Slashdot Mirror


What About IPv6? How Long Until Widespread Deployment?

Christopher Blood asks: "Over at the register, they talk about the EU adopting IPv6. So what about the USA? When do we get it? IPv6 would solve some and DOS problems and we will need the extra address space. What's the holdup?" While IPv6 may be the cure for all of our IPv4 ills, upgrading the whole internet to the new technology isn't going to happen over night. What has been done to prepare for the jump, and what still needs to happen before it can become a reality?

398 comments

  1. Well, it's here already by Moridineas · · Score: 4, Informative

    At my university, IPv6 has been deployed since last year, maybe longer. I've been running FreeBSD w/ IPV6 for at least that long. Honestly, it hasn't made that big a difference for me :)

    1. Re:Well, it's here already by jackb_guppy · · Score: 1, Insightful

      Why?

      Why should univerisities and large corporations HOG IP space? There is no need to update millions of machines for because of a few corportions are remoted from the address large blocks.

      FREE THE IP!! FREE THE IP!! They belong to people. Storm the high castles and take back what belongs to the people!!

      Really though -- who needs IPv6? Get the corporations to use NAT - What corportation needs a A-Class? (beside an ISP/Backbone). I know of a corporation that has a A-Class - all machines besides servers are DHCP assigned anyway. They could convert tomorrow and free the IPs. So way hog them?

      I have not seen one benifit for IPv6. I do not say IP for my toaster. There is not a single benfit for the cost or hasle of the millions of machines that need to changed.

      Lastly, there is not even a clean routing assignment plan for IPv6. So Dukes use of IPv6 would now have to grandfathered in wasting everyone times and money. With that many IPs, why not assign the first Hex^2 to a country, one to the porn world, one to the sport world. that way filtering would be very simple.

      What would be better time and money?

      Required all machines to use DHCP/DNS - no more hard ips, period. Your router to the internet would get its IP from its upstream provider, and would supply the DHCP for all machines below it.
      Lastly it would have a send up the DNS enteries for any routes to servers behind it. This way only one IP is need at each junction and all could be from private pools. In the end more IPs freed.

    2. Re:Well, it's here already by benedict · · Score: 3, Informative

      That's the worst idea I've ever heard!

      NAT causes a lot of problems. It's an ugly hack,
      not a solution to the world's ills.

      --
      Ben "You have your mind on computers, it seems."
    3. Re:Well, it's here already by Slak · · Score: 3, Funny

      As Homer J. Simpson says, "Here's to alcohol, the cause of and solution to all the world's problems"!

    4. Re:Well, it's here already by zmooc · · Score: 1
      ...and one telephone per town should be enough! Amen .

      To most of us the reason we want ipv6 is not that the possible address space is larger; it's the other benefits regarding security and easy configuration. Read more.

      --
      0x or or snor perron?!
    5. Re:Well, it's here already by jaavaaguru · · Score: 2

      I have not seen one benifit for IPv6. I do not say IP for my toaster. There is not a single benfit for the cost or hasle of the millions of machines that need to changed.

      The lifetime of a PC is around 10 years usually. Manye peopel will get a new one before that time is up and many people will use older machines, but I'm making a huge generalisation here. If all new PCs came with IPv6 capabilities (insert preferred "put linux on them" phrase here) then there would be no additional cost or bother caused and everyone would be on IPv6 within the 1st 10 years of the 21st century :-)

      Not that it makes a huge difference to anyone, but I feel left out not being able to address an increasingly large portion of the internet because my ISP is'nt providing IPv6 to consumers yet. I would be quite surprised if they don't use IPv6 technology elsewhere though, even if it's just for future safety - why use an addressing system that's rapidly running out of space when you could JUST AS EASILY use one that will last for ages before it runs out of space.

      I know that "hey my toaster's got an IP address" is a bit ridiculous (assuming you're not counting Color Classics and the like as toasters ;-), but realisticly it would be perfectly possible for all mobile devices (PDAs, Cellphones, etc) to have a unique IP address in the near future.

    6. Re:Well, it's here already by zmooc · · Score: 1
      I know that "hey my toaster's got an IP address" is a bit ridiculous.

      Read that again in 20 years and laugh about your own naiveness:) "20 years ago you'd have to get up to put bread in the toaster and then start it manually. Can you imagine?!" Seriously, I see only benefits to this, especially if it can be done wireless and it shouldn't even be that expensive if all-in-one-kitchen-appliance-chips emerge. Control all the electric devices in your house from just about everywhere. I can hardly wait. O...I don't even have to wait:)

      --
      0x or or snor perron?!
    7. Re:Well, it's here already by bluethundr · · Score: 1

      Uhm. No. First off, how am I going to host my site using DHCP you ninny? Not even to mention how useful statics are for gaming! Your logic is dubious, and your English is even moreso! Get a grip on the tech and get a grip on your English syntax!

      --
      Quod scripsi, scripsi.
    8. Re:Well, it's here already by Gid1 · · Score: 2

      Hewlett Packard have (among other class B and C blocks), the 15/8 network. That's 15.0.0.0 - 15.255.255.255.

      In their corporate manifesto, the "HP Way", they claim "citizenship" and contribution to the communities they operate in to be one of their seven most important corporate objectives.

      They operate in the Internet community, yet claim 16 million addresses for themselves, even though practically all of their internal machines are hidden behind a solid firewall system for which NAT would not be a big problem (and possibly a security asset.)

      I know it'd be a big job to fix, but it still doesn't seem to be good citizenship to me.

    9. Re:Well, it's here already by Yokaze · · Score: 2

      Ever thought of mobile devices? Especially obiles/cellulars?

      Do you expect them to NAT all those?
      How will they route their traffic?
      All over one NAT-box?
      Over several NAT-boxes?

      Or do you expect them to assign them a dynamic IP for every connection?
      When is the IP free to use for another device?
      After 10s of no use? 20s?

      How do you achieve a handover between Gateway GPRS Support Nodes?
      Or between different telcos?
      Or between different telcos in different countries?

      --
      "Between strong and weak, between rich and poor [...], it is freedom which oppresses and the law which sets free"
    10. Re:Well, it's here already by invenustus · · Score: 2, Funny

      I'm not looking forward to that day. If my computer gets 0wned, I might lose my saved email. If my toaster gets 0wned, I might lose my house. Think about it.

      --
      grep -ri 'should work' /usr/src/linux | wc -l
    11. Re:Well, it's here already by Anonymous Coward · · Score: 0

      Hewlett-Packard Company NET-HP-INTERNET
      3000 Hanover Street
      Palo Alto, CA 94304
      US

      Netname: HP-INTERNET
      Netblock: 15.0.0.0 - 15.255.255.255

      Coordinator:
      Hewlett-Packard Company HH15-ORG-ARIN hostmaster@HP.COM
      650-236-3600

      Domain System inverse mapping provided by:

      PALREL1.HP.COM 156.153.255.242
      ATLREL1.HP.COM 156.153.255.210

      Record last updated on 18-May-2001.
      Database last updated on 27-Feb-2002 19:57:58 EDT.

      The ARIN Registration Services Host contains ONLY Internet
      Network Information: Networks, ASN's, and related POC's.
      Please use the whois server at rs.internic.net for DOMAIN related
      Information and whois.nic.mil for NIPRNET Information.

      Certainly doesn't sound like community spirit to me ...

      [sarcasm]
      I'm sure they would try to reserve half of the V6 address space if they could - Besides, with over 2^24 employees in that organisation, I can see why they would need to reserve even more addresses soon. [/sarcasm]

      .sigh.

    12. Re:Well, it's here already by mojo-raisin · · Score: 0, Troll

      if you drive, you might die.

      think about it.

    13. Re:Well, it's here already by Random+Feature · · Score: 2

      The benefit is to corporations. IPv6 contains a field in the header specifically geared to handle QoS on a global basis. It's for PRIORITY.

      If IPv6 is globally implemented, and corporations can get the backbone providers to adhere to the priority fields, their traffic will get priority over yours and mine.

      The same could be done using DiffServ or TOS now, but they aren't universally processed by all the routers on the backbone.

      There are benefits - but most of them are corporate.

      --
      I don't have a solution, but I certainly admire the problem.
    14. Re:Well, it's here already by JLouder · · Score: 2, Insightful

      They operate in the Internet community, yet claim 16 million addresses for themselves, even though practically all of their internal machines are hidden behind a solid firewall system for which NAT would not be a big problem (and possibly a security asset.)

      My employer has a similar setup -- many class B networks, all allocated to systems that are firewalled off from the Internet, set up this way because it required less thinking than NAT.

      When IPv6 is widely used, I imagine we'll see much more of this foolishness.

    15. Re:Well, it's here already by Anonymous Coward · · Score: 0

      Flaimbait, anyone? This guy does not have one smart idea. And BTW, nobody has a problem with requiring DHCP/*DNS*. NAT is the problem, and nobody wants to deal with it.

    16. Re:Well, it's here already by Gid1 · · Score: 4, Insightful

      First thing I did when I took over responsibility for hosting and internet connectivity at a (largish) company I worked at was to replace their existing public IP space (a few thousand addresses) with private IP, hidden behind NAT. It made internal routing *far* easier.

      Of course, a few hardcore techies complained. So, I said that if they had a problem with it, they could come tell me why. If they had a good reason for public IP and they convinced me they were trustable as far as security was concerned, I'd happily give them as many of the deallocated public addresses as they needed, and noted them down carefully. After a few months, those allocations would be reassessed.

      As far as HP is concerned, something like:
      find . -exec perl -pi -e 's/15\.(\d+\.\d+\.\d+)/10.$1/go'
      should do the trick! =)

    17. Re:Well, it's here already by zinger · · Score: 1

      Some considerations:

      VPN traffic usually has difficulty working through NAT. IPSEC traffic particularly.

      Also, I accidently put IPV6 on my Redhat 7.1 box during a kernel upgrade. Totally killed ftp.

    18. Re:Well, it's here already by Cramer · · Score: 2, Insightful

      No NAT does not. There are some problems, but they are very specific to stupidly engineered client/server programs where the server attempts to contact the client (using whatever the client thinks is it's address.) Almost every java rmi/corba based piece of shit has this problem.

      Next you're going to say firewalls causes lots of problems.

    19. Re:Well, it's here already by jackb_guppy · · Score: 1

      Then you just have not tried. I do it now. It is easy and simple.

      It would be simpler with automated registion by DHCP servers updating DNS correctly, and the NAT/Routers place the pin hole automaticly. Right now, the people who make the machines do it think beyond the next dollar.

    20. Re:Well, it's here already by jackb_guppy · · Score: 1

      The big ones I have found are where caused by people who believe that ALL EQUIPMENT MUST HAVE REAL IPs.

    21. Re:Well, it's here already by jackb_guppy · · Score: 1

      All I saw was marketing...

      Dynamic DNS -- This what I saiding with IPv4, so why wait for IPv6 do it now.

      Finds it nieghbors -- oh great a new network neighborhood -- how secure is that.

      DHCP already makes it easy to configure.

      The hard part is the corps and univeristiy HOGGING the IP SPACE. But then it is they who are raking the dollars.

    22. Re:Well, it's here already by jackb_guppy · · Score: 1

      It can be done now. But you do not need to have each phone with a real ip. DHCP assigned, then the phone# is nothing more then a DNS entry.

    23. Re:Well, it's here already by jackb_guppy · · Score: 1

      Because they were written, thinking all machines have real ip. Yup that was forward thinking.

    24. Re:Well, it's here already by jackb_guppy · · Score: 1

      Akin to the hand over and routing the phone call today between towers. Ever time you jump from tower to tower - new frequency/channel is choosen, the call is routed to a different land line.

      You could make each tower hand out it own IP subnet. Some of this is handled in the wrieless today and routing to your PC as you wonder the building and single is jumping from access point to access point.

      The only big problem now is getting a DNS to up the with your current ip/route, since the phone number is really a DNS entry. (even with the way current cell phones work.)

    25. Re:Well, it's here already by Anonymous Coward · · Score: 1, Insightful

      I have mangaged class A's and class C's both with and without NAT. While NAT does make things easier in one respect. For the company managing it, NAT is a bigger headache than what it solves. The ROI isn't there.

      Forcing NAT is nice and all, but it ain't the easiest and best solution.

    26. Re:Well, it's here already by Anonymous Coward · · Score: 0

      Oh, I get it. Let's use the IP but not assign real IP addresses. That will simpilfy everything.

      IHBT?

    27. Re:Well, it's here already by Dwonis · · Score: 2

      Some applications have never even been developed because of NAT. For instance, you will never be able to log into your answering machine from across the world to check your messages until IPv6 hecomes widespread.

    28. Re:Well, it's here already by Dwonis · · Score: 1, Flamebait

      Well, only use software written like DJB writes his software. Problem solved.

    29. Re:Well, it's here already by -brazil- · · Score: 1

      Priority doesn't necessarily mean that they will be getting a higher one than you. Please get over your fear of not getting enough of the grub. QoS is highly desirable for everyone because some services could get a higher priority, such as Voice over IP or telnet. Your conversation and your telnet session would get a higher priority, reducing lag, while your HTTP download (for which lag is not a problem) would get a lower priority.

      --

      The illegal we do immediately. The unconstitutional takes a little longer.
      --Henry Kissinger

    30. Re:Well, it's here already by -brazil- · · Score: 3, Insightful
      God, that's bullshit. There isn't even enough IPv4 addresses around to give one to each person, and static IPs are desirable, and more than one of them per person.


      Don't you realize how idiotic it is to avoid the update to IPv6 by instead requiring an update to NAT and an update of every protocol that doesn't work well with NAT. That's more time and money wasted, not less!!

      --

      The illegal we do immediately. The unconstitutional takes a little longer.
      --Henry Kissinger

    31. Re:Well, it's here already by jackb_guppy · · Score: 0, Troll

      So we all got to change becuase of some ones bad programming. That is luntic.

      Oh, do not fix the broken program because it working... just write a new program to give wrong information and another to correct the wrong output.

      There is not ONE need to give each person their own ip. Unless you plan to assign it to them at birth and replace all other ID. Can we talk about the 1940's now?

    32. Re:Well, it's here already by nr · · Score: 1

      I belive that NAT is one of the major couses why IP-telephony and video conferencing has'nt yet had a big breaktrough. Many other applications relies on host-to-host communication.

    33. Re:Well, it's here already by Strog · · Score: 1
      But you do not need to have each phone with a real ip

      Let's take the largest "reserved" private address block 10.x.x.x.

      255*255*254=16,516,350 addresses

      I guess we are going to need multiple real IPs to hide behind for NATing. We need 37 IPs to get enough to do 6 billion phones. I realize that all 6 billion people don't need a phone today but they will want one soon and population growth will get it there soon enough. We are going to need many more for the communications servers, routers, switches, etc. to make it all run.

      Why would you want to make it so complicated? IPv6 can make it a lot easier.

    34. Re:Well, it's here already by 3.1415926535 · · Score: 1

      I, personally, run several servers on my machine, and I find even that limiting. What I really need is another machine. With a static, globally unique IP. Having the entire campus behind NAT is not acceptible; too many people are running servers. Adding port forwarding to a NAT box is just plain rediculous because all you're really doing is extending the IP address space to include port numbres as well. Why not just give every machine a globally-unique IPv6 address and be done with it? That way you don't have to worry about one machine NATting for an entire network of thousands of computers, and the users are happier as well because they don't have to go through some beauraucratic system to get ports forwarded.

      Also, claiming that protocols that require the client to have a real IP are "bad programming" is just flamebait. Stop it.

    35. Re:Well, it's here already by jackb_guppy · · Score: 1

      Your idea is wrong...

      Think security. No corp is going let real ips exist. With all those websites running, are you going take responcablity? No?

      Yes current NAT with port forwarding is pain, but that can be fixed following simple standards like Virtual Hosting.

      About bad programming... it is and was. Writing a program that REQUIRES the use in the most insecure enviroments - routing real address inside of a firewall, is bad programming.

    36. Re:Well, it's here already by Dwonis · · Score: 2

      Yep. Even the whole instant-messaging thing is just a big hack on the fact that most people can't run their own SMTP/talk servers (otherwise, ICQ could have been implemented using these standard protocols, rather than using their own proprietary, client/server model.

    37. Re:Well, it's here already by Yokaze · · Score: 2

      > You could make each tower hand out it own IP subnet. Some of this is handled in the wrieless today and routing to your PC as you wonder the building and single is jumping from access point to access point.

      The different access points are all part of a single Ethernet. You surely didn't tried to wander from a different administrative network to a different one while using the Internet.

      > The only big problem now is getting a DNS to up the with your current ip/route...

      Not really, unless you want to have a server on your mobile.

      The real problem is the routing.

      Let's say you travel from Strasbourg to Venice.
      Someone else is driving, you're bored and you have to much money. So what are you doing? Watching a video via a mobile.

      What does that mean?
      You initiate a connection to a server, which will send the data to your IP. Now what happens when your leaving the reach of a Base Station Controller?
      If I understand you correctly, you'll recieve a new IP.
      Wonderful, what happens with your video?

      Now let's assume you keep the IP between different BSCs.

      Sorry, pal. You're leaving France, here comes Germany, I guess the France Telecom doesn't provide access there.

      That would be a switch between two telcos.

      Furthermore, several telcos only provide partial coverage and outsource the missing areas to a different telco.
      What happens when you leave that area?

      Now, let's assume that the telcos don't have a problem with handing out IPs from their pool to a different telco, how will the traffic be routed?

      Always over all adminsitrative borders you have passed, since one carrier will never allow a different carrier to mess with their routers.
      Imagine what would happen: what work those routers'd have to handle, every millisecond a change in routes, routing tables over several thousand entries.

      So, happy travelling from Strasbourg to Venice :)

      --
      "Between strong and weak, between rich and poor [...], it is freedom which oppresses and the law which sets free"
    38. Re:Well, it's here already by benedict · · Score: 2

      Firewalls cause lots of problems. IMO there's a
      more solid engineering rationale for firewalls
      than for NAT, but they're definitely also an ugly
      hack.

      There is something to what you say. NAT exposes
      problems in certain poorly-designed protocols.
      For example, it interacts badly with the layering
      violations in FTP. But even if all other protocols
      were designed well, NAT would be a poor long-term
      solution. It destroys the end-to-end transparency
      of the network. It makes troubleshooting difficult.
      It introduces points of failure.

      --
      Ben "You have your mind on computers, it seems."
  2. Backbone by crumbz · · Score: 3, Interesting

    Given that Lucent's CEO said today that he does not see the telecom equipment market turning around anytime soon, a government initiative to upgrade the core routers to IPv6 would help boost the battered sector of the economy. Granted, Lucent shot themselves in the foot last year (several times) and upgrade to IPv6 might just result in a higher volume of spam.....

    1. Re:Backbone by filtrs · · Score: 1

      Maybe someone can inform me, because I obviously don't know ...

      Why would companies like Lucent and Cisco be so opposed to this? With purchases of new hardware shrinking along with the economy, wouldn't these equipment makers be in a perfect position to benefit from adaptation of IPv6? Its supposed to be all about the money ...

      I can understand ISPs and other internet-intensive companies not wanting to pay for the upgrade, but I'd still expect a push from the hardware makers.

      --
      My mother always used to tell me: If you can't find anything nice to say, say something bad about Windows.
    2. Re:Backbone by Troed · · Score: 1

      3G (next gen telecom) are using IPv6

    3. Re:Backbone by Anonymous Coward · · Score: 0

      they're not opposed to it. it's the people who buy the stuff that are opposed to it, because it will cost them billions to make the transition. IF they're not buying from Cisco cause they have no money, they won't be embarking on any major network overhauls either.

      P.S. Lucent's CEO is female, and they really have no major impact on IPV6 adaptation, since they make telecom gear, not data gear...

    4. Re:Backbone by hound3000 · · Score: 1

      Given that Lucent's CEO said today that he does not see the telecom equipment market turning around anytime soon, a government initiative to upgrade the core routers to IPv6 would help boost the battered sector of the economy.

      Yea, and if the government does push IPv6, let's just hope it doesn't end up like the HDTV mess. Anyways, do we really want the government to step in? They have a uncanny history of *not* being tech savvy and messing stuff up. When would everything be mandated IPv6? Will we be taxed more to help schools out in the venture? Will we be taxed more for more corporate welfare in the process?

      The economy has downturns, let's ride it out for now.

  3. Newbie question.. by zapfie · · Score: 2, Informative

    Is IPv6 backwards compatible with IPv4?

    --
    slashdot!=valid HTML
    1. Re:Newbie question.. by ColdGrits · · Score: 2, Insightful

      Yup.

      As in IPv4 addresses are just a subset of IPv6, so any IPv4-based stuff will still work in an IPv6 network no problem.

      Not true the other way round, but then that doesn't matter :)

      So yes, they could upgrade the entire Internet backbones etc to IPv6 (and *should* do so asap) and all old IPv4 traffic will carry on as normal.

      --
      People should not be afraid of their governments - Governments should be afraid of their people.
    2. Re:Newbie question.. by Codifex+Maximus · · Score: 2

      There is alot of code based on IPv4 functions - upgrading all the programs to use IPv6 would be a mammoth task... hey, maybe there will be some jobs opening up in Socket Programming soon?

      --
      Codifex Maximus ~ In search of... a shorter sig.
    3. Re:Newbie question.. by Anonymous Coward · · Score: 0

      Challenge (obviously), is that you can't start using any of the additional IPv6 address space until IPv4 is mostly eliminated (unless you don't mind a huge chunk of the internet being inacessible...)

    4. Re:Newbie question.. by MenTaLguY · · Score: 2

      For _most_ network-aware applications, the only thing different is the address format. Once you have the connected socket, the rest of the network code should remain unchanged.

      It's the (non-socket-related) code to handle e.g. address parsing which has to change.

      --

      DNA just wants to be free...
    5. Re:Newbie question.. by sheetsda · · Score: 1

      Someones trying to lose moderator privledges I guess. I noticed this dumb FP comment got modded up as informative. Metamod will take care of it.

    6. Re:Newbie question.. by Codifex+Maximus · · Score: 4, Funny

      > For _most_ network-aware applications, the only
      > thing different is the address format. Once you
      > have the connected socket, the rest of the network
      > code should remain unchanged.

