Slashdot Mirror


Level of IPv6 Usage Is Vanishingly Small

An anonymous reader writes "The impending IPv4 address allocation shortage has led to a lot of speculation on the future of IPv6 (including here). A new study says that Internet IPv6 migration is not just going slowly — it has basically not even begun. After spending a year measuring IPv6 traffic across 87 ISPs around the world, the study concludes 'less than one hundredth of 1% of Internet traffic is IPv6... equivalent to the allowed parts of contaminants in drinking water.'"

626 comments

  1. Why it doesn't matter by Anonymous Coward · · Score: 5, Insightful

    Because it impacts the other guys, not me. It's the people in China and India and everywhere else that need addresses. Me? I've got a whole block right here.

    1. Re:Why it doesn't matter by Anonymous Coward · · Score: 5, Insightful

      it impacts the other guys

      It affects the other guys. This is Slashdot, not a marketing department or a boardroom. Let's use English instead of Marketese. Further reading.

    2. Re:Why it doesn't matter by NDPTAL85 · · Score: 0, Flamebait

      "Further reading."

      Wow. Talk about full of yourself. You really think someone's going to read that long scribe so that they'll better conform with YOUR preferred use of language?

      --
      Mac OS X and Windows XP working side by side to fight back the night.
    3. Re:Why it doesn't matter by Anonymous Coward · · Score: 0

      Hey, can you feel the impact of my foot up your ass? Err, excuse me, I'm sorry, the affect of my foot up your ass?

    4. Re:Why it doesn't matter by Anonymous Coward · · Score: 0

      Can somebody open a window? Getting stuffy in here.

    5. Re:Why it doesn't matter by Anonymous Coward · · Score: 0

      Go anonymous language Nazi! I can't criticize Orwell though, considering he wrote the book now used as a manual for government worldwide.

    6. Re:Why it doesn't matter by Anonymous Coward · · Score: 1, Insightful

      IPv6 is like buying insurance. It's there when I need it. Hopefully I don't, because it costs me more each time I make use of it.

    7. Re:Why it doesn't matter by Anonymous Coward · · Score: 1, Funny

      the affect of my foot up your ass?

      That's "the effect of my foot up your ass". Further reading.

    8. Re:Why it doesn't matter by Beyond_GoodandEvil · · Score: 0

      It affects the other guys. This is Slashdot, not a marketing department or a boardroom. Let's use English instead of Marketese.
      Not to pick nits but shouldn't that be it effects the other guys?

      --
      I laughed at the weak who considered themselves good because they lacked claws.
    9. Re:Why it doesn't matter by Anonymous Coward · · Score: 0

      Keep it up AC 1! Business speak is a pet peeve of mine and the less I see of it the better.

      Sincerely,

      AC 2

    10. Re:Why it doesn't matter by uassholes · · Score: 1

      I agree. Words come to mean nothing after the marketeers and busniness parots grab them in their teeth and shake them until the meaning falls out.

    11. Re:Why it doesn't matter by osu-neko · · Score: 1

      Not to pick nits but shouldn't that be it effects the other guys?

      Nope. That would be exactly the opposite of correct. A affects B. B feels the effects.

      --
      "Convictions are more dangerous enemies of truth than lies."
    12. Re:Why it doesn't matter by SpatialVacancy · · Score: 0
    13. Re:Why it doesn't matter by Anonymous Coward · · Score: 1, Insightful

      You really think someone's going to read that long scribe so that they'll better conform with YOUR preferred use of language?

      You're right, what was I thinking? George Orwell knows nothing about writing, it's not worth reading what he has to say on the matter, and all I'm doing is pushing my own preference. Who needs clearer, simpler English? Certainly not anybody on Slashdot. After all, it's not as if it's a website visited by lots of people who don't speak English as their native language. We should dress up everything we say so we look more important!

    14. Re:Why it doesn't matter by Anonymous Coward · · Score: 0

      Hey, can you feel the impact of my foot up your ass? Err, excuse me, I'm sorry, the affect of my foot up your ass?

      The affect of your foot up my ass? How does your foot feel about that?

    15. Re:Why it doesn't matter by TopSpin · · Score: 1

      I'm glad you putted that one right.

      --
      Lurking at the bottom of the gravity well, getting old
    16. Re:Why it doesn't matter by Anonymous Coward · · Score: 2, Funny

      I can say "Hey, ping 10.10.1.12" and people will do it.

      Kids these days. 15 or 20 years ago you could say, "Susan! I just fingered you!"

    17. Re:Why it doesn't matter by lennier · · Score: 5, Informative

      Affect/effect are one of those amusingly nasty little hand grenades in English. Handy crib sheet:

      Affect, n: emotional response. "The Minister for Granola appeared to be displaying flattened affect during his speech, leading to suspicions that he was abusing his own product."

      Effect, n: causal result. "The effect of the proposed granola reform would be catastrophic."

      Affect, v: alter. "The proposed reforms will affect the granola industry greatly."

      Effect, v: put into immediate action. "If elected, I will effect sweeping reforms of the granola trade."

      --
      You are not a brain: http://books.google.com/books?id=2oV61CeDx-YC
    18. Re:Why it doesn't matter by rubycodez · · Score: 1

      most people will need a client's address. let them eat NAT

    19. Re:Why it doesn't matter by DarthJohn · · Score: 1

      I would think that would elicit a unique affect from both involved. Further reading.

    20. Re:Why it doesn't matter by Firethorn · · Score: 1

      , and those that just need a lot of cheap address space will start using ipv6 as ipv4 gets harder to get and/or more expensive.

      Don't forget NAT and proxy firewalls.

      With that even a organization as large as a military base would only need 1 public IP, not the 100% routable internal addresses most of them have. It's even spreading to ISPs.

      --
      I don't read AC A human right
    21. Re:Why it doesn't matter by hclewk · · Score: 1

      mmmmmm... granola

    22. Re:Why it doesn't matter by Grishnakh · · Score: 1

      Yep. It also helps to just concentrate on the middle two (effect as noun, affect as verb), because those are by far the most common uses of the words. I almost never see affect used (properly) as a noun, usually only in very old writing, and it's not terribly common to use effect as a verb these days. For most people, they should just remember "affect is a verb, and effect is a noun".

    23. Re:Why it doesn't matter by Anonymous Coward · · Score: 0

      I suggest you google "goatse.cx" for an illustration of what his foot feels.

    24. Re:Why it doesn't matter by dw604 · · Score: 1

      With a dedicated server you pay ~$1/mo per IP currently. So what if it goes up to $2 or $5 in 10 years? You need, maybe, 5 IPs on a server. We don't need IPv6 yet.

    25. Re:Why it doesn't matter by profplump · · Score: 1

      As long as you only care about internally initiated connections. I'll grant you that HTTP-only users would likely never care. But there are lots of reasons you might want to initiate a connection from outside your home other than pretending that a cable modem is a good place to run a mail server -- hosting a game server, adjusting your web-enabled thermostat, asking your PVR to send something to your laptop, VNCing to your mother's computer to help her with an email problem, etc. If your home doesn't have at least one public address, you just can't have those services; I don't know about you, but I think it would be a real shame to see the Internet turn into a world where only the big boys can host servers and end users can only access those servers via HTTP.

    26. Re:Why it doesn't matter by ggvaidya · · Score: 1

      Or you can read the comic; it always helps straighten me out on the affect/effect thing.

      Lovely expression, "nasty little hand grenade", btw. Must remember to copy it sometime.

    27. Re:Why it doesn't matter by Znork · · Score: 1

      As long as you only care about internally initiated connections.

      Yep, that's the main reason I've gone v6 myself. NAT is all well and fine, but it's much more practical to ssh/scp/etc directly to machines behind the NAT. Configuring 6to4 is easy and having several ipv4 internets address space to myself is nice.

    28. Re:Why it doesn't matter by discogravy · · Score: 1

      dude, if you have to tell her that you did before she notices, you're doin' it wrong .

    29. Re:Why it doesn't matter by Phroggy · · Score: 1
      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    30. Re:Why it doesn't matter by aproposofwhat · · Score: 1

      Shit - I remember having to poke upstream mailservers with a 'finger address@demon.co.uk' to remind them that we were awake and waiting for mail on the other end of our 9600 baud piece of string...

      Welcome to my lawn :P

      --
      One swallow does not a fellatrix make
    31. Re:Why it doesn't matter by Anonymous Coward · · Score: 0

      Affectation, n: "The poster's percieved sophistication was nothing but a vain affectation."

    32. Re:Why it doesn't matter by Anonymous Coward · · Score: 0

      Normally I'm as curmudgeonly as the next grammar-and-usage-Nazi. However, you're wrong.

      "It's unclear why this usage provokes such a strong response, but it can't be because of novelty. Impact has been used as a verb since 1601, and its figurative use dates from 1935, allowing people plenty of time to get accustomed to it." http://www.bartleby.com/64/C003/0165.html

      Furthermore, using impact in this way promotes metaphor. Why do you hate metaphor? Go back to Metaphor-less Land!

    33. Re:Why it doesn't matter by Ash-Fox · · Score: 1

      That, and IPv4 is just more convenient because you can actually remember the addresses without writing them down. I can say "Hey, ping 10.10.1.12" and people will do it. Try that with an ipv6...

      Hey, ping 2002:A0A:10C::

      --
      Change is certain; progress is not obligatory.
    34. Re:Why it doesn't matter by value_added · · Score: 1

      I almost never see affect used (properly) as a noun, usually only in very old writing, and it's not terribly common to use effect as a verb these days. For most people, they should just remember "affect is a verb, and effect is a noun".

      Fair advice for those taking baby steps toward literacy. However, affect (as a noun) is common enough in non-casual writing and can be invaluable elsewhere: how else to describe someone's lisp in a polite manner? Effect is indeed more common as a noun, but the phrase "effect change" (transitive verb form) is frequent enough to be characterised as cliched. So much for easy to remember rules. ;-)

      Personally, this reminds me of the folks confusing "lie" and "lay", or the more egregious "lose" and "loose". Is learning what each of the damned words means that difficult? Or is it that non-native English speakers (who rarely make such errors) are just smarter?

      My own observations over the years have led me to conclude that most common spelling errors are attributable to bad pronunciation. The words "effect" and "affect" are, or at least should be, pronounced very differently. At least for those who regional dialect doesn't preclude from them pronouncing a soft "a" as just that, rather than "ugh", or better yet, "duh"!

    35. Re:Why it doesn't matter by Dancindan84 · · Score: 1

      Correct me if I'm wrong, but I was under the impression that IPv6 wasn't going to be used on internal LANs for the most part. People on the near side of NAT (IE an address like 10.10.1.12) wouldn't see much difference at all, and on the far side of NAT 99% of usage would be by domain not IP. It really doesn't affect me much if google.ca resolves to 64.233.187.104 or 1.2.64.233.187.104. Even my home IP I use a (free) dynamic DNS service for. As long as DNS's are set up to handle the transition it's the big ISPs and webhosts that need to get on the band wagon and make the changes on the back end, not Joe Schmoe network admin at initech.

      --
      "Always forgive your enemies; nothing annoys them so much." - Oscar Wilde
    36. Re:Why it doesn't matter by Anonymous Coward · · Score: 0

      Hmm... I wonder what DNS is for... If it could only resolve easy to remember names into incomprehensible numbers I think it would be handy..

      Hmm.. what to do.. Big numbers hard to remember...

    37. Re:Why it doesn't matter by Anonymous Coward · · Score: 0

      I wasn't saying that his use of "impact" was incorrect, just that it was a really poor choice. The link you provided backs me up. Regardless of how long it has been technically correct, it remains strongly disliked and is associated with people who use bluster as a poor substitute for meaning. If that is the impression you wish to give people when you write, then go ahead and use impact as a verb.

    38. Re:Why it doesn't matter by ceoyoyo · · Score: 1

      According to the telcos 99.9% of traffic is bittorrent. So basically it sounds like everyone is using IP6 except the torrents. Convince them and you've got the whole Internet.

      Oh, might have to get the spammers on board too.

    39. Re:Why it doesn't matter by ceoyoyo · · Score: 1

      I don't know... if I didn't have an IP address someone would certainly be impacted. With a blunt object.

    40. Re:Why it doesn't matter by ceoyoyo · · Score: 1

      That's why marketers came up with a new (repurposed) word! They couldn't keep straight affect and effect and were terrified they'd pick the wrong one and look like idiots!

    41. Re:Why it doesn't matter by ceoyoyo · · Score: 1

      That article was hilarious. The author omitted commas, neglected to capitalize "I" and managed to sound even more pretentious and confusing than some of his examples of sloppy English. At one point he holds up a flowery, archaic passage as desirable, then writes a "modern English" parody of it which, though needlessly complicated, is easier to follow than the original.

      I agree with his (and your) point, but that guy was not the one to make it publicly.

    42. Re:Why it doesn't matter by Anonymous Coward · · Score: 0

      The author omitted commas, neglected to capitalize "I"

      The essay was written in the 1940s; at least some of those are transcription errors.

      managed to sound even more pretentious and confusing

      Which parts of it did you think were pretentious and confusing?

