Hacker News Reader

Comment by WarOnPrivacy | Hacker News Reader

> Riju is only available on IPv6-enabled networks ... More people should do this

Of the 12 wireline ISPs here, 2 support IPv6. One of the two is available to 2% of the customers; the other costs 50% more than IPv4-only. For the extra money you get 5% of the upload + much higher latency. I'm looking into starting my own ASN just to get IPv6 here.

In the US there are millions of locations stuck with IPv4 only networks due to ISPs that are solidly committed to never supporting it.

IPv6 evangelists don't give a meaningful crap about those millions - and are happy to push IPv6 rosiness in a way that denies their existence.

Because of this, IPv6-only services can only ever get so far off the ground. An exciting service is less exciting when it's unreachable from point B.

View on HN

You can get a free 4 to 6 tunnel here https://tunnelbroker.net/

It's really not a big deal.

Seemingly they don't allow using gmail addresses to sign up. Seems like a really opinionated service.

I guess maybe I should expect this sort of militant behaviour from the sort of ppl who run a chunk of the internet backbone?

EDIT: realized x@googlemail.com should work[1]

[1]: https://webapps.stackexchange.com/a/126265/19949

I mean, fair is fair, Google will block you from using search from a HE IP. Unless you're signed in, then you ONLY need to do like 10 CAPTCHAs per day.

Not sure if I fully understand how tunnelbroker works, but does the complete traffic get redirected over them? So it's as insecure as all these vpn services that sell your data.

This is a big deal, for just getting access to ipv6.

Much of your traffic is probably passing through Hurricane Electric servers already, given their position on the backbone (https://he.net).

ok, didn't knew that it was a backbone.

It's true that HE is a backbone but there is an enormous difference between having bits of your traffic transiting a firehose and sending your entire session thru someone's endpoint.

The latter is much more comprehensive and identifiable.

This isn't to throw shade at HE; I don't recall any complaints about their integrity. It's just to say HE's tunnel is in a practical position to monitor, should they choose or be compelled.

Traceroute to various websites. You'll see that the IPs on the pathway are owned by companies that are neither you nor the guy you're accessing. It's how the Internet works at the network layer. You may find that some people are on every path. Your carrier, certainly, but often the first provider they're connected to.

Yes, didn't knew that this was a backbone.

You'll see that the IPs on the pathway are owned by companies that are neither you nor the guy you're accessing. Yes, but you shouldn't add another one you didn't know (e.g. free vpn).

I've run across a half doz or so tunnel services. HE peers closest to my ISP; I'm looking at them as a temporary stopgap.

With my own ASN, I have a shot at peering with my ISPs IX.

It depends how big a deal you consider Netflix. They block HE tunnels.

Reply on news.ycombinator.com