      So, essentially what you're saying is: After you get past all the things that are different then the rest is the same?

      Ok, I'll buy that.

      --
      Codifex Maximus ~ In search of... a shorter sig.
    7. Re:Newbie question.. by Anonymous Coward · · Score: 0

      and what ever happened to the ipv6 mac address privacy fiasco? never hear anything about that anymore. what happened.

    8. Re:Newbie question.. by Anonymous Coward · · Score: 0

      It is not the entire answer, but for old code you simply have to able to accept the IPv6 format. But IPv6 is also capable of doing some interesting things that you may wish to take advantage of. That will, of course, require a re-write of at least the set-up if not a re-design.

    9. Re:Newbie question.. by MenTaLguY · · Score: 2

      Yes.. although now that you made me sit down and think about it, a lot of stuff cares about addresses once you have a socket (getsockname, getpeername, send, recv, etc...).

      --

      DNA just wants to be free...
    10. Re:Newbie question.. by Anonymous Coward · · Score: 0

      hey, you fuckin' tard, go RTFM, motherfucker. jeezus H. christ....

    11. Re:Newbie question.. by Shimbo · · Score: 1

      and what ever happened to the ipv6 mac address privacy fiasco?
      It was always (mostly) a non-issue. With IPv4 you could:

      1) Use manually assigned addresses. Fiddly and error prone.

      2) Use server assigned (DHCP). Flexible but can be overkill.

      With IPv6 you have a third option: (roughly) just use your MAC address the host part of the address. Instant simple, unique address. This was always an additional option on what you had already.You could always set your address manually or by DHCP.

      Decnet-V had exactly this scheme, and nobody said anything about it. And GUIDs were fairly uncontroversial. It's only recently folks have worried more about their online privacy.

      Anyway, a lot of people made a fuss, and the IPv6 folks said 'Oh yeah we'll think about that'. And some wrote Internet drafts and others bitched on /.

      Finally, the drafts became an RFC (3041) and some read it and said "verily this standard will safeguard our privacy, let us go forth and implement it". And others looked upon it saying "yeah, this is not news".

    12. Re:Newbie question.. by 3.1415926535 · · Score: 1

      You can always use some sort of 6 to 4 NATting, although I hate to bring up NAT. It COULD be an effective way to let a whole bunch of IPv6-only computers make outgoing connections to IPv4-only hosts through one dual-stack machine. It's not great, but at least it works.

  4. When? by Anonymous Coward · · Score: 3, Insightful

    I guess not in close future. When free IPV4 addresses run out, large address blocks reserved to big companies etc become very valuable. So, if you want addresses which work 100% of the time, you'll have to cough up money for the companies to get them. It will be that simple. Really.

    1. Re:When? by furiousgeorge · · Score: 4, Insightful

      true. but if you're not located next door to said company, the main trunk routing tables become ridiculous.

      Remember --- M.I.T. has more assigned IP addresses than ALL OF CHINA.

      It's not north america thats going to drive IPv6, it's Europe and Asia where they're already starting to feel the address squeeze.

    2. Re:When? by boopus · · Score: 2

      Is that still true? Last I read they gave a large portion of their address space back.... For all I know they could have kept a coupple million though.

    3. Re:When? by HaggiZ · · Score: 1

      Yeah,

      Here in Australia we are feeling the squeeze a bit. But it's workable, just means lots of NATing all over the place which then causes lots of problems with administrators that only know how to administer a firewall with a GUI ;)

    4. Re:When? by _Spirit · · Score: 1
      If it has a UI that's anything like your webpage that might be understandable as well as excusable :-)

      --

      beauty is only a light switch away

    5. Re:When? by thogard · · Score: 1

      The address space is running out because it is mismanaged.

      The reason its mismanaged is a number of routers aren't doing their jobs correctly and the result of broken hardware design is that the minium allocations are huge.

      I think that all new address space should be assigned to two ISPs at a time based on places where they regionaly overlap. This would allow me to go to sprint if they were my provider and get a /26 that is common to both them and someone say uunet in my region so they both can deal with the route as a /24 or so internally but one of them gets to aggregate it in a larger block and one of them won't.

      This would allow millions of small compaines to proplery dual home. The current system won't let you do that unless you need a /20

      As far as the load/memory on the servers is concerned, there are 16 million /24 blocks under thsi approach. If your router has 3 upstream interfaces and an internal network, that requires 2*2^24 bits or 4 meg of ram. Do it with contenta addressable ram (like cache tag ram) and you can run the biggest exchange point routers at speeds faster than the current approaches.

      Why are the membership dues for the Asia Pascific Nic (APNic) in US$? The US$ has risen compared to every currency in the region so prices keep going up and up and up. The same is true for most of Europe as well.

    6. Re:When? by noahm · · Score: 4, Informative
      Is that still true? Last I read they gave a large portion of their address space back.... For all I know they could have kept a coupple million though.

      No, it was Stanford that gave up their class A. What were they thinking? MIT still has ungodly amounts of address space. We have net 18 (18.0.0.0/8), plus random assorted /16s (128.52, for example, is the AI lab). There are a couple others.

      The thing is, though, there's a whole lot of "reserved" address space out there. The IPv4 address space shortage is partially artificial. In some ways this is to preven the world from grinding to a screeching halt where there really are no more IPv4 addresses. Another is that maybe it will put pressure on people to be conservative with address allocation, which might make the shortage less pressing. Maybe it will also help to speed the deployment of IPv6.

      Most OS vendors are already supportind IPv6 out of the box. WinXP, for example, can be set up as an autoconfiguring IPv6 host very easily (ipv6/install at a command prompt, IIRC). The BSDs support it very well, as do many Linux vendors. I think that it won't be long until IPv6 communication on the internet is very widespread. I don't, however, think the whole internet will be IPv6 any time soon.

      noah

    7. Re:When? by 4mn0t1337 · · Score: 2, Interesting
      Remember --- M.I.T. has more assigned IP addresses than ALL OF CHINA.

      Good! There are already enough spam relays in China (and very few that I am aware of at MIT).

      We should make a deal that China doesn't get anymore IPs until they deal with all the spam coming from there. That and finish their dinner...

      --

      ______
      Once: you're a philosopher. Twice: a pervert.

    8. Re:When? by mph · · Score: 1
      That and finish their dinner...
      Because there are kids starving at MIT?
    9. Re:When? by Cardhore · · Score: 4, Funny

      That's because China only needs on IP for its firewall.

    10. Re:When? by HaggiZ · · Score: 1

      Heh. I actually do all the backend/php stuff for that site. That being said, I actually quite like what the guys have done with the site, as far as sites go for that genre it's quite attractive imho.

    11. Re:When? by Cramer · · Score: 2
      • I think that all new address space should be assigned to two ISPs at a time based on places where they regionaly overlap
      And there begins the stupidity of your plan. Physical location doesn't have one flying f*** to do with the internet. There is almost zero coorelation between network proximity and physical proximity.
    12. Re:When? by thogard · · Score: 2

      With the exception of the US (where bandwidth cheap), there are a limited number of ISPs in a position to allow smaller clients to dual home. This is true for most of the world with the exception of North America and thrid world countries.

      I don't know of a single backbone carrier that couldn't cope with this plan if it were handed down by the IETF but none will push it because its too hard and will cut them out of exclusive contracts.

      Besides IPV6 won't fix any of the problems with limited address space, it just makes the tables grow so large there will never be an efficent way to route (or even plan routes) and we will be stuck with the same problem but now we have 2x as much data it deal with.

    13. Re:When? by Anonymous Coward · · Score: 0
      Is that still true? Last I read they gave a large portion of their address space back... For all I know they could have kept a couple million though.
      IPv4 Address Space

      Did Intel get DEC's /8 when they bought Alpha from Compaq?

    14. Re:When? by -brazil- · · Score: 1

      Nonsense, IPv6 has enough address space to assign a separate IP to each grain of dirt on the world's surface. And routing is not really more complex than it is now. In fact, it could well be less complex because the larger address space allows for clear hierarchies. i.e. a company can get a single large IP range instead of they 25 smaller ranges they get now because the address space is fragmented.

      --

      The illegal we do immediately. The unconstitutional takes a little longer.
      --Henry Kissinger

    15. Re:When? by hta · · Score: 2

      The Class A that MIT has is 16 million addresses.
      According to ARIN, China has more than 20 million addresses assigned.
      The crossover point was sometime in June 2000, I believe.

    16. Re:When? by thogard · · Score: 1

      Any time a single entry is dual homed, they have to go in lots of routers tables. Simple graph theory shows its going scale the same way as ipv4 just with a different size factor.

    17. Re:When? by 4mn0t1337 · · Score: 1

      Well, I had to say something with an authoritarian "Parent voice" and it was either that or "send them to bed without supper."

      Okay... so it was a long reach for a weak joke...

      --

      ______
      Once: you're a philosopher. Twice: a pervert.

    18. Re:When? by Cramer · · Score: 2

      (I deal with this multi-homed crap all the time.)

      Those places with "25 smaller ranges" (which are very few) have all their address space from one ISP so they add nothing to the global route tables -- they are 100% covered by the ISP's summary announcement. When they connect to a second ISP, those address ranges have to be announced by both ISPs verbatum. Suddenly, there's the original netblock plus 25 smaller blocks being announced by the first ISP and the same 25 small blocks being announced by the second ISP. [*] Traffic flows to the most specific route, so all the smaller sub-blocks have to be annouced individually by all the ISPs.

      * - The minimum agreed size for any BGP announcement is a /24. The minimum netblock for global routing is a /20 -- anything smaller may not find global coverage.

      [There are companies providing products to handle multi-homing without any of the traditional hastles.]

  5. What about the major backbone routers? by kronin · · Score: 4, Interesting

    I would like to know how close the backbone through the US is to being IPv6 ready. Anyone that knows care to respond?

    1. Re:What about the major backbone routers? by Raindeer · · Score: 4, Informative

      Japan and Korea are leading, together with some other countries in the Asia/Pacific region (APNIC-countries). Second is Europe (RIPE-countries). Third is the United States and its neighbours.(ARIN-countries), though the United States is second as a nation.

      The reason I name the RIR's is that I base this on the amount of IPv6 space assigned. See:
      http://www.ripe.net/ripe/meetings/archive/ri pe-41/ presentations/plenary-globalrir-stats/sld011.html
      http://www.ripe.net/ripe/meetings/archive/ripe-41 / presentations/plenary-globalrir-stats/sld012.html
      and here for the up to date list of all assignments:
      http://www.ripe.net/ripencc/mem-serv ices/registrat ion/ipv6/ipv6allocs.html

      Furthermore you might find it interesting that in the RIPE-area, the RIPE community has decided that all Local Internet Registries can apply for a /32, which should suffice for all of them :-)
      You can find that policy here:
      http://www.ripe.net/ripe/mail-archives/ipv6 -wg/200 20101-20020401/msg00093.html

    2. Re:What about the major backbone routers? by Anonymous Coward · · Score: 1, Informative

      Juniper's IPv6 implementation is out and ready for prime time. Check it out here:
      http://www.juniper.net/techpubs/software/ju nos52/s wconfig52-ipv6/frameset.htm
      Cisco's been working on their's but I dunno what it's status is as of late. So the core is en route to new era. Will be a while tho since the economy is garbage and the average NOC monkey's head will explode once s/he tries to figure it out.

    3. Re:What about the major backbone routers? by sdhughes · · Score: 1

      Japan and Korea are leading... great. We'll never follow. Why would the US want to communicate with them? So we can get more spam in asain languages?

      They already lead the way in halfwitted sendmail administration.

  6. roadrunner by Maditude · · Score: 2, Interesting

    I emailed RR a while back about their plans for IPv6, and despite several back-and-forth email exchanges, never did find anyone who had even HEARD of IPv6, much less get details on their rollout plans for it. Doesn't look too promising for cable-modem users.

    1. Re:roadrunner by LWolenczak · · Score: 2

      They RECENTLY got an ipv6 allocation from ARIN.

  7. for you freebsd types by SweetAndSourJesus · · Score: 0, Informative

    good article here. not a goatse link. really.

    --

    --
    the strongest word is still the word "free"
  8. When do we get it? by nublord · · Score: 4, Insightful
    When do we get it?

    When corporate America determines they can make a profit from it.

    1. Re:When do we get it? by sabinm · · Score: 2, Insightful

      More right than not. Why in the world would corp ISP want to give you a static IPv6 when that is a constant bandwidth tap?

      Joe Public will never "own" ip addresses again. That was made evident after the "great subnet rush" of the ninties.

      Having IPv6 addresses mean that anyone can have as many as they want if given away for free-
      until there is a way to consistently and legally charge for "per seat" usage for internet bandwidth, with crimial reprocussions (can you say DMCA) corporations will not adopt a standard which basically says, "a static and public IP address is worthless as a marketable commodity".

      --
      http://cincyboys.blogspot.com/ Everything Cincinnati. Including the word 'Finnih'
    2. Re:When do we get it? by Anonymous Coward · · Score: 0

      Well what is the point of adopting it if it offers no benefit, especially if they are the ones using the equipiment. It really won't affect you, so why do you care?

    3. Re:When do we get it? by Alceste · · Score: 0

      you act like that's a bad thing..... where do you think the money for all this stuff comes from?

      It's going to cost quite a bit to start the changes, though I'm down if you're buying.

    4. Re:When do we get it? by Anonymous Coward · · Score: 0


      Duh, but that isn't an answer to the question.

    5. Re:When do we get it? by Com2Kid · · Score: 2

      Huh? Only ISPs can hand them out, therefore they have an automatic monopoly over IP addresses. Not to mention complete price control.

      Hell ISPs should be PRAYING for IPv6 to come out and every device in a persons house + the toaster to have an IP address.

      Think $1 per IP address.

      Think 30 or more devices per house with IP addresses.

      Tada, the average ISPs profit per customer just more then doubled.

      (even broadband ISPs would be making an extra $30 on top of the ~$60 or so they already charge, 50% profit increase is STILL great!)

    6. Re:When do we get it? by Delphis · · Score: 1

      I'd be happy with just ONE static IP at home and just NAT the rest :)

      Who the fuck cares about toasters and answering machines? And besides, if they come in on certain ports for like answering machines, forward those ports to said machine.

      --
      Delphis
    7. Re:When do we get it? by Com2Kid · · Score: 1

      Some things do NOT work with NAT.

      Onlines games for instance. Few servers accept multiple players from ONE IP address.

      A lot of FTP sites. Any one that does not allow multiple simultaneous connections from one IP. Or if it does, the number of connections is cut down to a fraction of what it was before.

      Heck in an office building with a few hundred computers in it, hell, you'd be fucked.
      Or a household with two or three computers.

      Hope you don't want to all play on the same CounterStrike server. . . . (hmm, can CS handle multiple connections per IP? Hmmm)

  9. When Cisco decides to... by sphealey · · Score: 4, Insightful
    There are two factors holding IPV6 back: lack of concensus from those that make the decisions in the networking world that IPV6 solves any problems that need to be solved at anything like a reasonable cost. And lack of push from Cisco for implementation. There are thousands of other facets to the discussion, but let's face it: if Cisco had said a year ago that "oh, IOS 12.x now supports IPV6 and we think you should start using it" the world would have fallen in line. They haven't, which makes you wonder what they know that we don't. The story is that "customers aren't demanding it yet", but that didn't stop them from introducing the router when no one was demanding them, did it?

    sPh

    1. Re:When Cisco decides to... by univgeek · · Score: 2, Informative

      Cisco road map (pdf) for implementation of IPv6 in IOS.

      The same in html from Google.

      They say that by/in 2002 (hey thats now) they will have completed implementation of all IPv6 functions in the routers.

      --
      All bow to his Noodliness!! His Noodle Appendage has touched me!
    2. Re:When Cisco decides to... by sean23007 · · Score: 1

      The story is that "customers aren't demanding it yet", but that didn't stop them from introducing the router when no one was demanding them, did it?

      Once someone does what the customers don't demand, and they succeed, they are much less likely to try again, lest they fail. If Cisco were to adopt IPv6 completely, and it didn't catch, Cisco would be out. They obviously don't want that to happen, so they want to be absolutely sure that it will catch on.

      --

      Lack of eloquence does not denote lack of intelligence, though they often coincide.
    3. Re:When Cisco decides to... by cpeterso · · Score: 1

      Don't forget that most customer computers (ie Windows 95, 98, ME) do NOT support IPv6. Why would an ISP pay for hardware and support for a feature that the majority of their customer cannot use?

      * There is no IPv6 because there is no demand.

    4. Re:When Cisco decides to... by Anonymous Coward · · Score: 0

      May be the IPV6 rotuing table is too big to fit inside their older products ?? ;)

      With all the .bomb gone, you would have thought there are some left over IP addresses.

    5. Re:When Cisco decides to... by Arandir · · Score: 3, Interesting

      In my case, there's only one thing holding back IPv6: my ISP doesn't support it. IPv6 is already completely integrated into my OS (FreeBSD), and effortless to set up. But it's useless until my ISP switches over.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
    6. Re:When Cisco decides to... by isdnip · · Score: 5, Informative

      Cisco knows that IPv6 is a lose; they have to support it, but don't have to push it hard.

      IPv6 is a bad job, period. Most Slashdotters probably don't know its provenance. It has been around for about a decade. IETF created it as a compromise. IETF insider Steve Deering had created a poor-quality hack called SIP (Steve's IP) while insider Paul Francis (aka Tsuchiya) created one called PIP (Paul's IP). How bad? SIP, for instance, assigned all addresses by countries, based on population, and thus gave a shorter prefix to North Korea than to South Korea because it was a bit more populous in his almanac. IPv6 is PIP and SIP glommed together.

      Just before the time it was adopted, IETF had adopted a different replacement for IP, TUBA (which I think was also called IPv8). TUBA used a profile of the OSI Connectionless Network Protocol (CLNP). Cisco had already implemented it, along with CLNP's routing protocol, IS-IS. CLNP was elegant and flexible -- some of the OSI work stank, but CLNP and TP4 were gems. The only reason TUBA was dropped was because Vint Cerf, the Chauncey Gardner of the Internet (not really so smart, but he's famous for Being There), changed his vote and dropped TUBA support.

      Had Vint not been so perfidious, IPv8 would have been phased in before the public Internet boom of the mid-1990s. The code has been in Cisco and other vendor equipment for a decade.

      IPv6, on the other hand, has a wasteful 16-octet address field (only 8 octets are useful at a time) and does little else to solve IP's problems. It does NOT provide QoS (that's an urban legend) or security any better than IPv4 with its existing options. And given the inefficient assignment of IPv4 adresses in the past, the 32-bit field has a lot of life left.

      Think about VoIP: With IPv4, the header has 8 address octets, while the payload has to be short in order to minimize delay. And it's bloody inefficient. With IPv6, the header has 32 address octets while the payload is the same. It's a bleedin' joke! IPv6 is just plain wasteful.

    7. Re:When Cisco decides to... by Martin+Blank · · Score: 1

      Early version of Windows 95 also had really crappy IPv4 support. Microsoft went and released a new version which fixed 99% of the problems.

      With the possible exception of Win95 (which is no longer officially supported), there's little technical reason that MS could not release an implementation of IPv6 for Win9x. Someone earlier mentioned that WinXP has built-in support for IPv6 (I don't have such a box, so I can't verify), and I know that they've been playing with a W2K implementation for some time now. There's just not much reason for them to push it right now.

      --
      You can never go home again... but I guess you can shop there.
    8. Re:When Cisco decides to... by ultraw · · Score: 1

      There is no IPv6 because there is no demand.

      That is the american point of view. America was the base of IPv4 (ARPANet, ... remember) and there are plenty of IPv4-blocks left to (re)use. No need to use IPv6 there...

      But when we look at countries like japan and russia, we see active deployment of IPv6, because there is need to do it, because there is a shortage of IPv4 adresses.

      Europe is pushing IPv6 because europe is somewhere in between. There are still enough IPv4 adressess, but not for long...

    9. Re:When Cisco decides to... by Anonymous Coward · · Score: 0

      And you can't run 6to4 or other tunnels because... ?

  10. Microsoft to decide by Anonymous Coward · · Score: 0

    For real development we have to wait for established companies to roll out .NET platform.
    So do speak Microsoft has the last voice. When they say go, we go.

  11. it might by Anonymous Coward · · Score: 0

    it might be a while...that is always the case with decentralized network systems...

  12. IPv6 by SkewlD00d · · Score: 2

    It would cost mucho dinero to upgrade all the infrastructure to support it. But, IPv4 and IPv6 can coexist. The prob is that 50% of lan equipment isn't upgradable. Telcos wont want to float the bill, they'll pass the buck to you.

    Woot, most common excuse for downtime.... "upgrading."

    YAEUU: Yet Another Expensive Useless Upgrade

    --
    The biggest trick the devil pulled was letting lawyers become politicians so they can write the laws.
  13. the bothersome part by nukey56 · · Score: 4, Funny

    IPv6 will fix a lot of problems, but one nasty side effect is that we're going to end up with addresses that look like 3ffe:400:34:fd01::1, instead of the easily memorizable four octets. When that day comes, it's going to be a lot harder to shout down the IP of the game server you're playing on down the hall.

    "Oh, I'm on three-f-f-e-four,four-zero-zero,three-four,f-d-zer o-one,not(?),one. What's taking you so long?!?"

    1. Re:the bothersome part by estoll · · Score: 0, Troll

      Did I hear a niner in there?

      --
      http://www.askthevoid.com
    2. Re:the bothersome part by geekoid · · Score: 1, Troll

      IF the only way to communicate to someone else on a computer is to shout down the hall, you got bigger problems.
      We could have a cntral database where everybody applies for a unique, easy to remember coputer name.
      You thoght re-selling domain names where big, this would be a huge money maker.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    3. Re:the bothersome part by boopus · · Score: 1, Troll

      Hmm, seems like there's already a solution in place for this... I've been using DNS for years...

    4. Re:the bothersome part by tomstdenis · · Score: 1, Troll

      Hehehehehehehehehe

      Of course on internal networks you can simply use IPv4 style ips though... So at lan parties you can use 192.168.0.0/255.255.255.0 with ease.

