Slashdot Mirror


IPv4 Unallocated Addresses Exhausted by 2010

An anonymous reader writes "Ars Technica is reporting on how the unallocated IPv4 address pool could run out as soon as 2010. The IPv4 Address Report gives details on just how fast the available pool of IPv4 addresses is diminishing. Will ISPs be moving towards IPv6 any time soon? Or will IPv4 exhaustion become the next Y2K?"

101 of 419 comments (clear)

  1. From TFA: free pr0n! by Rodness · · Score: 4, Interesting

    Despite the best efforts of organizations like ARIN, the simple fact is that, compared to IPv4, IPv6 gives you access to very little content and very few users. So far, nobody has been able to get past this chicken-and-egg issue, although a The Great IPv6 Experiment proposes to change this by giving away free access to "10 gigabytes of the most popular 'adult entertainment,'" but only over IPv6.

    Is IPv6 so unappealing that they've gotta bribe people with pr0n to use it?

  2. it's tghe next Y2k by timmarhy · · Score: 4, Insightful

    i've been hearing about how ip4 will run out in the next 5 years for the last TEN years.

    --
    If you mod me down, I will become more powerful than you can imagine....
    1. Re:it's tghe next Y2k by KarmaMB84 · · Score: 5, Funny

      IPv4 will be exhausted at around the same time as the first commercial fusion power plant is started and the release of Duke Nukem Forever.

    2. Re:it's tghe next Y2k by Tackhead · · Score: 4, Funny
      > i've been hearing about how ip4 will run out in the next 5 years for the last TEN years.

      We've been in various stages of Imminent Death of the Net Predicted for at least 25 years. Y2K was merely the last version, and running out of IPv4 is merely the current version.

      Just wait until we abandon CSS in order to ensure that an entire page can be rendered by through a single TCP/IPv6 connection. Domain names with vowels! HTML with serifed fonts! Imminent Death of Web 2.0 predicted!

    3. Re:it's tghe next Y2k by Jonny0stars · · Score: 3, Funny

      I thinks its all a big con to waste china's money.
      Besides by the time they bother to implement it it will all fall apart with the year 2038 problem anyway.

    4. Re:it's tghe next Y2k by Kadin2048 · · Score: 5, Informative

      i've been hearing about how ip4 will run out in the next 5 years for the last TEN years.

      Well, it would have run out a lot faster, had it not been for CIDR, which allowed addresses to be allocated more efficiently. However that -- like proposals to re-allocate unused space in some of the old corporate A-blocks -- slowed the bleeding but doesn't really do anything about the real problem.

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    5. Re:it's tghe next Y2k by QuoteMstr · · Score: 5, Insightful

      Have you considered that Y2K problems were only averted because we recongized the problem beforehand and took steps to correct it? Y2K was a success, not a poster-boy for scare-mongering.

    6. Re:it's tghe next Y2k by PhxBlue · · Score: 2, Funny

      Just wait until we abandon CSS in order to ensure that an entire page can be rendered by through a single TCP/IPv6 connection. Domain names with vowels! HTML with serifed fonts! Imminent Death of Web 2.0 predicted!

      Cats and dogs, lying together ... mass hysteria!

      --
      !#@%*)anks for hanging up the phone, dear.
    7. Re:it's tghe next Y2k by Anonymous Coward · · Score: 2, Informative

      Maybe you don't recall: CIDR was designed to decrease the number of BGP routes. That is, to enable route aggregation. CIDR is not the cause of the explosion. Without CIDR, people who got 4 class B's had to announce four routes that no one could aggregate. With CIDR, they can announce 1.

  3. everything is going to be ok by WormholeFiend · · Score: 5, Funny

    I bet that people will be bored of the internet by then

    1. Re:everything is going to be ok by alexandreracine · · Score: 2, Funny

      everything is going to be ok


      That sounds like a direct quote of half the script from 24.

      --
      No sig for now.
  4. Worse than Y2K by phantomcircuit · · Score: 4, Insightful

    Y2K was a bug which was easily solved. This is an infrastructure defect which has an available, but expensive, solution.

    It will be expensive to make a major shift to IPv6, which is why it's taking so long.

    Until the complete exhaustion of all IPv4 addresses is an immanent threat the change will not happen, much like Y2K.

    1. Re:Worse than Y2K by Kadin2048 · · Score: 2, Insightful

      Y2K was a bug which was easily solved.

      You have an interesting concept of "easy" ...

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    2. Re:Worse than Y2K by MtViewGuy · · Score: 2, Insightful

      I don't think it will be as frightening as people think.

      After all, most recent network hardware are more or less ready to make the transition, and anyone running Windows 2000 Professional or later, MacOS X variants, and more recent Linux distributions could make the jump to IPv6 either natively or by installing a patch program.

    3. Re:Worse than Y2K by sirket · · Score: 4, Informative

      This is so patently wrong I don't know where to begin-

      My home network sits behind a Cisco 2621 running an IPv6 IOS image- and I have a /64 and a tunnel to tunnelbroker.net (By Hurrican Electric). It took ten minutes to set up- and another minute to enable IPv6 on my FreeBSD desktop- at that point I was able to get to www.kame.net via IPv6 with no problems.

      I even set up an IPSEC / GRE tunnel with a friend of mine along with mBGP (multiprotocol BGP). No problems. I set up route-maps and filters all without a problem. My friend and I were then able to get to each others Unix servers via ssh over IPv6 using hostnames that resolved via AAAA records.

      I also run OSPFv3 internally- again without incident. Deploying IPv6 to my network took a grand total of an hour- and we're talking about BGP, OSPF, GRE IPSEC tunnels and so on.

      In fact- the change was so easy I immediately began a project to upgrade my company to IPv6. So far it has been incredibly easily and completely transparent to everyone.

      What's holding IPv6 back is two things: public perception that the change will be difficult (completely unfounded) and the unwillingness of anyone to just start deploying it. I have SpeakEasy for my home connection (business class SDSL with a /27) and they neither offer IPv6- nor do they even have any IPv6 plans (or so customer service told me. This is just sad. The same goes for my employers upstream provider- and backbone provider.

      -sirket
      Senior Network Engineer for a company you've definitely heard of

  5. Reshuffle existing IPv4 space by McDutchie · · Score: 5, Interesting

    They could delay the inevitable by reallocating existing IPv4 space more efficiently. Many old/historical allocations are inefficient. Apple Computer, for example, has all of the 17.x.x.x space, comprising 256^3 = more than 16 million addresses, which is just plain absurd in this day and age.

    1. Re:Reshuffle existing IPv4 space by Detritus · · Score: 4, Interesting
      You and what army of lawyers? :-)

      Class A blocks were one of the benefits of being a Internet pioneer. Why should they give them up?

      --
      Mea navis aericumbens anguillis abundat
    2. Re:Reshuffle existing IPv4 space by Tatarize · · Score: 5, Insightful

      No reason? Ahem, those IP addresses are going to get *VERY* valuable in about 3 years apparently.

      --

      It is no longer uncommon to be uncommon.
    3. Re:Reshuffle existing IPv4 space by neoform · · Score: 3, Insightful

      Apple is a bad example, they could actually use those IPs if they shared them with google or something..

      companies that totally don't need them would be companies like:

      Ford
      Boeing
      GE

      --
      MABASPLOOM!
    4. Re:Reshuffle existing IPv4 space by Wolfier · · Score: 4, Interesting

      Halliburton Company     34.0.0.0 - 34.255.255.255

      Even as someone who doesn't think of Microsoft as an Internet pioneer, I'd rather MS owns this block than Halliburton.

    5. Re:Reshuffle existing IPv4 space by bradkittenbrink · · Score: 2, Insightful

      That, and the fact that it would only buy us like 2 years. /me scuttles off to go find link.

