4 ms·
>If you have an external, globally visible IP address and a port is open on it, everyone in the world can try and connect to it. As someone who have been runni
by orangeboats 3y ago
>If you have an external, globally visible IP address and a port is open on it, everyone in the world can try and connect to it.
As someone who have been running IPv6-only services and before that, IPv4-only services, I find this premise to be untrue more or less.
Indeed, my topology is exposed to the internet. But no one has ever exploited that, because IPv6 networks are huge, super huge.
At best a random attacker will be able to tell which network one of your servers is located in, but they cannot find the other networked equipments inside this network. No one in their right mind will bother with your 2^64-sized network like how they did with IPv4.
- thriftwy 3y agoA random attacker will buy a "6 billion real IPv6 addresses" database dump for $15 and then will spam your specific IPs as soon as they will produce any outgoing packets at all. Only a matter of time.
- orangeboats 3y agoThis assumes that they have a database on my IPv6 addresses though (one which would be easily invalidated because SLAAC is just awesome), and furthermore assumes that I don't have a firewall to block off unwanted incoming connections -- you know, just like how NAT is basically a firewall with packet-modifying capabilities.