5 ms·

> no need for NAT Yeah everyone says this but I can't access any ports on my IPv6 address from outside my home network. Back to IPv4 + NAT + port forwarding,

by dheera 5y ago

> no need for NAT Yeah everyone says this but I can't access any ports on my IPv6 address from outside my home network. Back to IPv4 + NAT + port forwarding, I guess. I have bigger problems I need to solve in my life right now. When one day I can just ssh <my-ipv6-address> from the outside I'll do that. Thanks. Also, there's the DNS problem. I can remember 10.0.0.3, 10.0.0.20, etc. pretty damn easily. I can't remember 8cef::fasd:8000:c00a:::99aa:::::81/42:8fe that easily. Which is an issue when things like 'foobar.local' don't work half the time. I have the IPv4 addresses of all my internal machines memorized thanks to the the fact that .local just doesn't work, period.

zekica 5y ago
You are using it wrong. You can't access a service on a server on your local network using your router's global IP. You should use server's global IP address (and open the port for that IP on the firewall). If your server uses SLAAC, it will always use the same local address (whether using EUI-64 or stable privacy), or you can configure it manually. In either case the address won't change. NAT made you think in a different way, but if you started with IPv4 before there was NAT, this setup is exactly the same as it was with IPv4 a long time ago.
- dheera 5y ago
  Too much work. If I type ifconfig on my machine I only have one 'inet6' address and it isn't reachable from the outside. The relevant people who want to popularize IPv6 should make that "just work". Until then IPv4 works for me, and a port forward is easy to understand, I don't need to google what SLAAC and EU-64. They advertise it as "oh you don't need a NAT" but in reality IPv4+NAT is easier to deal with. Most of us have actual jobs and don't have time to also be devops people. I realize this sounds like a shitpost, but this UX is exactly why IPv6 isn't popular yet. If you want something to be popular, you need to make it easier not harder than the current thing everyone uses.
  - Symbiote 5y ago
    Half the discussion is FUD that a consumer router wouldn't have an IPv6 firewall. Your router, like every other, has a default deny firewall for IPv6. You'll find the settings near to where you set up IPv4 port forwarding. My router calls it "pinholing" or something. Then you can SSH directly to the servers you allow access to, using port 22 for all of them if you wish.
    - dheera 5y ago
      I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes. Go to main screen. Still only shows my IPv4 WAN address. No IPv6 "pinhole" setting near the port forwarding. Back to making breakfast and doing what I needed to actually do. I use a UDM Pro by the way.
      - Symbiote 5y ago
        Sorry, I thought you were asking about a home broadband connection with the typical basic router supplied by the ISP. The UDB Pro looks like something for a small/medium business, so you presumably have a business connection. You'd need to ask your ISP for the configuration, as it will depend on what service they're providing. (Just like for IPv4 you'd need configuration if the ISP is providing you with 4, 16, 32, ... IPv4 addresses -- also a common situation.) If ifconfig is showing IPv6 addresses starting with fe80:, these are local/private, a bit like 169.254.x.y IPv4 addresses. So far, all global/routable IPv6 addresses begin with 2. (And for most home users, IPv6 is just as easy as IPv4, i.e. they don't know anything about either. After a test period, ISPs that support IPv6 generally enable it for all the normal home users -- it saves them money! That it is the default is how we got to 35% of Internet users using IPv6.)
      - deadbunny 5y ago
        > I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes. Sorry but how is that any different to IPv4? > I tried enabling IPv4 on my router just now. It asked me for a CIDR range. How TF do I know? I just randomly put 143.156.200.0/8. It's what google search told me to put in. Save changes. If you (the royal you, as in people) don't know how what they are you expecting it to work?
- MrStonedOne 5y ago
bombela 5y ago
.local not working might be your router trying to be helpful and snoop multicast to limit it to pairs of devices. Something about iptv optimization or whatever I don't really understand. Since I turned this feature off .local works as it should.
DarylZero 5y ago
fd::1 fd::2 fd::3 Easy enough to memorize. You can even do: fd::10.0.0.1 fd::10.0.0.2 ... and have each host assigned the matching IPv4 address as well.

by dheera 5y ago

zekica 5y ago

You are using it wrong. You can't access a service on a server on your local network using your router's global IP. You should use server's global IP address (and open the port for that IP on the firewall). If your server uses SLAAC, it will always use the same local address (whether using EUI-64 or stable privacy), or you can configure it manually. In either case the address won't change. NAT made you think in a different way, but if you started with IPv4 before there was NAT, this setup is exactly the same as it was with IPv4 a long time ago.

dheera 5y ago
Too much work. If I type ifconfig on my machine I only have one 'inet6' address and it isn't reachable from the outside. The relevant people who want to popularize IPv6 should make that "just work". Until then IPv4 works for me, and a port forward is easy to understand, I don't need to google what SLAAC and EU-64. They advertise it as "oh you don't need a NAT" but in reality IPv4+NAT is easier to deal with. Most of us have actual jobs and don't have time to also be devops people. I realize this sounds like a shitpost, but this UX is exactly why IPv6 isn't popular yet. If you want something to be popular, you need to make it easier not harder than the current thing everyone uses.
- Symbiote 5y ago
  Half the discussion is FUD that a consumer router wouldn't have an IPv6 firewall. Your router, like every other, has a default deny firewall for IPv6. You'll find the settings near to where you set up IPv4 port forwarding. My router calls it "pinholing" or something. Then you can SSH directly to the servers you allow access to, using port 22 for all of them if you wish.
  - dheera 5y ago
    I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes. Go to main screen. Still only shows my IPv4 WAN address. No IPv6 "pinhole" setting near the port forwarding. Back to making breakfast and doing what I needed to actually do. I use a UDM Pro by the way.
    - Symbiote 5y ago
      Sorry, I thought you were asking about a home broadband connection with the typical basic router supplied by the ISP. The UDB Pro looks like something for a small/medium business, so you presumably have a business connection. You'd need to ask your ISP for the configuration, as it will depend on what service they're providing. (Just like for IPv4 you'd need configuration if the ISP is providing you with 4, 16, 32, ... IPv4 addresses -- also a common situation.) If ifconfig is showing IPv6 addresses starting with fe80:, these are local/private, a bit like 169.254.x.y IPv4 addresses. So far, all global/routable IPv6 addresses begin with 2. (And for most home users, IPv6 is just as easy as IPv4, i.e. they don't know anything about either. After a test period, ISPs that support IPv6 generally enable it for all the normal home users -- it saves them money! That it is the default is how we got to 35% of Internet users using IPv6.)
    - deadbunny 5y ago
      > I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes. Sorry but how is that any different to IPv4? > I tried enabling IPv4 on my router just now. It asked me for a CIDR range. How TF do I know? I just randomly put 143.156.200.0/8. It's what google search told me to put in. Save changes. If you (the royal you, as in people) don't know how what they are you expecting it to work?
MrStonedOne 5y ago

bombela 5y ago

.local not working might be your router trying to be helpful and snoop multicast to limit it to pairs of devices. Something about iptv optimization or whatever I don't really understand. Since I turned this feature off .local works as it should.

DarylZero 5y ago

fd::1 fd::2 fd::3 Easy enough to memorize. You can even do: fd::10.0.0.1 fd::10.0.0.2 ... and have each host assigned the matching IPv4 address as well.