4 ms·

You seem to be confusing being able to reach IPv6 with native IPv6. With rare exceptions AWS does not document how their internal network functions because it i

by mike_d 2y ago

You seem to be confusing being able to reach IPv6 with native IPv6. With rare exceptions AWS does not document how their internal network functions because it is a trade secret. However for the longest time it was fairly easy to test: if you removed the IPv4 address from an instance it was no longer reachable via IPv6. AWS was never built with IPv6 in mind and it is mostly glued on. As of right now 88% of AWS services are IPv4 only: https://awsipv6.neveragain.de/ https://awsipv6.neveragain.de/ (uncheck the Hide IPv4 only box)

simoncion 2y ago
> You seem to be confusing being able to reach IPv6 with native IPv6. I mean, on the one hand, I'm taking AWS at their word. If they wrote subtle lies into their docs, one can hardly be blamed for failing to understand the truth of the situation. But on the other hand, if * My VM has its globally-reachable IPv6 address assigned to it * Can transmit packets to globally-reachable IPv6 hosts using that address * Can receive unsolicited packets from globally-reachable IPv6 hosts on that address whatever hairs you're splitting seem to be a distinction without a difference? Based on my professional experience, "wacky SDN stuff" is par for the course in the Public Clown. Or, to put it another way, the customer of an ISP couldn't care less about how exactly that ISP delivers them globally-reachable IPv6 service, just so long as it behaves exactly like you'd expect globally-reachable IPv6 service to behave. Maybe between the customer's edge router and the Internet the ISP has some wacky tunnel that runs only over IPv4, and breaks IPv6 service if you turn it off... the customer doesn't give any shits, just so long as the IPv6 service works correctly and reliably. > As of right now 88% of AWS services are IPv4 only... This to me is an entirely irrelevant statistic. My expectation is that end-user systems aren't going to be IPv6-only for a very, very long time, but are going to nearly all have globally-reachable IPv6 addresses relatively soon. So, one should (for the foreseeable future) expect global bidirectional reachability for end-user systems on IPv6, and typical NAT "initiated by end-user request" reachability for end-user systems on IPv4.

by mike_d 2y ago

simoncion 2y ago

> You seem to be confusing being able to reach IPv6 with native IPv6. I mean, on the one hand, I'm taking AWS at their word. If they wrote subtle lies into their docs, one can hardly be blamed for failing to understand the truth of the situation. But on the other hand, if * My VM has its globally-reachable IPv6 address assigned to it * Can transmit packets to globally-reachable IPv6 hosts using that address * Can receive unsolicited packets from globally-reachable IPv6 hosts on that address whatever hairs you're splitting seem to be a distinction without a difference? Based on my professional experience, "wacky SDN stuff" is par for the course in the Public Clown. Or, to put it another way, the customer of an ISP couldn't care less about how exactly that ISP delivers them globally-reachable IPv6 service, just so long as it behaves exactly like you'd expect globally-reachable IPv6 service to behave. Maybe between the customer's edge router and the Internet the ISP has some wacky tunnel that runs only over IPv4, and breaks IPv6 service if you turn it off... the customer doesn't give any shits, just so long as the IPv6 service works correctly and reliably. > As of right now 88% of AWS services are IPv4 only... This to me is an entirely irrelevant statistic. My expectation is that end-user systems aren't going to be IPv6-only for a very, very long time, but are going to nearly all have globally-reachable IPv6 addresses relatively soon. So, one should (for the foreseeable future) expect global bidirectional reachability for end-user systems on IPv6, and typical NAT "initiated by end-user request" reachability for end-user systems on IPv4.