    6. Re:Reshuffle existing IPv4 space by RzUpAnmsCwrds · · Score: 5, Interesting

      They could delay the inevitable by reallocating existing IPv4 space more efficiently. Many old/historical allocations are inefficient. Apple Computer, for example, has all of the 17.x.x.x space, comprising 256^3 = more than 16 million addresses, which is just plain absurd in this day and age.


      Don't complain about Apple. HP has all of 15.x.x.x and all of 16.x.x.x, because they purchased DEC who also had a class-A.

      Interestingly, HP is the only company that effectively has a /7 because their block is contiguous.
    7. Re:Reshuffle existing IPv4 space by grapeape · · Score: 3, Interesting

      Anyone else think its kind of weird that the US only has 300,000,000 people but the Department of Defense needs 184,549,376 IP addresses? Also why does the freakin interop show need a class A, and why does PSI still have the 38. block didnt they go out of business around 5-6 years ago?

    8. Re:Reshuffle existing IPv4 space by imemyself · · Score: 2, Informative

      "harder to do"

      Are you kidding me? Are you actually saying that it would be more difficult for IANA to pull the class A's from organizations who have absolutely no use for it whatsoever, than it would be to upgrade every device connected to or part of the Internet infrastructure and configure it to communicate/route an almost entirely new protocol?

      --
      Every time you post an article on Slashdot, I kill a server. Think of the servers!
    9. Re:Reshuffle existing IPv4 space by TooMuchToDo · · Score: 5, Interesting
      Actually, you don't need an army of lawyers. Those Class A blocks are delegated solely at the whim of ARIN (at least those Class A blocks that fall under ARIN control). If ARIN has a vote, and the majority of stakeholders create a resolution requiring action to be taken to stave off address exhaustion, then anything is possible.

      Disclaimer: I've worked with ARIN to get/manage/return blocks of IPs for years.

    10. Re:Reshuffle existing IPv4 space by Kalriath · · Score: 5, Informative

      Oh really?

      Department of Defense Network Information Center 21.0.0.0 - 22.255.255.255

      That's a... /7? And check THIS out:

      Department of Defense Network Information Center 6.0.0.0 - 7.255.255.255
      Department of Defense Network Information Center 11.0.0.0 - 11.255.255.255
      Department of Defense Network Information Center 21.0.0.0 - 22.255.255.255
      Department of Defense Network Information Center 26.0.0.0 - 26.255.255.255
      Department of Defense Network Information Center 28.0.0.0 - 30.255.255.255
      Department of Defense Network Information Center 33.0.0.0 - 33.255.255.255
      Department of Defense Network Information Center 55.0.0.0 - 55.255.255.255

      So that's... about 330 MILLION IP addresses for the US DoD alone? And people bitch about MIT hoarding!

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    11. Re:Reshuffle existing IPv4 space by bug1 · · Score: 2, Insightful

      "Class A blocks were one of the benefits of being a Internet pioneer. Why should they give them up?"

      First, apple was never an internet pioneer, they were very late in implementing the IP protocol, even microsoft beat them to it.

      The people who handed out IP blocks cleanly did not expect the internet to be so popular (if they did they would have gone to ipv6 straight away).

      They benefited froma mistake, now they should fxi the mistake.

      If IP blocks are handed out as a reward for being an internet pioneer, how many class A blocks did they give Tim-Berners_Lee?

    12. Re:Reshuffle existing IPv4 space by sirket · · Score: 3, Informative

      Everyone in this thread is sooooo wrong it isn't funny.

      First off- no one in their right mind is going to give up their addresses.

      Secondly- let's not keep IPv4 around any longer than it has to be. Please let it die already. Moving to IPv6 is just not that hard- including OSPFv3, mBGP, tunnels, filters and route-maps it took me an hour or so of actual configuration time to enable IPv6- for gods sake- let's just do it already.

      Finally- breaking up /8's into lot's of smaller networks is a TERRIBLE idea. There are already about 200k routes in the global routing table. Splitting up a single class A up into /20's (the current standard allocation) would increase the size of the table by 4k entries. Do that for a dozen networks and you've just increased the global routing table by 25%. That's an AWFUL idea. IPv6 avoids this problem with a stricter and more sensible heirarchy that allows for a LOT more aggregation.

      The fact is- you don't know anything about backbone routing so please don't tell ARIN how to do their job.

      -sirket

    13. Re:Reshuffle existing IPv4 space by forkazoo · · Score: 2, Funny

      Oh really?

      Department of Defense Network Information Center 21.0.0.0 - 22.255.255.255

      True, but the OP did say "company." DoD isn't really playing in the same league as HP. (Despite HP's best efforts to go into the spying business.) Besides, DoD was responsible for DARPA, which was responsible for the early Internet, so I figure if one group deserves an absurd allocation, it is probably them.

      So that's... about 330 MILLION IP addresses for the US DoD alone? And people bitch about MIT hoarding

      Well, think about it... If you were desperate for an IP and you needed to take somebody else's, who would you pick a fight with?!

    14. Re:Reshuffle existing IPv4 space by sirket · · Score: 2, Interesting

      A decade ago when ARIN was being formed there are sheer outrage at the size of the routing tables then. I think it was about 59K entires (but I could be wrong). I was told the cpus in big routers couldn't keep up.

      This just goes to prove your ignorance. There were several times when routers were only _barely_ able to stay ahead of the table growth- and in many cases routers did have to be upgraded.

      The routing table has been stable for a while and growth has been very small- mostly due to sensible allocation strategies. Suddenly splitting up existing allocations would cause far more harm than good- plain and simple.

      At the time there was also serious concern that a million names in com would break the entire net. Now there's about, what 40 million com names? My email and webpages still seem to work.

      I think you mean 70 million. That said- there was concern- questions about whether it could handle the growth- not widespread agreement that it wouldn't work. And the reason it does work is because of incredible infrastructure investments to allow it to work- money spent on GTLD servers, big pipes, multiple datacenters and large anycast groups, etc.

      I'm supposed to sweat a 25% increase? What happened to the credo of scalability? 25% and it's the death of the net predicted? Please.

      I don't care what you sweat- the recent router crashes in Japan were likely the result of insufficient capacity in the routers- and you want to just increase the table size by 25%? Get real.

      ARIN gets paid for V6 allocations. I'd love to see the accounting for taking something from some company for free then resellng it for boucoup bucks.

      ARIN gets paid for v6 and v4 allocations. A /48, for example, is only $1200 (similar to a /21 under IPv4)- if you think ARIN is making money on this then you're nuts. The paperwork and administrative costs use up that $1200 pretty damned fast.

      Exactly how many routers do you run with a full table- and what models are they?

      -sirket

    15. Re:Reshuffle existing IPv4 space by Kadin2048 · · Score: 5, Interesting

      It only seems ridiculous because of the way we distribute IP addresses today, using CIDR. Prior to 1993 (or whenever CIDR was implemented), if you wanted to run a network with subnets, then you needed at least a Class B allocation, so that your subnets could have Class C blocks (254 hosts each).

      This is why MIT, Apple, DEC, IBM, and lots of other big companies were given Class A's. It wasn't just a "thanks for playing" reward, it was because the original design for the IP system required Class A blocks if you wanted to run big networks: if you had a big organization, you needed a Class A, in order to do multiple levels of subnetting.

