Hacker News Reader

most websites won't work with v6 only, so you will need to be dual stack. For your internal services, going v6 only should be mostly fine I think. If you are running a campus network, your ISP should give you a /48 though, definitely not a /64 only since you will not be able to subnet that.

View on HN

By dual stack you mean something beyond nat64?

If you've got nat64 and dns64 setup, you should be ok for most things, but in many environments it's easier to dual stack - do both 4 and 6 on end hosts, rather than setting up nat64.

Right. I suppose the time still isn't right, and I'll have to stick with private ipv4 subnets and NAT :/

(granted, nat64 is also nat - but on paper, it would be so nice to just stick to ipv6...)

You also need DNS64 which basically adds DNS NAT on top of the IP NAT making it an even worse hack (also breaks DNSSEC if you care about that). NAT64 may be a valid option for large, complex networks but on a smaller scale simply add v6 on top of the NAT setup you already have.

Reply on news.ycombinator.com