People running servers don't seem to be reliably capable of making sure that either pMTUd works or isn't needed on their network, so... it is indeed broken on random servers. We've mostly decided to go with TCP MSS…
That's basically no burden at all. If we cut the address length down to increase throughput, we would get a one-time increase of about 0.8% -- but consider how much faster Internet connections have gotten over the past…
There were always expected to be v4 hosts on the Internet effectively indefinitely. That's not a failure condition for v6. "There are a couple of v4-only hosts out there somewhere" would be kind of irrelevant if most…
Except you are, because all the same work needs to be done. > You can use the 8-byte addresses earlier if you want You can't have both this and "The 8-byte phase only starts when v4 has been abandoned" simultaneously.…
$ wget -4 https://github.com/HackerNews/API Resolving github.com (github.com)... 140.82.114.4 Connecting to github.com (github.com)|140.82.114.4|:443... failed: Network is unreachable. $ git clone…
I think the span would be about the same, or smaller even, if you limited yourself to a granularity of 4 bits for v6. Allocations are often rounded to 4 bits in v6 because it correlates to exactly one character of the…
Do I? I don't have v4 on this machine and I can reach GitHub, so that appears to be untrue. Also GitHub would need to continue having v4 so that v4 users could reach it, so it's untrue from that perspective too. At some…
Let's assume that's true... so what? That doesn't tell us anything about how long migrations like this normally take.
Windows, Linux, OSX, Android and iOS all ship with v6 enabled by default out of the box, so it's already turned on without you needing to think about it. You have to deliberately go out of your way for this not to be…
People are at work during the week, and work networks have a lower average deployment of v6 then home networks do. As evidence, you can also see the impact of holidays and COVID-19 lockdowns on the size of the dips.
If we're talking tangible, real-world threats in existing ISPs, then NAT is doing nothing to protect you. In fact it's doing the exact opposite, because without NAT you wouldn't be able to connect out from your network.…
Google's stats claim that it's 10-20ms for many countries, for example both the US and Canada show the latency impact of v6 as being -10ms. This is per round trip too -- between the connection handshake, congestion…
I don't have to imagine, because that's how things are right now for the billions of people using v6, and it's fine.
I'm in Europe and I use a tunnel from HE for v6. I feel like that's something I would have noticed if it was as widespread as you make it sound.
Try `ip link set mtu 1280 dev eth0` (or equivalent for your OS). pMTUd breakage exists on v6 just like it exists on v4, and requires workarounds just like it does on v4. I get the impression a lot of people are applying…
I've heard plenty of accounts from people (and these were techy people even, not just the ones who only go to Facebook and think that's the Internet) who lost v4 and didn't even realize for days, so I'm not sure how…
I have no v4 on this machine. I'd disable the v4 stack on it if that was a thing Linux could do, but as it stands it's just sitting there doing nothing. The thing you're claiming is not going to happen is something I'm…
You have to do that with range bans in v4 too, since you have no idea how big the pool of addresses a user can pull from is -- and with CGNAT in the picture you're kind of doomed to banning legitimate customers on v4 no…
Data exfil is basically impossible to detect/block with IPv6? What? No. It's no easier or harder than it is in v4. I'd also question the Rube-Goldberg-ness part, given how straightforward v6 is compared to the…
What ridiculous overdimensioning? L2 addresses are 64 bits, and L3 has to be bigger than L2 because L3 acts as an aggregation layer over L3. From staring at RFC 3194, I'd say the minimum size for L3 is about 80 bits. v6…
If my firewall logs are representative, about 2%.
Why the double standard? v6 already gives you what you're asking for here: you can turn it on without thinking about it, but actually using the extra addresses from it requires reconfiguring some things (not everything,…
But subnetting in v6 is so much easier than in v4? And it's specifically because of the hex. You don't even need to calculate it, in your head or otherwise, because you just subnet based on characters:…
What's the par time for L3 protocol migrations on the Internet at its current size? Bear in mind we've never done a project of this complexity and scale before. I'm sure we all wish it had been faster, but how can you…
Why is it less effective on v6? You just ban the /48 or bigger.