      When you look at the IP allocations and see GE or DEC's Class A blocks, it seems ridiculous. But you have to understand that when those allocations were made, what they were looking at was less the number of actual host IPs in the block (which is what we care about now) but the number of Class B and C subnet blocks that were inside. Put yourself in the shoes of someone at a big company like IBM or GE, with lots of regional offices. Each region/office needs to have a network, with its own subnets (for each department or whatever). That's how they were laying things out. "IBM" as an organization gets a Class A. Each regional office or some other division, Class B. Each network or further subdivision, Class C. Yeah, you end up with a lot of wasted capacity, but this whole scheme was designed back when a "host" was a PDP or VAX; there just weren't enough of them for it to seem like a major issue.

      The problem people sometimes refer to when they talk about "the last time we were running out of IPs" (back in the early 90s) wasn't really a shortage of IPs at all (well, at least not immediately, although people were definitely realizing it was going to be a problem), it was a shortage of Class B and C subnet blocks. (Particularly Class B's, since that's what medium-size businesses and .edu's really wanted, and there are only like 16k of them around for direct allocation.)

      So that's when CIDR was introduced, and it ended the whole 'Classed Network' concept (A, B, and C classes) and replaced it with the now-familiar bitwise/subnet-mask format. (E.g., IBM's Class A block is 9.0.0.0/8, Apple's is 17.0.0.0/8, etc.) This, along with prefix aggregation, allowed more efficient address allocation, and kept the routing tables from growing out of control. Now that you can subnet at the bit level, rather than at the Class level, those A Blocks seem huge. But keep in mind that before CIDR, each of those A Blocks was looked at, not as 16M hosts, but as 254 subnetworks.

      It's only in retrospect, with the help of a bunch of new technologies, that the allocations made back in the Internet's early years look ridiculous.

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    16. Re:Reshuffle existing IPv4 space by Anonymous Coward · · Score: 3, Informative

      companies that totally don't need them would be companies like: ...Boeing...

      Apple has under 20,000 employees. Boeing has over 150,000 employees.

      Apple is a computer company, but just because Boeing isn't as trendy as Apple today doesn't mean they design airplanes with slide rules.

      And they're not all about building commercial aircraft, either (that's actually less than half the company these days). Phantomworks isn't as well-known as Lockheed's Skunkworks, but they do their share of high-performance computing (=lots of computers), too.

      And Boeing is itself a small company compared to Ford (280,000 employees) or GE (315,000 employees). Don't forget that GE is the world's second largest company, who own everything from financial and real estate to industrial components (they make engines for Boeing) to big media (NBC Universal). (Ever watch Sci-Fi Channel? That's GE.) If you don't think GE needs a class-A, it's hard to imagine why any single company would, especially a small one less than 1/10th its size, that isn't even primarily a media distribution company.

    17. Re:Reshuffle existing IPv4 space by anticypher · · Score: 2, Interesting

      But Apple is using much of their /8 allocation.

      Go into any Apple store and fire up your Wifi, and you'll get a non-NATed 17.x.x.x address. There is a firewall, but other than that, its exactly what the internet is supposed to be.

      Since Apple has very little of their infrastructure behind NAT, they have very few problems with things like NAT traversal, or buggy VoIP systems.

      the AC

      --
      Hemos is like...sci-fi fans;he thinks technology is cool, but he hasn't bothered to understand the science it's based on
    18. Re:Reshuffle existing IPv4 space by abb3w · · Score: 2, Funny

      So that's... about 330 MILLION IP addresses for the US DoD alone? And people bitch about MIT hoarding!

      Perhaps, but when contemplating prying them loose the phrase "you and what army?" may need literal consideration.

      --
      //Information does not want to be free; it wants to breed.
  6. Re:From TFA: free pr0n! by HoosierPeschke · · Score: 4, Funny

    Well duh, why do you think people got on the Internet in the first place? Some military experiment? pffffffft. It's all about the pr0n!

    --
    Mr. Universe: "They can't stop the signal, Mal. They can never stop the signal."
  7. VoIp Everything by chill · · Score: 5, Insightful

    Telecom companies are switching everything, including cell phones, to VoIP. Soon, damn near every cell phone will have an IP address associated with it. CDMA phones that EVDO rev-A already do. I know one carrier that has a pool of 2 million available addresses, and 20+ million customers with cellphones.

    IPv4 addresses are going to be going away very quickly.

    --
    Learning HOW to think is more important than learning WHAT to think.
    1. Re:VoIp Everything by glomph · · Score: 3, Funny

      Nonsense. If mobile companies do go to VoIP, it will be done in private IP space. The IPv6 fanboys are ridiculous, even Dick Cheney is more believable....

    2. Re:VoIp Everything by bofkentucky · · Score: 3, Informative

      what provider is giving out routeable addresses on their phones? Nextel is giving us 10. addresses.

      --
      09f911029d74e35bd84156c5635688c0
    3. Re:VoIp Everything by bofkentucky · · Score: 2, Interesting

      I made the assumption that each state/lata/switch/tower was doing their own nat.

      --
      09f911029d74e35bd84156c5635688c0
  8. Re:Increase Address Space by solafide · · Score: 2, Insightful

    Do you not understand that IPv6 essentially increases the address space for IPv4 to virtually infinity?

  9. Re:Reallocate what is available by HoosierPeschke · · Score: 2, Insightful

    True, but you'll have to pry it from their cold dead fingers!!!
    Kind of reminds me of a Grandpa Simpson (skewed to be somewhat on topic): "I didn't earn it, I don't need it, but if they miss one [octal] I'll raise hell."

    --
    Mr. Universe: "They can't stop the signal, Mal. They can never stop the signal."
  10. Re:From TFA: free pr0n! by (H)elix1 · · Score: 3, Insightful

    Is IPv6 so unappealing that they've gotta bribe people with pr0n to use it?

    With one of the bigger 'features' of IPv6 being the possibility of assigning and tracking users individually with the huge number of addresses - I suspect it does not play into the current (sorta) anonymous surfing mindset folks have today. (Not that anyone is truly anonymous on the web) Once you have to slap down your address to access the content, I can see why people might not be interested.

  11. Whew! by zymurgy_cat · · Score: 5, Funny

    Man, am I glad I've got 192.168.0.100 through 192.168.0.105 setup on my network at home. Hmmm.....maybe I should lay claim to 106 through 110, just in case.....

    --
    -- Fugacity: Confusing chemists since 1908
    1. Re:Whew! by D4rk+Fx · · Score: 5, Funny

      Man, am I glad I've got 192.168.0.100

      That's the same IP address I've got on my luggage!
    2. Re:Whew! by SageLikeFool · · Score: 4, Funny

      Now that I know your IP address range I am so gonna h4x y3r b0x3n.

  12. Re:Why IP6? by KillerCow · · Score: 2, Interesting

    That would require a change to all TCP/IP stacks, and replacement of core routers.

    Why not just fix the problem outright if you are going to do that?

  13. Re:From TFA: free pr0n! by mengel · · Score: 5, Informative
    The problem is, that claim makes no senses whatsoever. The IPv4 addresses are a subset of the IPv6 space -- you can get to all of the IPv4 systems from an IPv6 network.

    There are two issues:

    1. Switching protocols
    2. Getting IPv6 addresses
    You can use the IPv4 subset of the IPv6 address space, and everyone can still talk to everyone while you convert. It's only the folks that have IPV6 addresses before the IPv4 users have migrated that become unreachable by anyone.

    So the online businesses are going to want to be the last ones to switch, so that their customers don't become unable to reach them.

    But anyway, IPV6 gives you access to all the same content.

    --
    - "History shows again and again how nature points out the folly of men" -- Blue Oyster Cult, 'Godzilla'
  14. uh, what? by DreadSpoon · · Score: 2, Interesting

    Ease adoption how, exactly? You still need to update the protocol, then update all the software, and all the hardware, and all the documentation and training... you can't just tack that on to existing implementations of software.

