3 ms·
> A lot of sites out there are still not supporting IPv6 because ... you'll never guess, but dealing with DDoS on IPv6 where your attackers can rotate through a
by growse 2y ago
> A lot of sites out there are still not supporting IPv6 because ... you'll never guess, but dealing with DDoS on IPv6 where your attackers can rotate through addresses quickly is not easy.
Sure it is. You block the /64.
- deleted 2y ago[deleted]
- seventyone 2y agoSo now everyone should acquire as many IPv6 addresses as possible so they can spread their services over many /64s so if their server gets compromised and put on a blacklist somewhere they can just burn that /64 and move on to another?
- baobun 2y agoNo, everyone should secure their servers... IPv4 hoarding isn't happening for the reason you propose so why would it for IPv6?
- seventyone 2y agoNobody blocks entire /24s because of one bad address The only way to guarantee your server is secure is to never connect it to a network.