3 ms·
How about in the other direction (running public services)?
by schoen 2y ago
How about in the other direction (running public services)?
- yjftsjthsd-h 2y agoOh yeah, that definitely needs dual stack on the outside. You could do v6-only internally, but you should support everything you reasonably can for users, which 1. applies to a lot of the stack, ex. TLS and HTTP versions, and 2. can be more or less a freebie if you're using a CDN or the like (ex. cloudflare will do it for you). So yes, I was only thinking of client-side.
- schoen 2y agoThanks for the clarification. I was mainly thinking of server-side! :-) On the client side there are apparently some subtleties about the DNS interaction if you want to literally have IPv6-only on the clients (as opposed to IPv4 CGN). If the clients do anything to not trust their ISP's view of DNS (like DNSSEC enforcement, or using DoH and an outside resolver), the ISP can't fool them into thinking that they should connect to an IPv6 address for a service that, from the point of view of the Internet as a whole, is actually IPv4-only.