5 ms·
Amazon really needs to put a ton of work into making v6 work for everyone on the server side or this is a very big price increase on the low end. If they had a
by jwlake 3y ago
Amazon really needs to put a ton of work into making v6 work for everyone on the server side or this is a very big price increase on the low end.
If they had a compelling case to do the devops work and then everythings fine, I wouldn't mind this at all. The reality is a ton of stuff is ipv4 only (cloudfront origins, albs require ipv4, etc etc).
They realistically need free NAT or free 6to4 as a transition plan.
- jandrese 3y agoThis has been driving me crazy for years now. AWS still doesn’t have complete IPv6 support, in 2023. They are front and center to IPv4 exhaustion yet seem unconcerned.
- lxgr 3y agoEven Amazon can't make every single ISP in the world provide IPv6 connectivity, which would be required to actually deprecate IPv4 on the server side (or at least at the load balancer or other type of HTTP reverse proxy).
- ianburrell 3y agoThey should offer NAT64/DNS64 gateway. It would work like other gateways and give IPv4 access to IPv6 hosts. Would probably be expensive like the NAT Gateway.
- jeroenhd 3y agoIs the gateway described here: https://aws.amazon.com/blogs/aws/let-your-ipv6-only-workloads-connect-to-ipv4-services/ https://aws.amazon.com/blogs/aws/let-your-ipv6-only-workload... no longer available?
- ianburrell 3y agoI didn't know about that.
- lxgr 3y agoThat's the wrong direction (IPv6 clients calling IPv4 services). That doesn't help you for running a service yourself.
- dastbe 3y agoyou can run an NLB that terminates v4 and forwards to v6 internally: https://aws.amazon.com/about-aws/whats-new/2020/11/network-load-balancer-supports-ipv6/ https://aws.amazon.com/about-aws/whats-new/2020/11/network-l...
- cyberax 3y agoELBs (Elastic Load Balancer) supported IPv6 termination since 2011.
- jeroenhd 3y agoYou'll need something it you want to download files from Github, because for some stupid reason they still don't provide IPv6 services for cloning and such.
- mnutt 3y agoIt looks to be available, but (from the bottom of the article) "Regular NAT gateway charges may apply."
- jwlake 3y agoYes the problem is NAT gateways are expensive, not free. AWS could easily run a "central" 6 to 4 in each region (not in your VPC), which the incremental cost of using would be near 0. Then you could use pure v6 (no IP charges). And actually be able to talk to things like github, stripe, apple, etc.
- lxgr 3y agoDo you mean NAT46? NAT64 is for IPv6 clients to access IPv4 servers, no? And how would you assign, e.g., port 80 to more than one IPv6 IPs in the backend? The other option are application-level proxies/load balancers etc., but that's not easy if you want to support all possible protocols.
- wmf 3y agoThe "official" solution is SIIT-DC but it looks like AWS would prefer that you use ALBs.
- lxgr 3y agoTIL about SIIT-DC, thank you. This still requires mapping tables similar to explicit port forwarding, and also does not help with e.g. a scenario where all hosts need a specific port (e.g. 443) to be v4 reachable, right?
- ianburrell 3y agoI'm talking about IPv6-only instances needing to access IPv4. Github is the big example. Network load balancers (NLB) are for other protocols.
- lxgr 3y agoSure, but NAT64 is much easier than NAT46 or application-level load balancing. It’s probably been how most people in the world access the internet for a while, to say nothing about NAT44.