29 ms·

You are using it wrong. You can't access a service on a server on your local network using your router's global IP. You should use server's global IP address (

by zekica 5y ago

You are using it wrong. You can't access a service on a server on your local network using your router's global IP. You should use server's global IP address (and open the port for that IP on the firewall). If your server uses SLAAC, it will always use the same local address (whether using EUI-64 or stable privacy), or you can configure it manually. In either case the address won't change. NAT made you think in a different way, but if you started with IPv4 before there was NAT, this setup is exactly the same as it was with IPv4 a long time ago.

dheera 5y ago
Too much work. If I type ifconfig on my machine I only have one 'inet6' address and it isn't reachable from the outside. The relevant people who want to popularize IPv6 should make that "just work". Until then IPv4 works for me, and a port forward is easy to understand, I don't need to google what SLAAC and EU-64. They advertise it as "oh you don't need a NAT" but in reality IPv4+NAT is easier to deal with. Most of us have actual jobs and don't have time to also be devops people. I realize this sounds like a shitpost, but this UX is exactly why IPv6 isn't popular yet. If you want something to be popular, you need to make it easier not harder than the current thing everyone uses.
- Symbiote 5y ago
  Half the discussion is FUD that a consumer router wouldn't have an IPv6 firewall. Your router, like every other, has a default deny firewall for IPv6. You'll find the settings near to where you set up IPv4 port forwarding. My router calls it "pinholing" or something. Then you can SSH directly to the servers you allow access to, using port 22 for all of them if you wish.
  - dheera 5y ago
    I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes. Go to main screen. Still only shows my IPv4 WAN address. No IPv6 "pinhole" setting near the port forwarding. Back to making breakfast and doing what I needed to actually do. I use a UDM Pro by the way.
    - Symbiote 5y ago
      Sorry, I thought you were asking about a home broadband connection with the typical basic router supplied by the ISP. The UDB Pro looks like something for a small/medium business, so you presumably have a business connection. You'd need to ask your ISP for the configuration, as it will depend on what service they're providing. (Just like for IPv4 you'd need configuration if the ISP is providing you with 4, 16, 32, ... IPv4 addresses -- also a common situation.) If ifconfig is showing IPv6 addresses starting with fe80:, these are local/private, a bit like 169.254.x.y IPv4 addresses. So far, all global/routable IPv6 addresses begin with 2. (And for most home users, IPv6 is just as easy as IPv4, i.e. they don't know anything about either. After a test period, ISPs that support IPv6 generally enable it for all the normal home users -- it saves them money! That it is the default is how we got to 35% of Internet users using IPv6.)
    - deadbunny 5y ago
      > I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes. Sorry but how is that any different to IPv4? > I tried enabling IPv4 on my router just now. It asked me for a CIDR range. How TF do I know? I just randomly put 143.156.200.0/8. It's what google search told me to put in. Save changes. If you (the royal you, as in people) don't know how what they are you expecting it to work?
- spookthesunset 5y ago
  Totally agree. The UX for IPv6 sucks. Every time I poke with it I get worried I'm exposing the guts of my internal network onto the internet. With NAT, at least I know nothing is getting in without me intentionally punching a hole. With IPv6 to do the same I have to go fiddle with the router's command line interface and rules by hand. And even then who knows if I fucked something up or missed something... its just a lot of work. There is no web UI for managing IPv6 firewall rules but there is for IPv4. On the consumer grade routers I've touched there isn't even a way to configure the IPv6 firewall rules (and again, they all offer web UX for IPv4 rules).
  - deleted 5y ago
    [deleted]
  - Symbiote 5y ago
    The interface on the router provided by the UK's largest ISP is almost identical to the interface for IPv4 port forwarding: https://imgur.com/a/NXqwoA6 https://imgur.com/a/NXqwoA6
    - spookthesunset 5y ago
      Awesome! I wish my edgerouter had something like that...
MrStonedOne 5y ago

by zekica 5y ago

dheera 5y ago

Too much work. If I type ifconfig on my machine I only have one 'inet6' address and it isn't reachable from the outside. The relevant people who want to popularize IPv6 should make that "just work". Until then IPv4 works for me, and a port forward is easy to understand, I don't need to google what SLAAC and EU-64. They advertise it as "oh you don't need a NAT" but in reality IPv4+NAT is easier to deal with. Most of us have actual jobs and don't have time to also be devops people. I realize this sounds like a shitpost, but this UX is exactly why IPv6 isn't popular yet. If you want something to be popular, you need to make it easier not harder than the current thing everyone uses.

Symbiote 5y ago
Half the discussion is FUD that a consumer router wouldn't have an IPv6 firewall. Your router, like every other, has a default deny firewall for IPv6. You'll find the settings near to where you set up IPv4 port forwarding. My router calls it "pinholing" or something. Then you can SSH directly to the servers you allow access to, using port 22 for all of them if you wish.
- dheera 5y ago
  I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes. Go to main screen. Still only shows my IPv4 WAN address. No IPv6 "pinhole" setting near the port forwarding. Back to making breakfast and doing what I needed to actually do. I use a UDM Pro by the way.
  - Symbiote 5y ago
    Sorry, I thought you were asking about a home broadband connection with the typical basic router supplied by the ISP. The UDB Pro looks like something for a small/medium business, so you presumably have a business connection. You'd need to ask your ISP for the configuration, as it will depend on what service they're providing. (Just like for IPv4 you'd need configuration if the ISP is providing you with 4, 16, 32, ... IPv4 addresses -- also a common situation.) If ifconfig is showing IPv6 addresses starting with fe80:, these are local/private, a bit like 169.254.x.y IPv4 addresses. So far, all global/routable IPv6 addresses begin with 2. (And for most home users, IPv6 is just as easy as IPv4, i.e. they don't know anything about either. After a test period, ISPs that support IPv6 generally enable it for all the normal home users -- it saves them money! That it is the default is how we got to 35% of Internet users using IPv6.)
  - deadbunny 5y ago
    > I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes. Sorry but how is that any different to IPv4? > I tried enabling IPv4 on my router just now. It asked me for a CIDR range. How TF do I know? I just randomly put 143.156.200.0/8. It's what google search told me to put in. Save changes. If you (the royal you, as in people) don't know how what they are you expecting it to work?
spookthesunset 5y ago
Totally agree. The UX for IPv6 sucks. Every time I poke with it I get worried I'm exposing the guts of my internal network onto the internet. With NAT, at least I know nothing is getting in without me intentionally punching a hole. With IPv6 to do the same I have to go fiddle with the router's command line interface and rules by hand. And even then who knows if I fucked something up or missed something... its just a lot of work. There is no web UI for managing IPv6 firewall rules but there is for IPv4. On the consumer grade routers I've touched there isn't even a way to configure the IPv6 firewall rules (and again, they all offer web UX for IPv4 rules).
- deleted 5y ago
  [deleted]
- Symbiote 5y ago
  The interface on the router provided by the UK's largest ISP is almost identical to the interface for IPv4 port forwarding: https://imgur.com/a/NXqwoA6 https://imgur.com/a/NXqwoA6
  - spookthesunset 5y ago
    Awesome! I wish my edgerouter had something like that...

MrStonedOne 5y ago