Hacker News Reader

Hacker News

Comment by eat_veggies | Hacker News Reader

Full thread

eat_veggies

I believe even Hacker News is inaccessible via ipv6.

https://news.ycombinator.com/item?id=19833362

I noticed this at my parents' house, where their new wifi setup was toggled to "ipv6 only" mode, and HN didn't work.

View on HN

$ ping -6 news.ycombinator.com

ping: news.ycombinator.com: Name or service not known

There is no AAAA record :/

Accessing an IPv4-only website from IPv6 is not a major problem. A NAT64 gateway to access such legacy services works fine. IPv4-only clients is another issue.

Running an IPv4-only website becomes a problem as ISPs migrate their IPv4 traffic to NAT44/NAT64, and you can no longer tell users apart for abuse detection purposes.

If you run a dual-stack site, the attackers can just use your IPv4 (if their ISP gives them a private one) or the equivalent NATed IPv6 (forcing the use of NAT64) instead of your real IPv6.

Sure, but you can block the attacking IPv4 addresses without affecting normal IPv6 users. This is why it's a good idea for ISPs to deploy IPv6 alongside NAT, and for browsers to prefer IPv6 by default.

> you can no longer tell users apart for abuse detection purposes

s/abuse detection/tracking

As a user, this sounds like a feature -- but really, there are a ton of other metrics to track most users by (assuming we're talking about abuse done via the actual website interface rather than just flooding ports with packets from a specific IP).

I doubt this website would even be up if they had no abuse detection.

If you want to use HN over IPv6 then add the following to your hosts file:

    news.ycombinator.com 2606:4700::6810:686e

Reply on news.ycombinator.com