    If you're going to force all that change, then change to something that isn't a silly half-arsed hackjob.

  15. Re:From TFA: free pr0n! by ekhben · · Score: 3, Insightful

    Is IPv6 so unappealing that they've gotta bribe people with pr0n to use it?

    It's not unappealing, it's totally irrelevant to end-users. There's no market out there asking for IPv6 network access. ISPs and their upstream providers thus have no increase in revenue if they deploy IPv6, but that deployment will cost them real money -- v6 capable routers need much more storage and processing, for instance -- and so there's real financial incentive to avoid IPv6. Offering free pr0n might be a way to make the difference relevant to end-users and thus provide demand and revenue, but I kind of doubt that it's enough.

    When end-users are getting IPv6 or private address IPv4 to the door, and a NAT exchange at the ISP, and their VOIP/game/spyware breaks, there will be financial motive at all levels. Being able to offer a full and uncrippled Internet experience will be the value-add.

    But expect a period of chaos as ISPs try to barter IPv4 addresses around, and failing that, try to steal them.

  16. Carbon Credits by biocute · · Score: 3, Insightful

    I think companies will start 'renting' addresses as IPv4 is approaching its limit, pretty much like the concept of carbon credits.

    Companies may cut down unnecessary IP usage, or buy/rent addresses from other companies with plenty to spare.

    This 'trade' could go on until such point it's either more costly to rent than move to IPv6, or when all available-and-necessary addresses have been fully utilized.

    1. Re:Carbon Credits by TooMuchToDo · · Score: 2, Informative
      Perhaps you need to read up a bit. ARIN is a not-for-profit whose primary role is to delegate address space. They do the same function NANPA/NeuStar [North American Numbering Plan Administration] does, except NANPA/NeuStar handles area codes and phone numbers. ARIN's authority has already been proven in court as well. Anti-trust laws don't apply here.

      Don't be an ass unless you've done your homework.

  17. They will move when they have to by DreadSpoon · · Score: 5, Insightful

    I doubt anyone will be making a concerted effort to switch until it actually becomes necessary. Once the IPv4 address space runs out, hacks will be done to extend it. Ranges will be "repo'd" from companies, or those companies will just start reselling those ranges. Not until there is no space left to squeeze out will people really start caring.

  18. Re:From TFA: free pr0n! by Kadin2048 · · Score: 4, Interesting

    That's really just not true. With IPv6, you can get a lot more anonymity than you have now with IPv4. v6 has all sorts of special provisions for randomly assigning addresses, letting you reset them when you want, so that you can appear to be a new user in the middle of a browsing session. That's tough to do with IPv4; even if you try a DHCP release-and-renew from your ISP, generally they won't issue you a new address until the other one has expired.

    IPv6 doesn't force you to give up any privacy, and there's no 'user serialization' unless you buy into it voluntarily.

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  19. ISPs won't care by Natales · · Score: 5, Insightful

    If we do run out of IPv4 addresses for real this time, I predict ISPs will switch to 100% private IP addressing space before even thinking on IPv6.
    Heck, it's already happening in other countries. In Chile for example (a reasonably high-tech country) VTR http://www.vtr.cl/, the only cable ISP, will give you ONLY RFC-1918 addresses, period.

    The masses won't care. They only care about their basic apps, and ISPs will use that as leverage to control more services, especially all P2P and VoIP-related ones.

  20. Hey! by The+MAZZTer · · Score: 4, Funny

    Those are MINE, you THIEF!

    1. Re:Hey! by zymurgy_cat · · Score: 4, Funny

      In that case, I'm blocking them with my firewall. Take that, jerk!

      --
      -- Fugacity: Confusing chemists since 1908
  21. Let's just NAT by bl8n8r · · Score: 4, Funny

    Kidding - I'm KIDDING

    --
    boycott slashdot February 10th - 17th check out: altSlashdot.org
  22. Re:From TFA: free pr0n! by malsdavis · · Score: 2, Funny

    "Is IPv6 so unappealing that they've gotta bribe people with pr0n to use it?"

    It worked with IPv4.
    Although I shudder to think back to the days of downloading pr0n on a 14.4k modem!

  23. Re:From TFA: free pr0n! by daeg · · Score: 4, Insightful

    There's also significant financial incentive to keep the limited address space of IPv4. Want a static IP address or additional IP addresses? Fork over the cash, baby!

  24. Re:From TFA: free pr0n! by Professor_UNIX · · Score: 3, Insightful

    There's no market out there asking for IPv6 network access. ISPs and their upstream providers thus have no increase in revenue if they deploy IPv6, but that deployment will cost them real money -- v6 capable routers need much more storage and processing, for instance -- and so there's real financial incentive to avoid IPv6.

    Routers that have been capable of supporting IPv4/IPv6 dual stack have been available for a long time now so unless you're a tiny ISP that has no budget for life-cycle upgrades it's very likely your kit is already capable of running IPv6. Now, whether or not your engineering staff is trained in supporting IPv6 is another story. Within 5-10 years though ISPs will have very little excuse to NOT support IPv6 since they will have replaced any antiquated IPv4-only equipment as it is end-of-lifed. US Federal Government agencies have a mandate to support IPv6 by June 2008 so it has been spurring a lot of vendors to get their shit in order and either upgrade their products to support IPv6 or face not being able to sell to one of their largest customers.
  25. Re:Use NAT liberaly by b0s0z0ku · · Score: 2, Insightful
    Would it not help if we just better utilized NAT.

    NAT is a dreadful hack.

    -b.

  26. Start preparing your resume... by dircha · · Score: 3, Insightful

    ...and climb on board as an enterprise IPv6 migration consultant.

    Hopefully it *is* the new Y2K.

  27. IPv6 is already here. Been here for awhile by Zaffle · · Score: 4, Interesting

    I'm continually amazed at the number of people in the IT and Net industry who keep "wondering" when IPv6 will arrive. Its been here for a long time. I'm running a series of web servers for internal company use that have native IPv6 addresses. For public consumption, we have an IPv4 reverse proxy that allows us to run our entire web services behind one IPv4 address. Any customer who has an IPv6 address gets to talk to the individual servers.

    The advantage comes when you consider management. In order to have 20 SSH/FTP/etc accessible Internet servers, I'd either need 20 separate IPv4 addresses (getting a decent segment of a class C here is expensive), or I'd have to play fun games with ports. All our technicians have IPv6 on their laptops, and use tunnel brokers for access to the v6 network.

    Most of our clients have IPv6 connectivity, though they don't notice it. When we put in a firewall, IPv6 comes default setup with tunnel brokers.

    People keep asking, when's there gonna be v6 content? There is no v6 content (ok, their is full colour ascii starwars). Any content provider would be nuts to say "you have to have v6 to see our content" at this point (with the exception of mobile phones). IT Techs brought v4 to the public, we'll bring v6 to the public. Its technicians like myself who appreciate having an Internet accessible toaster (ok, so its not yet accessible) that have already started the ball rolling.

    Before long you'll see hosting providers saying, you can have one web gateway shared v4 address and a /64 v6 address for a cheap price. You'll design your websites to be usable on v4, but for management tools, etc, you'll need to install a v6 tunnel.

    --

    I use to have a funny sig, but slash cut it off, and I forgot what the punchline was.
    1. Re:IPv6 is already here. Been here for awhile by Zaffle · · Score: 2, Interesting

      Surely, you should only need one port to communicate with your toaster. I'll even wager that you wont have 65535 devices in your house that you need to talk to. They only need one port. NAT it and be done.

