Hacker News new | past | comments | ask | show | jobs | submit | mellamoyo's comments login

This again? Just use v6, it’s not that hard.


From a consumer standpoint, I wish it was.

I cannot tell you how many devices or software have had a notice of "just disable IPV6, that will fix X" and it's worked perfectly.

If V6 was working everywhere and it was a simple toggle I'd say sure. But it's not.


This is generally caused by ignorance. Don't understand IPv6 so turn it off without investigating what the actual problem is. Usually it's caused by a broken IPv6 configuration - eg a route being announced but no actual connectivity.

Here IPv6 works perfectly and doesn't cause any problems. Many sites are much faster over v6 than legacy IP. Google stats show 45% of users access google over IPv6 so clearly it's working for all those millions of users too.

If IPv6 is not working you need to fix it, not turn it off.


> I cannot tell you how many devices or software have had a notice of "just disable IPV6, that will fix X" and it's worked perfectly.

I’ve heard this advice dozens of times, but it hasn’t worked once, to the point where I firmly believe that everyone giving out such advice either completely doesn’t care or know anything about networking, or, is suffering from some sort of a mental difficulty.


Eh, I disagree. There are ton of crappy consumer grade devices that claim to support IPv6 but there are obscure implementation issues and these same devices offer zero visibility into what the cause might be. Sure, a packet sniffer might explain some of it but the remedy may require adjustment to the device which abstracts all the IP config away. The situation sucks all around.


> Eh, I disagree. There are ton of crappy consumer grade devices

I support all kinds of devices and turning off IPv6 was sometimes a thing I did. No so much now. Maybe once in the last 5 years.


That’s just the natural consequence of running two protocols simultaneously.

People get issues with v4. But “just switch off v4” is never suggested as a solution cos it’s either all people have or they need it for the sites that only have it. So people fix problems they get with v4. If they get a problem with v6? Switch it off, v4 is working.

Granted v6 has had many teething problems and still isn’t as hassle-free as v4. But in recent years things have improved an awful lot.


As I understand this proposal is not for consumers. So any talks about 'we need that instead pf ipv6' is desingenuous at best.

Also no consumer can be at limit pf rfc1918 even if throwing /24 right and left.


Judging by the amount of infrastructure that doesn't yet support IPv6 (even parts of AWS), it seems to be harder than "easy" at least.


It took me 6 hours to configure a Ubiquiti Edge Router to properly request an IPv6 prefix because of how poor the IPv6 support is right now. And by default the firewall is completely permissive because the web UI doesn't have support for IPv6.

And the prefix I get is dynamic. It changes each time the router power cycles or has a brownout or if the upstream network restarts for whatever reason (which is something I saw happening with regularlity on a different ISP about 1am to 2am, presumably them performing maintenance). So that means my firewall rules have to be constantly monitored and changed if they're any more complicated then reject all incoming connections. Only way I can see that working right now is to write a daemon that can hook into the PD process for that.

Plus how do I get my servers that are supposed to be internet facing to update their IPv6 prefix every time it changes? Does that mean that I have to put in additional code in every server to update their IPv6 addresses every single time the prefix is changed?

Oh and I can request a /54 no problem for now. There's no guarantee for instance if ISP decides to restrict residential users to only a /64, and require a business account to request more subnets. How do I plan a set of internet accessible networks that have to be segregated from each other if I have no idea if tomorrow I'm going to lose those subnets?

The only solution of right now is to use ULA and NAT6. Which is just IPv4's problem all over again except worse.

So yeah it is 'easy' if all your need is just only /64 and are using the ISP's router to setup a single network that you don't care about. But it spirals very quickly into madness when you try to step just a little beyond a simple setup.


I can’t comment on UI Edge routers, but my UDM SE has perfect IPv6 support. Which, granted, is a recent thing (full support for SLAAC arrived about 6 months ago), but no complaints from me about the UniFi line.


Carriers dynamically handing out v6 allocations that change is a major major problem for v6 adoption.

They need to change to static assignments for users and be done with it.


I would use IPv6 but my ISP doesn't support it. :-)


My ISPs lack of support for IPv6 got me into BGP.

I now run my own ASN, rent a server with a BGP session that’s pretty close to my home (~50km/2ms), and tunnel v6 over that.

I have a /32 of v6. That’s 2^96 individual addresses. Or 65k /48s.

It was a great learning experience actually and is within the reach of anyone. You can get a BGP enabled VPS for $5/month, and ASN and a /40 for $50/lifetime.


Could you please explain how to get an ASN and a /40 for $50/lifetime? I only know the option where you pay a yearly fee.


The guy I got my ASN no longer files them, but this guy also comes highly recommended.

https://ifog.ch/en/ip/lir-services

CHF 60/lifetime for natural persons , which is about $60.

The guy that did my ASNs still does IP space - https://my.cloudie.sh/index.php?rp=/store/lir-services

$10/y for a /40.

A bit more expensive than the $50/lifetime that I promised, but that was the deal I got from Cloudie.


Once you've been allocated your ASN and /32 subnet, is there any requirement that they continue to be used, or is it ok to sit on it for later use too?


My IP space is PA, it’s allocated by a LIR.

RIPE does have a requirement that you use your ASN, and that it’s multihomed.

Multihoming rule isn’t enforced (meaning a single upstream is fine), but they do require you to actually use it.


You got some hints for how/where to get that ASN and /40?

When I looked into this I only found relatively expensive options.


I’d love to see a write-up of how you did this! It’s been on my bucket list for a while.


You can also get a tunnel going through https://tunnelbroker.net/. I use this with my PFsense gateway.


I got a /44 for a small price(It was free, but I payed for it). No ASN.

Announced one /48 over AWS and tunneled to it to browse the internet via my own IPv6. It works fine.