People running servers don't seem to be reliably capable of making sure that either pMTUd works or isn't needed on their network, so... it is indeed broken on random servers. We've mostly decided to go with TCP MSS…
That's basically no burden at all. If we cut the address length down to increase throughput, we would get a one-time increase of about 0.8% -- but consider how much faster Internet connections have gotten over the past…
There were always expected to be v4 hosts on the Internet effectively indefinitely. That's not a failure condition for v6. "There are a couple of v4-only hosts out there somewhere" would be kind of irrelevant if most…
Except you are, because all the same work needs to be done. > You can use the 8-byte addresses earlier if you want You can't have both this and "The 8-byte phase only starts when v4 has been abandoned" simultaneously.…
$ wget -4 https://github.com/HackerNews/API Resolving github.com (github.com)... 140.82.114.4 Connecting to github.com (github.com)|140.82.114.4|:443... failed: Network is unreachable. $ git clone…
I think the span would be about the same, or smaller even, if you limited yourself to a granularity of 4 bits for v6. Allocations are often rounded to 4 bits in v6 because it correlates to exactly one character of the…
Do I? I don't have v4 on this machine and I can reach GitHub, so that appears to be untrue. Also GitHub would need to continue having v4 so that v4 users could reach it, so it's untrue from that perspective too. At some…
Let's assume that's true... so what? That doesn't tell us anything about how long migrations like this normally take.
Windows, Linux, OSX, Android and iOS all ship with v6 enabled by default out of the box, so it's already turned on without you needing to think about it. You have to deliberately go out of your way for this not to be…
People are at work during the week, and work networks have a lower average deployment of v6 then home networks do. As evidence, you can also see the impact of holidays and COVID-19 lockdowns on the size of the dips.
If we're talking tangible, real-world threats in existing ISPs, then NAT is doing nothing to protect you. In fact it's doing the exact opposite, because without NAT you wouldn't be able to connect out from your network.…
Google's stats claim that it's 10-20ms for many countries, for example both the US and Canada show the latency impact of v6 as being -10ms. This is per round trip too -- between the connection handshake, congestion…
I don't have to imagine, because that's how things are right now for the billions of people using v6, and it's fine.
I'm in Europe and I use a tunnel from HE for v6. I feel like that's something I would have noticed if it was as widespread as you make it sound.
Try `ip link set mtu 1280 dev eth0` (or equivalent for your OS). pMTUd breakage exists on v6 just like it exists on v4, and requires workarounds just like it does on v4. I get the impression a lot of people are applying…
I've heard plenty of accounts from people (and these were techy people even, not just the ones who only go to Facebook and think that's the Internet) who lost v4 and didn't even realize for days, so I'm not sure how…
I have no v4 on this machine. I'd disable the v4 stack on it if that was a thing Linux could do, but as it stands it's just sitting there doing nothing. The thing you're claiming is not going to happen is something I'm…
You have to do that with range bans in v4 too, since you have no idea how big the pool of addresses a user can pull from is -- and with CGNAT in the picture you're kind of doomed to banning legitimate customers on v4 no…
Data exfil is basically impossible to detect/block with IPv6? What? No. It's no easier or harder than it is in v4. I'd also question the Rube-Goldberg-ness part, given how straightforward v6 is compared to the…
What ridiculous overdimensioning? L2 addresses are 64 bits, and L3 has to be bigger than L2 because L3 acts as an aggregation layer over L3. From staring at RFC 3194, I'd say the minimum size for L3 is about 80 bits. v6…
If my firewall logs are representative, about 2%.
Why the double standard? v6 already gives you what you're asking for here: you can turn it on without thinking about it, but actually using the extra addresses from it requires reconfiguring some things (not everything,…
But subnetting in v6 is so much easier than in v4? And it's specifically because of the hex. You don't even need to calculate it, in your head or otherwise, because you just subnet based on characters:…
What's the par time for L3 protocol migrations on the Internet at its current size? Bear in mind we've never done a project of this complexity and scale before. I'm sure we all wish it had been faster, but how can you…
Why is it less effective on v6? You just ban the /48 or bigger.