4 ms·
Why do you need private addresses?
by throwaway742 4y ago
Why do you need private addresses?
- Arnavion 4y agoSo that they will be stable.
- jbnorth 4y agoIsn’t the whole idea to just use DNS?
- soupbowl 4y agoCertain Firewall rules don't work without stable IPs, DNS won't help with that.
- oneplane 4y agoBut a relatively normal firewall daemon supports variables and aliases and lookups etc. I suppose if you don't use address lists or address tags and no DNS and no DDNS then it would indeed be a problem.
- soupbowl 4y agoI have played with multiple routers even commercial ones that do not support aliases or anything but static addresses. You are not wrong but what you suggest is far from the norm.
- bpye 4y agoI was curious to see what the solutions are for some of these - Ruckus for example has Ansible modules [0] but they just SSH in and change the config. [0] - https://github.com/commscope-ruckus/RUCKUS_ICX_Ansible https://github.com/commscope-ruckus/RUCKUS_ICX_Ansible
- throwaway2048 4y agoDNS is generally looked up once, on ruleset initalization, there is no way a firewall is going to look up DNS every single time a rule is referenced. Since DNS here is changing constantly, this is unhelpful.
- btgeekboy 4y agoIt is, and for a lot of things that works. But if your DNS server is not your router, it needs to be at a stable address so other hosts on the network can find it. As I understand it, we (admins of ipv6 networks) are expected to run both public and private sets of addresses internally. The public ones may change if your ISP makes you, but your ULAs never do.
- Sithuk 4y ago"ULA is functionally useless in any IPv6 deployment that has dual-stack operating anywhere." "ULA per RFC 6724 is less preferred (the Precedence value is lower) than all IPv4 (represented by ::ffff:0:0/96 in the table). Because of the lower Precedence value, if you have IPv4 enabled on a host, it will use IPv4 before using ULA." https://blogs.infoblox.com/ipv6-coe/ula-is-broken-in-dual-stack-networks/ https://blogs.infoblox.com/ipv6-coe/ula-is-broken-in-dual-st...
- justahuman74 4y agoMy guess is for address stability
- stop50 4y agoyes. The internet connection is unreliable and sometimes i get 5 reconnections in less than half an hour.
- throwaway742 4y agobut why do you need them to be stable? edit: well for some reason I can't reply to you anymore, but for firewall rules I have had good luck using aliases instead of static addresses
- soupbowl 4y agoIf you are hosting internal services you want stable addresses.
- stop50 4y agoIm hosting some internal services like monitoring with icinga, an grafana, my own recursive dns server, an kea dhcp and some more. the webinterface of my router is currently only available in the local dns with its ipv4 address.