5 ms·
The purpose of SLAAC intends to have many customers in one /64 network though.
by GoblinSlayer 2y ago
The purpose of SLAAC intends to have many customers in one /64 network though.
- immibis 2y agoNo, just many devices. You can DoS your whole subnet by pretending to be a billion devices. In IPv4 you can do it by occupying all the IP addresses. Therefore putting several customers on one network is a bad idea, just like in IPv4.
- icedchai 2y agoThe purpose of SLAAC is to make it "easy" for a client to get onto the network without something like a DHCP server tracking addresses. If you set it up, it generally just works.
- GoblinSlayer 2y agoPreviously it worked by putting the MAC address in the last 64 bits.
- icedchai 2y agoYes, that was before privacy extensions. It hasn't been like that (in most implementations) for a very long time.
- GoblinSlayer 2y agoAnd you get no privacy if /64 prefix is a stable identifier of one customer.
- icedchai 2y agoThis doesn't seem like an IPv6-specific issue. For most broadband customers, your external IPv4 address is also generally stable. Mine hasn't changed in years.