      Tom

      --
      Someday, I'll have a real sig.
    5. Re:the bothersome part by Anonymous Coward · · Score: 1, Insightful

      Hmm, seems like there's already a solution in place for this... I've been using DNS for years...

      Except... take a game like counter-strike. Kids that can barely check their email can usually figure out how to set up a dedicated win32 CS server. Point-and-click.

      A lot of these guys get introduced to the concept of "IP Addresses" via this method. You think they have DNS set up? Or even static IPs?

      Sure, there's gametiger.net.. but that's a hack anyway. Sometimes, IPs matter.

      (Oh, and I don't think adsl-24-232-22.lacr.isp-domain.net is easier than an IP address, btw.)

    6. Re:the bothersome part by BurritoWarrior · · Score: 1

      Um, how is providing the precise solution to the original post trolling?

      Can we mod it back to informative where it belongs, please.

      TY.

    7. Re:the bothersome part by rosie_bhjp · · Score: 0, Troll

      The Moderation of the above post signifies the cluelessnes of the moderator. If you don't understand a post, or dont "get it", that doesn't mean its a troll.

      Your pal,
      Rosie.

      --
      A radio maverick jumps to internet only. The Future of Rock n Roll
    8. Re:the bothersome part by Fastolfe · · Score: 2, Insightful

      We could have a cntral database where everybody applies for a unique, easy to remember coputer name.

      Something like DNS?

    9. Re:the bothersome part by Anonymous Coward · · Score: 0

      Just because currently ISPs avoid providing DNS names for their customers doesn't mean they will follow that policy with IPv6. (And many ISPs provide a x_x_x_x.dynamic.isp.net type address, although most people don't know about it or use it.)

    10. Re:the bothersome part by Anonymous Coward · · Score: 0

      Were you calling from a "walkie-talkie?" :-D

    11. Re:the bothersome part by Anonymous Coward · · Score: 0

      no, it's cordless.

    12. Re:the bothersome part by blair1q · · Score: 2

      DNS. It's not just for breakfast any more.

      --Blair

    13. Re:the bothersome part by Anonymous Coward · · Score: 0

      (And many ISPs provide a x_x_x_x.dynamic.isp.net type address, although most people don't know about it or use it.)

      Did you even read the post? It specifically mentioned that. Besides, you have to know your IP address anyway to use that name.. what's the advantage?

    14. Re:the bothersome part by Anonymous Coward · · Score: 0
      > A lot of these guys get introduced to the concept of "IP Addresses" via this method. You think they have DNS set up?

      Maybe not, but they could easily get hostname from dns2go.com or some other provider. In case you haven't used dns2go, let me tell you it is very very simple. You just download their client and it handles both registeration and dns-updates. You could easily use it without detailed knowledge of what IP-addresses are.

    15. Re:the bothersome part by sdhughes · · Score: 1

      >> We could have a cntral database where
      >> everybody applies for a unique, easy to
      >> remember coputer name

      They already have this technology. It's called WINS. Its awesome. Just ask anyone.

    16. Re:the bothersome part by Anonymous Coward · · Score: 0

      You know what, don't!

  14. Re:You know... by ewomack · · Score: 1

    And look what you do with it.

  15. Moving a super-tanker by iPaul · · Score: 4, Interesting

    IPV6 is better. Autoconfiguration, neighbor discovery, big address space, compatability with IPV4, etc. However, the more hacks we put in to make IPV4 work the harder it is to change. For the most part we're educating people to do "Stupid IPV4 Tricks" rather than moving to IPV6. The more of that we do the harder it is to change. Also, the more ominous the prospect of change, the more people will dread it.

    Frankly, I'm thinking we might see another round, like IPV7 (or IPV8 if they make a habit of skipping odd numbers), or it might come very late. Maybe we'll see it on phones and wireless devices before we see wide-spread adoption of IPV6 or general purpose networking.

    --
    Leave the gun, take the cannoli -- Clemenza, The Godfather
    1. Re:Moving a super-tanker by debrain · · Score: 2

      IPV7 (or IPV8 if they make a habit of skipping odd numbers)

      Odd numbers are development numbers. Same thing with the minor version of the kernel. (2.1, 2.3,2.5 are dev versions).

    2. Re:Moving a super-tanker by Anonymous Coward · · Score: 0

      Actually, IP v5 was assigned to an experimental protocol (ST-II) defined in RFC 1190. This is wht IP version as widely know appeared to go from 4 to 6.

    3. Re:Moving a super-tanker by Yokaze · · Score: 2

      Not really.
      IRC, IPv4 was the first publicly aviable and IP (as defined in RFC760).
      http://www.iana.org
      IPv5 was taken by the ST-II protocol, which was supposed to be the next Internet Protocol (at least in the eyes of its inventors). But it was based on connection-oriented routing. This lead to a great resitance in the internet community, which is generally opposed to the idea of connections and channels.
      It became experimental due to lack of support not by intend.

      Have a look at the Version-numbers as assigned by the IANA.

      For those to lazy to look it up.
      IPv7 is the "TP/IX: The Next Internet"
      IPv8 is "The P Internet Protocol"
      IPv9 is "TUBA"

      But some people are already joking that one will adopt an odd/even numbering scheme.

      --
      "Between strong and weak, between rich and poor [...], it is freedom which oppresses and the law which sets free"
    4. Re:Moving a super-tanker by debrain · · Score: 1

      You disagree with a lot of people. But you read Terry Pratchett, have a low slashdot number, and a high enough karma to get the +2 bonus - a sign of unlikely intelligence in a place such as this of late, so I'll let you have this one ... warranting of a short response.

      S'good points, tho. Relevent IPv4 standards in its practiced incarnation encompasses many RFC's and now several STDs (2,3,4,5). Odd reference for a joke (from 1998?), but certainly enough to exemplify the point. My point, that odd numbers of IP are development numbers, was officially wrong in lieu of references, but colloquially pertinent. More than one person has remarked this trend, and in spite of the will of precedent references, come to take it as truth.

    5. Re:Moving a super-tanker by iPaul · · Score: 1

      Odd reference for a joke (from 1998?)

      I appreciate the comments, and yes, I am a bit dated (old). That joke for me goes back to more like 1992. When I was in class way back when IPv5 was "an experimental protocol" however no one knew if it would have legs. I remember some O/S support for it in commercial O/Ses and products. People played with it. Some people thought we would ditch IP altogether in favor of ATM networking if we wanted to do broadband. 10 years ago we actually thought video on demand over data networks was just around the corner. Now, it looks like video on demand over IP networks is just around the corner :)

      --
      Leave the gun, take the cannoli -- Clemenza, The Godfather
  16. ISP incentive by JDizzy · · Score: 3, Redundant

    A reward system needs to be enacted to entice the ISP's to provide unencumbered access to the 6-bone. ISP's that handle dial-up users can tunnel the ip4 traffic on behalf of their customers.

    --
    It isn't a lie if you belive it.
  17. In other news... by Flarg! · · Score: 1, Funny
    A group of developers are working diligently on a new, improved IP stack. They are going to release it open source, and they will call it IP Freely.

    Heheh

    --

    I may be wrong, but I'm never uncertain.

  18. 2 at once? by theCURE · · Score: 1

    In my opinion, IPv6 should be started alongside of IPv4, allowing people to jump back and forth to either. I wouldn't be suprised if the bigger backbone providers did testing like this, and if they aren't already. Everyone will be dying to jump on the IPv6 bandwagon sure enough.

    --
    "i can never say no to anyone but you"
    1. Re:2 at once? by Anonymous Coward · · Score: 0

      Yeah, except then you'll be providing a perfect veil of obscurity for crackers, spammers, and other evil-doers to hide behind and attack the (v4) Internet from relative safety. If you're on the IPv4 Internet and someone spams or attacks you from an IPv6 network, the only address you'll have is the v4 address of one of the gateway devices between networks. It would be a nightmare to try and trace connections through these crossover points.

  19. Not "needed" yet by ctp · · Score: 1

    A while back everyone thought we would run out of IP addresses by now...that hasn't turned out to be the case. Conservative estimates place the date about 20 years out.

    Not that that's the only reason to do it...but that's one that might get everyone off their butts to do something about it.

    1. Re:Not "needed" yet by Anonymous Coward · · Score: 0

      That may be true and all, for the US atleast. The problem is many many countries are feeling the IP pinch.

      As another poster accurately pointed out, MIT has more IPs allocated than all of China. Why, why do they need all of that address space? They use only a fraction of it-it's hugely wasteful.

      It's also tough to get another IP allocated for home use (over broadband systems). Minimally, it's $5 extra a month, sometimes much more.

      With IPv6, I'd be more than happy to get the /48 that they will be issuing. No more NAT bullshit eh (even though it does have useful purposes).

      I just wonder about how much more bandwith is going to be wasted sending out 128 bits more of address in the header (among other stuff), versus our 32bit system today... That's surely going to cost more to trunk than our simple system today...

  20. IPv6 will become the standard... by popular · · Score: 3, Funny

    as soon as we USians switch to the metric system.

    1. Re:IPv6 will become the standard... by scorcherer · · Score: 2
      > as soon as we USians switch to the metric system.

      I thought you're already making progress, inch by inch. Then again, it's not much better here in the Europe. I'll go now and have 0.586L of beer.

      --

      --
      The Cap is nigh. Time to get a fresh new account.

  21. Some places have already tried... by corren · · Score: 1

    In seattle, a company started about a year and a half ago called Zama, they were poised to deliver the first world-class IPv6 Colo facility in the USA, and now, less than 12 months after they launch a completely state of the art facility, they are gone. Zama.net no longer points anywhere. The reason? Nobody needs IPv6 yet. I'm sorry, but we don't need 19 million or however many millions of IP addresses for each person on the planet just yet. I know, it's a shame, as I was just about to launch the new Gilette MachIPv6 Razor, with a full web interface to monitor individual blade sharpness, but alas, now I'll have to launch the plain old IPv4 version. How will I ever manage?

    1. Re:Some places have already tried... by ScuzzMonkey · · Score: 1

      Whew. Glad I didn't get that job over there at Zama, after all. It's amazing how many places didn't hire me a year ago that are out of business now. :)

      --
      No relation to Happy Monkey
  22. Too costly at this point by Tremul · · Score: 1, Redundant

    The main reason we aren't seeing widespread IPV6 is that it's not backwards compatable wiht IPv4. This being the case we would essentially have to replace every server in the US to get IPv6 to work.

    Other solutions like tunneling,translation and dual stack do exist. However all of these technologies(except dual stack) have limited capabilities.

    Having a Dual Stack(one that supports both IPv4 and IPv6) seems to be the most obious solution for the transition. However, this still requires the replacement of servers accross the World.

    --

    "Can't sleep. Clowns will eat me"
    1. Re:Too costly at this point by ShmakDown · · Score: 2, Informative
      Hardware implementation is most deffinatly the bottle neck that has to be dealt with, but some of the tunneling solutions that are out there now are not as bad as they might seem.

      They basically just wrap an IPv4 wrapper around the IPv6 packet and send it back out across the net. A lot of network edge routers do similar types of things already, and many edge routers are doing IPv6 tunneling now.

      Check out info about netBSD's IPv6 packages to see what solutions are already available and starting to become more wide spread.

      --
      WeFunk
    2. Re:Too costly at this point by Webmoth · · Score: 2

      IPv6 is backward compatible. I believe what you meant to say is that IPv4 is not forward compatible: in order to make IPv6 work, all routers have to be IPv6 compatible.

      What's standing in the way is that a large number of routers are not upgradeable to IPv6, and the cost of replacing would be greater than the return on investment.

      Let's say that you replace an existing IPv4 router with an IPv6 router costing 3000USD. Labor and downtime costs during the replacement will probably range a couple thousand more USD. So you're looking at 5000USD. In order to justify the investment, you must realize at least 5000USD (plus interest) profit from sales of IPv6 bandwidth over the life of the router. You won't sell IPv6 bandwidth until there is a definite need; with all the various "patches" out there (DHCP, NAT, Dynamic DNS, etc.) it may be quite a while before IPv6 is needed. You may find that IPv6 is not needed until AFTER the MTBF of the router!

      Bandwidth providers are waiting for the need. However, I think it would be wise when installing new or replacement hardware, to replace it with IPv6 capable products.

      If you can't do that, it's a waste of money, and wasting money is no way to do business.

      On a side note, there are only 16^12 MAC addresses available. When will we run out of these? ;-)

      Completely off-topic: I've seen only one forward-compatible technology: WordPerfect 6/7/8/9/10/etc. Save something in WP10, you'll be able to read it in WP6 (minus some formatting, but you'll be able to read it, with most of the formatting intact). I may be wrong, but I believe this was designed when Borland owned the product. Kudos to Borland! "Backwards compatible" implies that current technology is compatible with legacy formats and protocols. "Forwards compatible" implies that current technology will be compatible with future formats and protocols, is designed to be expandable, and designed to tolerate unknown features.

      --
      Give me my freedom, and I'll take care of my own security, thank you.
    3. Re:Too costly at this point by Tremul · · Score: 1

      IPv6 is backward compatible. I believe what you meant to say is that IPv4 is not forward compatible:

      No. I meant exactly what I said. IPv6 is not backwards compatable. In other words it can't be deployed on the existing system.

      Completely off-topic: I've seen only one forward-compatible technology: WordPerfect 6/7/8/9/10/etc. Save something in WP10, you'll be able to read it in WP6 (minus some formatting, but you'll be able to read it, with most of the formatting intact).

      Once again you're off. WP10 is in this case backwards compatable when reading files with WP6. Forward compatable implies they had forknowledge of the new standard. And if so why wouldn't they just deploy it.

      I may be wrong

      You are

      --

      "Can't sleep. Clowns will eat me"
    4. Re:Too costly at this point by Anonymous Coward · · Score: 0

      Actually, you're wrong.
      He said that WP6 can read WP10 files, not the other way around. That is forward compatibility.

    5. Re:Too costly at this point by Anonymous Coward · · Score: 0

      Tremul, you are obviously an idiot. I gather Georgia Tech has fairly lax standards for admission...

    6. Re:Too costly at this point by Anonymous Coward · · Score: 0

      There are essentially 3 problems with IPv6:

      1- Backbone routing of IPv6 packets
      2- Access from old IPv4-only clients to IPv6 servers
      3- Access from IPv6-only clients to old IPv4 servers

      1 is solved by using dual-stack routers (or redundant infrastructure, but dual-stack routers are more cost-effective).
      2 may be easily solved by having the IPv6 router support also IPv4 (i.e., dual-stack), but may also be solved by having NAT-PT on the last router before the server.
      3 may also be easily solved by NAT-PT (in the opposite direction) on the last router before the server.

      Out of these, only 1 is expensive to solve.

      Why doesn't IPv6 replace IPv4? Well, you know: old protocols never die, they just stand in the way of innovation and progress...

  23. Because of all the moron MCSE IT staffers out ther by i0nic · · Score: 1, Informative

    As long as companies and institutions keep hiring IT managers whose only technical knowledge lies in the realm of the Redmond, new technology will be implemented slowly. Every company or institution I either work or consult for now with a pro Microsoft IT manager is well behind the curve. The Linux/Unix pro IT managers I deal with already have IPV6.

  24. Get some from the U.S. by Wassini · · Score: 0, Redundant

    The problem could be solved very quickly for some time just by limiting the IP pools for some of the big U.S. universities. Some of them have more IP addresses than e.g. China.

    Not a permanent sollution but...

    --
    Lars Bo Wassini
    1. Re:Get some from the U.S. by Bullschmidt · · Score: 2

      The problem with at least some of these, is that these universities have so many because they were some of the institutions which started it all. Its tough to take something away from someone when they played a large part in its creation.

      --
      "Of all days, the day on which one has not laughed is the most surely the one wasted." -Sebastian Roch Nicol
    2. Re:Get some from the U.S. by belg4mit · · Score: 1

      :-D MIT has 18.*.*.*

      --
      Were that I say, pancakes?
  25. It'll happen when "everyone" knows how it works by Colin+Smith · · Score: 2

    At the moment, IP VI is just a name to most network and systems administrators. My Linux boxes have VI support but I've never looked at it.

    When there's available information about where to get addresses, configuring routes, netmasks, gateways, setting up name services etc. All the admin stuff that's done on a daily basis with IP IV.

    At the moment nobody knows what they have to do in order to setup and use IP VI.

    --
    Deleted
    1. Re:It'll happen when "everyone" knows how it works by Anonymous Coward · · Score: 0

      O'Reillynet Published a great article on IPv6 on FreeBSD recently. I'd be surprised if there aren't similar things for Linux.

  26. The installed base is hard to change... by Old+time+hacker · · Score: 4, Informative
    I think that IPv6 will take a significant amount of time to acheive widespread deployment in the US. Why? There are too many devices (cable/dsl router/firewall appliances) in use that don't support v6. While they may be flash upgradeable, I'm sure that the vendors would prefer to sell a new box which did support v6.

    I've thought about running v6 at home and connecting up to the 6bone. However, the list of instructions was long and complex, and it was unclear to me that my existing ipchains based firewall code would continue to protect me. It was also unclear that I could enhance the ipchains rules to protect myself.

    I quite like the idea of being able to expose multiple devices on different IP addresses, but it is (still) a non-trivial exercise.

    On a side note, I'd like to see more deployment of multicast -- this could help Internet Radio stations significantly in the future. Yes, there aren't good multicast clients at the moment, but that is because there is little multicast to listen to, and no way of getting multicast to the end user. Lobby your ISP for multicast!

    p.s. In case you think that I'm an idiot for not being able to configure IPv6 on Linux -- I'll tell you that I was kernel contributer in the pre-1.0 kernels.

    1. Re:The installed base is hard to change... by leviramsey · · Score: 1

      The 2.4's netfilter can firewall IPv6

    2. Re:The installed base is hard to change... by mgv · · Score: 2

      p.s. In case you think that I'm an idiot for not being able to configure IPv6 on Linux -- I'll tell you that I was kernel contributer in the pre-1.0 kernels.

      I know your pain. I was never up to being a kernel contributor, but I wrote a fair bit of code from assembly level (multiple CPU types) upwards.

      I still can't get SAMBA to talk with a windows NT share. Its reassuring to know I'm not the only stupid one around.

      Michael

      --
      There is no cryptographic solution to the problem where the intended receiver and the attacker are the same entity.
    3. Re:The installed base is hard to change... by Anonymous Coward · · Score: 0
      I'll tell you that I was kernel contributer in the pre-1.0 kernels.


      Linus... is that you???


      :)

  27. What's the problem here? by RMSIsAnIdiot · · Score: 0

    The biggest "What if?" is that if China's population keeps growing, we will definitely need IPv6 soon. But since everything in Red China runs through proxy servers, where's the problem? Just use NAT!

    --

  28. Headaches by Tremblay99 · · Score: 1
    OS's are easy to upgrade -- or, at least, they should be. But what about all those hardware devices like SOHO broadband routers? Those suckers are everywhere. I remember reading that mine, a NetGear RT 314, couldn't possibly do IPV6.

    I can see telcos and corporations using it. For them, the advantages are great. But for consumers? The hassles would seem to outweigh the benefits.

  29. I thought by abe+ferlman · · Score: 1

    I thought WindowsXP solved all our DOS problems...

    ba-dum pshhhhhh

    --
    microsoftword.mp3 - it doesn't care that they're not words...
  30. IPv6 = Touch Tone by bigpat · · Score: 1

    We are back to the old days of AT&T taking 20 years to roll out a new service... this will end up being like "Touch Tone" which we are all still paying for.

  31. It's a simple fix by I_redwolf · · Score: 2

    OS vendors just need to start supporting it and network/system administrators need to start implementing it. For instance Solaris comes with the option of enabling IPV6 but keeping continued functionality with IPV4, it allows for migration. Openbsd does this as well I believe and I've started to see some Linux distro's do the same. Now all we need to do is actually implement it. Alot of people seem to be afraid of IPV6 because of the hex but if you spend a month or two with it; it becomes easier. I recommend some solid reading on IPV4 as well as the IP in general.

    1. Re:It's a simple fix by Anonymous Coward · · Score: 0

      That's like saying: 'World peace is easy. We just need to get people to stop fighting.'

    2. Re:It's a simple fix by Anonymous Coward · · Score: 0

      World peace and the migration to IPV6 are two different things. It's more like comparing people transferring from 32bit to 64bit. As the need increases the migration will happen anyway.

  32. Re:Ipv6 already all used up... by Indras · · Score: 1

    But you can have 192.168.0.4

    And 127.0.0.1 :o)

    --
    The speed of time is one second per second.
  33. IPv6 and IPv4 can live together by wackybrit · · Score: 3, Informative

    Some people have asked whether we can have both systems and 'switch' between them. Sure you can, but it's not worth it.

    As far as I recall (been a long time since I studied this), IPv6 and IPv4 can actually live and work together on the same network.. without being independent.

    That is, IPv6 can be used on the backbones and to connect the larger networks, but IPv4 can still be used at a more local level. Gateways can be established that will translate addresses and the benefits of having far more addresses available can be realized.

    However, one problem with running both protocols and using a gateway is that the only benefit you get is having more addresses.. but since we're running out of IP addresses with v4, this is kinda important. A local v4 and backbone v6 solution wouldn't help solve local DOS problems, or allow us to use any of v6's advanced features.

    But is an Internet wide upgrade to IPv6 really a viable thing to do? It'd be like converting the US to drive on the left side of the road overnight. Even if you did it state by state, you're gunna have major troubles at the state borders.. converting the Net over to IPv6 will be the same.

    That said, there is a network called the 6Bone which you can join up to and actually play with IPv6 stuff from your existing IPv4 network. Go, and get your own IPv6 address today!

    (Disclaimer: As I said, I studied IP way too long ago, so any updates, corrections or just plain disagreements with my post are welcomed, and indeed encouraged.)

  34. Re:Ipv6 already all used up... by Anonymous Coward · · Score: 0

    && 0.0.0.0

    ;)

  35. Don't hold your breath by MeowMeow+Jones · · Score: 4, Funny

    Most of the people I know haven't even upgraded to IPv5 yet!

    Come on people, it's 2002!