      The issue with this is that IP was designed so that each device has one IP address. When you visit google, you go to http://www.google.com/, not http://www.google.com:81/ (I tried to use :80 here, but slash removed it, so I'm using 81). So if I wanted my toaster and fridge to be accessible, to browser to their respective webpages, I'd have two choices; http://myhouse.example.com:81/ http://myhouse.example.com:82/ etc etc, or use a reverse proxy and use http://myhouse.example.com/toaster.

      And how do you remember which port is the toaster, and which is the fridge? If you want to SSH into them, you can't even use a reverse web proxy. At that point, if I was forced to use IPv4, I'd setup a PPTP VPN and route it using 10.0.0.0/8 address range.

      So no, I choose to make my toaster accessible via IPv6, and if you are forced to use v4, you can still access the basic webpage with http://myhouse.example.com/toaster. Hmmm.. I'm hungry, I think I wanted slightly burnt bread.

      --

      I use to have a funny sig, but slash cut it off, and I forgot what the punchline was.
  28. Is Bogon List Space Considered by myspace-cn · · Score: 2, Funny

    I wonder if the bogon list space is considered?

  29. Link to RFC 1918 by NevarMore · · Score: 2, Informative

    http://www.faqs.org/rfcs/rfc1918.html

    If I'm reading it correctly your ISP treats you like you are part of their corporate intranet and then pipes your traffic out. I'd expect the ISP have a similar traffic footprint and pattern to a largeish college campus that doesn't assign every PC an outside IP.

  30. So in a back alley in the future by jhines · · Score: 3, Funny

    There will be some guy in an ill fitting suit accosting you, "hey man, got extra IP4?" "I gotta plug in man, I'm jones'ng for some connectivity." "IP6? can't. My colon can't take the colons, 3 dots is all I can handle"

  31. Re:From TFA: free pr0n! by gronofer · · Score: 3, Insightful

    v6 has all sorts of special provisions for randomly assigning addresses
    I've read that with IPv6 the end user would be allocated a block of addresses, instead of getting a single IPv4 address and having to resort to NAT. Presumably this random assignment of addresses would be from the addresses in this block? I don't think this would necessarily give any anonymity, since it may turn out to be easy to identify the block size and alignment and thus be easy to determine that the addresses are associated.
  32. ... and the environment??? by jobst · · Score: 2, Insightful
    Considering the environmental problems we already have we do not need another "y2k thingo" for IP addresses, where people tell you that you HAVE TO buy
    • a new mobile phone for each person
    • a new computer
    • a new [xbox|ps2|ps3|nintendo]
    • a new modem
    • a new ANYTHING that contains a network interface (ip4 address)
    because its more economical viable to buy some new than to fix something we already have and all the old stuff (which is in perfect working order) ends up on a rubbish dump.

    ... off course until we realize that the temperature graph is exponential, ouch!
    --
    to code or not to code, that is the question.
  33. Easy way to speed IPv6 Adoption by Anonymous Coward · · Score: 5, Interesting

    Just move slashdot to an IPv6 only address; voilla by monday every corporate will have a functioning IPv6 setup... ;-)

    1. Re:Easy way to speed IPv6 Adoption by Spy+Hunter · · Score: 3, Insightful

      No need to go that far. Just give users who post over IPv6 a badge next to their name and and an auto +1 IPv6 mod on their posts.

      --
      main(c,r){for(r=32;r;) printf(++c>31?c=!r--,"\n":c<r?" ":~c&r?" `":" #");}
    2. Re:Easy way to speed IPv6 Adoption by anticypher · · Score: 3, Interesting

      Just give users who post over IPv6 a badge next to their name and and an auto +1 IPv6 mod

      I know you came up with this on your own, because great minds think alike. This was my suggestion a few years ago in some other IPv6 thread. It was a good idea then, and still a good idea now. Maybe, once /. has both v4 & v6 access, for a period of one year to increase karma or auto-mod up posts, or some other kind of reward or badge or access to content not available to the dinos^WIPv4 people.

      The whole of the OSTG would gain a lot of knowledge in migrating servers to dual stack, which would give the programmers very valuable skills they could exploit for a few years.

      the AC

      Yes, I've been on IPv6 natively since 2000, isn't it obvious?

      --
      Hemos is like...sci-fi fans;he thinks technology is cool, but he hasn't bothered to understand the science it's based on
  34. Re: From TFA: free pr0n! by Dolda2000 · · Score: 5, Informative
    If what you say is true, then you definitely know something that I don't, and then I still think that I know more about IPv6 than at least most people do. I would think that you confuse either the ::/96 or the ::ffff:0:0/96 prefix for the IPv4 address space as a "subspace" of the IPv6 space. If you do, neither is true.

    ::/96 is a method for routing IPv6 traffic over IPv4. In other words, if you send a UDP packet to ::1.2.3.4, what is being transmitted onto the wire is an IPv4 packet (src: the address of your system's IPv4 stack, dst: 1.2.3.4), encapsulating an IPv6 header (src: the address of your system's IPv4 stack in the last 32 bits left-padded with zeroes, dst: ::1.2.3.4), in turn encapsulating a UDP header. It's a simple way of setting up a SIT tunnel, nothing more. You won't be sending any raw IPv4 packets that way, and neither is any router on the way going to convert it to IPv4 for you.

    ::ffff:0:0/96 is merely a way of talking to the IPv4 stack in your system, even if the program in question only uses IPv6. It does not work on a system without a working and properly configured IPv4 stack. In fact, I hear that the IETF is starting to work against the ::ffff:0:0/96 prefix due to some security issues that I have yet to understand.

    In fact, if IPv4 truly were a subspace of IPv6, then what sources address would an IPv4-only host be seeing when it receives such a packet from an IPv6-only host?

    It is perfectly possible to use both an IPv4 and an IPv6 stack simultaneously, and there are some NAT-like technologies that run on a router to give IPv4 connectivity to IPv6-only hosts, but you'll still need an IPv4 stack somewhere on your network to access IPv4 content.

  35. Supply and demand by michaelmalak · · Score: 2, Insightful

    Or will IPv4 exhaustion become the next Y2K?
    No, Y2K was a hard deadline. IPv4 will become the next DNS. Quick, someone register GreatIPs.com. Oops, someone already has. See what I mean?

    And now to ensure this gets modded as Flamebait: there just aren't enough free-market thinkers on Slashdot.

  36. No IPv6 content? by sid0 · · Score: 2, Informative

    Apart from full colour ASCII star wars, there's a free binary news server with 40+ TB data!

    List of stuff.

  37. "best efforts of organizations like ARIN" joke by r7 · · Score: 3, Insightful

    ARS must have rushed the fact checking to get this article out. Truth is that ARIN does not, and has never, made a best effort at anything except to charge ISPs for address space and let them reap a 500 to 1000% profit reselling it. ARIN has done nothing substantive to promote IPv6, and ARIN looks the other way at hundreds of existing, unused, large IPv4 network allocations.

    I've worked at Silicon Valley companies with multiple class B allocations that could have easily put them behind NAT gateways and firewalls. The University of California campuses have many class Bs and will tell you they "can't do NAT to the dormitories because it's too difficult to track". That's 65K address per class B and there are dozens of these, and several class As, that are just waiting to be reclaimed.

    What these class A and B-owning organizations are doing is holding on to vacant land as long as they can, until it becomes valuable, at which point they hope to sell it at a big profit.

    ARIN is doing the same thing by failing to reclaim these allocations. They're just waiting for demand to climb like California real-estate to begin cashing-in. This is exactly what Network Solutions/Verisign did with domain names when they had a government-protected monopoly. Have we forgotten so soon, one year domain registration was free (via SRI), and the mext year it was $100 per year per domain (via Verisign), despite actual costs of $7/year. This scenario should also be familiar to those who have had to change telephone area codes, sometimes more than once, until enough people complained (of course that was when the FCC was in Democratic hands. With Republicans the Telcos have once-again been cleaning up).

