Hacker News Reader

Comment by squarefoot | Hacker News Reader

Or maybe keep it only for local networks?

On local networks is where IPv6 is the most advantageous to me right now.

For the Internet use, it's mostly just more addresses to me, but on LANs, there are so many more useful features. Unique link local addresses, various multicast addresses...

I can drop 10 new devices into a VLAN, and ping ff02::1%iface to enumerate them all and start communicating with them right away without any kind of configuration, not even SLAAC or DHCPv6 needed.

Sure, if you want to make your life harder by running two different protocols that will always be an option. Why not run IPX and AppleTalk too?

Won't you always be able to use it for local networks? I like NAT and regardless of IPv6, I think I'll keep my home network as IPv4 in a NAT and completely block outgoing and incoming per-device-IPv6.

> Won't you always be able to use it for local networks?

Well for me until Linux shall support IPv4 my machines shall be on IPv4 behind NAT. And yet I'm enjoying IPv6 with my ISP-provider router transparently doing the heavy lifting and using IPv6.

> and completely block outgoing and incoming per-device-IPv6.

Same. I do just that: it's disable by a kernel parameter, in sysctl and in the firewall, just in case I'd mess up and re-enable one or two of these.

You can pry IPv4 on my LAN from my cold dead hands.

How is your isp provided router doing the heavy lifting? You’ve turned off IPv6… you won’t be able to reach IPv6 resources.

In my case I run a double NAT. I don't consider the subnet which the ISP's router offers to me as something belonging to me, but something the ISP owns. In that subnet I have one honeypot (old Raspi) and a router which treats that subnet as the internet and offers me my own subnet which I call home.

I don't care what the ISP does with the router it provides to me. If it uses IPv6 or whatever. In my case their router will only see another device which is only capable of using IPv4, so it better deal with it.

What happens if you try to reach e.g. https://loopsofzen.uk/? It sounds like it's not going to work.

Nobody is suggesting you stop using v4 on your LAN, but you do need to use v6 on it.

That won't work if you need to access IPv6-only services (as the Czech government will make theirs). In other cases it may "work" but perform worse than IPv6.

Why the desire for a NAT? It's technically possible on IPv6 too (NAT66), but SLAAC dynamic addresses + a non-NAT firewall + possibly ULA are generally a better way to get the combination of privacy + security + local addressing I think most people associate with NAT in IPv4.

You can use certainly v4 for however long you like, but you still need to use v6 as well, because you can't connect to v6 addresses using v4. (If you could, we wouldn't need v6 in the first place.)

If you want to avoid v6 altogether, you can use a proxy on the machine you're currently calling your router, and configure all of your programs to use the proxy. But... nobody wants to use proxies.

You know you can assign both IPv4 and IPv6 addresses to the same device? You can access things locally by IPv4 and have it talk to the internet via IPv6. Not sure why you'd want to but it's completely possible.

Is IPV6 really that hard. I question why there are so many MrRobot-tier-hackers on HN who just wilt in the face of learning something new.

Have you tried it?

Yes. In fact my ESP32-C3 project I just made is posting to HiveMQ.io right now via IPV6.

I've configured and preferred IPv6 everywhere. My home computer, my VPS, etc. But, local address is something I can't figure out in IPv6.

It’s been a while cause work forced me to stay with IPv4, but I spent a day on this a few years ago, and I remember IPv6 being radically easier.

Isn’t it just a prefix?

I'm talking about the LAN address. The globally routable address changes every time I reboot my router, so I don't use that for LAN. But my LAN IPv6 address isn't better. I don't know if it is stable, and it is too long. For example, my current link local address is [fe80::7713:e154:21d8:464]. Who's gonna remember or type that?

Reply on news.ycombinator.com