2 ms·
> Is the general model of public/private subnet still valid? You're getting replies that are tiptoeing around the truth, saying that the answer to this is basi
by rootusrootus 4y ago
> Is the general model of public/private subnet still valid?
You're getting replies that are tiptoeing around the truth, saying that the answer to this is basically 'yes' when it sure looks like the answer is firmly 'no.' My home IPv4 network isn't routable, it is a private network. If my IPv6 address is globally unique and addressable by someone across the world, my network is not private in the way that most people have come to understand the term. I'm just part of the public network but with a firewall to stop unwanted packets from reaching my local nodes.
- yesco 4y ago> My home IPv4 network isn't routable, it is a private network. An IPv6 network with a firewall configured to disallow incoming traffic isn't routable, it is a private network > If my IPv6 address is globally unique and addressable by someone across the world, my network is not private in the way that most people have come to understand the term. In what way? All NAT does is funnel traffic over one address (or more), that address is still exposed to the internet and it's your firewall that prevents that incoming traffic. If your firewall is compromised, then NAT isn't protecting you from anything, your network will absolutely be routable despite what you are suggesting. The assumptions you are making are part of the reason why NAT can be dangerous. > I'm just part of the public network but with a firewall to stop unwanted packets from reaching my local nodes. This is an oxymoron, you are either a part of the public network or you are not. The only thing that has changed is the semantics.