2 ms·
>exposing your LAN to public routing tables is madness And I don't understand why people think that. You are exposing a /64 network. That's 2^64 addresses, no
by orangeboats 3y ago
>exposing your LAN to public routing tables is madness
And I don't understand why people think that.
You are exposing a /64 network. That's 2^64 addresses, no one can scan your LAN if that's what you fear, nor can anyone reach your hosts if you build a stateful firewall that denies incoming connections - you know, just like NAT. But minus the packet modifications.
- otabdeveloper4 3y ago> no one can scan your LAN Are we really back to security by obscurity? Please don't tell me you are serious. Anyways, you can't rely on ISP's handing out sufficiently large network ranges to make your security-by-obscurity scheme work.
- orangeboats 3y agoAre we not _already_ attempting security by obscurity at the very moment we talk about "exposing your LAN" as a supposed weakness of IPv6? /64 is the smallest network your ISP can hand out, of course you can rely on that. Even my mobile phone is getting a /64 from my ISP.