article. It's interesting but that doesn't make it right. v6 was a good design in our world.

That article was really very optimistic about NAT traversal, while being very pessimistic about solutions to avoiding memorising IP addresses, which I think says something about their perspective going in. NAT is a nightmare that has directly lead to the crappy world of every "IoT" device relying on some remote service that can shut down any time, instead of just... connecting to your device. Also every game having connectivity issues when trying to do peer-to-peer play. Not to mention a reliance on NAT as security, something this article advocates for, despite being a job it isn't good at. The obsolescence of NAT is the bit of IPv4's demise I look forward to most.

syshum 5y ago
NAT not being designed for security does not negate the effect of security it does have. This goes to the 80/20 rule, IPv6 is a security nightmare if not deployed correctly, and I am surprised more home users have not gotten hit with this security time bomb
- normaler 5y ago
  I feel that. I have a VPS that i run OpenBSD on. I messed up my config and now my phone was publicly reachable via its /72 ipv6 from the /64 adress i was assigned. Kinda scary/weird
- deadbunny 5y ago
  > Security nightmare How so? Allow established, then drop. You know. The same rules in ever consumer level router on the market now.
- Dagger2 5y ago
  > NAT not being designed for security does not negate the effect of security it does have. This is true... but the security impact of NAT is negative. It provides no security benefit, but it does confuse people about the security properties of their network, often providing a false sense of security.

kstrauser 5y ago

I don’t believe a single point of that was valid in 2011, let alone now. Witness the rise of CGNAT as a workaround for not migrating.

keithnz 5y ago

actually, reading through his various different articles is quite interesting. This one probably is the best "The world in which IPv6 was a good design" https://apenwarr.ca/log/20170810 https://apenwarr.ca/log/20170810

Dagger2 5y ago
Ugh, that article. It's interesting but that doesn't make it right. v6 was a good design in our world.