bert64

12 ms·

1.
by bert64 9mo ago
Since starlink supports v6, starlink users can p2p communicate with other v6 users. Both starlink and local carriers don't provide proper legacy connectivity, they are encumbered by cgnat so p2p does not work. Without p2p communication
2.
by bert64 9mo ago
You can get a large block, split it up and announce it from different places but that doesn't stop someone blocking your larger allocation. Getting multiple blocks is harder - the RIRs will want justification for this, and would rather
3.
by bert64 9mo ago
Only legacy address space is frequently bought and sold, so it moves between AS#s a lot and is also heavily fragmented. With v6 this is not the case, a given AS# will typically have a single large allocation and can make it larger if they n
4.
by bert64 9mo ago
Likely very old/outdated hardware. China is heavily pushing v6 and their "great firewall" has no problem with it. Another issue they may have however is v6 enabling internal p2p communications directly between users whereas l
5.
by bert64 3y ago
No, but there is a third party FPGA core available which is called 68080, it's used in a modern line of Amiga accelerators and clones.
6.
by bert64 3y ago
Singapore has had 10Gbps services available for many years already, for instance see this article from 2016: https://www.straitstimes.com/tech/pcs/viewqwest-is-latest-to... Very few people use it because 10gbps eq
7.
by bert64 3y ago
Any junk that adds itself to auto start without giving users the choice is cancer... It's why Apple added a feature to macOS fairly recently which alerts you whenever something new is added.
8.
by bert64 3y ago
This is generally caused by ignorance. Don't understand IPv6 so turn it off without investigating what the actual problem is. Usually it's caused by a broken IPv6 configuration - eg a route being announced but no actual connectivi
9.
by bert64 3y ago
They are fully compliant, SLAAC is part of the standard whereas DHCPv6 is an optional extra. DHCPv6 also does not work without RA. DHCPv6 just assigns an address, a routable prefix, dns servers etc, it does not assign a subnet or any routes
10.
by bert64 4y ago
The point is until everyone moves to IPv6, the rest of us are stuck having to support dual stack - which is expensive (see the recent story about an ISP supporting a tribal reservation who had to spend an extra $300k and wait 11 months to s
11.
by bert64 4y ago
Not at all, your "local" network is the link-local address space, which legacy IP has no analog of. The link-local space cannot be routed either intentionally or accidentally. RFC1918 address space IS routable, it just doesn'
12.
by bert64 4y ago
Newspapers still work.. Why are you here at all instead of writing a letter to the editor of your local newspaper with good old pen and paper? New technology has benefits, if you don't know what they are then you need to learn about th
13.
by bert64 4y ago
The way you see legacy IP addresses is also an abstraction layer, their actual form is as a 32bit integer.
14.
by bert64 4y ago
The link-local address is generated when you first enable the interface (ie when you load the drivers for your NIC), it won't change unless you manually force it to. Linux will use EUI-64 if left to its own devices, or privacy extensio
15.
by bert64 4y ago
You're thinking small.. In an organisation of any significant size, remembering legacy IP is much worse than v6. Chances are you will have lots of disparate legacy blocks, some starting 1.x, some starting 80.x etc. Then you have all th
16.
by bert64 4y ago
There's no reason you wouldn't use a VPN in exactly the same way. Just because devices have routable addresses doesn't mean they will allow connections from arbitrary sources. You can configure them to only allow connections
17.
by bert64 4y ago
Slammer (and other worms) propagated heavily despite NAT. If anything NAT made it worse, because once a single internal host got infected the worm now has a predictable and well known address space to scan for other devices it can infect. N
18.
by bert64 4y ago
Some are... China, India, Israel all mandate IPv6 support from ISPs in their territory and the equipment they provide to users, as do some others. The US has mandated IPv6 support for federal contracts since 2009, although they don't g
19.
by bert64 4y ago
Pushing all your traffic through a third party cloud server causes a lot of problems. It costs that third party real money to run that server... What happens when they decide to shut if off because they no longer want to bear the costs? You
20.
by bert64 4y ago
Most people don't buy their own router, the ISPs bulk buy thousands of routers at a time. The ISPs make up most of the market. Many of these routers are managed by the ISP using protocols such as TR-069, several ISPs have already been
21.
by bert64 4y ago
That requires someone who has the ability to monitor all your traffic - ie the government, your ISP, or a hacker who has infiltrated one of those two. In this scenario it's a lot more work trying to map out your infrastructure than to
22.
by bert64 4y ago
IP networking was designed with separate layers, NAT breaks this by having to span multiple layers. Generally NAT gateways only support TCP/UDP, other protocols are simply not supported, which has basically stifled protocol innovation
23.
by bert64 4y ago
How is anyone going to discover that? You're going to have a minimum of a /64, noone is going to scan that looking for devices. Even if they do, your firewall is not going to allow the traffic unless you've explicitly configu
24.
by bert64 4y ago
That's not tracking to you specifically, that's geo location so they're just trying to identify the general area for purposes of showing ads. With IPv6 chances are your ISP has a single large address block, and then they spli
25.
by bert64 4y ago
IPv6 actually makes such attacks more difficult, not less. An attacker looking to be stealthy is not going to blast the network with nmap... ARP is broadcast, NDP is solicited node multicast so simply by passively listening on the network y
26.
by bert64 4y ago
Routable does not mean reachable. A firewall is perfectly capable of controlling traffic between two routable addresses, without the added burden and complexity of having to translate the traffic to/from a non routable address. The whi
27.
by bert64 4y ago
People assume that RFC1918 is not routable, but that's not the case... It's fully routable, but there is no global route. Have you ever tested routing to your RFC1918 address space from the ISP, or from a customer in the same neig
28.
by bert64 4y ago
Those ISPs are broken and not following the RFCs or RIR guidelines. There's nothing stopping you from using NAT with IPv6, people just don't do it because the only benefit of NAT is conserving limited address space. NAT on IPv6 ju
29.
by bert64 4y ago
Using IP addresses directly is a bad practice in general, it introduced security risks in many scenarios. SSL - usually cannot verify the cert, defeating the point of SSL SMB - windows will fail over to less secure ntlm auth instead of kerb
30.
by bert64 4y ago
A lot of mobile telcos use IPv6, but there are virtually no telcos around the world that don't force the use of some form of NAT (CGNAT, NAT64) for connecting to legacy sites. NAT64 is effectively another form of CGNAT, you only have a

More ›