4 ms·

Won't you always be able to use it for local networks? I like NAT and regardless of IPv6, I think I'll keep my home network as IPv4 in a NAT and completely bloc

Won't you always be able to use it for local networks? I like NAT and regardless of IPv6, I think I'll keep my home network as IPv4 in a NAT and completely block outgoing and incoming per-device-IPv6.

TacticalCoder 3y ago
> Won't you always be able to use it for local networks? Well for me until Linux shall support IPv4 my machines shall be on IPv4 behind NAT. And yet I'm enjoying IPv6 with my ISP-provider router transparently doing the heavy lifting and using IPv6. > and completely block outgoing and incoming per-device-IPv6. Same. I do just that: it's disable by a kernel parameter, in sysctl and in the firewall, just in case I'd mess up and re-enable one or two of these. You can pry IPv4 on my LAN from my cold dead hands.
- X-Istence 3y ago
  How is your isp provided router doing the heavy lifting? You’ve turned off IPv6… you won’t be able to reach IPv6 resources.
  - qwertox 3y ago
    In my case I run a double NAT. I don't consider the subnet which the ISP's router offers to me as something belonging to me, but something the ISP owns. In that subnet I have one honeypot (old Raspi) and a router which treats that subnet as the internet and offers me my own subnet which I call home. I don't care what the ISP does with the router it provides to me. If it uses IPv6 or whatever. In my case their router will only see another device which is only capable of using IPv4, so it better deal with it.
- Dagger2 3y ago
  What happens if you try to reach e.g. https://loopsofzen.uk/ https://loopsofzen.uk/? It sounds like it's not going to work. Nobody is suggesting you stop using v4 on your LAN, but you do need to use v6 on it.
mshroyer 3y ago
That won't work if you need to access IPv6-only services (as the Czech government will make theirs). In other cases it may "work" but perform worse than IPv6. Why the desire for a NAT? It's technically possible on IPv6 too (NAT66), but SLAAC dynamic addresses + a non-NAT firewall + possibly ULA are generally a better way to get the combination of privacy + security + local addressing I think most people associate with NAT in IPv4.
Dagger2 3y ago
You can use certainly v4 for however long you like, but you still need to use v6 as well, because you can't connect to v6 addresses using v4. (If you could, we wouldn't need v6 in the first place.) If you want to avoid v6 altogether, you can use a proxy on the machine you're currently calling your router, and configure all of your programs to use the proxy. But... nobody wants to use proxies.

TacticalCoder 3y ago

> Won't you always be able to use it for local networks? Well for me until Linux shall support IPv4 my machines shall be on IPv4 behind NAT. And yet I'm enjoying IPv6 with my ISP-provider router transparently doing the heavy lifting and using IPv6. > and completely block outgoing and incoming per-device-IPv6. Same. I do just that: it's disable by a kernel parameter, in sysctl and in the firewall, just in case I'd mess up and re-enable one or two of these. You can pry IPv4 on my LAN from my cold dead hands.

X-Istence 3y ago
How is your isp provided router doing the heavy lifting? You’ve turned off IPv6… you won’t be able to reach IPv6 resources.
- qwertox 3y ago
  In my case I run a double NAT. I don't consider the subnet which the ISP's router offers to me as something belonging to me, but something the ISP owns. In that subnet I have one honeypot (old Raspi) and a router which treats that subnet as the internet and offers me my own subnet which I call home. I don't care what the ISP does with the router it provides to me. If it uses IPv6 or whatever. In my case their router will only see another device which is only capable of using IPv4, so it better deal with it.
Dagger2 3y ago
What happens if you try to reach e.g. https://loopsofzen.uk/ https://loopsofzen.uk/? It sounds like it's not going to work. Nobody is suggesting you stop using v4 on your LAN, but you do need to use v6 on it.

mshroyer 3y ago

That won't work if you need to access IPv6-only services (as the Czech government will make theirs). In other cases it may "work" but perform worse than IPv6. Why the desire for a NAT? It's technically possible on IPv6 too (NAT66), but SLAAC dynamic addresses + a non-NAT firewall + possibly ULA are generally a better way to get the combination of privacy + security + local addressing I think most people associate with NAT in IPv4.

Dagger2 3y ago

You can use certainly v4 for however long you like, but you still need to use v6 as well, because you can't connect to v6 addresses using v4. (If you could, we wouldn't need v6 in the first place.) If you want to avoid v6 altogether, you can use a proxy on the machine you're currently calling your router, and configure all of your programs to use the proxy. But... nobody wants to use proxies.