    So believe the hype, but remember, if you fail to look a little deeper we will soon be paying the price, in increased ISP fees, for this wholly artificial IPv4 address shortage.

    1. Re:"best efforts of organizations like ARIN" joke by anticypher · · Score: 2, Informative

      Truth is that ARIN does not, and has never, made a best effort at anything except to charge ISPs for address space and let them reap a 500 to 1000% profit reselling it.

      ARIN, and the RIRs made one effort back in the 1997-2000 timeframe to reclaim many of the allocations that didn't seem to be in use (i.e. not announced on the internet). I can't find the summary of that, it should be somewhere on the Potaroo site linked in the OP. The results were something like 8 /8's were returned, 15 replied with an absolute NO, and none of the other 70 or so companies even bothered to respond. There were a number of attempts to contact the large block holders, but with no success. Search NANOG archives for other details.

      If you have ever seen a talk by Geoff Huston, the man behind Potaroo, he talks in depth about how there has never, to date, been any attempt to take back an allocation through legal action. Should that ever become necessary, it would be costly and require years in the court systems allowing for appeals. He addresses every concern voiced by the ignorant /. masses in this story.

      Even if all the large /8 allocations were to be reclaimed voluntarily without any bother, it would push the exhaustion date out by no more than 2-3 years.

      This is exactly what Network Solutions/Verisign did with domain names when they had a government-protected monopoly. Have we forgotten so soon, one year domain registration was free (via SRI), and the mext year it was $100 per year per domain (via Verisign), despite actual costs of $7/year.

      It wasn't NetSol in 1995, but their predecessor, who charged US$100 for the first year, and $50/year renewal. Within a year NetSol got involved, and the prices came way down. And it wasn't Stanford Research Institute, it was the National Science Foundation who ran the domain allocation for a few years before it was privatised.

      ICANN has been putting out feelers, mostly verbal at meetings and careful not to put in writing, the idea of eliminating the IANA and IETF groups in favor of ICANN charging around US$4.00 per year per IPv4 address. So a group like MIT with their /8 would have to pay US$64 Million per year to keep that many addresses. A web hosting company with a few thousand machines on a /20 would need to pay US$17,000 per year to just have routable addresses. The idea is that the RIRs would become private companies who would purchase allocations they could resell on a "free-market". That would earn the US Government a large bundle of money as they still control ICANN through the Department of Commerce. ICANN loathes the RIRs as they are currently organised, too much of the hippy feeling of volunteer effort and consensus in the public good.

      Almost everyone I have talked with, especially the most die hard Free Market economists, think this is both a very bad idea, and an eventuality. Whether IPv6 will suffer the same fate remains to be seen, but ICANN wants to make money more than anything else.

      the AC

      --
      Hemos is like...sci-fi fans;he thinks technology is cool, but he hasn't bothered to understand the science it's based on
  38. auction! by Doppler00 · · Score: 4, Insightful

    Same thing that happened when popular domain names started running out. I'm sure IP addresses will go up for auction. Seems kind of silly though considering the space available in IPv6. But if you have people that need these addresses, someone will be willing to pay for them. I imagine some of the big names that got them free from the start will be making a lot of money, such as MIT.

  39. WRONG by Anonymous Coward · · Score: 3, Informative

    The IPv4 addresses are a subset of the IPv6 space -- you can get to all of the IPv4 systems from an IPv6 network.

    This is what IPv6 fanatics constantly FAIL TO UNDERSTAND. IPv4 addresses ARE NOT a subset of IPv6 addresses, because IPv4 and IPv6 are INCOMPATIBLE PROTOCOLS.

    Let that sink in.

    Just because there's some addresses within the IPv6 space that can map onto IPv4 addresses doesn't mean you've made the two protocols compatible.

    I can't get to these embedded IPv4 addresses from my IPv4-only machine unless I go through extra hardware/software that tunnels or gateways the packets, basically converting them to IPv6.

    And if there's an IPv4 address on the other end, I'll simply USE IPv4 TO REACH IT.

    The *only* incentive for people to use IPv6 is if popular and useful web sites exist ONLY on IPv6. I.e., Google, Hotmail, whatever. Apparently, the IPv6 fanatics think that ISPs will happily upgrade their hardware and software just so that their IPv4 hosts can talk to IPv4 servers through some Rube Goldberg IPv6 network, waiting for the day that Google's IPv4 IP goes dark. No, that's not gonna happen.

    If you can't comprehend what I've said, replace "IPv6" with "Fidonet" or some other protocol and think about it.

    1. Re:WRONG by Cato · · Score: 2, Informative

      Comcast has already deployed IPv6 in its core network and will deploy it to homes, simply because it's already gone beyond the available 10.x addresses and is now on public IPv4 space - it needs about 100 million devices for its IP voice/video/net customers. So the other incentive to use IPv6 is simply that you won't get Comcast service at some future date without having IPv6. Of course, this will be largely transparent to the customer as they'll use native IPv6 within Comcast and then be converted to and from IPv4 on the IPv4 Internet - but it will create a base of users who are IPv6. These users won't have IPv4 at all in their home (otherwise you don't solve the address scarcity issue).

      Also, if Comcast ever decides to serve their video content outwards to Internet users who don't have Comcast access, it would be easy to provide it over IPv6 as well as v4. This doesn't mean exclusive IPv6 content, but it shows one step in the process of wider IPv6 usage.

      The other thing I've seen, working in the telco industry, is that IPv6 support requirements are now moving into the management software (operational support system) space, and of course the federal government mandate for IPv6 is driving things too. I'm now much more confident than a few years ago that IPv6 will happen.

      See http://it.slashdot.org/comments.pl?sid=234063&cid= 19052065 for link to a presentation by Comcast on this.

  40. Re:From TFA: free pr0n! by Kadin2048 · · Score: 3, Insightful

    Yes, it would have the same prefix, but that's exactly the same level of anonymity that you have now with a single IPv4 address and NAT.

    With v4, your router gets the address and then NATs it out to however-many devices you have. With v6, you'd get a block of addresses at the router, which it could then distribute via DHCP, or the machines could randomly assign themselves within. You're not losing anything there. Where you might gain something is in the ability to quickly switch IPs when traveling and connecting to an AP that's not yours (which is conceptually similar to performing a DHCP release-and-renew).

    If you want plausible deniability, pretty much your only option is to leave your AP unsecured and hope that when the cops show up they buy it as a defense, or use some type of onion routing like Tor.

    There seems to be a lot of fear and paranoia going around regarding IPv6, and I just don't get it. There's nothing you can do on IPv4 today that you can't do on IPv6, if you want to. Hell, if you're that attached to NAT, you can do it with IPv6 addresses just as readily -- it's just that it's stupid, because there's no longer any reason to since there's no address shortage, and there's really no privacy or security gained from it that you don't get by just rotating your IPv6 address.

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  41. This just in. by kinglink · · Score: 2, Interesting

    Oil out of supply in 1999, Global warming killing everyone in 2005, P2P piracy ends with Napster, Limewire, Kazaa.

    Seriously it's all just FUD, There's an expiration date, but 2010? What happens when we make a few Class As into Class Bs? oh that's right, more time. I think the key is to figure out how to make the best "IPv6" and a way to make it so my old commodore 64 is willing to work with it (whether that be ISP level conversion or a inexpensive hub, note INEXPENSIVE)

    Do I have a commodore 64? Not any more but the point remains there's literally a million devices out there only able to communicate with IPv4. There's actually a million people out there not willing to go through the hassle of going to IPv6 (and probably about that many who are unwilling to change) and if the way they are pushing to get people to switch with FUD like this, I'm guessing it's more than a couple million who don't want IPv6, so it's time to ask ourselves, how can we make IPv6 more attractive than staying with IPv4, and implement these ideas. IPv6 will likely overtake v4 one day, but come on, let's find a way to make people switch rather then just wait for it to happen.

