• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Need some instructions for getting started with IPv6

Scheduled Pinned Locked Moved IPv6
51 Posts 6 Posters 7.8k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J
    JKnott @Ulysses_
    last edited by Dec 21, 2019, 11:48 AM

    @Ulysses_ said in Need some instructions for getting started with IPv6:

    But no, Big Brother wants it all, every single device in the world must be tracked.

    Actually, there are multiple addresses. Most of them will be privacy addresses. You get a new one every day, for a total of 8. The privacy addresses are used for outgoing connections. You'd use the consistent address for incoming connections. Also, the fe80 address is called link local. It goes no further than the nearest router.

    So a computer will have 1 link local address, 1 consistent and up to 7 privacy addresses.

    PfSense running on Qotom mini PC
    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
    UniFi AC-Lite access point

    I haven't lost my mind. It's around here...somewhere...

    1 Reply Last reply Reply Quote 0
    • J
      JKnott @Ulysses_
      last edited by JKnott Dec 21, 2019, 12:00 PM Dec 21, 2019, 11:57 AM

      @Ulysses_ said in Need some instructions for getting started with IPv6:

      A sound design would insulate the end user from this

      How many end users worry about IPv4 addresses. Most of them wouldn't even know what an IP address is. There is also a nice little feature you might have heard of that handles this. It's called "DNS". You use host names to connect, not addresses. If you don't have DNS available, then there's always the hosts file.

      How would you build a network where the infrastructure people work with IPv6 and users IPv4? I guess you don't remember the days when IPv4 and IPX were often used on the same network. Back when I was at IBM, there was also SNA to worry about. At least I did, as that was part of my job, but the average person knew nothing about it. They just wanted things to work.

      BTW, back when I was at IBM, I had 5 global IPv4 address, one for my own computer and 4 for testing. I also similarly had 5 SNA addresses and I had memorized them all. My work IP address was 9.29.146.147, which I still remember after almost 20 years.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • U
        Ulysses_
        last edited by Dec 21, 2019, 12:37 PM

        Wasn't talking about the average person but the millions and millions of us trying to do things with firewalls, VPN's, local proxies, file sharing between our own computers and VM's and so on in order to improve security or privacy or even dabble with anonymity although the latter is really hopeless in the long term.

        J 1 Reply Last reply Dec 21, 2019, 1:40 PM Reply Quote 0
        • J
          johnpoz LAYER 8 Global Moderator
          last edited by johnpoz Dec 21, 2019, 1:48 PM Dec 21, 2019, 1:37 PM

          @Ulysses_ said in Need some instructions for getting started with IPv6:

          dabble with anonymity although the latter is really hopeless in the long term.

          If you think your little vpn you pay X dollars a month, because they don't log gets you anything other than slower internet.. Your kidding yourself..

          It sure and the F does not get you actual anonymity... It might hide what p2p file you actually downloaded from your ISP, so they don't send you dcma notices.. But other than that in the big picture, it gets you nothing but a slower freaking connection.

          And sure allows you to play wack-a-mole with geo circumvention with streaming providers..

          And you can still do vpn over ipv6.. That doesn't change - in the big picture for the end user, its a longer address. But yes it can be a learning curve for those that are wanting to do actual networking in their homes.

          In your typical scenario - the end user is using some isp device, and it uses 1 /64 behind it - since all the end users stuff is on 1 flat network... These are not the people I am talking about having to learn anything.. Its the people that are wanting to do more than that - then yes there is a learning curve to be sure!!!

          These are the people, if they are not willing to understand the changes and how to manage, secure, setup and administer IPv6 - they are prob better off just not using it until such time that they want to put in the learning. Because currently there is not actual "need" for it.. Name one resource you want to actually use that requires you to have an IPv6??

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

          U J 2 Replies Last reply Dec 21, 2019, 4:33 PM Reply Quote 0
          • J
            JKnott @Ulysses_
            last edited by Dec 21, 2019, 1:40 PM

            @Ulysses_

            Well, I've been working with computers and networks for a very long time. I've never had an issue with it, whether IPv4, IPv6, IPX or SNA and I've worked with them all. The point you seem to be missing is that IPv4 is crippling the Internet. As I mentioned, there are no more IPv4 addresses available in Europe and Middle East, and there are other parts of the world that are not far behind. What are they supposed to do? We already have people on carrier grade NAT and then using NAT again on their own networks. The only reason for this is the shortage of IPv4 addresses. So, the only viable solution is to move to IPv6. In addition to the unbelievably huge address space, there have been other changes to improve performance and security. Further, the address blocks have been allocated geographically, to minimize the size of routing tables. You may recall when there was a severe problem, several years ago, when routing tables became too big for some routers.

            If you're doing things in such a way that you have to remember IP addresses, then you're doing things wrong. I've been using IPv6 for almost 10 years and remembering addresses has never been an issue.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • U
              Ulysses_ @johnpoz
              last edited by Ulysses_ Dec 21, 2019, 4:46 PM Dec 21, 2019, 4:33 PM

              @johnpoz

              Kind of off topic but couldn't resist: the VPN is not for anonymity but privacy and geo circumvention, TOR is for anonymity only, you're supposed to chain them, and I am using neither. :) Just proprietary tunnels inside tunnels. And looking into decentralized alternatives to TOR at the moment for the anonymity part cause TOR is centralized as hell. You've got any advise on those, such as I2P and blockchain-based ZeroNet?