    --

    Trolls throughout history:
    Jonathan Swift

    1. Re:Don't hold your breath by Luminous+Coward · · Score: 1
      Most of the people I know haven't even upgraded to IPv5 yet!
      IPv5 aka ST Datagram Mode defined in RFC1190 published in October 1990.
  36. Re: IPv6 would solve some and DOS problems by i0nic · · Score: 1

    Some exploits used to produce DOS attacks are not present in IPV6. I guess that is what he was getting at.

  37. Re:Ipv6 already all used up... by Anonymous Coward · · Score: 0

    But I'm already using 192.168.0.4 ;-)

    I'm gonna stake out one of those big 10. class A's and use it all over my network.

  38. IP6 might be the death of linux. by Krapangor · · Score: 2, Interesting
    ...unless the development speeds up fast.
    My experiences with IP6 and Debian woody:
    • inetd is fucked up accepts only connections to ::1, no other addresses supported which makes the box practically unreachable from outside
    • netstat/route etc don't support ip6, only ifconfig
    • if ip6 is supported then no or only crippled documentation existd
    These are only a few issus. Unless these thing get fixed fast then FreeBSD will replace Linux at most professional environments.
    --
    Owner of a Mensa membership card.
    1. Re:IP6 might be the death of linux. by ShmakDown · · Score: 1
      I doubt linux will fade away for any real reason. It has too large of a development base for that to happen. It might be behind the standards for various amounts of time at different points in the future but big deal, it's still a good free alternative for a lot of people.

      But, the real thing I was going to mention is that if you want to do IPv6 stuff now try looking at the various BSDs. netBSD has a lot of IPv6 packages available.

      --
      WeFunk
    2. Re:IP6 might be the death of linux. by germanbirdman · · Score: 1

      The people standard kernel support for IPv6 sucks. But thank god there are the people at USAGI that are working on an IPv6 implementation for Linux that doesn't suck, and it works rather well.

      Just check out the linux ipv6 howto or go to http://www.linux-ipv6.org to the USAGI site and check out the differences between the standard kernel and the USAGI patched kernel.

      Please note though that while the USAGI people are doing a great job, the IPv6 even with USAGI patches is nowhere near as complete as any BSD with the KAME patch (Multicast routing is totally missing for one thing).

      For an OS with the most complete IPv6 support currently available, check out NetBSD with the KAME patch. You can download ISOs with the KAME patch already on it. Just go to the netbsd home page at http://www.netbsd.org

  39. America Doesn't Change Standards Easily by puppetman · · Score: 4, Funny

    Heck, you are the only first-world nation that doesn't use metric, and that's easy to figure out.

    Yup, a ball and chain slowing down progress....

    1. Re:America Doesn't Change Standards Easily by Angst+Badger · · Score: 1, Troll
      Heck, you are the only first-world nation that doesn't use metric, and that's easy to figure out.

      This got modded up as 'Insightful'? The vital difference is that IPv6 actually does something; the difference between the metric and the older system we inherited from the UK is just a matter of notational conventions.

      (The British hecklers in the audience may wish to remember that they are the only first-world nation without a written constitution, which is arguably more danger-prone than occasionally slamming an unmanned probe into Mars.) ;-)

      --
      Proud member of the Weirdo-American community.
    2. Re:America Doesn't Change Standards Easily by theEd · · Score: 1
      Amen, brother. I would rather we switched to metric than go IPv6. After that we could create a standard mobile phone network. Is it just me or does it seem that we (USA) are not keeping up? Perhaps we are too busy trying lead the parade to realize that the party has gone elsewhere.

      "I'm I too late to miss the 3:00 gyrocopter. I need to get this letter to the Prussian Consulate in Indonesia." - Montgomery Burns

      --
      "And now you shall learn the secret of boot to the head"
    3. Re:America Doesn't Change Standards Easily by Anonymous Coward · · Score: 0

      Who needs a constitution when we have the Magna Carta and a Royal Family?

      Besides, what does it matter? The European Union will be ruling our asses in a few years as we become a little farming state in the United States of Europe.

    4. Re:America Doesn't Change Standards Easily by Anonymous Coward · · Score: 0

      Gah. You're not "first world".

      America is the "new world" (aka 2nd).

      The countries that europe invaded *after* they got done carving up the Americas are the "third world".

    5. Re:America Doesn't Change Standards Easily by Anonymous Coward · · Score: 0

      This is offtopic as fuck, but whatever...

      I'd just like to point out that names like "first-world" and "third-world" are deprecated now that the Cold War (caps?) is over (though a bunch of stupid-ass reporters like to call Africa third-world). First world countries were US,Russia, and the countries that made up Western Europe. Second world: Russian satellites, people that allied with the US. Third world: People so fucked that the US and Russia wanted nothing to do with them.

      Sorry. Just one of my pet peeves.

    6. Re:America Doesn't Change Standards Easily by Anonymous Coward · · Score: 0

      > This got modded up as 'Insightful'? The vital difference is that IPv6 actually does something

      Well.. a friend of mine who is an aviation major was bitching how she has to convert metrics and feet & inches constantly, when comparing the physics and the dimensions of the plane. I think the metric really has a good usage: it keeps people sane.

    7. Re:America Doesn't Change Standards Easily by Anonymous Coward · · Score: 0

      Wrong. Read this.

    8. Re:America Doesn't Change Standards Easily by Anonymous Coward · · Score: 0
      From "Brain Droppings", George Carlin's book:

      Yeah I know what you say, "Well, many people are using it that way so the meaning is changing." And I say, "Well many people are really fuckin' stupid, too, should we just adopt all their standards?
    9. Re:America Doesn't Change Standards Easily by _generica · · Score: 1

      Honestly people, accuracy counts:

      Burns: Yes, I'd like to send this letter to the Prussian consulate in
      Siam by aeromail. Am I too late for the 4:30 autogyro?
      Kid: Uh, I better look in the manual.
      Burns: [groans] Oh, the ignorance.
      [sees Homer and Grandma walking out]
      Wait a minute, I know that woman. But from when? And in what
      capacity?
      [spies "Wanted" posted with Grandma's young picture on it]
      [gasps] It's her. At last!
      Kid: This book must be out of date: I don't see "Prussia", "Siam", or
      "autogyro".
      Burns: Well, keep looking!
      [he turns back, and she's gone]

    10. Re:America Doesn't Change Standards Easily by Anonymous Coward · · Score: 0

      don't be silly. 1st world countries are the big eight; Western europe, the United states, Japan and so on. the 3rd world are the poorest 50% of countries (Maurituania, Comoros, Afghanistan, etc) and the 2nd world is everything in between (russia, india, South africa, most of eastern europe)

    11. Re:America Doesn't Change Standards Easily by Arandir · · Score: 4, Funny

      The US hasn't switched to metric for a very simple reason: those of us living here, regardless of political affiliation, have a very strong individualistic streak. We don't just go change a system just because someone bigger than us tells us to. We spent a decade in the process of conversion and in the end we decided we didn't want the hassle.

      The metric system is still taught in schools, still used in industry, and still available on every milk carton from New York to San Fransisco. But we prefer the English system. We're individualists and that's our choice. Just because it isn't your choice is completely irrelevant.

      Oh, by the way, we've been using metric currency since day one, far sooner than most other countries did.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
    12. Re:America Doesn't Change Standards Easily by Sri+Lumpa · · Score: 3, Insightful
      We don't just go change a system just because someone bigger than us tells us to.

      Nah, you just go and tell other ones to change their system because they are smaller than you.

      --
      "The obvious mathematical breakthrough would be development of an easy way to factor large prime numbers." Bill Gates,
    13. Re:America Doesn't Change Standards Easily by Anonymous Coward · · Score: 0

      That should me marked up +3 "Insiteful"

    14. Re:America Doesn't Change Standards Easily by Zwack · · Score: 2

      But we prefer the English system

      Ahem...

      It's not the English System

      In the UK we call it "Imperial" and it's not the same as the simplified variant that you use in the US.

      Want proof? One fluid ounce is the same in "American" and Imperial. How big is a pint?

      Under the American system a pint is sixteen fluid ounces. Why? Because a pound has sixteen ounces.

      Under the Imperial system a pint is twenty fluid ounces. Why? Because it does.

      Sure it's less convenient to have to remember that a pint is 20 fluid ounces not sixteen, and that a pound is sixteen ounces not twenty...

      But PLEASE don't blame the English for your screwy non-metric system.

      By the way, does anyone know why America is one of only two countries that doesn't use international standard paper sizes? They make perfect sense to me (you can make the next size down by cutting the paper in half, and the next size up by sticking two sheets together.)

      Z.

      --
      -- Under/Overrated is meta-moderation, and therefore is Redundant.
    15. Re:America Doesn't Change Standards Easily by Arandir · · Score: 1

      Nah, you just go and tell other ones to change their system because they are smaller than you.

      Those who can, do.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
  40. Profitability by Jennifer+Ever · · Score: 1

    I doubt it'll really take off until the benefits of an upgrade outweigh the costs of new infrastructure and the loss of value of existing IPv4 address space.

  41. ipv6 is not a problem to implement by Anonymous Coward · · Score: 0

    look at it this way, 90% of the net traffic is porn. all of the protocols that porn is viewed over can be tunnelled over http. http proxies are everywhere, and a decent web proxy can send and receive both ipv4 and ipv6. poc.

  42. In two words: unsold inventory by mangu · · Score: 4, Interesting

    With purchases of new hardware shrinking along with the economy, wouldn't these equipment makers be in a perfect position to benefit from adaptation of IPv6?

    The problem is that shrinking sales has caused a huge amount of hardware to be stockpiled at Cisco warehouses. IIRC, last year they had over 5 Giga$ worth of accumulated unsold hardware. They need technology to stand still for a while, so they can sell part of that obsolete inventory.

    1. Re:In two words: unsold inventory by filtrs · · Score: 1

      Thank you, sir! I knew there had to be a logical explaination and it had to have something to do with $$.

      --
      My mother always used to tell me: If you can't find anything nice to say, say something bad about Windows.
    2. Re:In two words: unsold inventory by qaggaz · · Score: 1

      Umm no! IPv6 does not require new hardware, just a software upgrade. IOS 12.2 supports IPv6, as does JUNOS.

    3. Re:In two words: unsold inventory by Sokie · · Score: 1

      In May 2001, Cisco wrote off about $2.5 Billion of excess inventory, in essence, saying that they never expected to sell that inventory for anything near what it is valued at. More recently they have been getting a nice little boost to their fiscal bottom line by bringing in "excess inventory benefits", that is they are discovering that they actually have been able to sell some of the inventory that had previously been written off.

      But since Cisco has already taken the financial hit for a vast majority of their excess dot-com hardware, I doubt if that is a main reason why they are not implementing IPv6. It probably has more to do with a lack of demand. It's the catch-22 of supply and demand, most people don't do any demanding until there is a good supply (and hence a reasonable price), and most suppliers are hesitant to create a supply until they expect an impending demand, kind of a just-in-time delivery philosophy.

      So until there is a argument for IPv6 that is more compelling to businesses than "it's better in the long run", most places will be slow to upgrade.

      --
      ------
      Where are the slash-groupies? I distinctly remember being promised slash-groupies!
    4. Re:In two words: unsold inventory by Cramer · · Score: 1

      It's not that Cisco has 5billion$ worth of toys in a warehouse, but that they "gave away" billions during the dot com boom for which they were never paid. I've heard stories of new hardware setting in various warehouses that were never unloaded and put to use because the company that bought them (but never fully paid for them) didn't live long enough to deploy any of it.

      Cisco has had to revise many of their policies to deal with the volume of "new" hardware in the used hardware market. Cisco was never fully paid for a great deal of that hardware. It used to be trivial to get used Cisco hardware under a Cisco support contract. Now it's almost impossible.

    5. Re:In two words: unsold inventory by Cramer · · Score: 2

      IPv6 capability within the routing world is trivial. There's not that much to change. It'll take a lot more memory, but very little re-coding.

      However, IPv6 support beyond routing is a huge undertaking. Every single network aware program in existance will have to be rewritten to deal with addresses much larger than they currently are.

    6. Re:In two words: unsold inventory by mwood · · Score: 1

      However, IPv6 support beyond routing is a huge undertaking. Every single network aware program in existance will have to be rewritten to deal with addresses much larger than they currently are.



      Huh? man gethostbyname. Look at the struct hostent. See the h_addrtype and h_length fields. Understand how *some* code will have no problems.


      Code which depends on htonl() and friends will indeed be in trouble.

    7. Re:In two words: unsold inventory by Cramer · · Score: 1

      You obviously aren't a programmer. The number of programs that pay those fields any attention is very low. No program designed in the IPv4 world will know what to do with an IPv6 address. If anything, they see h_length != 4 and abort thinking (correctly) something is very badly wrong. Otherwise, they use the first 4 bytes of the address and attempt to connect to the wrong machine.

      IPv4 programs lack the capability to operate an IPv6 communications channel (read: socket) So, as I originally pointed out, unless a programmer has invested some time to add IPv6 support, it cannot use IPv6. For example, in the absence of a translator, an IPv4 telnet cannot connect to an IPv6 (only) telnetd. If it gets an IPv6 address via DNS, it'll most likely crash on the spot.

  43. Tech Issues by caperry · · Score: 1

    The biggest roadblocks I see are technical issues:

    Routing - We now have over 5 BILLION subnets to route on the backbone. Name one piece of Cisco hardware that can traverse a routing tables with 5,000,000,000 entries in less than 10ms.

    DNS - The great debate of AAAA vs A6 vs somthing else. And while we're at it, is an extension on the exiting DNS system worth it, or should we go to somthing better.

    Security - Do we trust Verisign enough to continue issuing all the certificates that make the internet more secure? Do we trust them enough to keep name resolution secure? Can we use crypto on the Internet without worring about severe criminal penalties?

    And on top of that there are the political issues. IPv6 will solve problems, but it will cost money. The world likes "bug fixes" and "service packs" better than product replacment. Remeber, upgrades can be hidden in support costs while new products require management approval.

    IPv6 is coming, but prob. not until the entire far-east (India, China, etc) are as on-line as the west. IPv6 will be implemented out of desparation, and not by any IETF mandate. Of course, I have been wrong before.

    --
    -Carl "No, we already thought of that one. 'Why?' '42' - It doesn't fit." -Hitchhiker'
    1. Re:Tech Issues by dieman · · Score: 2, Insightful

      Because of the larger space, theres no reason AOL can't be aggragated into *one* bgp announce and be allocated *one* block that they will ever need, forever.

      Fear that!

      --
      -- dieman - Scott Dier
    2. Re:Tech Issues by Anonymous Coward · · Score: 0


      And how can there be "over 5 BILLION subnets"
      where there are only 2^32 (about 4.3 billion)
      addresses in ipv4?

    3. Re:Tech Issues by sxpert · · Score: 1

      cool, it will largely simplify the filtering of the crap coming from their mail servers

  44. An interesting question by wowbagger · · Score: 5, Interesting

    OK, I am about to say something that will make many of you who are knowledgable about IPV6 cringe, so take a deep breath and get over it now.

    When IPV6 is deployed, how do I prevent the machines on the inside of my firewall from being routable?

    Right now, my personal computer is on the inside of a NAT firewall. There is no way you can route a packet to it - go ahead, try to telnet to 10.200.120.4, I dare you.

    Now, I know there are those who say NAT CONSIDERED HARMFUL, and I agree in the general case it does break the essential peer to peer nature of TCP/IP.

    But what if I want to break it?

    How well tested are the Linux kernel modules for firewalling IPv6? Can I still protect my internal machines from the slings and arrows of outragous 5|<197 |<!66!3Z?

    1. Re:An interesting question by vrmlguy · · Score: 2, Informative
      Someone asked:
      When IPV6 is deployed, how do I prevent the machines on the inside of my firewall from being routable?When IPV6 is deployed, how do I prevent the machines on the inside of my firewall from being routable?

      The answer is to use a "Site-Local" address for any device that you don't want seen outside your site. From RFC 2373:
      There are two types of local-use unicast addresses defined. These are Link-Local and Site-Local. The Link-Local is for use on a single link and the Site-Local is for use in a single site. Link-Local addresses have the following format: [...]

      Link-Local addresses are designed to be used for addressing on a single link for purposes such as auto-address configuration, neighbor discovery, or when no routers are present.

      Routers must not forward any packets with link-local source or destination addresses to other links.

      Site-Local addresses have the following format: [...]

      Site-Local addresses are designed to be used for addressing inside of a site without the need for a global prefix.

      Routers must not forward any packets with site-local source or destination addresses outside of the site.



      --
      Nothing for 6-digit uids?
    2. Re:An interesting question by Anonymous Coward · · Score: 0
      When IPV6 is deployed, how do I prevent the machines on the inside of my firewall from being routable?

      Right now, my personal computer is on the inside of a NAT firewall. There is no way you can route a packet to it - go ahead, try to telnet to 10.200.120.4, I dare you.


      Well, the way you want it, it's simple: you don't. IPv6 was designed so that true Peer-to-Peer communication is restored. So, if you want to talk to someone via IPv6, you should have a routable IP.

      IPv6 has two kinds of "unroutable" IPs. But if you use those, you can't talk to the rest of the world by design.

      Now, you did mention firewall. You know what a firewall does, don't you? It wasn't supposed to do NAT. You should just filter out packets that are unwanted. The fact that the address is unique globally instead of something only internally to your network doesn't change that.

      Granted, so far you can't do IPv6 connection tracking in Linux, so you can't use ip6tables -A FORWARD -i eth1 -mstate --state ESTABLISHED -j ACCEPT...

    3. Re:An interesting question by TrixX · · Score: 2
      how do I prevent the machines on the inside of my firewall from being routable?

      The same way you do that now: Using unroutable (i.e. private) addresses in your internal network instead of public ones.

      I might not remember this correctly, but I think IPV6 had a large set of private addresses for use in internal networks.

      Anyway, a firewall is always useful, because somebody at your USP could route to your internal network if you had forwarding enabled (which you have probably if you do NAT), and anyone at the internet can route you through source routing (although source routing can be disabled in Linux, and probably in any serious OS.)

    4. Re:An interesting question by j+h+woodyatt · · Score: 1

      You are mistakenly confusing the function of a network address translator with the function of a firewall.

      If we ever get around to deploying IPv6, we will still need firewalls for all the same reasons we need them with IPv4. We will not need network address translators, since they will not be providing any useful function whatsoever.


      --
      jhw
    5. Re:An interesting question by Skapare · · Score: 2

      There are plenty of useful functions for NATv6. See my post above.

      --
      now we need to go OSS in diesel cars
    6. Re:An interesting question by germanbirdman · · Score: 1

      I don't need to explain the difference between local link, site local and global anymore.

      But say you have a current NAT architecture (IPv4) that allows clients in the network access the outside and not the other way round.

      That does pose an interesting question.

      It could easily be done with an iptables firewall though, denying anybody to establish connections to your prefix.

      I agree though that if the firewall is overcome, every host is easily identified and can route.

    7. Re:An interesting question by scrytch · · Score: 3, Informative

      When IPV6 is deployed, how do I prevent the machines on the inside of my firewall from being routable?

      Tell your firewall to not route it. The only reason 10.0.0.0 and 192.168.0.0 (I don't remember the class C one) are non-routable is because every single hop has wired into it the knowledge that those aren't routable.

      Plus, I have to imagine there are nonroutable IP6 blocks as well...

      --
      I've finally had it: until slashdot gets article moderation, I am not coming back.
    8. Re:An interesting question by Creepy · · Score: 1

      NAT also gives one other nice feature - the ability to run home networks without paying an "IP Tax." My current provider attbi (and since Northpoint's demise, only alternative to Quest DSL, i.e. the lesser of 2 evils IMO), gives me one DHCP address which I pay ~$46/month for, since I also get Cable TV ($56 otherwise). Additional DHCP addresses though them are something like $10/month (that might be for 3). So by using NAT, I pay at least $120 less every year in IP taxes. My former static IP provider, PhoenixDSL, had a $10/IP fee for additional IPs (but cost $40/month while they lived). I have 3 computers, so I would've paid $240/year in IP taxes through that system.

      Obviously it's in the best interest of ISPs to get everyone to pay for additional IPs, but it's certainly not in MY best interest :)

      btw, I also have Covad in my area, but they only offer $100+ SDSL lines starting at 128/128, which is totally unacceptable. Quest offers 640/128 ADSL, but cost is $60/month once I tack on an ISP (not including MSN, which is cheaper, but Windoze only). In contrast, I was running 780/384 with Northpoint/Phoenix for $40.

    9. Re:An interesting question by docwhat · · Score: 2

      I'm confused. Are you saying you have a NAT+Firewall and you are asking how you would set things up with IPv6?

      Answer: You keep the firewall and toss NAT.

      Or are you asking how good the Linux IPv6 filewall stuff is? I don't know about that...I assume it works. But I don't know.

      --
      The Doctor What (KF6VNC)
    10. Re:An interesting question by Anonymous Coward · · Score: 0

      Dude .. look at the IPv6 address space definition. There are lower-order bits for flagging things like "not routable outside organization", "not routable outside locale", et al.

  45. IPv6 by SkewlD00d · · Score: 2
    Interesting moot point... it seems that 3G licensees were going to require IPv6. Search for "IPv6" on various corporate and info sites:



    This long annoying sentence here to get around an annoying slashcode bug, because it can't count.

    --
    The biggest trick the devil pulled was letting lawyers become politicians so they can write the laws.
  46. ISP's are biggest holdbacks... by kbonin · · Score: 3, Interesting

    They have tons of money invested in hardware they don't want to replace. Sticking to IPv4 makes it easy to keep user bases behind short-lease DHCP, which helps to keep the average user from mounting a public server that'll eat bandwidth the ISP doesn't want to provide.

    Also a few Cisco points: 1) While some routers do support IPv6, the cheaper ones don't, and a decent percentage of older high end routers have routing algs implimented in semi-custom silicon - not software upgradable! 2) The enterprise network management software is lagging behind in IPv6 support last I heard (I used to work there), not much demand.

    1. Re:ISP's are biggest holdbacks... by Anonymous Coward · · Score: 0

      Actually the core networks are the biggest holdbacks. I work for a small ISP (~4500 users). We really can't afford to invest in new equipment, especially since *there is no reason to* - our upstream providers don't support IPv6, I don't have the time to deal with learning it at the moment, and it's going to (potentially) need expensive new hardware and many of our older office systems won't be supported. So you tell me - why bother upgrading at this point?

