Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 
hairy1
3352 posts

Uber Geek
+1 received by user: 644

ID Verified
Trusted
Lifetime subscriber

  #814778 9-May-2013 20:24
Send private message

I thought that each individual device got an IPV6 address so no more NATing?




My views (except when I am looking out their windows) are not those of my employer.




myfullflavour

896 posts

Ultimate Geek
+1 received by user: 382

Trusted
Full Flavour

  #815087 10-May-2013 11:00
Send private message

hairy1: I thought that each individual device got an IPV6 address so no more NATing?


This. You'll still need NAT for IPv4 services though.

DonGould
3892 posts

Uber Geek
+1 received by user: 164


  #815110 10-May-2013 11:17
Send private message

hamish225: oh i see, why would a residential customer need more than one ipv6 address though?


Hamish we're moving into an era (and some might argue 'error') of a 'dual stacked' world.

Every device will have an IPv4 address as well as any number of IPv6 addresses.

In the IPv6 world, your devices will all have a globally reasonable[1] IPv6 address.

[1] Having said that, it's not quite correct either.  Consumer routers will still have firewalls which will only allow established and related connections.  This means that if your computer "pings" my computer then I'll be able to "ping" your computer.  But if you haven't 'opened a connection' then I don't be able to see your computer...

...but even that's not quite right either, because routers need to not block ICMP6 packets (which is what ping uses) or other things about your network will break.

...and this is my current understanding of it all.

I suggest to you that part of the reason for slow v6 uptake is issues like this.  People like me are very unsure about v6 so we're not running at it fast.  We're just waiting to see how it unfolds and pushing it in places where we are more confident we won't break stuff.

We need training, and lots of it.

This is an issue that I have talked to APNIC about. 

They currently are planning training in Auckland in May (it might have already started and finished, I can't remember when it was).

I've asked about training for Christchurch.  APNIC are busy until September (or they were when I talked to them in March).






Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz




hamish225
1430 posts

Uber Geek
+1 received by user: 215

ID Verified

  #815112 10-May-2013 11:18
Send private message

myfullflavour:
hairy1: I thought that each individual device got an IPV6 address so no more NATing?


This. You'll still need NAT for IPv4 services though.


what's wrong with NAT?




*Insert big spe*dtest result here*


DonGould
3892 posts

Uber Geek
+1 received by user: 164


  #815119 10-May-2013 11:22
Send private message

hamish225: what's wrong with NAT?


http://ipv6friday.org/blog/2011/12/ipv6-nat/

This will help :)




Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


ajobbins
5053 posts

Uber Geek
+1 received by user: 1279

Trusted

  #815133 10-May-2013 11:31
Send private message

Klipspringer: I make use of dyndns.org. If you router supports it its pretty easy to setup.

Its solved my problem of ever requiring a static IP address. But then Im not running a business


Yeah I use No-IP and my DD-WRT based router auto updates it quite happily. (I use No-IP as I have it set up with a custom domain name).

That said, if your ISP decides they want to put you behind some CGNAT, then this won't work any more. And some ISPs are already doing this.




Twitter: ajobbins


 
 
 

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.
hairy1
3352 posts

Uber Geek
+1 received by user: 644

ID Verified
Trusted
Lifetime subscriber

  #815147 10-May-2013 11:37
Send private message

Nothing is wrong with NAT'ing. I was referring to your post about why a customer would end up with more than one IPV6 address.




My views (except when I am looking out their windows) are not those of my employer.


DonGould
3892 posts

Uber Geek
+1 received by user: 164


  #815149 10-May-2013 11:39
Send private message

hairy1: Nothing is wrong with NAT'ing. I was referring to your post about why a customer would end up with more than one IPV6 address.


The really interesting bit (to many anyway) is that devices end up with more than one IPv6 address.

It's a whole new way of thinking.

It does all have cross over, but it's going to take some learning.





Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


Zeon
3926 posts

Uber Geek
+1 received by user: 759

Trusted

  #821412 17-May-2013 23:07
Send private message

hamish225:
myfullflavour:
hairy1: I thought that each individual device got an IPV6 address so no more NATing?


This. You'll still need NAT for IPv4 services though.


what's wrong with NAT?



NAT is horrible and breaks many things as well as making it harder for developers of thing like voice/video real time communications. I have public IPv4 on all my server salso as it makes DNS sooo much simpler




Speedtest 2019-10-14


Lias
5655 posts

Uber Geek
+1 received by user: 3978

ID Verified
Trusted
Lifetime subscriber

  #821655 18-May-2013 16:54
Send private message

Out of curiosity, anyone know how much a /27 or /28 would cost these days?

I've long toyed with the idea of getting one for home, but I suspect it would be expensive these days.







I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup. Opinions are my own and not the views of my employer.


insane
3324 posts

Uber Geek
+1 received by user: 1006

ID Verified
Trusted
2degrees
Subscriber

  #821664 18-May-2013 17:58
Send private message

Zeon:
hamish225:
myfullflavour:
hairy1: I thought that each individual device got an IPV6 address so no more NATing?


This. You'll still need NAT for IPv4 services though.


what's wrong with NAT?



NAT is horrible and breaks many things as well as making it harder for developers of thing like voice/video real time communications. I have public IPv4 on all my server salso as it makes DNS sooo much simpler


That's fine for frontend servers, however security is all about layers of defense, having a 'target' on a publicly routable address allows someone one step closer to your soft gooey center which you want to protect.

Too many times I have seen someone botch up an ACL or firewall policy allowing WAY more access to servers than should be allowed. 

Totally agree that NAT makes some things difficult though


 

 
 
 
 

Shop now for Dyson appliances (affiliate link).
hamish225
1430 posts

Uber Geek
+1 received by user: 215

ID Verified

  #821667 18-May-2013 18:00
Send private message

insane:
Zeon:
hamish225:
myfullflavour:
hairy1: I thought that each individual device got an IPV6 address so no more NATing?


This. You'll still need NAT for IPv4 services though.


what's wrong with NAT?



NAT is horrible and breaks many things as well as making it harder for developers of thing like voice/video real time communications. I have public IPv4 on all my server salso as it makes DNS sooo much simpler


That's fine for frontend servers, however security is all about layers of defense, having a 'target' on a publicly routable address allows someone one step closer to your soft gooey center which you want to protect.

Too many times I have seen someone botch up an ACL or firewall policy allowing WAY more access to servers than should be allowed. 

Totally agree that NAT makes some things difficult though


 


yeah but for people who just want to go on twitter, read the news, check their emails and play online games, why do we all need public ip's on our devices?




*Insert big spe*dtest result here*


myfullflavour

896 posts

Ultimate Geek
+1 received by user: 382

Trusted
Full Flavour

  #821704 18-May-2013 19:20
Send private message

Lias: Out of curiosity, anyone know how much a /27 or /28 would cost these days?

I've long toyed with the idea of getting one for home, but I suspect it would be expensive these days.





We sell these for $32-$64 / month (/28-/27)

1 | 2 
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.