2 ms·

While I agree that IPv6 makes NAT obsolete, I, unfortunately, don't see NAT going away even after everyone is 100% on IPv6. Too many people/companies rely on NA

While I agree that IPv6 makes NAT obsolete, I, unfortunately, don't see NAT going away even after everyone is 100% on IPv6. Too many people/companies rely on NAT for "security" for it to completely die.

simoncion 11y ago
At worst, I see NAT being replaced with default-reject-unless-associated-with-an-existing-internally-initiated-connection border firewalls everywhere a sysadmin with half a clue works.
- jlgaddis 11y ago
  And that's what I would do (basic stateful inspection), but there are too many organizations (especially SMBs with little/no I.T. staff onboard) who will simply use NAT with IPv6 to get that same end result.
  - wmf 11y ago
    We'd probably be better off giving those people a default-deny firewall and calling it NAT to pacify them. But I doubt that will happen.
    - simoncion 11y ago
      I could maybe see Cisco doing such a thing.