• 3 Posts
  • 40 Comments
Joined 2 years ago
cake
Cake day: June 29th, 2023

help-circle










  • The main disadvantage of ULAs is in dual stack networks windows prefers IPv4 over them. In principle Linux should too but glibc follows an older RFC and as a result in practice picks ULAs over IPv4. If your GUA space is subject to change I would definitely recommend ULAs. Dynamic DNS is more headache than it’s worth. As others have mentioned I would keep IPv4 out of your internal DNS so that ULAs are preferred, if you want to dual stack your internal DNS then there are ways to configure clients to prefer ULAs over v4. Personally I run both ULAs and GUAs internally even with my own direct allocation but that’s because of dn42. What I do on my gateways to prevent leaks is I have a routing policy that returns an ICMP host unreachable if source is fd00::/8 and destination is 2000::/3 that way the gateway blocks any address mismatch. I also have a policy for the opposite GUA to ULA scenario. One other note, technically ULAs are supposed to be random /48s, others have mentioned generating a /40 but that’s not technically in spec. Ideally you would generate one /48 per site or use a single /48 and then do a /56 per site. Obviously do what you want and what makes the most sense for you but I’m going to put that info out there.


  • All ISPs should do PD unless you’ve got some very special setup and they give you something that must be manually configured. Honestly too many ISPs still lack IPv6 and it’s baffling. I have a friend with Verizon FiOS and after years of not having it he finally got it earlier this year I think…only to have it get taken away a little while ago. Like what?


  • Even if that’s the case it doesn’t really change anything. I was more asking from an end user perspective as I’m hoping we never end up at a point where providers start doing this, however even if they do it doesn’t actually change anything in their routing table. Let’s say providers start giving everyone a /80 instead of a larger block, if they have 50 customers, 50 /80s is no worse than 50 /56s. The only time deaggregation is a problem is when the total number of routes increases but that’s not going to be caused by this as the point of the argument is if you don’t use /64s everywhere than almost any sized block becomes big enough for any sized organization. I really don’t understand why some people hate using a /64 everywhere, it’s not wasteful, it’s the design goal but that’s why this post exists to try to understand the technical downsides and unfortunately so far I’m wishing there were more than Android stops working and your network looks uglier.


  • I knew about 2003::/19 being allocated to DTAG but this list is an awesome summary and I didn’t know about the rest. The /19 going to the UK MoD is not surprising since they have 25/8 in v4 land. It is really weird that it’s capital one…like…ISPs and military always ends up with a lot of IP space…but why capital one?? Also the description of the space is internal space??? Especially since as of now they haven’t announced any of that space. I really hope it’s not just like a large private space, that’d be obscene. It really makes no sense to me. I can’t imagine they’d need…4 billion /48s…




  • My network is entirely v6, I tolerate NAT64 given the current internet landscape but every service I can cut out that needs NAT64 the closer I can get to disabling NAT64 which is ultimately my goal. Still a long way from that but I’d like to get there. Additionally the NAT adds latency as it resides outside of my normal network path. I’ve also taken up a policy of not using new services that don’t have v6 if at all possible. That was a key factor in deciding what lemmy instance to use. While it might not matter to you it’s something I look at.





  • 🤔 I hope you’re wrong but also I doubt you are. Ik a lot of people have been making a fuss about Android and DHCP, I do hope Google will stick to their guns on this. I feel like whether they do or not will have a massive impact on the direction v6 goes with subnet sizes in the future. Mostly in business environments which largely haven’t deployed v6 yet.