  47. USB, NAT by Pussy+Is+Money · · Score: 1
    A few years ago the IPv4 address shortage seemed more urgent than it is now for a couple of reasons. One of them is obviously the web monoculture -- Internet access has become virtually synonymous with web browsing. This allows a lot of corners to be cut.

    Another thought that occurred to me is that the predicted explosion of TCP/IP-enabled devices never really took off. It's interesting to see how many devices instead use USB, or serial, or some other means still to connect to eachother, instead of TCP/IP over Ethernet. This is something that I think was overlooked in earlier predictions.

    --
    Pushin' 'n dealin', shovin' 'n stealin'
  48. IPv6 support better in BSDs then linux by ShmakDown · · Score: 1
    I've noticed a lot of people complaining about Linux's IPv6 support or lack there of, and just wanted to point people over to the BSD flavours that have a lot of IPv6 support.

    Personally I'm more farmilar with netBSD, there IPv6 package list can be viewed here.

    Most of the BSD's also have great multicast support and mbone packages.. Jim

    --
    WeFunk
  49. How to transition? by A+nonymous+Coward · · Score: 4, Interesting

    Suppose I take my home network (2 computers + 1 firewall), all running some form of highly modded Slackware, and switch the internal local net to IPv6 while leaving the connection from the firewall out as IPv4. Thus the 2 computers would be completely IPv6 while the firewall would have one IPv6 nic and one IPv4 nic. I have to change all dotted quad network addresses (such as in /etc/hosts); what else is there to do? Will existing software go along with the change without recompiling? Or even with a simple recompile?

    I bet there's some FAQ somewhere that someone will find using Googole. AIA

    1. Re:How to transition? by Wesley+Felter · · Score: 2

      You'd also have to make sure that every network app running on those inside computers supports IPv6, and you'd need some sort of protocol translator on the gateway. For those reasons, I wouldn't suggest that scenario.

      I would suggest running both v4 and v6 on the inside machines and making the gateway into a 6to4 border router.

    2. Re:How to transition? by An+IPv6+obsessed+guy · · Score: 2, Informative
      On your gateway, run a 6to4 translator (eg NATPT.) To handle DNS, run the Trick-or-Treat daemon, which takes IPv4-only addresses and puts them into v6 form (NATPT then translates it back at the border.)

      Now port all your apps to support IPv6. This involves changing IPv4 specific function calls to their IPv6 equivalent. For folks like me, who only use the web & ssh, this isn't even an issue, since OpenSSH and Mozilla support IPv6.

      Viola, you're running IPv6 and nothing else.

    3. Re:How to transition? by Anonymous Coward · · Score: 0
      Viola, you're running IPv6 and nothing else.
      It's voila, damn it!
    4. Re:How to transition? by einer · · Score: 1

      Mabye he was addressing the stringed section of the orchestra. I've heard that IPv6 will provide an address space large enough so that even orchestral instruments will have their own ip!

  50. Re:WARNING!!! **GOATSE** LINK ABOVE!!! by dcviper · · Score: 0, Offtopic

    no it doesn't, its worse. its o'reilly creepy animals.....

    --
    Ummm, err, say what, now?
  51. Breathing life into IPv4? by Alioth · · Score: 2

    One thing I've noticed is that there's an awful lot of organizations (well, certainly a big handful) which have entire allocations of the old Class As. But virtually all their IP address space is hidden and non-public. People like the United States Postal Service (56.0.0.0 - 56.255.255.255), IBM (9.0.0.0 - 9.255.255.255). These organizations have barely a handful of publically-visible IP addresses, but these massive blocks in the IPv4 space. The USPS has 24 million IP addresses in their block, but probably less actually visible than a small Midwestern mom-and-pop ISP.

    Why aren't these organizations told that they have, say, 2 years to move to a private 10.x.x.x network, thus freeing many millions of IPv4 addresses, instead of forcing small organizations to come up with huge justifications for a very small number of addresses?

    1. Re:Breathing life into IPv4? by MavEtJu · · Score: 1

      But virtually all their IP address space is hidden and non-public.

      From the public internet yes. But not from other companies they're connecting to.

      I have worked for a company which implemented Third Party Gateways *waves to Frank, Guido, Arjen, Andre, Dick et al*: A global cluster of packet filtering firewalls which allowed third parties to connect via a local (as in: the same country) gateway into their network to go to a specified host on the companies intranet.

      If this would be implmented with private numbers (10.x, 192.168.x et al), the amount of troubles with regarding of NAT would be colossal (imagine all the proprietary protocols of the ERP systems).

      That is why you need globally unique IP address on a system: To have a transparant path from one host to another, no matter where you are, no matter who it is that connects to you.

      --
      bash$ :(){ :|:&};:
    2. Re:Breathing life into IPv4? by Anonymous Coward · · Score: 0

      Why aren't these organizations told that they have, say, 2 years to move to a private 10.x.x.x network, thus freeing many millions of IPv4 addresses, instead of forcing small organizations to come up with huge justifications for a very small number of addresses?

      That's exactly the point. Instead of moving someone's network into private IPs, shouldn't everyone be entitled to global IPs? That's one of the things IPv6 is out there for.

  52. I've tried IPv6 with Windows 2000... by chrysalis · · Score: 5, Informative

    A major showstopper may be Windows.

    Let's see. To be widely deployed on WAN networks, IPv6 should first be widely deployed on local LANs.

    It works very well on Unix systems. My little personal network has a bunch of OpenBSD and Linux boxes, 100% IPv6, and everything works like a charm.

    But what about Windows?

    I tried it with Windows 2000. Because the OS doesn't support IPv6 natively, I had to download a patch (and it's not very easy to find, I can't remember the exact URL, the link was posted on a ML a while ago) .

    Before the patch applied I had a big fat warning "Disclaimer: this is very alpha software, your OS can become extremely unstable. Don't call the Microsoft technical support any more after that, we won't answer" (the words were different, but it was the meaning) .

    And indeed. The system went very unstable, even for IPv4 requests. IE worked. *some* command-line tools worked. But third party packages like Mirc, CuteFTP and Opera crashed with no further warning.

    It looks like there's no effort in the Windows world to provide IPv6-enabled software. This is a major showstopper.

    --
    {{.sig}}
    1. Re:I've tried IPv6 with Windows 2000... by GooRoo · · Score: 1

      You're absolutely right, given the installed base of Windows there will be a huge migration that needs to take place. Microsoft explains their position in this web document.

      The ip stack you were referring to is available here but as you can tell this information is quite old and the tech has moved from the research phase to the early adopter phase.

      It will be interesting to see what they do with .Net server (xp server/nt6 server) which was originally to be the first Microsoft server that is ipv6 capable out of the box.

      It is of note that XP does include some 6 functionality, but as thisdocument shows it isn't exactly ready for prime time.

    2. Re:I've tried IPv6 with Windows 2000... by eMilkshake · · Score: 1
      Eh?

      Pop out to a command shell in WinXP and type
      ipv6 install

      You'll be greeted with a message saying
      Installing . . .

      Then type
      ipv6 if
      to see your shiny, new IPv6 address. Microsoft states that the ftp and telnet clients are IPv6 enabled along with RPC and some other stuff.

      So, Windows is ready! Out of the box, er almost.

  53. Still paying for IPv4 deployment by nomadicGeek · · Score: 1

    I think that it will be a while before you start seeing a lot of upgrades to support IPv6. Most ISP are still in a lot of debt from installing the first round of equipment. With the industry in such bad shape, it is hard to believe that any of them will be shelling out the bucks to upgrade to v6 until there is a major incentive to do so.

    With all of the things that IPv6 provides, I don't see anything in the short term that is going to necessitate a move. As long as we can work around the existing problems, nobody is going to invest the money in an upgrade.

    I'm a geek and would love to see it happen but you have to convince the guy with the MBA that he can make money by investing in the upgrades. I don't see the economic incentive right now.

    1. Re:Still paying for IPv4 deployment by Skapare · · Score: 2

      The cost to "upgrade" to IPv6 can be simplified by having IPv6 be translated at or near the border to IPv4 private addresses on the inside. No OS upgrade needed. No application upgrade needed. Just make sure your border routers can do IPv6, add the NAT, and you're live.

      --
      now we need to go OSS in diesel cars
  54. How is this a troll?!?!?! by mekkab · · Score: 1

    HE has a point! "Hey, buddy, I'm on server bigfatpipe.edu, get into the frag frenzy!"

    Originally people said "hey, these IP addresses, they're too long, and they're wierd. let's correlate them with real names." It's the same thing for MAC addresses (via ARP and RARP), it's the same thing for IPv4 addy's, and it'll be the same thing for IPv6 addys.

    --
    In the future, I would want to not be isolated from my friends in the Space Station.
  55. To be implemented when we go metric by WillSeattle · · Score: 1

    Last I heard, the USA will go IPv6 when we convert to metric.

    So figure about 2132 at the rate we're going ...

    -:(

    --
    --- Will in Seattle - What are you doing to fight the War?
  56. It's the applications by Anonymous Coward · · Score: 0

    I don't think the problem is in the backbone. It's at the edge. Do all applications (emacs, gnus, mozilla, ssh, flash, real et al) and servers (apache, oracle, innd, sendmail et al) know how to deal with IPv6?

    In my work, I've written a lot of IPv4 clients and servers, and none of them support IPv6 addresses.

    Marko

    1. Re:It's the applications by iPaul · · Score: 1

      To some degree yes. We use SSH clients with 6 support. Intalling DNS has been a little problematic (mostly because I haven't had as much time as I'd like to work on it) the docs say you can but I've never been good at following directions. Telnet, FTP have IPV6 support in both the Linux and Solaris environments we use.

      --
      Leave the gun, take the cannoli -- Clemenza, The Godfather
  57. IPv5 by Daniel+Zappala · · Score: 1

    Actually, IP version 5 was assigned to a protocol called STII, which tried to do resource reservation for IP (similar to RSVP) but was never adopted much (aside from some experiments in Germany).

    So the next number really will be IPv7 -- it's just a question of who asks for it. Quick, go write an Internet Draft and then call for a BOF!

  58. Will Red Hat or Debian enable IPv6 in their kernel by Anonymous Coward · · Score: 0

    Cisco now has IPv6 in Cisco IOS 12.2T and higher:

    http://www.cisco.com/warp/public/732/Tech/ipv6/ipv 6_techdoc.shtml

    At least in the kernel on Red Hat 7.1, they
    do not enable IPv6 by default:

    % ping6 ::1
    socket: Address family not supported by protocol

    Does Debian enable IPv6 support in their kernel
    by default?

    If there was a mainline Linux distro that
    supported IPv6 out of the box, that would be
    one way to stir up demand for it.

    Most of the Linux IPv6 work is going on in Japan, not in the U.S.:

    http://www.linux-ipv6.org

    The Linux IPv6 work doesn't seem to be the major focus of the core Linux kernel developers these days.

  59. WTFC by huckamania · · Score: 1

    Who the phuckamania cares what other freaks are running? My linux box can be running IPV4 or IPV6, doesn't help the adoption of IPV6 if I never run it in IPV6 mode. True for windows, apple, hpux and every other os. Sweet linus can you folks please not bring the devil into every conversation? Stare into the abyss long enough and you will find it staring back. Huckamania running wild!

  60. Cisco is the Microsoft of routers by mangu · · Score: 2

    Whatever Cisco decides, it will be the consensus in the networking world. What they know that we don't is that they are in deep financial trouble. Their worldwide employee layoff figures last year were in the five-figures range. Their troubles started when they implemented a sophisticated market analysis system that predicted increasing router sales throughout 2001. That software was so "advanced" that they refused to believe their sales people when they started telling management that they couldn't possibly sell so many routers.

  61. What About IPv6? by t_allardyce · · Score: 4, Funny

    How Long Until Widespread Deployment?

    About 15 years.

    After the introduction of the SSSCA in 2003, Microsoft dominated the US OS market. While other countries switched to IPv6, America was forced to use the proprietary protocal built into windows (thanks to auto-updates) which included advanced DRM, IP tracking and P2P restrictions - as a standard client, your computer could only connect to a 'server' i.e a Windows machine running Windows Server Edition with a valid federal license. The internet was effectively split in 2 - USA, and the rest of the world (troll: this didn't matter as most US citizens didn't know about the 'rest of the world' lol :)

    It wasn't until the great Microsoft witch hunt of 2017, when 4000 Microsoft employees where burnt at the stake after the SSSCA was lifted (well, not lifted per say, actually, someone just blew-up congress)

    --
    This comment does not represent the views or opinions of the user.
  62. Moron by Tremul · · Score: 1

    IPV6 is better. Autoconfiguration, neighbor discovery, big address space, compatability with IPV4, etc

    IPv6 is in NO way compatable with IPv4. Have you even looked at the specifications? I cann't believe you got modded up for this.

    Frankly, I'm thinking we might see another round, like IPV7 (or IPV8 if they make a habit of skipping odd numbers), or it might come very late. Maybe we'll see it on phones and wireless devices before we see wide-spread adoption of IPV6 or general purpose networking.
    You truly have no clue do you.

    --

    "Can't sleep. Clowns will eat me"
  63. IP6 might be the death of debian by mangu · · Score: 1

    Anybody that insists in saying "GNU/Linux" has such a convoluted way of "thinking" that they must be totally unable to evoke the sharp and fast thinking IPv6 demands. BTW, I absolutely refuse to call my car a "GoodYear/Chevrolet"!

  64. "IPv6-ville" by LoudMusic · · Score: 1, Redundant

    Only slightly off-topic.

    A friend of mine (ZettaMatrix) and I were in our usual "Wouldn't it be cool if..." mode the other night and came up with a rather interesting proposal.

    If you could find roughly 35,000 volunteers who would be willing to spend no less than four years in something similar to a city wide 'Bio-Dome', we could learn a lot about our technology and where we need to go next. They would have to be willing to give up everything they've got to live in this place though.

    A city the size of my town, powered by nuclear energy, and chalkful of all of today's coolest technologies. The only energy source would be nuclear electricity. Housing complexes (modern appartments only) would be wired with fiber, power, and plummed (water in, sewage out). There would be no copper or coax. The city would have a massive server to monitor all the automated mass transit systems (maglev, electic monorail, electric bus ...), and store the citizen's accounts. There would be no personal transit other than Segway (ha ha), bicycle, and sneakers. And it could all be run on IPv6. Every device in the home, every device on workplace, and every device in the 'big blue room' would be managed on a very fast, very stable, very redundant IPv6 network.

    Finding enough employement and generating an economy would be difficult, but I think it could be done. It could use the "Heaven's Gate" approach and use web design as its primary source of external income. Or technology consulting - because you know it'd be 75% geeks. "We're testing the future so you don't have to. Now give us some money!"

    It would have to be a fully functioning city - almost completely independant of outside resources. It would have to supply the majority of its own food, and deal with the majority of its own waste. SimCity 3000 - full scale.

    The issue would be getting it all started. I'd be one of the first to sign up, as long as it's not named after what I'm sure would be one of the biggest funding companies. "The Microsoft City" ... no way man.

    ~LoudMusic

    --
    No sig for you. YOU GET NO SIG!
    1. Re:"IPv6-ville" by Derkec · · Score: 2

      Why nuke power instead of solar / wind or even the highest tech of them all: covection tower power?

    2. Re:"IPv6-ville" by Broccolist · · Score: 1
      So you'd like a city full of technological gimmicks and isolated from the rest of the world. Nice setting for an SF story, but what's the point, exactly? You haven't said what it would be good for or why anyone would want to finance such a project. "test the future"? Can't we do that in an ordinary city? The only use I can see is that we would be able to observe the behavior of a society resembling the population on a colony starship, but that doesn't seem to be what you have in mind.

      BTW, "chalkful"? Mmmm, full of tasty chalk powder. I think you meant "chock full" (or "chock-full", they both seem to be correct) :).

    3. Re:"IPv6-ville" by Salgak1 · · Score: 1

      Well, sometimes, the sun don't shine. OTOH, enough idiots (i.e. lawyers, politicians, MS envangelists, etc) in IPv6ville, and we'll have sufficient wind to need no other power source. . .

  65. You can use IPv6 today! by Wesley+Felter · · Score: 3, Informative

    Even if your ISP doesn't support IPv6, you can use 6to4 to start using IPv6 today. It's much easier and more efficient than the 6bone. Since IPv6 allows a host to have multiple addresses, the eventual transition from 6to4 to native IPv6 will be seamless.

  66. They already have. by qaggaz · · Score: 2, Informative

    Cisco released IPv6 IOS images back in June with IOS 12.2(2)T. Note that this was the first commerical release, there was a earlier EFT release about for quite some time that served as a beta. The major features are there: IPv6 routing, support for stateless autoconfig, IPv6 address family support in MBGP, support for RIPng. No other routing protocols yet.

    You can check out Cisco's IPv6 page for more information.

    Juniper also has IPv6 available, here how to configure IPv6 on JUNOS 5.1.

  67. IOS 12.2 does by dmiller · · Score: 1

    Huh? IOS 12.2 does support IPv6, I recall a Cisco TAC newsletter from midway through *last* year stating that their TACs are willing and prepared to support IPv6.

    12.2 hasn't reached a GD release yet, but it is pretty widely used anyway - especially if you want to run DSL.

    1. Re:IOS 12.2 does by Anonymous Coward · · Score: 0

      IOS will not support IPv6 in a non technology preview release until 12.3.

  68. www.freenet6.net for your free tunnel by Anonymous Coward · · Score: 1, Informative

    get your free ipv6 tunnel many places, including www.freenet6.net. THe latest, official, IPv6 address policy is that everyone (you, too) will get a /48. Yes, the official, IAB/IESG RFC 3177 recommendation! Why are you waiting? ../Steven has www.wraith.sf.ca.us on the 6bone

  69. Why "first" world? by mangu · · Score: 1

    The USA is the only country in the whole world that doesn't use the International System. And, as the people at NASA have learned, to convert from inches to millimeters, you multiply by $250 million... It's often much cheaper to throw away your obsolete systems than to try to live with obsolescence.

    1. Re:Why "first" world? by Julian352 · · Score: 2, Interesting
      The US is not the only country in the world. As can be seen on many different websites there are other countries that use it, they are just much less globally noticed than US.

      In 1990, there were only three nations that had not converted to metric: Burma, Liberia, and the United States. (source: here)

      It is however in US best interest to convert, as many of the other countries require all products to be manufactured to the metric system. If you would go to your local grocery store, you'd notice that some products are already done that way, especially if they have global nature. A good example of that would be the 2 Liter bottle of soda that is sold at the store. As that item is sold both in US and abroad, the manufacturing costs are lower if same measurement system is used. That's why the Liter is used. (to conform to requirements of other countries)

    2. Re:Why "first" world? by Anonymous Coward · · Score: 0

      Well, the US _does_ use the metric system. It's just not required by law that you do so, so only the engineers and scientists use it. For the ordinary person, who isn't building or designing something, why bother to switch?

  70. Re:Moron - Actually YOU don't know what... by iPaul · · Score: 1

    Actually YOU don't know what you're talking about. I'm in the process of implementing IPV6 (part of Solaris 8) on a group of servers as a testbed. IPV6 can be tunnelled over IPV4, also IPV6 can co-exist on the same network. Some routers can also handle routing both IPV6 and IPV4 traffic. In fact, it's a simple translation between 6 and 4 addresses (If you assume the unused portion of the address are zeros.) In fact it's easy to distinguish 4/6 traffic becaue the protocol version number is in the ip packet header.


    There was supposed to be an IPV5 but it got skipped. Given the investment in IPV4 and the time it will take to upgrade networks, educate network administrators, and for the hardware to become affordable even on low end routers/switches, we might never see IPV6 deployed. We might see the generation after that deployed, call it 6A, 7, or (as a little joke about the fact 5 was skipped) 8.


    One area where we may see 6 deployed is for addressable devices, such as phones. In this case the wireless company controlls the network. My Verizon account offers a limitted and filterred version of WAP, for example.


    If you're going to call me a moron, at least be right about it

    --
    Leave the gun, take the cannoli -- Clemenza, The Godfather
  71. Never? by Broccolist · · Score: 5, Insightful
    I'm going out on a limb here, but has anyone considered that IPv6 may never get widespread acceptance?

    From the point of view of any individual organization, there are no reasons to switch to IPv6 right now. First movers receive no benefits at all: in fact, it only makes communicating with the rest of the (currently IPv4) internet more difficult. Moreover, I imagine that many businesses large enough to have an impact already have a large IPv4 address block, and have a vested interest in discouraging others from making the switch:

    1. There is no reason for them to pay for new routers
    2. A crowded IPv4 internet might allow them to loan out some of their in-demand addresses for extra profit.

    The various hacks available for IPv4 do the job. I can easily imagine a scenario where Cisco doesn't push IPv6 routers hard enough in the future, and people invest more and more in NATs and so forth, making a global switch harder and harder as time goes on.

    The fundamental problem is that IPv6 doesn't provide any short-term killer benefits, and that's what's necessary for an evolution to take place. My prediction (though predicting acceptance of technologies is always risky, so I may well turn out to be wrong) is that we will still be using an IPv4 internet in a decade.

  72. IPv6 as the ultimate privacy threat.... by TheNarrator · · Score: 1
    Why do you think they made 128 bits worth of ip addresses instead of 64 bits? Nobody will EVER use that many


    So they can take a biometric of yours, like your retina scan or your dna and give you an ip address that's a hash of it. Whenever you use the internet anywehere you have to get a retina scan that creates your ip address that is mapped back to you.


    All you geeks jump on board like you need this many IP addresses.

  73. backbone in belgium by Anonymous Coward · · Score: 0

    seems like belgium is way ahead of u guys, all our backbones (of belnet, the belgium backbone maintainer) are ipv6 with the ipv4 tunneled in the ipv6 seems like they where ahead of the heard and that the switch here should impose no significant problems

  74. Same old politics by roque0101 · · Score: 1

    The article reminds me of the CLNP mandate that european and american goverments instituted back in the early 90s. CLNP was going to replace IPv4 mostly because of two reasons:
    - It had longer addresses and pretty much the same
    functionality
    - It wasn't a DARPA project. Chauvinism is still a major factor and while the EU and Japan feel that they contributed to CLNP/IPv6 development. IPv4 was seen as an american defense project and thus politically unplesant.

    If you review the american GOSIP, the IAB declaration of that CLNP was going to be the next-generation IP protocol and the european political efforts in the same direction, this seems a perfect carbon copy.

    I guess than whenever clueless politicians get involved in chosing technology the results are always the same...

    The economic cost of replacing IPv4 for the fashion of the moment (CLNP, IPv6) is astronomical and will not happen unless there are very significant benificts to those that pay the cost.
    Fact of the matter is that most people couldn't care less than the chinese do not have enought IP addresses. The internet is still centered around the US in political topology and economic terms.

    I do not see US network and information service providers switching to CLNP anytime soon because there are not enought IP addresses in China. There simply is no economic justification to do so.

    My major beef with IPv6 is that while it is a research toy it isn't a very interesting one...
    It is basically IPv4 with bigger addresses... for that we could have sticked with CLNP and TUBA the last time around.

    I would say it is time the academic community stops wasting time on IPv6 and move on to research projects with real research value...

  75. Try freenet6.net by MavEtJu · · Score: 4, Informative

    If you are interested in playing with IPv6, try to get a tunnel via www.freenet6.net.

    They're supporting devices running *BSD, Linux, Win*, Solaris, HP-UX and Cisco IOS.

    --
    bash$ :(){ :|:&};:
  76. FWIW... by luge · · Score: 2

    Duke has had IPv6 available on resnet since at least some time during the '99-'00 academic year, so at least two and nearly three years. You just had to know who to ask to get an IP address :)

    --

    IAAL,BIANLY

    1. Re:FWIW... by Moridineas · · Score: 2

      My mistake :)

      and geez is the 20 seconds rule annoying!

      Scott

    2. Re:FWIW... by luge · · Score: 1

      Dunno when you started at Duke... if you're a youngster and not a crotchety old alum like myself you might not be expected to know such things. :)

      --

      IAAL,BIANLY

  77. no, everyone. by Penguinoflight · · Score: 0

    It's not north america thats going to drive IPv6, it's Europe and Asia where they're already starting to feel the address squeeze.

    Ask your dialup isp for a static IP account, and they might tell you about another company who will give it to you for $80/month.

    Maybe you aren't, but I am definatly feeling the lack of addresses.

    --
    "And we have seen and do testify that the Father sent the Son to be the Savior of the World"
    1 John 4:14
    1. Re:no, everyone. by sigwinch · · Score: 3, Interesting
      sk your dialup isp for a static IP account, and they might tell you about another company who will give it to you for $80/month.
      That's to squeeze money out of businesses who absolutely need static IPs. At colocation facilities, who are already charging $100+/month, extra static IPs are only a couple of bucks a month each.
      --

      --
      Kuro5hin.org: where the good times never end. ;-)

  78. IPv5 is not stable by mangu · · Score: 1

    5 is an odd number, therefore it's a "development" version.

  79. When AOL does it... by mengel · · Score: 1

    AOL has over 33 Million subscribers; MSN has over 7 (really! see: here ) Until they do it, no e-business site out there is going to want to have a non-IPv4 address, or risk not getting online business from all those customers who obviously are willing to pay way too much money (for an ISP, at least).

    --
    - "History shows again and again how nature points out the folly of men" -- Blue Oyster Cult, 'Godzilla'
  80. NAT provides convenience, not security by pHDNgell · · Score: 5, Informative

    While it may sound neat to say, ``go ahead, try to telnet to 10.200.120.4,'' it doesn't exactly work that way.

    Does this machine on 10.200.120.4 have the ability to make direct outbound connections? Assuming yes, does you realize that the only difference between an inbound connection and an outbound connection is who sent the first packet?

    Many people tend to believe that the *only* security risk they have to worry about is inbound SYN packets, so they base their entire security policy on stopping bad inbound packets. The last two sites I broke into, I did so by tricking a machine to come to me. Just for humor, here are the two scenarios:

    The first one was quite a while ago, and I did it at contract. A co-worker found a potential hole in a CGI, but nobody took it seriously. By sending the right data through the CGI, I found that I could make it execute arbitrary commands. First, I did some basic stuff (id; ls -lR /; etc...) and had it output the mail to me (couldn't see the output from the CGI). I figured out the web server user had a shell and a writable home directory, and the machine had ssh (client and server installed). I generated a private key and had it mail me the public version of that key, then I added it to my authorized_keys and installed my public key in the web server's authorized_keys. Then I had the web server user ssh to my host with remote port forwarding back into the web server's 22. ssh -p 2222 localhost and I'm sitting in a shell on the web server (192.168.something).

    The next time I saw something like this, it was out in the wild. There was a web server that was running a CGI that *seemed* like it was probably just handing the input over to a command, so I gave it a shot. This time, the web server didn't have a usable home directory, so the ssh thing was out, but it did have X installed, so I fired up a VNC server, opened it to the world and opened an xterm up in it. Before too long, I had an entire X desktop running on some guy's web server. I sent the local admin an E-mail (through pine) letting him know what was wrong and recommending he fix it before someone meaner than I am comes along.

    Anyway, point of the story. Having an unroutable IP address is good internet security as long as you keep it unrouted. Once you give the thing direct internet access, the unroutability of it becomes much less relevant.

    --
    -- The world is watching America, and America is watching TV.
    1. Re:NAT provides convenience, not security by wowbagger · · Score: 4, Insightful

      Of course only blocking incoming connections is only a part of a security policy.

      However, both the examples you gave in your message required you to be able to connect to the target machine via HTTP and issue an HTTP GET request - therefor you had inbound connectivity to the target, just not inbound connectivity to J. Random Port.

      There is NO inbound port available to you. Not 80, not 22, not 25, nothing. The only inbound ports would be when I am FTPing down a file, if I am not running passive mode. However, since the firewall only allows traffic from the FTP server, you would either have to spoof that (and then all you would do is corrupt the file I am downloading) or hack the FTP server (same problem).

      And as to the other people who pointed out that I could use a site-local address: Of course, what do you think 10.200.120.4 is? However, NAT for IPv4 is very well tested, so my "unroutable" 10.x.x.x address is still able to get to /. (as this very post bears witness to). Would my IPv6 site-local address be able to do the same - in other words, is the state of NAT for IPv6 anywhere near IPv4? Considering the common opinion is that NAT is unneeded in IPv6, I very much doubt it.

      The great thing about my workstation being unroutable is that, should I be stupid enough to get a Trojan that announces itself to the 'net and says "I am at $address $port, come abuse me", if $address is not routable, this does very little good for the script kiddie - even if the system reports a traceroute so that he can follow it back, he STILL cannot route a packet to it.

      (now, this does not stop the Trojan from connecting to an [icq|http|SOAP|...] server and pulling its commands down, but as I stated at the first of this post, no one aspect of securing a system is sufficient - security is a journey, not a destination).

    2. Re:NAT provides convenience, not security by cookd · · Score: 4, Insightful

      That doesn't change what the guy is saying. NAT prevents another computer from initiating a connection to the internal network, but it doesn't prevent you from being hacked. A clever hacker can hijack existing connections, or convince you to open connections that aren't friendly.

      For example: you browse to www.ima.hacker.net. The page has code to exploit a browser vulerability, and the exploit code initiates a connection back to www.ima.hacker.net.

      Another problem is connection hijacking -- a hacker can send extra packets to a firewall that actually get through because they are marked as being from the same port and address as those of a real connection. This is especially easy if the hacker is able to sniff packets en route.

      Yes, being behind a NAT does reduce the risk of attacks: you probably only have to secure your client apps, not your server apps. But clients are vulnerable, too.

      Overall, IPv6 will be far more resistant to hacking. The designers had the wisdom of many years of IPv4 problems and security flaws to influence the design. Now it is much harder to spoof a packet. Now you can't sniff packet ID numbers. Any advantage that you are currently attributing to NAT can be gotten with a firewall, and much more reliably.

      Can't wait can't wait can't wait.

      --
      Time flies like an arrow. Fruit flies like a banana.
    3. Re:NAT provides convenience, not security by Anonymous Coward · · Score: 0

      since you're doing stateful packet mangling now, you could just do stateful firewalling if you moved to having routable address space. block all incoming packets, and keep state for outbound packets so you can maintain tcp and udp sessions.

    4. Re:NAT provides convenience, not security by Kynde · · Score: 2

      Before too long, I had an entire X desktop running on some guy's web server. I sent the local admin an E-mail (through pine) letting him know what was wrong and recommending he fix it before someone meaner than I am comes along.

      For the record, I know people that have gotten sued for such actions. Actually for a lot less. So you really should be carefull out there. It may be fun to find security holes, but if you want to be on the safe side, you should just stick to shutting the fsck up about it afterwards. Or at the least, always let the otherside know about the security holes anonymously, in which case you gotta really cover your tracks.

      If at any point of finding out the existence of a security hole or otherwise you've might have had the intent of an electronic counterpart of breaking and entering (e.g. scanning, sending crap to cgi bins, etc) you may find yourself face to face with their lawyers. If the company executives are morons, they can and will sue you regardless of wether you actually did any damage or such.

      An analogy is lock picking an 1800-century lock to gain an entrance to a bank and then without stealing anything letting the bank manager know that they're lock is obsolete. He could sue you. And in electronic world I know of such cases.

      --
      1 Earth is warming, 2 It's us, 3 it's royally bad, 4 we need to take action NOW
    5. Re:NAT provides convenience, not security by Havokmon · · Score: 2
      I think we all understand the potential insecurities of NAT, but what's with the current attitude?

      It's like people are saying, "NAT is just security by obscurity, so just don't use it."

      I think THAT'S the message that needs to be abolished. Anything that can be added to the current 'state' of the network to increase security, should be added.

      Considering NAT IMMEDATELY prevents stupid errors (such as my old ISP's Accountant sharing her C drive with the world), it shouldn't be discounted because a bunch of techies can come up with convoluted ways around it.

      --
      "I can't give you a brain, so I'll give you a diploma" - The Great Oz (blatently stolen sig)
    6. Re:NAT provides convenience, not security by Creepy · · Score: 1

      I doubt if that CGI 'sploit has much success anymore, as most CGI programmers I know make sure to disallow ; (and other characters as well) from parsed GET and POST lines unless they have to.
      I'm sure it still happens, but that's why security companies are in business - to find and fix flaws like that.

    7. Re:NAT provides convenience, not security by docwhat · · Score: 2

      I think the message isn't it shouldn't be abolished. NAT is useful. It's people thinking that NAT is some form of security that should be abolished.

      I'm unclear what the top parent poster's problem is? Why do you need NAT if you are given your own set of IPs to work with? You will still have a firewall at the front (where the NAT+Firewall *was*), right?

      --
      The Doctor What (KF6VNC)
    8. Re:NAT provides convenience, not security by Havokmon · · Score: 3, Insightful

      I think it *IS* a form of security, it's an easy form of security. Just like dead-bolts.

      Just because *you* know a way around it, doesn't mean it can't/shouldn't be used.

      --
      "I can't give you a brain, so I'll give you a diploma" - The Great Oz (blatently stolen sig)
  81. IPv6 and Japan by Anonymous Coward · · Score: 0

    They did have the Global IPv6 Summit in Japan last december. They're also required by law to switch to IPv6. I forgot the year, but it should be within a decade.

    1. Re:IPv6 and Japan by sireenmalik · · Score: 1

      2005!

      --


      Voltaire: God is dead.
      God: Voltaire is dead!
  82. Where IPv6 will be in use this year already by haggar · · Score: 1

    Mobile IP-based networks, like GPRS and 3G. We're talking of hundreds of millions of roaming users. That's (one of) the reason why GPRS networks are based on IPv6.

    That said, on the Internet it will take many more years, maybe up to two decades. As some have said in this thread already, there is no immediate benefit nor any pressing need that couldn't be solved using NAT or similar technologies.

    And BTW, my experience with IPv6 and engineers shows that they hate IPv&, the more they get familiar with it. Yep, I dislike it myself.

    --
    Sigged!
    1. Re:Where IPv6 will be in use this year already by I_redwolf · · Score: 1

      This begs the question why? It's inherently an upgrade to ipv4

  83. I'll start using IPv6... by ewieling · · Score: 2, Insightful

    I'll start using IPv6 when the backbones start using IPv6 and I can get IPv6 addresses from my ISP.

    --
    I really shouldn't have used someone else's email address for this account.
    1. Re:I'll start using IPv6... by Skapare · · Score: 2

      Or we can put together our own IPv6 network with some tunnels to get started, just like 6bone but without the hassle.

      --
      now we need to go OSS in diesel cars
  84. I can't wait... by jbf · · Score: 3, Insightful
    ...for IPv6 because...
    • ...I want my IP headers be twice as long
    • ...I want to go from 50% header overhead in Netmeeting to 75% header overhead
    • ...I want to include a 16-bit field (Flow ID) in my header that no-one has yet figured out how to use
    • ...I feel the need to address every atom on the face of the universe, and then some
    • ...I love IP addresses like 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
    • ...I like the idea that we'll all have to buy new copies of embedded hardware that are currently IPv4-only

  85. Redmond actually did WELL on this one. by dpplgngr · · Score: 1

    Point about "certified" but unknowledgeable network admins acknowledged. That isn't Microsoft's fault.

    Microsoft actually saw this one coming and realized that without full implementation of IP6
    they would be out of the QoS loop. That is, GUARANTEED CONTIGUOUS FAT BANDWIDTH across a judiciously determined fixed router path wouldn't be available to their customers. Not to mention how they'll benefit from the mitigating effect of much needed packet level security improvements.

    There are many benefits to IP6 that will not be mentioned in this cliched opinion slinging forum. Having multiple UNBROKEN realtime (sic) camera feeds from any location on the Earth's surface is only ONE of the future benefits of IP6.

    I'd love to hear other people's views about how the new protocol will actually change our use of the internet. For example, will ISPs continue to thrive when routers are measuring exact "mileage" per customer? Kinda replaces the watermelon seed effect of free flowing packet switching with supply and demand issues. "not your hose, my hose. use the other hose. wait, that's his hose now. but you can use it for double. too much? ok, try that chain of three hoses over there to get to the same grass. cheaper? nice."

    --
    --
  86. The real problem by Anonymous Coward · · Score: 0

    OK, lot's of misinformation posted on this topic so far. The real problem is that the routing tables are the limit. As it stands now, even with tossing-out all of the announcements smaller than a /24, the routing table still takes almost 64 Mbytes. So, a switch to IPv6 would require 4x the RAM (addresses are longer), and cisco has enough trouble now with the current routing table size, so you think we're ready now? Even if we went to IPv6, the real problem, getting the addresses you need, won't happen, because ARIN will still have to be greedy with the blocks, because the routers just can't handle more routes.z

    1. Re:The real problem by Skapare · · Score: 2

      With IPv6, address space assigned to large ISPs will be a lot better aggregated. Of course that won't stop them from breaking it up into a lot of prefixes, but hopefully that will only be for their really sub-autonomous networks. Lots of big ISPs were given some big chunks like /16, but they got those many times. So that means many prefixes announced even if they could aggregate them if adjacent. At least with IPv6 they can be given all the space they will need for 100+ years right now.

      Routing in IPv6 is also different. The low 64 bits as I understand it won't play any part as that is pretty much going to a single LAN, so the routing announcements shouldn't need any more than the high 64 bits, and maybe even just the high 32 bits. Here's the list of RFCs that match string search for "ipv6" and "route". I haven't actually read them, so maybe you can easily find where I'm all wrong.

      rfc1752|rfc1809|rfc1825|rfc1883|rfc1884|rfc1887|rf c1888|rfc1933|rfc1970|rfc1981|rfc1999|rfc2000|rfc2 019|rfc2080|rfc2101|rfc2185|rfc2199|rfc2200|rfc229 2|rfc2300|rfc2353|rfc2373|rfc2400|rfc2401|rfc2460| rfc2461|rfc2465|rfc2466|rfc2473|rfc2491|rfc2492|rf c2500|rfc2526|rfc2529|rfc2545|rfc2546|rfc2590|rfc2 600|rfc2626|rfc2700|rfc2710|rfc2711|rfc2740|rfc274 5|rfc2746|rfc2765|rfc2766|rfc2767|rfc2772|rfc2799| rfc2800|rfc2874|rfc2884|rfc2893|rfc2894|rfc2899|rf c2900|rfc2956|rfc2983|rfc3000|rfc3002|rfc3053|rfc3 056|rfc3068|rfc3089|rfc3111|rfc3132|rfc3162|rfc317 5|rfc3178|rfc3234

      --
      now we need to go OSS in diesel cars
  87. Nightmare's troubleshooting IPv6 by harikiri · · Score: 1

    I think one of the problem's that will be faced when moving to IPv6 is troubleshooting connectivity between legacy IPv4 networks and newer IPv6 networks. As someone who works with firewalls daily, I can tell you troubleshooting applications (proxies, backup clients), network devices (routers, layer-4 switches) and firewalls is a nightmare with IPv4. I can't begin to imagine the horror of having to include IPv6 into the fray.

    Until I see network engineers who know how to reliably debug traffic flowing across their routers and application implementors who actually know how their application's protocols work, I know that I'll be very very afraid to recommend IPv6 (simply from a troubleshooting perspective).

    Since troubleshooting is often the majority of a network engineers/firewall admins role, I see this as a major impediment to moving to IPv6.

    -h

    --
    Man watching 6 MSCE's around a sun box, looks alot like the opening scene's of 2001:space odyssey...
  88. ROTFL! MOD UP! by Anonymous Coward · · Score: 0

    s/on/one/

  89. IPv6 doesn't; change priority / QoS that much by billstewart · · Score: 2
    You've pointed out that IPv4 has DiffServ / TOS bits, but backbone router ISPs don't universally support them. Adopting IPv6 won't change that - it's a policy issue on the part of the ISP. It will make some kinds of features easier to implement, such as giving people private-line-like performance across pre-defined parts of a single carrier's internet, but they could do that today if they wanted, if they could figure out what to charge and how to manage it. Having more address bits makes it easier to design entertaining features, e.g. a chunk of your address space that uses router filters to create private subnets, but the critical issues are ISP policy.

    There are ISPs starting to deploy this stuff, primarily driven by the Voice-Over-IP market. For the most part, what matters isn't prioritization on their 10Gbps backbone, where there's plenty of room for everybody - it's prioritization on the T1 line to your building, or in the oversubscribed DSL network to your house. One of the real issues becomes policy at the interfaces between ISPs - Little Local ISPs care about this a lot, but most of the Tier 1 players have the view that "Why should I provide special support for the connection between me and my competitors - I'd rather sell you the prioritized connections on your whole network where I can manage it all (and get all the money, and provide realistic guarantees of service quality, and get all the money)."

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
    1. Re:IPv6 doesn't; change priority / QoS that much by Metrol · · Score: 2

      You've pointed out that IPv4 has DiffServ / TOS bits, but backbone router ISPs don't universally support them.

      If those routers are IPv6 compliant the MUST support QoS bits. The reason they don't today is because it's not specifically a part of the IPv4 spec.

      Adopting IPv6 won't change that - it's a policy issue on the part of the ISP.

      No, it's not. The backbone routers will be making these decisions. The ISP's will be able to purchase the right to resell QoS bits to customers. This isn't some wiz bangy feature you can add. It's built directly into the protocol itself to do this! Heck, that's specifically why those bits are in there.

      It will make some kinds of features easier to implement, such as giving people...

      First off, this has nothing at all to do with giving anyone anything. This is a scheme to prioritize packets on a highest bidder basis. Voice over IP is a red herring tossed out there to get folks into seeing how maybe their web traffic really isn't as important as voice traffic.

      Today the telcos provide one very large portion of the Internet backbone. Do you really think their interests lay in providing cheaper voice service? It's just not realistic. What's more, it's not needed! Voice traffic across phone lines is already heavily digitized to make it so efficient as to require a tiny fraction of the employees needed just 10 years ago.

      ---

      As you can probably tell, IPv6 scares the hell out of me. When corporations can prioritize the packets coming off their servers above those of individually owned machines, kiss anything that once may have been considered beautiful about the Internet goodbye. Nothing left but a flashing billboard on the browser highway.

      --
      The line must be drawn here. This far. No further.
  90. IPv6 is easier than you think by keithmoore · · Score: 1

    Most OS vendors (both free and $$$) are shipping IPv6 today in their latest versions - the biggest holdout being Apple (and I have heard that MacOS 10.2 will support it)

    A technology called 6to4 lets any host with a single IPv4 address act as a router for up to 2**80 IPv6 hosts and use the existing IPv4 network to route the packets. When routing to other hosts using 6to4, the packets go directly to their destinations; when routing to other IPv6 hosts, the packets go to the nearest router that can relay between the two. (using an IPv4 anycast address). See RFCs 3056 and 3068 for details on how it works. 6to4 isn't as widely supported as native v6 (yet) but it already seems to work with NetBSD, FreeBSD, Linux, and Win/XP, and M$ provides code you can download to use 6to4on some other M$ systems.

    No additional support is needed from the network, though there is less overhead if the network is upgraded to support v6 natively.

    I use IPv6 every day to communicate between my home and work machines, over an IPv4 network.

    1. Re:IPv6 is easier than you think by Skapare · · Score: 2

      Just put 6to4 capability in, or right next to, your border router. Put some IPv4 private IPs in for the inside pool, and away it goes. It should be easy (but I don't know if implementors are that smart) to take a /104 chunk of your IPv6 space and map it 1-to-1 to the whole 10/8 space by keeping the low 24 bits the same. That should give you plenty of time to transition your inside servers, and all your access customers (if your an ISP) or all your offices and cubicles (if your a business) to working on IPv6.

      --
      now we need to go OSS in diesel cars
  91. What will that do to my LinkSys router/firewall? by crovira · · Score: 2

    I imagine I'd have to upgrade the firmware again.

    While my Linux box is configurable and my OS X box is probably configurable, I've got two OS9 boxes that I'll have to wait on Apple to convert.

    But I agree, IPv6 is the way to go.

    --
    MSBPodcast.com The opinions expressed here are my own. If you don't like 'em... Think up your own stuff.
  92. A little while before we run out by maddogsparky · · Score: 1
    I believe IPv6 has 64 bit addresses. This gives aproximately 1.6 x 10 ^19 unique addresses.