I find it mildly horrifying that they hand out /32s.


RIPE hands out a /29 to any member without any requirements. For anything beyond a /29 you need to prove that you actually need it, but /29s they hand out like candies. As a LIR you can then lease out /32s. And when you run out of space to lease, request more space.

I know a guy with 15x /29s.

I actually find this scary too, but I mean, it’s /29s, not /8s.


It is quite expensive to be a full member of RIPE though. Most people with smaller requirements can go through a sponsoring LIR to get PI space (like a /48).


There can be as many /32s in IPv6 as devices on the IPv4 internet.


> You can get a BGP enabled VPS for $5/month

Honestly, where do I get that ?


Which RIR? I think you have a typo on that price


RIPE, via a LIR, but it doesn’t matter, because ASNs are end-user resources. IP space is all PA though.

The /32 I’m renting however.


Ah the dollar sign made me think you were in ARIN, and they used to charge $550 for new ASNs


You can get an ASN and IP space from RIPE (or a RIPE LIR) even if you’re in ARIN area geographically.

All you need is proof of network presence within RIPE region (and yes, a $5/mo BGP VPS from Vultr satisfies that requirement). Then you can announce your RIPE v6 wherever you want.


Turkey, with 85m population and 75% internet users, has less than 3% IPv6 adoption.


National adoption rates of IPv6 is often more determined by historical IPv4 allocations and decisions of a number of sysadmins in the 100s at consumer facing ISPs, not a factor of the population's size


Of course not. I mentioned population to point at how big a market Turkey is, which makes the whole "just switch to IPv6" more problematic than it seems. We just can't do it at once, so IPv4 is going to be around for the foreseeable future. I mean, unless we create a service that is IPv6 only to create public pressure.

Like, what if TikTok was IPv6 only? We would have 100% IPv6 by now.


Let's remember who the audience for this article is. It is not for consumers or application developers.

It's for network operators (and equipment vendors). Telling network operators "Let's just switch to V6" is not in anyway problematic. If every network operator decided to make it a priority we could have 90% of internet customers on v6 enable networks within 2 years. Easily.

Of course SaaS/Content providers need to run dual stack for a while. But ISPs need to stop dragging their damn feet and deploy v6.


> But ISPs need to stop dragging their damn feet...

But, why would they if dragging their feet makes them a lot of money? Why would they bother unless there's massive demand from the public for full IPv6 adoption?

I mean even ISPs with IPv6 support don't care about the IPv6 experience of their customers. AT&T, for example, doesn't give more than a /64 address space to home users, which only supports one subnet. If you have, say, a guest network and a trusted network, you can't have separate inbound routing/firewall rules as both would have the same prefix.

So, I disagree that convincing network operators is the right way to go about it. We need to convince the public about the benefits of IPv6.


Tell that to AWS


I still use the Kermit client almost daily. Enterprise network gear still has serial ports (most still defaulted to 9600 baud!) and have an old laptop running MS-DOS and Kermit in my staging room to quickly configure remote access.

Boots in seconds :)


Quad9, like most global DNS providers uses anycast to provide redundancy and low latency. My connection to them still terminates in Chicago. If my DNS queries are answered in the US, surely they are under some type of US Gov authority and regulation?

I think I agree with others, seems like a publicity stunt with very little real-world impact.


If your ISP is sending your queries to the US, perhaps you should ask your ISP why they're doing that?

Did you read the applicable law section of the privacy policy? And you honestly don't think that's better than US law?


I have been looking for something exactly like this. I've tried some other apps as a place to collate and organize PDFs but haven't found anything. This looks really promising.


Thanks.. please jump on the Discord or join the reddit group. We're making FAST progress so if it's not 100% there yet just give us a few more weeks. Or even better send a PR or submit a feature request.

The guys on the Discord list were really really wanting tags in the repo view so I just banged them out on Monday.


If you're interested in this type of information in podcast format, check out the History of Networking series from The Network Collective: https://thenetworkcollective.com/category/episodes/history-o...


My city went to one to pay for water, trash pickup, etc. It's a horrible experience to use. It takes longer and is less efficient than just logging into a modern website and paying.


I'm surprised at the marketshare dnsmasq has, I would've thought BIND and dnsmasq numbers to be flipped.


I'm surprised too. Since I am running it and it dies every few days.


dnsmasq is very popular with SOHO routers.


And just about every mobile device (hotspot mode)


What are fellow HN'ers using for file sync/sharing? I was a Dropbox early adopter but haven't been as impressed as of late, with Dropbox suddenly trying to integrate into my MS Office apps and trying to upload my screenshots and photos.

I'm not a huge fan of Google Drive's recent redesign either. I like box.com but haven't moved anything yet.


Resilio Sync, although I'm not necessarily advocating for it. It's nice to have an option where nothing is in "the cloud".


Cool. I'm not the one who originally posted the question but had the same one upon checking out the starting page. Great idea, something I would be interested in signing up for, but too much plastic at this point.


Totally hear that. The tubes are recyclable and we are testing a programme where folks can send the back to us for re-use.


+1 for this. The amount of waste in the current model is unfortunately a non-starter for me or my girlfriend.


Gotcha!


What do you find problematic about the 16:9 aspect ratio?


I'm assuming it's that the web is a vertical medium not a horizontal one.


Low verticality and too much width, which sucks when reading long snippets of code which are 84 columns wide.


I wish more apps had an equivalent to Emacs' follow mode. It spreads narrow content across two (or more) columns.

https://www.gnu.org/software/emacs/manual/html_node/emacs/Fo...


I use a 21:9 screen and can definitely report that it does not suck. I can now stack 4 snippets of 84 column wide code across my screen instead of one.


Going column to column doesn't disorient you?


Not at all. If it's combined with a tiling window manager it is bliss!


Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: