18 ms·

All that and no mention of IPv6? At least get the basics down first.

hqsolomo 3y ago
Lol I get sym 1G/1G from my ISP and a free static IP address for less than Comcrash offers for their 25/10 service in my area... The catch? _No IPv6 support whatsoever_
- systems_glitch 3y ago
  Yeah, even with Comcast/Xfinity I run a HE.net tunnel for IPv6, just so I can have truly static allocations and not goof around with their DHCPv6 prefix request system.
  - hqsolomo 3y ago
    Dude, got any links to where I can read more? I see what you have here and I want it for me! I wasn't even aware you could use HE's services without being a customer!
    - systems_glitch 3y ago
      https://tunnelbroker.net/ https://tunnelbroker.net/ It's been around for a long time! If you do the IPv6 training certification, they do eventually send the t-shirt :P EDIT: They also provide free DNS for up to 50 domains at dns.he.net which is also worth looking at if you don't want to run your own for every little thing.
      - hqsolomo 3y ago
        THANK YOU! This is perfect!
        mrpippy 3y ago
        I haven’t used it in a few years, but one downside of an HE tunnel was that Netflix blocked traffic from it (since people were using it like a VPN to avoid geoblocks). I had to run a DNS proxy to filter out AAAA records for any Netflix domains.
        systems_glitch 3y ago
        That is true, and a bunch of folks (including me) were experiencing issues with Google-related sites blocking with a 403 FORBIDDEN on the initial /64 static allocation from HE.net. Oddly enough, any subnet out of the optional routed /48 you can enable worked fine. For sites that use HE.net and have more than one IPv6 subnet, I use the initial /64 for the DMZ, so that didn't matter on most of them. Small sites had just been using the /64 though, and I had to renumber those. Total pain.
        wahern 3y ago
        HE and Cogent are still feuding over IPv6 peering, too. Using HE for regular web browsing will work fine, but if you want to host through HE your services might not be reachable to visitors from a Cogent network, e.g. office buildings. The norm seems to be for hosting services to contract with both HE and Cogent if they decide to go with one of them. This is why for typical client browsing you wouldn't notice--the other side has ensured you can reach them. HE seems to be the cheaper option, so people will route most of their traffic through HE, and then separately contract with Cogent for the smaller amount of traffic originating from/to Cogent networks. Alternatively, you contract with another network provider who handles that idiocy for you.
m463 3y ago
Do you need ipv6 on a home network? Honestly I just use ipv4 and turn off ipv6 everywhere. Then I have just one configuration and one set of firewall rules (in and out).
- systems_glitch 3y ago
  To say "couldn't live without it" would be an exaggeration, but we do use it extensively for work, and having it at home makes WFH much easier. End-to-end connectivity, like in the old days, is very nice!
jonathantf2 3y ago
Probably not supplied, I’ve got no IPv6 on any connection I have access to other than a few Azure VMs (and it’s a PITA to set up so we haven’t bothered)
toast0 3y ago
Looks like they've got dual-wan (at&t fiber + verizon 5G backup). It's pretty easy to do ipv4 failover with NAT as long as you've got an indication that it needs doing; ipv6 failover is a lot harder; unless you're going to NAT the v6 traffic too. I don't know about Apple devices, but I couldn't get Android or Windows to play nice with two v6 ranges in radvd. They wouldn't listen to priority, and they would do derpy things like pick an address from one router's advertisement and then send the traffic to the other router. In some magic happy land where you can use your IPv6 prefix over both WANs, then yeah, things can work, but that doesn't work for residences, generally.
monstermunch 3y ago
I have ipv6 on both WAN's and ipv6 on LAN, but not any other VLAN's To be completely honest, I find ipv6 wildly alloying, but I guess that means I need to learn more!

Lol I get sym 1G/1G from my ISP and a free static IP address for less than Comcrash offers for their 25/10 service in my area... The catch? _No IPv6 support whatsoever_

systems_glitch 3y ago
Yeah, even with Comcast/Xfinity I run a HE.net tunnel for IPv6, just so I can have truly static allocations and not goof around with their DHCPv6 prefix request system.
- hqsolomo 3y ago
  Dude, got any links to where I can read more? I see what you have here and I want it for me! I wasn't even aware you could use HE's services without being a customer!
  - systems_glitch 3y ago
    https://tunnelbroker.net/ https://tunnelbroker.net/ It's been around for a long time! If you do the IPv6 training certification, they do eventually send the t-shirt :P EDIT: They also provide free DNS for up to 50 domains at dns.he.net which is also worth looking at if you don't want to run your own for every little thing.
    - hqsolomo 3y ago
      THANK YOU! This is perfect!
      - mrpippy 3y ago
        I haven’t used it in a few years, but one downside of an HE tunnel was that Netflix blocked traffic from it (since people were using it like a VPN to avoid geoblocks). I had to run a DNS proxy to filter out AAAA records for any Netflix domains.
        systems_glitch 3y ago
        That is true, and a bunch of folks (including me) were experiencing issues with Google-related sites blocking with a 403 FORBIDDEN on the initial /64 static allocation from HE.net. Oddly enough, any subnet out of the optional routed /48 you can enable worked fine. For sites that use HE.net and have more than one IPv6 subnet, I use the initial /64 for the DMZ, so that didn't matter on most of them. Small sites had just been using the /64 though, and I had to renumber those. Total pain.
        wahern 3y ago
        HE and Cogent are still feuding over IPv6 peering, too. Using HE for regular web browsing will work fine, but if you want to host through HE your services might not be reachable to visitors from a Cogent network, e.g. office buildings. The norm seems to be for hosting services to contract with both HE and Cogent if they decide to go with one of them. This is why for typical client browsing you wouldn't notice--the other side has ensured you can reach them. HE seems to be the cheaper option, so people will route most of their traffic through HE, and then separately contract with Cogent for the smaller amount of traffic originating from/to Cogent networks. Alternatively, you contract with another network provider who handles that idiocy for you.

m463 3y ago

Do you need ipv6 on a home network? Honestly I just use ipv4 and turn off ipv6 everywhere. Then I have just one configuration and one set of firewall rules (in and out).

systems_glitch 3y ago
To say "couldn't live without it" would be an exaggeration, but we do use it extensively for work, and having it at home makes WFH much easier. End-to-end connectivity, like in the old days, is very nice!

jonathantf2 3y ago

Probably not supplied, I’ve got no IPv6 on any connection I have access to other than a few Azure VMs (and it’s a PITA to set up so we haven’t bothered)

toast0 3y ago

Looks like they've got dual-wan (at&t fiber + verizon 5G backup). It's pretty easy to do ipv4 failover with NAT as long as you've got an indication that it needs doing; ipv6 failover is a lot harder; unless you're going to NAT the v6 traffic too. I don't know about Apple devices, but I couldn't get Android or Windows to play nice with two v6 ranges in radvd. They wouldn't listen to priority, and they would do derpy things like pick an address from one router's advertisement and then send the traffic to the other router. In some magic happy land where you can use your IPv6 prefix over both WANs, then yeah, things can work, but that doesn't work for residences, generally.

monstermunch 3y ago

I have ipv6 on both WAN's and ipv6 on LAN, but not any other VLAN's To be completely honest, I find ipv6 wildly alloying, but I guess that means I need to learn more!