Domain: tunnelbroker.net
Stories and comments across the archive that link to tunnelbroker.net.
Comments · 55
-
Re:ok, I'll do it. where do I start?
Your best bet to get started is to sign up with one of the free IPv6 tunnel broker services (such as Hurricane Electric or Freenet6), which will allow you to get a boatload of addresses for your own use, as well as provide you with a tunnel to use them through. These services can provide you with over a BILLION publicly addressable IPv6 addresses for free.
The next step is to configure your home router/firewall box as a dual-stack machine, following the howtos for your particular OS. The one for Gentoo Linux is extremely straightforward, based on my experience with it a few nights ago.
The last step is to migrate the rest of your internal machines over to IPv6-only. They will use your dual-stack router for connections to IPv4-only sites (similar to the NAT you're probably already using).
The only real downside to this is that your IPv6-only machines will only be directly addressable from other IPv6 machines. You'd have to wait for your ISP to support IPv6 before you can get a fully IPv6 pipe, but upgrading your internal network now-ish sounds like a pretty good idea to me.
NOTE--If you're stuck behind a NAT box that you don't control, you'll have LOTS of problems getting a tunnel to work. If you figure out how to do it, please let me know; I failed miserably at this... :)
-
US Alternative Tunnel Broker>Disclaimer: I help run ipng.org.uk, which is a UK tunnel broker,
>who gives you a /64 ... and delegates full forward and reverse DNS to youGreat! And for those of us in the States (especially California), Hurricane Electric offers a free tunnel broker with these characteristics that I would recommend.I have been using it for more than 6 months, and find it quite stable. You do lose your
/64 if HE can't ping you for 24 hours, but a new one is only a mouse click away. And what kind of geek would leave their computer inaccessible for that long anyway? ;). Initial activation does take a day or so.
-Fyodor
Concerned about your network security? Try the free Nmap Security Scanner -
Paging Linksys...
We should push Linksys (and other cable/DSL router manufacturers) to write firmware capable of creating an IPv6 intranet, as opposed to the typical class C. Better still, I'm sure they could add support for something like TunnelBroker (as mentioned above) and map one's intranet into genuine IPv6 space. Yes, you could do the same thing with a 486 running BSD or Linux, but I think using a nice, small, energy-efficient box would be more elegant.
-
Or IPv6 Tunnel Broker> Many Japanese ISPs will give you your own IPv6 subnet right now, for not very much money.
And even if your ISP won't assign you an IPv6 subnet, you can always utilize a free Tunnel Broker to obtain a huge IPv6 address space of your very own (tunneled to your IPv4 IP). I used this recently when adding basic IPv6 support to the Nmap Security Scanner. My announcement also provides a concrete example of IPv6 being used to subvert firewall rulesets.A ton of useful IPv6 information is available from Kame.Net -- once your setup is working, the turtle on the top of that page starts to dance
:). I also found the Linux IPv6 HOWTO to be incredibly helpful.
-Fyodor
Concerned about your network security? Try the Free Nmap Security Scanner -
Re:Vapor and PNG.And, just to keep this on topic, my vapor vote goes to IPv6.
Get a free IPv6 tunnel from Freenet6 or Hurricane Electric.
Supposedly IPv6 will have enough addresses to give one to each of the angels dancing on the head of the proverbial pin. Can't wait.
I've got my block of 2^64 addresses...