  42. THE correct answer by EdelFactor19 · · Score: 3, Funny

    clearly the real answer here is 42. we should skip right over IPv6 and go to.... IPv42
    anything else?

    --
    "Jazz isn't dead, it just smells funny" ~Frank Zappa
    EdelFactor
  43. Re:From TFA: free pr0n! by Niten · · Score: 2, Insightful

    What are you talking about? You have to "slap down" your address to receive content with IPv4, too - otherwise, how would a server know where to send its response? And if you're paranoid to the point that you want to break your Internet connection for the sake of not divulging internal IP addresses, then yes, you can masquerade behind a single IP address on IPv6 just as easily as you can on IPv4.

    Or you could perform more complex 1:1 address masquerading, the likes of which aren't possible on consumer IPv4 connections due to said address space crisis. This could be performed at the router to obscure any autoconfigured internal addresses which might have been generated from machines' MAC addresses; or you could take Microsoft's approach, and implement such features at the operating system level.

    IPv6 offers more features and a much greater address space, with no built-in cost to privacy. Fearmongering by those who are unfamiliar with the new protocol will only hurt its adoption rate, to the detriment of the entire Internet community.

  44. Its not addresses but routes thats the problem by thogard · · Score: 2, Interesting

    They don't allocate IP addresses, they allocate routes entry and with route entries, you get way more addresses than most need. The solution for this is to start allocating non-contigious /24... Force everyone to fix their routing and treat the wold as a 2^24 /24 ranges and get over it. To do this right requires less than 8mb of cache tag ram in most routers that want full feeds and enough ram to process the bgp routing updates.

    Going to IPv6 doesn't fix the fact that routers are running out of routes. This problem will get plenty of attention in about 2 months when the big Cisco routers start to dump routes because they are too big and adding IPv6 only makes the problem much worse.

    1. Re:Its not addresses but routes thats the problem by Anonymous Coward · · Score: 3, Insightful

      The IPv6 address space is hierarchically structured, making routing tables smaller, not larger (as opposed to what you want to do, which is the exact opposite). Learn your facts before spouting off.

  45. Re:From TFA: free pr0n! by X0563511 · · Score: 4, Insightful

    One issue is all the home users inadvertantly using NAT as a "firewall".

    If one were to build a proper ipv6 router, they would need to (pony up the cash to) include a proper firewall, or educate the users. Good luck with either one.

    --
    For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
  46. In case they start embargoin' our IPs, see... by Kadin2048 · · Score: 4, Funny

    Well, yeah. That's the "Strategic IP Address Reserve."

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  47. No, it was about Music Piracy! by billstewart · · Score: 4, Interesting
    I did some business with the @Home cable modem people back during the 90s boom. They had a very schizophrenic attitude about Napster - not only were they paranoid about users running anything serverlike that might interfere with network performance, but they had an official policy about "Napster Users are EEEVILLLL Content Thieves who'll steal television next! Bad! Bad!"


    But if you talked to @Home's people as individuals rather than Corporate Employees, almost all of them would say "Well, Duh! Napster is the reason that people are *buying* broadband internet connections, of *course* we like it."


    And, ok, the paranoia about servers on home cable modems was partly because their early trial equipment didn't work very well and they had no way to regulate individual upstream bandwidth usage, and PacBell's dishonest "Cable Modem Web Hog" ads made them really worried about perceptions of slow performance, but they were worried that somebody would run a pr0n webserver from home, become Cool Site of the Day because doing that on cable modem would be cool, and trash their neighborhood's network performance while causing a lot of publicity. And unfortunately most of the cable companies have not only not recovered from that attitude, they've been propagating it to the DSL providers, and they've been learning other cluelessly paranoid attitudes from the Australian ex-monopoly who thinks you should cap the total monthly download of their users (since that used to be expensive in Oz), and cap it to a ridiculously low level like 1GB/month, which is like 1.5 days of continuous 56kbps usage.


    But when I had my corporate hat on, especially if I was talking to non-California customers, it was certainly much more proper to talk about the big internet usage being for music piracy than for pr0n :-) These days, BitTorrent occupies over 1/3 of the Internet's bits, apparently mostly copying movies and TV and Linux distros as opposed to music (that's by volume, not by number of items), and I don't know what fraction of that is what kind of movies.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  48. Re:From TFA: free pr0n! by Kadin2048 · · Score: 4, Informative

    The stateful firewall you'd need on an IPv6 connection isn't inherently any more complicated than an IPv4 UPnP+NAT box. In order for NAT to work, the device performing the translation must keep track of all the individual connections; it's basically a stateful firewall already. If you can do that, then you can firewall IPv6 (provided you have the capacity for the longer addresses). You need a protocol, like UPnP, so that clients can request "holes" (so that things like FTP, Bittorrent, and VoIP work), but that's no worse than NAT right now.

    Now, I think this is a completely crappy way to run a network, and I think we just need to get rid of the idea of firewalls completely (at least as a generic cureall, I'm all for retaining them for specific applications); security needs to be at the client level, not at the network-gateway level; as more and more devices become mobile, they cannot and should not ever assume that their local network is secure.

    But unfortunately, people have gotten so used to the idea of firewalls that they're attached to them, particularly because it allows for a certain amount of laziness (running old, crummy operating systems on Internet-enabled systems, not patching, etc.) while giving the perception of safety. So I suspect that all IPv6 implementations will mimic the brokenness of NAT, at least initially.

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  49. Re:Most people don't have that kind of hardware. by Jaidan · · Score: 3, Informative

    You're kinda nuts...a 2621 runs the same price (on e-bay) as a mid to low end users computer! At $500-$600 on ebay we're talking router tech that's 6-7x the price of the average home router. So as long as that's the kind of hardware the end user will need, i's not going to work.

  50. IPv6 can give out your hardware MAC address also by billstewart · · Score: 2, Informative
    One of the many optimistic goals in IPv6's design was to support really simple administration, so users can set up machines and networks automagically without having to configure anything by hand. (This dates from the days before DHCP and DHCP Relay support were universal. And Netware IPX could do that (remember Netware? IPX was an XNS-like protocol alternative to IP.)) And we certainly wouldn't have NAT, because that was a crufty annoying artifact of IPv4 address shortages that broke the end-to-end principle that's fundamental to how the Internet worked.


    IPv6 has large address blocks - the smallest any organization (like your home DSL line) is likely to have is a /64, so you've got 64 bits to play with. A real obvious IP address assignment strategy is to use 16 bits for a subnet number and 48 bits (the MAC address on your Ethernet or Wireless card), kind of the way Netware used to work. So you could set up routers if you needed to split up your building into subnets, and when your computer or printer or whatever booted up, it could squawk the LAN to get a subnet number and use all-0s if nobody answered, and it was ready to talk. And it meant that if your router/switch wants to find the machine with a given IP address, instead of having to ARP to find the MAC address for the machine, you just look at the lower 48 bits of the IP address. (And that means you don't need to worry about ARP storms - remember ARP storms?)


    So unlike IPv4, where any machine you connect to on the net or anybody eavesdropping in between knows what IPv4 address you're using, and maybe they can find out from DNS or logfiles where that address is, with IPv6, they see your IPv6 address which tells them what machine you're connecting from. You can do things to change that (e.g. pick a different IPv6 address, or set the MAC address on your network card if it supports that), and if you control the network connection, you can set it any way you want. And these days you're probably still going to go through some firewall, there might be something NAT-like happening, or at least a proxy, or some 6to4 gateways.