    Or try to imagine an internet where every single computer is a gateway to an entirely different internet.

    --
    science is a religion
  93. Economic Opportunity by Anonymous Coward · · Score: 0

    Like phone numbers that have the corresponding alphabet letters, this could be an opportunity to the #1 industry on the net. Since 8 characters can fit into the IP6 address, that means a lot more possibilities to spell 7072::6e7a.

  94. There will be NATv6 by Skapare · · Score: 2

    There will be NATv6 whether you like it or not, and regardless of what the RFCs say about it. There are legitimate uses for it. I may want to have the same hostname for a variety of different services, but put those services on different machines behind the firewall. There's a form of NAT for that. I may want to load balance 1000 servers to one name (which DNS will limit to just a few IPs at most ... and don't forget that AAAA records take more space out of the response packet than A records do). I may want to hide my internal infrastructure and make everything appear to be right at the border. And perhaps I just don't want to upgrade some server to IPv6, preferring to leave it at IPv4, and let the NAT present IPv6 to the world while my intranet sees it as IPv4.

    Since we already have mastered the logic needed in a variety of forms of network address translation, IPv6 is just a matter of some code changes to accomodate the larger IP address.

    --
    now we need to go OSS in diesel cars
    1. Re:There will be NATv6 by germanbirdman · · Score: 1

      There are legitimate uses for it. I may want to have the same hostname for a variety of different services, but put those services on different machines behind the firewall.

      That's what anycast addresses in Ipv6 are for.

    2. Re:There will be NATv6 by Skapare · · Score: 2

      But you don't need them. Everything can be handled right in the NAT (if programmed to do it) without anycast.

      --
      now we need to go OSS in diesel cars
    3. Re:There will be NATv6 by j+h+woodyatt · · Score: 1

      You don't need or want NAT for any of these purposes, because there are other *better* solutions available in each case.

      + If you want multiple services to appear to be provided by the same host, when in fact they are provided by different hosts behind a firewall, then you want your firewall to be an application-layer proxy. You don't need NAT for this. Just put the private server hosts on a site-local address, and let the proxy do as it will. A proxy will do a better job of this than a NAT.

      + If you want to load balance 1000 servers to one name, you want to use DNS SRV with named instances of abstract services, and let the clients do the load balancing. This way your NAT isn't a single-point failure opportunity, which is important if you have a data center with a 1000 servers in it. (Yes: you *can* have a CNAME point at 1000 SRV records. The DNS caches are your friends. Use them.)

      + If you want to hide your internal infrastructure and make everything appear at a border host, then again: you want an application-layer proxy not a NAT. An application-layer proxy will do a better job of hiding your internal infrastructure.

      + If you don't want to upgrade your IPv4 host to IPv6, and you still want to communicate with the IPv6 world, then well-- you haven't upgraded to IPv6 yet, have you? Once you upgrade your entire network to IPv6, you won't need the NAT anymore.

      --
      jhw
    4. Re:There will be NATv6 by Strog · · Score: 1

      Of course we could go the other way and say that we don't need NAT because we have anycast. I think that we will need both depending on the situations

    5. Re:There will be NATv6 by Skapare · · Score: 2

      Doing NAT is still cheaper than upgrading everything to IPv6. And since NAT to services doesn't need any DNS tricks, it is easiest to deploy cheaply. Upgrading a server involves more time and more disruptions. Dropping a NAT in between is so much easier. Remember, the intent in this is not to upgrade the network to IPv6; it's to be able to serve connections from clients with only IPv6 addressess where there is no client side NAT (which requires the DNS tricks if the client software cannot address the massive IPv6 space).

      --
      now we need to go OSS in diesel cars
  95. Is the number of IP addresses in use increasing? by Animats · · Score: 2

    The number of domains registered peaked a while back, and I think the number of Internet users dropped a bit last quarter. Is the number of IP addresses in use still increasing, or has that peaked, too.

  96. The cycle keeping IPv4 right where it is by Guppy06 · · Score: 3, Interesting

    The way I see it, there's a four phase cycle keeping IPv4 the standard for the internet for a long time to come.

    1.) ISPs want to charge more for sharing a connection and a smaller address space gives ISPs justification to charge more for corporate users than home users. They already heavily frown upon the use of NAT (unless you pay more for them to set up your LAN for you). So why don't the ISP's just separate the concepts of bandwitdth and addressing?

    2.) The backbone is overtaxed as it is. Currently the home user's connection speed is limited more by intermediate links than by their connection, even if the user is just using a 33.6 modem. A small address space provides an easy method of limiting bandwidth use. So why don't they just upgrade the backbone?

    3.) IP address space is the primary driving factor in connection costs, more so than bandwidth. Most tier 1's more or less own their address blocks and stand to make money hand over fist as the price of using a single address skyrockets. If a tier 1 wants to make more money, it makes better economic sense to buy more address space than to put in faster connections. So why not jump to IPv6 to increase the address space by an order of magnitude squared so the big guys can focus on the bandwidth trouble? Tier 1 folks will make money no matter what, right?

    4.) A larger address space opens up the ISP industry to small competitors. While most ISPs are owned or operated by large corporations that can afford the pricey IPv4 addresses, IPv6 stands to give every man, woman and child on the planet a bigger address space than many tier 1's currently have in IPv4. The low-level ISP scene under IPv6 could very well look a lot like the BBS/internet scene of ten years ago. Not to mention all the private little portals that could end up competing with MSN and Yahoo (with or without a DNS name). But still, the little guys could probably make a stab at making that happen with IPv4, using NAT to drive down the cost of a small IP address block. Why don't they do that?

    Lather, rinse, repeat.

  97. 128 bit by ZigMonty · · Score: 2

    It's 128 Bit. You need to double your number a few more times. I get about 3.4*10^38 unique addresses. Which is quite a bit more.

    1. Re:128 bit by GigsVT · · Score: 2

      And we only needed 48 bits in the absolute worst case. And I'd be able to remember my address if it was xxx.xxx.xxx.xxx.xxx.xxx too.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
  98. IPv6 Header by germanbirdman · · Score: 2, Informative

    [Bandwidth used up by bigger headers]

    Actually, it doesn't really make that much difference.

    An IPv4 header is actually quite difficult to process for hardware routers because it can have a length of anywhere between 20 and 60 bytes.

    An IPv6 header on the other hand consists of a main header with a fixed length of 40 bytes and possible extension headers which do not need to be processed on all systems.
    The 40 bytes of the IPv6 main header includes the 128 bit source and destination addresses.

    The IPv6 headers are actually quite efficient and are designed in such a way that they can be easily processed by hardware.

    So no, there will not be a BIG increase in bandwidth because of the headers.

  99. Re:Moron - Actually YOU don't know what... by autocracy · · Score: 2

    OK, just because you gave the challenge - IPv5 was the development version of IPv6... moron :)

    --
    SIG: HUP
  100. I dont think MS will have a problem by xiaix · · Score: 2, Funny

    As other posters have pointed out, BSD has it...microsoft probably just has not come up with a proper 'embrace and extend' logistic for it... (yet)

    --

    Have you read the Moderator Guidelines yet?

  101. OT but needs to be said by ZigMonty · · Score: 2, Informative

    The British hecklers in the audience may wish to remember that they are the only first-world nation without a written constitution.

    And yet which country's people are currently more at risk of loosing their freedom (DMCA, terrorist pirates, etc)? You're acting like not having a constitution (assuming it's true) is equivalent to being lawless. It's still illegal to murder someone in Britain and, last time I checked, there was freedom of the presses by law. A constitution is just law that's hard to change. You could argue that Britain's system is more flexible and adaptable to our changing world.

    Also, there's a reason most scientists in America use the metric system. Guess what it is.

  102. Self organizing networks by Anonymous Coward · · Score: 0

    IPv6 will never take off because it still has many of the drawbacks of IPv4

    - requires configuration
    - requires an allocated address

    Neither of these are really necessary. For an example of how to do away with them, see the second last page of this pdf.

    --
    Paul Harrison

  103. Why liter? by ZigMonty · · Score: 0, Offtopic

    I'm curious, why did America decide to call the litre a liter? They seem to be the only country to have done this.

    1. Re:Why liter? by Anonymous Coward · · Score: 0

      Simple, they can't spell. They're the only ones to say "color" or "individualize"

    2. Re:Why liter? by Julian352 · · Score: 1

      Well, I don't know many different languages, but from what I know of Russian (which I'm a native speaker of), the spelling is also liter. Thus, it's not only american. On the other hand, Russian uses a cyrilic rather than Latin alphabet, so that may change things.

      Spelling litre somehow reminds me of sometype of a French word, rather than an english one. Not sure if that could be a reason.

    3. Re:Why liter? by Arandir · · Score: 1

      For the same reason we spell theater as 'theater'.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
    4. Re:Why liter? by ZigMonty · · Score: 1

      Spelling litre somehow reminds me of sometype of a French word, rather than an english one

      That's my point. Litre *is* a french word (IIRC, they started the metric system) but it was good enough for Britain and Australia and pretty much every other English speaking country (should have made that more clear). I'm just thinking America's re-spelling might be a case of NIH. Sort of "If we have to have the metric system, we'll damn well spell it different! Can't leave it French sounding, can we?"

  104. When Microsoft supports it. by duffbeer703 · · Score: 2

    When 75% of active Microsoft Windows hosts fully support IP v6 out of the box, IPv6 will begin to appear.

    Otherwise, forget about it.

    --
    Conformity is the jailer of freedom and enemy of growth. -JFK
  105. QoS by germanbirdman · · Score: 1

    Actually, QoS and reserving bandwith actually has not got that much to do with IPv4 or IPv6.

    Ipv6 facilitates QoS because it has a flow field in the header which should be used in an IntServe architecture.

    It has another field that at some point should facilite a DiffServe architecture.

    By the way - Intserve is where an application requests bandwidth reservation in some sort- Diffserve, it is done transparantly - the applications don't need to do a thing, but this means all traffic from a host is handled with priority. Basically "Diff-Serve" is a better best-effort service which works on the principle of service level agreements - I think will be the future of the internet. Flat fee payers will get best effort whereas people paying for bandwidth will get higher priority. I also forsee some way in which a SLA can be upgraded temporarily - this is already happening today with some satellite DSL providers.

    The actual bandwidth reservation or SLA negotiation and the then needed traffic shaping have nothing whatsoever to do with IPv6, it works just as well with IPv4 - Ipv6 just makes it a LITTLE bit easier.

    By the way, it is not defined anywhere yet on how the flow field is to be actually used.

  106. CLNP/GOSIP politics were a different problem by billstewart · · Score: 2
    Background: The OSI protocol suites had a wide variety of choices of protocols at different layers in the stack. CLNP (ConnectionLess Network Protocol) was roughly equivalent to IP. GOSIP was the late-1980s US Government OSI Protocol stack, a specific set of protocols from the OSI suites covering Layers 1-7, and looked more like the TCP/IP world than the ISDN/X.25/EuroTelcoBureaucrat world. Padlipsky's "The Elements of Networking Syle" (ISBN 0-13-268111-0) is the classic critique.

    The important differences between the OSI protocol stack people and the TCP/IP people weren't at the transport layer - they were mainly the application layer and the availability of working implementations on Unix. Multi-Protocol Routers were becoming available at the time, driven by the widespread use of IPX, the Not-Dead-Yet-ness of Appletalk and XNS, the Routing?-What's-That? bridginess of DEC LAT, and the Hadn't-Taken-Over-The-World-Quite-Yet-ness of IP, so there were routers with CLNP available at costs not substantially different from other multi-protocol routers that also did IP. While the TP4/CLNP stack wasn't much clumsier than TCP/IP, the set of application services was - X.400 was MUCH heavier-weight than SMTP, and FTAM was somewhat more bureaucratic than FTP, VT was more general than Telnet, and 4.2BSD UNIX came with TCP/IP and sockets and such, with well-written relatively-open code that was usable on Vaxen and ported to Suns and other popular computers. If you wanted to write stuff, you could just write stuff.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  107. Re:Moron - Actually YOU don't know what... by dondelelcaro · · Score: 1

    Try again. 5 was already alocated for another IP like protocol that was not IPv4.

    --
    http://www.donarmstrong.com
  108. This may be redundant... by dripfeed · · Score: 1

    This may have been posted already...
    but this is fairly newby friendly content and the comments i read were kinda clueless

    http://www.onlamp.com/pub/a/bsd/2002/02/22/ipv6. ht ml

  109. DynDNS by yerricde · · Score: 1

    We could have a cntral database where everybody applies for a unique, easy to remember computer name.

    Yes, I know about DynDNS, but that doesn't help if all your access provider offers under $1000/mo is 15-minute DHCP leases on IPv6 /128 (single) addresses.

    --
    Will I retire or break 10K?
    1. Re:DynDNS by DahGhostfacedFiddlah · · Score: 1

      With IPv6, they shouldn't have to. The reason they lease now is that they have more customers than addresses. IPv6 should fix that.

    2. Re:DynDNS by GigsVT · · Score: 1

      The will still have a short DHCP lease. The real reason for DHCP is to prevent you from running servers.

      You are a consumer, never forget that. You aren't supposed to be providing content.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
    3. Re:DynDNS by Ben+Hutchings · · Score: 2

      Well my cable company leased me the same address for about 6 months and, er, doesn't ban servers. The main reason for using DHCP on cable is, as everywhere else, to enable central management of network configuration, reducing network administration and support costs.

  110. First, second, and third world explained by yerricde · · Score: 2

    Gah. You're not "first world". America is the "new world" (aka 2nd).

    No. The first world was countries that fought on the U.S. side in the cold war (U.S., Canada, western Europe, etc). The second world was the Soviet Bloc (no relation to Soviet blocks). Countries too small for either superpower (USSA or USSR) to notice came to be known collectively as the third world; after the cold war ended, "third world" continued to refer to developing countries.

    Poll: Which world will achieve 50% adoption of IPv6 first?

    --
    Will I retire or break 10K?
    1. Re:First, second, and third world explained by puppetman · · Score: 2

      No, the origins of the terms First, Second and Third World actually originated in 1952, created by a French guy named Alfred Sauvy, and relate more to pre-industrial France than the world after WW2.

      He actually called them estates, and drew a parallel to the demographics of France before and during the French Revolution. The first and second estate are the nobles and priests. The third estate are the unwashed masses that want to be something, and are exploited by the first and second estate.

      Yes, it was drafted during the cold war (though the cold war officially started in the late 40's, and this was 1952). But the concept of have-and-have-nots has been around since antiquity.

      Anyway, it's a crappy analogy. Now we have agrarian, industrial, and information based economies (and everything in-between). We also have democracies, autocracies, monarchies, totalitarian-states, military-based govenments and dictatorships. Way too complicated to sum up in three broad, misunderstood categories.

      Regardless, the French are crazy.

  111. whoever moderated this: by Anonymous Coward · · Score: 0

    Please explain yourself. You big, fat, fucking dirty-douche-drinking son of a bitch.

    1. Re:whoever moderated this: by Anonymous Coward · · Score: 0

      Looks like a rogue moderator - three of the first four responses are moderated troll - and they're all reasonable posts.

  112. Re:Moron - Actually YOU don't know what... by Tremul · · Score: 1

    Actually YOU don't know what you're talking about. I'm in the process of implementing IPV6 (part of Solaris 8) on a group of servers as a testbed. IPV6 can be tunnelled over IPV4, also IPV6 can co-exist on the same network. Some routers can also handle routing both IPV6 and IPV4 traffic. In fact, it's a simple translation between 6 and 4 addresses (If you assume the unused portion of the address are zeros.) In fact it's easy to distinguish 4/6 traffic becaue the protocol version number is in the ip packet header.

    And in what way does this make IPv6 backwards compatable with IPv4? THe fact that you have to use tunneling and translation means that it's not backwards compatable. If it were backwards compatable the two could coexist without the added need for translation.

    --

    "Can't sleep. Clowns will eat me"
  113. IPv4 doesn't really seem that close .. by lethargic · · Score: 1

    I'm subscribed to receive the weekly routing table from an APNIC router in Japan. A new one is due tomorrow, but this is last Fridays':

    Percentage of available address space announced: 31.7
    Percentage of allocated address space announced: 60.0
    Percentage of available address space allocated: 52.8

    Basically, 52.8% of the total IPv4 space (I do not know if this includes RFC1918 space, Class D/Multicast space, etc, etc, but I think it does) has been allocated between the RIR's (Regional Internet Registrars), which are ARIN, APNIC and RIPE. 60% of THAT allocated space is space is being announced ("used" you could say, but not technically - this gets too confusing to explain here, read up on BGP4). Also it tells you that 31.7% of the total (allocated or not) IPv4 space is being announced.

    I guess the "real" statistic is that 31.7% of the IPv4 space is being used. This does not count the space assigned to major providers that they have not assigned to their customers. It depends what you want to look at.

    There was either an RFC or an IETF draft recently by someone that went over all of this. I think the authors estimate was in the 40's for percentage of address space being used. I'll be dammed if I can find it now! I wish I had it in my saved-messages box.

    Anyways, I find it highly unlikely that IPv4 space will run out by 2005.

    On the other hand, it seems to me that with the way ARIN has been assigning IPv6 space and how "easy" they are making it, we're going to run out just as fast. I have not read their requirements that much, only briefly, and I know they require you to participate in the 6bone project for atleast 3 months. I believe that was one of the 6bone's requirements as well before you are given your own "test space", you have to find someone to assign you space temproarily.

    One RIR I do like is RIPE. Their current requirements for getting IPv4 space includes things such as having to prove that you cannot use RFC 1918 space and do NAT. I think ARIN is following in their footsteps. I'm pretty sure atleast most major providers are doing that. I'd say check out their forms if you are interested.

    I am well too tired right now to go reference any of this stuff, so I'm probably wrong on some things. However:

    - We will *should not* be out of IPv4 space by 2005 according to current trends.
    - I think the RIR's (Regional Internet Registrar's) need to be as careful with IPv6 space as they are being with IPv4 space or else we will could be in the same boat in another 10-20 years.

    Just my CDN$0.02

    1. Re:IPv4 doesn't really seem that close .. by Skapare · · Score: 2

      If ARIN (and APNIC and RIPE) would assign portable space in smaller pieces and make some kind of rules requiring ISPs to route them when there is one prefix in an AS, regardless of size, then I suspect ISPs will find it a lot easier to do NAT. Right now a small ISP doing "the right thing" and deploying NAT for all business customers, instead of giving them each a /29 (and thus using only 1/8 the IP space), is delaying their ability to reach the holy grail of ISP-dom: portable IP space and an ASN. And while this is happening, larger ISPs are still flooding BGP with hundreds or even thousands of prefixes for gobs of discontiguous IP space.

      --
      now we need to go OSS in diesel cars
  114. Using IPv6 on my LAN via NAT by JPriest · · Score: 1

    I wonder how hard it would be to get my cisco NAT router to run IPv6 for my LAN and configure my linux/winodws boxes to use it? I think it would be cool to start using it early. Anyone know of any other popular SOHO NAT routers supporting it or running a system like this at home?

    --
    Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
  115. Respond, don't moderate by jbf · · Score: 2

    Interesting that none of the major issues with IPv6 are addressed by an idiot moderator who doesn't know what to do with his/her moderation points. Guys, when you get moderation points, only moderate the stories you're an expert on. Even the people who go to the "universal adoption of IPv6" Scotch BOFs at the IETF would agree with many of these points. In particular, Steve Deering, the author of SIP, which later merged with a number of other things to become IPv6, would agree that 128 bit IP addresses is overkill, and SIP had only 64 bit addresses originally.

    CmdrTaco: if you let moderators do stupid things like this (and yes, there are more stupid moderators than smart ones), you're going to alienate all your clueful posters.

    1. Re:Respond, don't moderate by nagora · · Score: 1
      CmdrTaco: if you let moderators do stupid things like this (and yes, there are more stupid moderators than smart ones), you're going to alienate all your clueful posters.

      This is what meta-moderation is for, if someone disagrees with the moderation.

      However, I wouldn't mark this particular moderator down. Your post was a list of complaints about what other people are doing to solve a real problem with no solution of your own to offer or any reason why its not a problem. Personally I wouldn't mark it as a troll but I think it's borderline.

      In particular, Steve Deering, the author of SIP, which later merged with a number of other things to become IPv6, would agree that 128 bit IP addresses is overkill, and SIP had only 64 bit addresses originally.

      See, this is what you should have put in the original post. On this point, is there any reason not to go to 128bits now and save ever having to do this again, even when there are toasters on Mars? Is 64bits really enough if nano-tech machines ever need to be addressed and everyone's watch is on a broadband Internet connection? Probably, yes, but think of the hassle if it ever needs upgraded again. Better to sort it out now forever.

      TWW

      --
      "Encyclopedia" is to "Wikipedia" what "Library" is to "Some people at a bus stop"
    2. Re:Respond, don't moderate by jbf · · Score: 2
      However, I wouldn't mark this particular moderator down. Your post was a list of complaints about what other people are doing to solve a real problem with no solution of your own to offer or any reason why its not a problem. Personally I wouldn't mark it as a troll but I think it's borderline.


      Does criticizing a solution mean that I have to try to solve it myself? If I said "I want to go to the moon, I'll buy a couple D rockets from the hobby rocket shop," would someone be mistaken to say "that'll never work" without providing a solution? Would a "that can't work, moron" response be a troll, or even justified as one?

      I'm just bothered by the general "rah rah rah IPv6" crowd, plus the "it'll never happen because of evil M$" crowd. There are real, technical issues with IPv6. There are real, nice benefits of IPv6. One of the places the IETF really messed up, though, is the increase of address space. Sure, it's not a big deal on modems, since compression will help a lot (IPv6 headers compress much better than IPv4 headers).

      But the big thing you're leaving out of the picture here is the mobile/wireless explosion that has happened of late. Yes, it's great that my UMTS phone will have IPv6 and actually be addressable. Hoorah. But all those extra bits have to go over the (sparse and expensive) air.