              1 Reply Last reply Reply Quote 0
              • J
                JKnott @johnpoz
                last edited by Dec 21, 2019, 4:55 PM

                @johnpoz said in Need some instructions for getting started with IPv6:

                Because currently there is not actual "need" for it.. Name one resource you want to actually use that requires you to have an IPv6??

                Perhaps you could ask someone in Europe, who can no longer get an IPv4 address. That problem will not go away, until the world switches to IPv6. The sooner that happens, the better.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                1 Reply Last reply Reply Quote 0
                • J
                  johnpoz LAYER 8 Global Moderator
                  last edited by johnpoz Dec 21, 2019, 7:09 PM Dec 21, 2019, 6:58 PM

                  That is not the point if the end user can not get an IPv4... Can freaking promise you the end user ISP has given them some way to get to IPv4.. Because sorry - at best there is 30% of the top websites on the world that even support IPv6...

                  https://whynoipv6.com/
                  Out of the top 1000 Alexa sites, only 361 has IPv6 enabled, and 770 of them use nameservers with IPv6 enabled.
                  Of the total 902708 sites only 24% of them have IPv6. This is a huge shame!

                  Where in Europe? Exactly... Just because ripe has no more IPv4 to assign, doesn't mean the ISPs don't have IPv4 to use still... Shit the European company I work for is sitting on MILLIONS of IPv4 that is not currently being used.

                  And they are too lazy to transfer space to arin for an upcoming project to use.. I have to assign a /22 out of our ipv4 space that is not actively being used, etc..

                  While yes some new company can not just go to their RIR and get a /X - its not like there is not IPv4 space to use.. There are millions and millions of IPs that are not actively being used and could be if actually required..

                  In the last couple of years we have sold off most of our /16.. But with the /19 we have left.. Most of that is not actively being used at all.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                  J 3 Replies Last reply Dec 21, 2019, 7:12 PM Reply Quote 0
                  • J
                    JKnott @johnpoz
                    last edited by Dec 21, 2019, 7:12 PM

                    @johnpoz said in Need some instructions for getting started with IPv6:

                    That is not the point if the end user can not get an IPv4... Can freaking promise you the end user ISP has given them some way to get to IPv4.. Because sorry - at best there is 30% of the top websites on the world that even support IPv6...

                    Well, my cell phone uses 464XLAT to access IPv4 sites. Beyond that, it's IPv6 exclusively. There are also ISPs, such as Comcast that use carrier grade NAT or other transition methods to provide IPv4 to what are otherwise IPv6 only customers. When everyone's switched to IPv6, there will be no need for IPv4 on the Internet.

                    Yes, I know some people will still have IPv4 only hardware, but that's no excuse to not move the world to IPv6. Take a look at what's happened with cell phones. Back in the '80s, they were analog only. Then came the 2G phones, then 3G, etc.. Now analog is long gone and 2G almost gone. Sure some people griped when their phone became obsolete, but look at what we can do with our phones now, compared to what we had 30 years ago.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    1 Reply Last reply Reply Quote 0
                    • J
                      JKnott @johnpoz
                      last edited by Dec 21, 2019, 7:19 PM

                      @johnpoz said in Need some instructions for getting started with IPv6:

                      Where in Europe? Exactly... Just because ripe has no more IPv4 to assign, doesn't mean the ISPs don't have IPv4 to use still... Shit the European company I work for is sitting on MILLIONS of IPv4 that is not currently being used.
                      And they are too lazy to transfer space to arin for an upcoming project to use.. I have to assign a /22 out of our ipv4 space that is not actively being used, etc..

                      Regardless of what's done to extend use of IPv4, it will run out soon. There aren't even enough address in the entire IPv4 address space to handle just the mobile devices. Instead of putting off moving to IPv6, ISPs and customers should be moving to it. Otherwise we'll have more NAT being used, more people unable to reach their own networks because they're on carrier grade NAT, more shuffling addresses around, etc. Why not just fix the problem properly, instead of prolonging it?
                      IPv6 has been "officially" available for 7.5 years. Every operating system currently being produced supports it (going back to XP SP3), as does more & more hardware.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • J
                        JKnott @johnpoz
                        last edited by Dec 22, 2019, 3:14 AM

                        @johnpoz said in Need some instructions for getting started with IPv6:

                        That is not the point if the end user can not get an IPv4... Can freaking promise you the end user ISP has given them some way to get to IPv4.. Because sorry - at best there is 30% of the top websites on the world that even support IPv6...

                        Here's an article, in today's Toronto Star, that seems to imply IPv6 will be needed on cell phones:

                        Internet-based 911 calling on the horizon in Canada

                        "Essentially, every connected phone will have an internet protocol address, which will be cross-referenced with key data sets mostly supplied by municipalities. The database will comprise every street address in an area and the entry location of buildings. Emergency service boundaries will also be accessible to ensure the right responders are dispatched.

                        The result should allow the 911 system to pinpoint the location of callers to within centimetres."

                        I haven't found much in the way of details, but giving phones unique addresses will probably require IPv6.

                        I also don't understand how they'll be able to determine location within centimetres.

                        There is this document, which has on page 68, page 3 of Appendix 2:

                        "North American Network Operators Group (NANOG)

                        A governing body that provides guidance and instructions for the design of an IP network. NANOG is typically involved in the best current operational practices for IPv6 planning."

                        This system is apparently supposed to be implemented all over Canada and U.S. My Pixel 2 certainly gets IPv6 from my carrier, but not all phones or carriers support it yet.

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        1 Reply Last reply Reply Quote 0
                        50 out of 51
                        • First post
                          50/51
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                          This community forum collects and processes your personal information.
                          consent.not_received