    But in theory, if everybody administered everything the way the IPv6 designers envisioned it, every time you plugged in your laptop to a different LAN, your MAC address would probably still be visible, which is really convenient for debugging and not so hot for privacy.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  51. Not so much actually by Sycraft-fu · · Score: 2, Informative

    Often the router can do it, but not well. We have this at work (a major university) with our stuff. It's all Layer-3 switches, which means that IPv4 is done extremely quickly via ASICs, with minimal impact on the CPU even for fairly complex sets of rules. However IPv6 is not accelerated. Thus you can turn it on, and it'll work fine so long as not many people use it, but if everyone tried, the router falls over as the CPU gets slammed. There are, of course, new supervisor modules that'll do the v6 routing on ASICs, but we don't have those and they aren't cheap (a few million dollars to upgrade all the core and edge routers that'd need it). Being that we are having our budget cut, this isn't something that's high on the list.

    That's a large part of the problem with v6 is that it isn't as simple as many people think. You don't just enable it on your routers and expect everything to work well. There's a lot of high end gear in place that doesn't have hardware support for v6 and thus it all has to be done on the CPU, which is usually much less powerful than you'd think. It isn't a trivial amount of money to just replace all those, nor can they afford to turn it on in software and hope that usage is light enough that they don't get slammed.

    Now as new gear gets put in to place, which happens all the time, this problem is slowly going away, however it's still a major problem right now. The routers on our campus may be about 6 years old, but they are still powerful units that do what we need, and we've no inclination to replace them. I'm sure big ISPs feel the same way.

    Given that the IP situation isn't the crisis that some people keep wanting to make it out to be (I've heard this shit many times before) I imagine that the process will probably be slow, and equipment will be replaced for other reasons. However once all the equipment is IPv6 capable, organizations will probably start turning it on since why not. It isn't likely to be a big, hurried rollout, just a gradual shift.

  52. Re:From TFA: free pr0n! by CSLarsen · · Score: 2, Interesting

    The IPv4 addresses are a subset of the IPv6 space -- you can get to all of the IPv4 systems from an IPv6 network.
    No! And that's the really BIG problem with moving over to IPv6. You should read up D.J. Bernstein's run-down of the miserable state of matters at http://cr.yp.to/djbdns/ipv6mess.html
    --
    Claiming to be pedantic on Slashdot is asking for trouble
  53. Re:From TFA: free pr0n! by kickdown · · Score: 4, Informative

    That's really just not true. With IPv6, you can get a lot more anonymity than you have now with IPv4. v6 has all sorts of special provisions for randomly assigning addresses, letting you reset them when you want, so that you can appear to be a new user in the middle of a browsing session. That's tough to do with IPv4; even if you try a DHCP release-and-renew from your ISP, generally they won't issue you a new address until the other one has expired.

    IPv6 doesn't force you to give up any privacy, and there's no 'user serialization' unless you buy into it voluntarily. Sorry, but that is just not true. There's some fuss in the air about IPv6 privacy extensions, which is basically bullshit. As an IPv6 customer, you'll typically get a /64 prefix of the address space for your broadband connection. The entire address length is 128 bits, so you might *think* that you can play a lot with different, random, "anonymous" addresses.
    BUT: The whole /64 is assigned to YOU, the contractor of this specific broadband account. So however you variate behind your /64 prefix, it will always be accountable to the same block. If your ISP does it's job right, your customer details will be delivered to RIPE, so that every content provider can conveniently look it up - no need to bug the ISP with such stuff, your cease-and-desist letter goes directly to your letterbox.
    To illustrate my example, there's a IPv6 ISP in Germany that gives out even a /48 prefix - you could almost literally give an IP address to all the atoms in your house, and still have random space left for variations. Still, a RIPE query on the prefix 2001:4b88:107d:: shows that whatever happens with this /48 block gets this specific customer's credit.
    If we're not counting accountability, but just usage tracking on websites etc, easy: just don't treat every Ip address as unique (like in IPv4), but instead every /64. There you go, almost as accurate as before in IPv4.
    --
    Continuous positive slashdot karma since... uh, maybe next year.
  54. TCP/IP 101 by pandrijeczko · · Score: 2, Insightful
    Any specific service on the Internet is uniquely identified by an IP address and a port number that's in the range of 0-65535.

    Using (P)NAT, it's possible to map each one of those (potentially) 65536 services on a single real IP address to a unique machine on a reserved IP address (in the 10.x.x.x, 172.16.x.x, 192.168.x.x ranges). Since the reserved addresses are not routable, they can be used an infinite number of times provided that they connect to the Internet via a single real IP address.

    The point I'm trying to make is that only an Internet server needs to be identified by a unique port on a unique IP address, everyone else can get away with using NAT-ed reserved IP addresses. Therefore, the exhaustion of the IPv4 address space really isn't that critical in the short term.

    --
    Gentoo Linux - another day, another USE flag.
    1. Re:TCP/IP 101 by gedhrel · · Score: 2, Interesting

      Your scheme would only permit a _single_ tcp connection between any pair of hosts attached in the fashion you describe, since a TCP connection is identified by the tuple (src ip, src port, dest ip, dest port). So you'd wind up inventing a whole load of connection multiplexing to go with that NAT.

      Frankly, that sounds like more engineering work than switching to IPv6.

  55. Re:IPv6 can give out your hardware MAC address als by TheRaven64 · · Score: 4, Informative

    I take it you haven't been following IPv6 closely, since that hasn't been the case for about six years (see RFC3041). The MAC address part of the IPv6 address was never used as a substitute for ARP; doing so would have broken addresses assigned in different ways (e.g. stateful autoconfiguration, manual configuration), which were always allowed. The low bits are a hash of your MAC address, and so only a mapping from MAC to IP is possible, not the other way around. If privacy is a concern for you, then you can easily pick a different IP at pseudo-random.

    --
    I am TheRaven on Soylent News
  56. truly anonymous on the web by nurb432 · · Score: 2, Insightful

    I am when im on my laptop in a parking lot of some coffee house.

    Hold on, someone is at my window, 'yes officer?' * click *

    --
    ---- Booth was a patriot ----
  57. Samba and Vista will lead the way by davecb · · Score: 2, Informative

    Vista will only contact Active Directory DC over IPv6, and although Samba3 works over IPv6, it won't work as a DC [Dan Shearer]

    David Holder has a more detailed presentation of this at http://www.ipv6consultancy.com/ipv6blog/wp-content /uploads/2007/05/samba-and-vista-with-ipv6v2.pdf but to oversimplify, MS tried to prevent Samba from being an AD Domain Controller by making IPV6 a prerequisite, with strictly limited and temporary success (;-))

    --dave

    --
    davecb@spamcop.net
  58. Why not just not create multiple internets by Marrow · · Score: 2, Interesting

    So right now we have a flat address space of 32bits or so. Why not
    create multiple internets, one per country lets say. Everyone
    gets to keep their existing internet address. Its just encapsulated
    within a country network.

    In order to get to country A address B.B.B.B you have to use
    a route. Each ISP would have a special router address that would
    send packets to that country accross a "dedidcated" connection. Your
    computer would know that when DNS assigns a "zip" for a particular
    connection, it locks the routing for those packets to go out via
    the local ISP dedicated router address.

    Your computer knows what router to use because it got the "zip code"
    for that route when it did the DNS lookup.

    Yes, I realize there would be problems. But perhaps less problems then
    with IPv6 adoption?

    This is moving to a hierarchial model. And the extra address space
    comes from the routing tables.

    Its just an idea. Please be kind.