      Worse yet is the problem with ad hoc networks. People are putting router IDs (RIDs) in their routing protocols, so they can squeeze a 128-bit header into 32 bits. Problem is, you need to pick unique router IDs, and you need to advertise the correct associations. This is a major pain. You can't just waste the bits, because they're going over potentially slow links, every bit transmitted costs battery power at all receiving nodes, and increases congestion in that area of the network.

      A major advantage of 128 bit addresses is that it makes things like SUCV (statically unique cryptographically verifiable) addresses possible. But that's only necessary (at least now) because the IPsec WG screwed over Mobile IP's IPv6 authentication scheme (with certificates for each address).

      If you accept that the earth's population will stay under 2^40 (1099 billion) for the forseeable future, then each person will have 2^24 addresses. Even allowing for inefficiencies due to things like CIDR, each person will still have over 16000 addresses (16 million with perfect efficiency). I just don't think we'd ever run out. Also, considering the address allocation scheme of IPv6, it's not clear that a better allocation scheme for 64 bit SIP wouldn't last longer. 64 bit interface indicies? Please. I'm not going to have 2^64 interfaces anytime soon.

      See, this is what you should have put in the original post.

      Why, do I need to quote Steve Deering to carry enough weight to criticize IPv6? I pointed out in my original posts the disadvantages of the IPv6 addressing scheme.
    3. Re:Respond, don't moderate by GigsVT · · Score: 2

      I'm glad someone else is sane. 128 bits is way way way too many. 64 or 48 bits are enough to carry us well into the future.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
  116. The era of the 4 to 6 Gateway by robin999 · · Score: 1

    Many of the tech savvey here will already be doing the firewall/proxy thing with highly customised internal networks.

    I expect that leaving the internal network unchanged and converting or proxying to 6 at the gateway will be the most painless way of interfacing with 6 (if it ever gets here).

    1. Re:The era of the 4 to 6 Gateway by Skapare · · Score: 3, Informative

      if you mean "4 inside, 6 outside" then it has some limitations. If you're on a 4-only box inside and want to connect somewhere, it has to have an IPv4 address, or you have to have some IPv4 address mapped to the IPv6 address with corresponding DNS change (I hear this is what the BSD folks are doing). Doing servers this way is easier as the client (outside) is connecting to a specific IPv6 address, and the NAT can translate that easy enough to (inside) IPv4 (no DNS juggling needed).

      Such network address translation should at least prevent any delays in upgrading servers from delaying IPv6 deployment to the backbone. Clients will seriously need to be upgraded, and if Microsoft drags their feet, that can set things back really bad. But we also need solid IPv6 router code for the backbone, and I gather that Cisco is not moving very fast on getting it widely implemented solidly. Maybe when the economy picks up they might be able to (if they see the demand for it).

      --
      now we need to go OSS in diesel cars
  117. AOL's Too big for 10.x.x.x :-) China/India too. by billstewart · · Score: 2
    If all of those 33 million users were connected at once, they wouldn't be able to have unique IP addresses in the 10.x.x.x address space, which only holds 16 million :-) Fortunately, they probably don't have that many at once, and even if they did, they almost certainly do some sort of tiered connectivity, either with NAT or proxies, that keeps them from needing whole-internal-network-routable IP addresses. I don't know if they do it regionally, or per dial POP (something like 1000-10000 POPs, which could contain all the address space for their local users as well as having some wide-area address space for the whole-company-visible or Internet-visible parts), or by not having more than 16 million modems (the easy approach for most of us :-).

    For China and India and in general the rest of the world, the choices are either to get on the stick and do IPv6, or else to use some other tiered-local-addresses-proxy-NAT system. By then it wouldn't be surprising if cheap mobile devices (phones or otherwise) were the big driver, and IPv6 means you just don't need to fix the addressing problem again.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  118. Re:Moron - Actually YOU don't know what... by iPaul · · Score: 1

    This is getting old, but...

    IPV6 is better. Autoconfiguration, neighbor discovery, big address space, compatability with IPV4, etc

    IPv6 is in NO way compatable with IPv4. Have you even looked at the specifications? I cann't believe you got modded up for this.

    And in what way does this make IPv6 backwards compatable with IPv4?

    I never said backwards compatible. It will, however, coexist nicely on the same network. A number of the Unix configuration files are the same, such /etc/inetd.conf. A number of Unix services such as SSH, FTP and TELNET have IPV6 implementations. BIND already support IPV6.

    Can you shoot IPV6 packets into an IPV4 only router and expect it to get delivered? Not really. Can you get two IPV6 networks to talk to each other over an IPV4 network. Sure. Works well. If a router understands both IPV4 and IPV6, works great. It's not like ATM, which has a much different packet layout and is a virtual switched network as opposed to packet switched. That suits my definition of compatible.

    Now the real point I was trying to make was not to come to a definition of compatible. IPV6 will make life easier. However, the focus is on making IPV4 work. I just think it's unfortunate that people's time and money are being poured into IPV4 maintenance and not going toward IPV6 deployment.

    --
    Leave the gun, take the cannoli -- Clemenza, The Godfather
  119. RFC1918 address are ROUTABLE! by accessdeniednsp · · Score: 1, Flamebait

    folks...you all are apparently not networking and security experts. the 10/8, 172.16/12, 192.168/24 networks are merely RFC1918 reserved blocks. as are a ton of other blocks. get Robert Zeigler's "Linux Firewalls" book from New Riders to see all of them. either v1 or v2 is acceptable.

    these blocks are perfectly routable. try it. setup test networks. you can route them JUST fine. they are perfectly legal ip's too. you can use them for serial connections on point-to-point t1 or frame relay sync interfaces. you can use them for small isolated networks where you don't need hosted services [office networks, private lans behind VPN gateways].

    these are merely RESERVED addresses. i get so irritated seeing and hearing everyone refer to these blocks as "Illegal" and "Unroutable". read the rfc for once! stop spreading misinformation! sheesh...

    1. Re:RFC1918 address are ROUTABLE! by vrmlguy · · Score: 2

      I get so irritated seeing someone refute something that I never said. I didn't say anything about IPv4, I only talked about IPv6. If you are posting a reply the the original post, then do so, please don't post a reply to me unless you are discussing something that I said.

      --
      Nothing for 6-digit uids?
  120. Response to - Re:I can't wait... by dbCooper0 · · Score: 1
    I agree mostly with the parent post here, in that IPv4 is embedded into lots of hardware, and that it's a hell of a lot easier to remember a 32 bit addy than this proposed 128 bit one. Kinda like a phone number.

    I can admit I don't use Netmeeting (yet) but can easily see the overhead increasing. So, as the other post suggests that this be responded to rather than moderated, I agree, and am responding. Bravo. I have many clients using NAT and it works just fine.

    The smarter thing to do rather than IPv6 would (in the interim) be to re-allocate some of the address blocks assigned to .gov and .edu, as well as .mil for that matter.

    Hell, even re-allocate a chode of network 10, as well as 192.168.x.x - who really needs that large of a block in a "private" network? And, while you're at it, take back the 169.(whatever - the autoconfig thingy) that I keep having to flush out of Windoze boxes having brain farts.;-)

    There was a short-sighted assignment in the infancy of the web, IMHO. We should strive to remedy that, and leave IPv6 to the more distant future, while still planning for it in a more practical way.

    And for the moderator that gave the parent a Troll rating, shame, shame, shame! (That's -3 Karma....hehe)

    --
    db
    Cig:
    ôô
    /`
  121. IPv6 vs .NET by SgtChaireBourne · · Score: 1

    The trick will be to get MS's marketing strategy to include IP6. Otherwise, if MS sits and does nothing, then incomplete IP6 support will be another convenient hammer to pound their wedge deeper and lock people into pay-per-packet Internet aka .NET.

    --
    Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
  122. metric definition : by olivieradam · · Score: 0

    Ya, and this is your choice but,
    What is this metric system ?
    "One meter is the length of a pendular-clock which beats the second" (at normal/equatorial gravitational acceleration). This is a particuliar corollar of gravitation :
    L=Sq((Pi*T)^2/g)
    Where :
    L length of pendular
    T half the wavelength (the clock passes every second at the vertical, total wave is double)
    Pi 3.14
    g 9.81m/s2
    That does L=1 with T=1, great !
    Thus if you have a clock, you've got a meter. If you have a meter, you can obtain a clock, beating the second. So, you can compute a stable meter length, not depending on I-don't-know-what emperor inch, foot, cock ... But only a physic fact, and it's damn easy to convert from and to length/time.
    Phylosophically, time is constrained by distance, cute, no ?
    :-)

  123. You are the troll by Anonymous Coward · · Score: 0

    How does email work: You have an account on a server with a REAL IP which is always on-line. Each time you get on the net you download your messages from this server.

    People browsing the internet do not need static ip. As long as you have an account on a server with static ip you can have any service you want, www pages, "browsing your messages", telnet, etc.

    The need for static ip servers is much fewer than the active number of netizens.
    And yes, NAT is good, secure and helps in decentralization of network load.

    YWBT?

  124. IPv6 :: OSI by igb · · Score: 3, Interesting

    The problem IPv6 has, confirmed by its enthusiastic reception by the EU, is that is
    the OSI of the 21st century (following on from
    ATM, the OSI of the 1990s). IPv6 solves a
    problem of 1992 --- proliferation of subnets,
    exhaustion of v4 space --- while other, incremental, changes did the job just as well.
    NAT and DHCP mean that huge ISPs don't need
    huge blocks, and the falling price of RAM means
    that large routing tables just aren't the problem
    they were. The Internet simply isn't a bunch
    of LSI-11s linked by 56K lines anymore, and I
    recall ``look, doing that will mean every router
    has to have a megabyte of RAM'' being used as
    an argument-ender.

    To compound things, IPv6 suffered from feature
    creep (see also: ATM, X.400, Modula 2 standards)
    and tried to solve a bunch of other problems as
    well, such as QoS. But _those_ were being
    solved in v4 land, too, with RSVP, and it's
    compatible and interworking with existing
    code. Those over 35 should compare the complex
    ``look, we need multi-part mail'' solution
    proposed by the X.400 lobby, which requires MTA
    support all the way, with MIME, which will pass
    transparently through any MTA.

    The final nail in v6's coffin is that, largely,
    it's not had the attention of the A team inside
    vendors, and has been seen as another add-on
    protocol, like OSI, ATM, etc.

    I think Vernon Shryver said a few years ago that
    he didn't expect universal IPv6 in his working
    lifetime. I don't (I'm 37), anymore than I ever
    expected my email address to because /O=...

    ian

  125. More than just more addreses by Anonymous Coward · · Score: 1, Informative

    IPv6 is not only a larger address space, it is also modified to provide a more solid networking fundament. IPv6 will ease life for routers (and yes, Cisco does have pretty nice IPv6 support), and it will allow hosts to be very different from todays clumsy computers.

    The portable nodes of the future will roam between different networks and network technologies, often be multihomed (although not always on the same interfaces, or the same addresses), support real-time data transfers (IPv6 might not support this very well at the current time, but it is coming!), multicasting etc.

    I also expect the focus to change from IP addresses to "logical addresses". For example: Why can noone call me just because I left my cellular phone at home? I have a phone at work, I might have my laptop online, or I might even have another cellular somewhere. As long as I am me, and I can be reached, why should I need a specific client??? I hate having both my wireless ISDN telephone AND my GSM phone hanging around my person at home, as they are just two different "routes" to the same me...

    So, IPv6 is not just about address space, it is also about usage. IPv4 is NOT dynamic, it does NOT handle multicasting well, it does NOT handle real-time data well and it was NEVER intended to be used as we use it today.

    Ok, the specification of IPv6 is not yet perfect (data classes, multicast group lookups and IPsec), but the protocol has not yet been "tuned". This is currently beeing done in both Europe and Asia (and probably in some dark basements in the US :-)). I am confident that IPv6 will eventually provide a sane network fundament in a maybe not so sane world...

    P.S: Linux is not at all bad at IPv6. Check out the USAGI patch and userland tools (they work quite ok with the normal kernel too), at http://www.linux-ipv6.org/. My Slackware Linux is running everything very nicely over IPv6.

  126. IP6 is good for you, bad for big business by Anonymous Coward · · Score: 0

    Here's the thing,

    Reguardless of whether or not Cisco, Nortel, Lucent or any other manufacturer had said "You should use IP6 cause it's better", we'd still be in the same predicament we are today. Which is to say, we'd still be using IP4. The reason is simple. Most people in the US and abroad that use the internet don't give a shit about IP6, and could care less about internet speeds or addressing problems. It's all magic and transparent to them.

    AOL has 60 million pin head users. Ask them what IP6 is and they'll likely say "Some kind of urinary tract infection."

    The companies that own the backbones (Worldcomm, AT&T, and unless I'm mistaken, Sprint) are the people that should be most concerned with maintaining their switching centers, the accessability of addresses, and so on. A lot of the problems that are going to arrive sooner than later might be averted by IP6. Do they care?

    F*CK NO, because they don't have to. They figure "You're gonna pay whether you like it or not," and their profit margines aren't going to move one fricken inch.

    And they're right.

    No IP6 for you. Costs too much. No-one is demanding it loud enough, and the lemmings are still facinated with that "You've got mail!" bullshit.

    God help us the day microsoft gets into internet switching.

  127. Marx win through IP V6 by alephnull42 · · Score: 2, Interesting

    Some info gleaned from a conference i attended recently:

    - U.S. military is completely on IP V6

    - Big japanese government funding for "pushing" IP V6

    - 900 Trial customers in Japan, including 3 cars (all this for just ~$20 Million in Public money)

    - The same body received approx $9 Million from European Comission to push IP V6

    - Less that 20 commercial broadband IP V6 customers worldwide...

    Two scenarios: Like with UMTS, governments pushing a standard they don't understand will result in failure. IP's success was based on market success, and theres nothing like 10^7 dollars for turning a good concept into a bloated Frankenstein monster

    OR

    The governments are pushing this because it will give them the infrastructure they need to come out with true "big brother" scenarios... Unified protocol with full control

    Paradoxically, in this day of "global liberalization of markets", this major infrastructure development is not being driven by market forces, but by centralized government bodies like in the best days of Communism... weird

    Just a note: As long as they were nationalized, not a single telegraph, telephone or telecoms company made any profit. Strangely, the same industries started blasting out profits almost immediately after privatization

    --
    Not confused enough? http://translate.google.com/translate?u=www.slashdot.jp&hl=en&ie=UTF8&sl=ja&tl=en
    1. Re:Marx win through IP V6 by quan74 · · Score: 1

      - U.S. military is completely on IP V6

      That's complete horsesh!t. It's a requirment for all new systems to be IPV6 interoperble/compatible, but at least for the Army none of their systems are using it yet, even those built/developed since it became a requirment.

  128. It's not the english system by Anonymous Coward · · Score: 0
    us gallons are smaller than english gallons, and vary according to what is being measured (wheat, water, etc.)


    And I find it easier to remember that 1 kilogram is 1000 grams than that 1 ton is ?? hundredweight, each of which is XX stone, each of which is 14 pounds each of which is 16 ounces each of which is xx grains etc.

    Ditto for miles, furlongs, rods, chains, yards = 3 feet, feet = 12 inches, 72 points to an inch, 20 twips to a point.
    I don't know about you, but i've got 10 fingers (including thumbs) and I find the decimal system easier to use.

  129. Re:Moron - Actually YOU don't know what... by tooloftheoligarchy · · Score: 1
    Point 1: iPaul, I wanted to comment that I was truly (no kidding) impressed by the class with which you conducted yourself in this exchange. It's so common in this community for things to immediately degenerate to "I know you are, but what am I?!" A pity your detractor couldn't muster a bit of class himself -- it's bad enough that he's dead wrong...

    Point 2: To expand a bit upon the subject of IPv6/IPv4 compatibility, I quote here from the 2nd edition of "Computer Networks: A systems approach", (Peterson & Davie, 2000, Academic Press), on the subject of the IPv6 address space:
    Within the reserved address space (addresses beginning with a byte of 0's) are some important special types of addresses. A node may be assigned an "IPv4-comaptible IPv6 address" by zero-extending a 32-bit IPv4 address to 128 bits. A node that is only capable of understanding IPv4 can be assigned an "IPv4-mapped IPv6 address" by prefixing the 32-bit IPv4 address with 2 bytes of all 1s and then zero-extending the result to 128 bits.
    Which is to say, while of course no IPv4 device is going to natively understand IPv6, there are easy mechanisms for incorporating IPv4 devices into an IPv6 network, as iPaul has observed.
  130. Yes, see that's exactly what's needed by Colin+Smith · · Score: 2

    And a way of getting proper addresses, not just test ones.

    --
    Deleted
  131. Keep in mind, though... by artemis67 · · Score: 2

    The Windows Update feature would make installing IPv6 a fairly painless operation. You need it? Just go grab that Critical Updates package you've been neglecting for two years.

    It's not a showstopper; I wouldn't even say it's a bump in the road, provided MS thought it was important enough to put in Critical Updates.

  132. I should have been modded as a troll by Anonymous Coward · · Score: 0

    Not a single anti-MS statement.

  133. ISP marketing by karlm · · Score: 1

    As soon as some of the large ISPs realize that they can turn IPv6 into marketing drivel, they'll start upgrading their internal networks. The winds of change will first rustle in your television. Joe Sixpack doesn't know what Ipv6 is, but he doesn't want to get left behind.

    --
    Copyright Violation:"theft, piracy"::Anti-Trust Violation:"thermonuclear price terrorism"<-Overly dramatic language.
  134. Coincidence?... I think not... by Anonymous Coward · · Score: 0

    n/t

  135. Re:Well, it's here already (slightly OT) by Etyenne · · Score: 3, Insightful

    It made internal routing *far* easier.

    Not always. A big problem with private adress space appear when two business (or dept, or whatever) bridge their LAN with a VPN and they are using the same private range. Most LAN use etheir 192.168.[0|1].0/24 or 10.0.0.0/8, so this happen often (it happen to me all the time). Hopefully one or the other use DHCP so they can be migrated to an other adress range (almost) painlessly.

    --
    :wq
  136. Re:Well, it's here already (slightly OT) by Creepy · · Score: 1

    I don't see why a properly set up NAT wouldn't handle this - as a matter of fact, my home network connected just fine with overlapping 192.168.x.x domains. Routing IPSec and ISAKMP packets is a much bigger issue with VPN, because NAT mauls the header and doesn't recompute the checksum used to identify the sender unless your firewall is set up to do this for you. Once the packet is outside your firewall, it has your (firewall's) static IP (or DHCP equivalent, since DHCP functions like a static IP as long as you're on a network) as an address to send back to, and your firewall machine needs to keep a table of all of these packets so it can re-route them on return.

    Oh, and by the way, it's 192.168.x.x and I think 10.0.x.x as well (I don't use that set), where x can be between 0 and 255.

    DHCP shouldn't affect anything, either, it just assigns any machine plugged in an internal static IP (as far as the firewall is concerned) until the timeout value is hit (if ever). Yes, it does make migration to another subnet relatively painless, but usually you won't need to do this. The whole purpose of DHCP was to share a fixed set of static IPs in the same way as a modem pool shares a fixed set of dialup lines. The protocol became popular because it is easy for an administrator to remove and add machines into a network because the administrator doesn't need to go to each individual machine and set up its IP.

    I really don't know how Microsoft's PPTP protocol or L2TP are handled, but I would guess both of them has some support for being routed through firewalls.

    The other IPSec protocol, AH (Authentication Header) can't be used over a firewall, so you don't see it used much in the real world.

  137. Re:Well, it's here already (slightly OT) by Etyenne · · Score: 2

    I am not sure I get your point, and by the little I understand you don't get mine either. The type of scenario I was referring to is not a client connecting to a gateway, it's a gateway connecting to another gateway to make both LAN look like they are local to the client. In this scenario, the VPN connection never get NATed; it is initiated by each gateway on their outbound (Internet) interface. Routing become an issue in this scenario: how are gateway supposed to route if both side of the VPN have the same subnet ???

    Just to clarify my thought about DHCP: migrating adress that where statically assigned "by hand" is a lot of work since they must be changed on each workstation separately. If you use DHCP, you just have to edit /etc/dhcpd.conf, wait for the lease to expire (at night, on the weekend, whatever) and bingo! all (or most) of your machine now use the subnet wich hopefully you can route thru the VPN link. Get it ?

    Right now, outbound PPTP connection are a real pain to NAT with iptables. There is an iptables connection tracking module but it has not yet been integrated in the base patch. Hopefully it will in iptables 1.2.6

    --
    :wq
  138. ipv4 and ipv6 running together by panic911 · · Score: 1

    Can ipv4 and ipv6 run together? Like could I hit a ipv4 network and a ipv6 network with the same internet connection?

  139. Already by Anonymous Coward · · Score: 0

    Several asian countries (among them Japan) are so starved for IP-addresses that not even NAT can cut it (to be able to NAT then at least the gateway/router to the NATted net needs at least a temporary IP). They're switching over, whole sale.

  140. What I still haven't figured out... by Anonymous Coward · · Score: 0

    ... is whether this is meant to be funny or plain trolling....

  141. Re:Well, it's here already (slightly OT) by Pii · · Score: 2
    Not to nitpick but...

    I take that back. My intent is to nitpick.

    RFC 1918 sets aside:

    • 10.x.x.x (Class A)
    • 172.16-32.x.x (Class B)
    • 192.168.x.x (Class C)
    as "private address space."
    --
    For those that would die defending it, Freedom
    has a sweet taste that the protected will never know.
  142. Not replace, patch by Anonymous Coward · · Score: 0

    Nothing wrong with all the server and router hardware already in place. Just a small change to the software is required.

  143. Re:Well, it's here already (slightly OT) by 3.1415926535 · · Score: 1

    Network 10 is class A, because 10 = 127.

    I.e., it's 10.x.x.x, where x is between 0 and 255. I'm pretty sure there's also a private class C, but nobody ever uses it and I'm too lazy to look it up right now.

  144. Re:Well, it's here already (slightly OT) by frog51 · · Score: 2

    It gets even more fun when using SQLnet and NBT authentication etc if the two merged organisations each use a significant part of the 10.0.0.0/8 space and aren't prepared to DHCP everything.

    Believe me the NAT rules are a joy to behold (as long as someone else is supporting them) and usually means having to use other (non-approved) class A ranges as transition addresses.