      At one point he holds up a flowery, archaic passage as desirable, then writes a "modern English" parody of it which, though needlessly complicated, is easier to follow than the original.

      I disagree. Reading the "modern English" parody is like having the essay rolled up and used to hit you in the face.

      I agree with his (and your) point, but that guy was not the one to make it publicly.

      "That guy" wrote two of the greatest novels of all time, and this particular essay is commonly used in writing classes.

    43. Re:Why it doesn't matter by jgrahn · · Score: 1

      That, and IPv4 is just more convenient because you can actually remember the addresses without writing them down. I can say "Hey, ping 10.10.1.12" and people will do it. Try that with an ipv6..

      Not a good reason for most people, I think. I have a real, public IP address here -- has had it for like ten years, and all I know is it starts with 83. Likewise with my 192.168.0.0/16 network. I enter the stuff in /etc/hosts, and then I forget about it.

    44. Re:Why it doesn't matter by Firethorn · · Score: 1

      As long as you only care about internally initiated connections.

      Not as long as you set up port forwarding.

      My point with the NAT is that it pushed back the need for a shift to IP6 or equivalent protocols by a surprising amount.

      We STILL haven't seen the IP enabled fridges and stoves and such we were 'supposed' to see, so the _average_ user doesn't need a externally routable IP address.

      Same deal with many portable cellular browsing devices - everything goes through a proxy first.

      I can see us transiting to IP6 eventually, but it'll come first in China, and the USA, like usual, will have to be dragged into it kicking and screaming on the whole.

      --
      I don't read AC A human right
  2. Stupid arbitrary units of measurements by Born2bwire · · Score: 5, Insightful

    'less than one hundredth of 1% of Internet traffic is IPv6... equivalent to the allowed parts of contaminants in drinking water.'

    Like that means anything to me. Can they compare that percentage in terms of the number of pages per Library of Congress?

    1. Re:Stupid arbitrary units of measurements by QuantumRiff · · Score: 2, Informative

      You didn't read the article.. Only 3 voices cried out in terror!

      --

      What are we going to do tonight Brain?
    2. Re:Stupid arbitrary units of measurements by VGPowerlord · · Score: 5, Funny

      No, because it's IPv6, you have to compare against the number of grains of sand on the planet.

      --
      GLaDOS for President 2016! "Well here we are again. It's always such a pleasure." -- GLaDOS, 2011
    3. Re:Stupid arbitrary units of measurements by dfm3 · · Score: 5, Funny

      Like that means anything to me. Can they compare that percentage in terms of the number of pages per Library of Congress?

      Sure.

      'That's like less than one hundredth of 1% of the number of pages in the library of congress.'

    4. Re:Stupid arbitrary units of measurements by greenguy · · Score: 4, Funny

      Well, if this sentence was in a book in the Library of Congress, IPv6 usage would represent its adoption lev

      --
      What if I do the same thing, and I do get different results?
    5. Re:Stupid arbitrary units of measurements by sexconker · · Score: 2, Informative

      HALF a page of one book in the library of congress is IPv6. Everything else (except one stupid book in the back room) is IPv4.

    6. Re:Stupid arbitrary units of measurements by BACPro · · Score: 1

      Good for you,
      you got karma when you were going for funny...

    7. Re:Stupid arbitrary units of measurements by duckInferno · · Score: 2, Funny

      Offtopic? I find the terror-crying index to be a much easier number to mentally picture.

      --
      Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
    8. Re:Stupid arbitrary units of measurements by coryking · · Score: 5, Funny

      If you take all the IPv6 addresses and stood them end to end, they'd wrap around the globe six times!

      The internet routers will carry 128 bits of address space. That is enough addresses to fill two thousand Olympic sized swimming pools!

      The IPv6 address space is so huge, it would fill the Beijing Birds Nest.

      Oh yeah, your mom is so fat, she weights more then an entire IPv6 /8.

      Your mom is so fat, she needed the government to build IPv8 to hold all her IP addresses.

      And an offtopic one I just though of: Your mom's sex tape is so nasty, even Pirate Bay banned her from their network.

    9. Re:Stupid arbitrary units of measurements by pdxp · · Score: 1

      That is enough addresses to fill two thousand Olympic sized swimming pools!

      I think you've mistakenly assigned spatial properties to these addresses - the conversation was comparing quantities. While these addresses are indeed "big", they are only as spatially large as your lame-ass jokes are funny. See? I didn't have to assign spatial properties to your "funny-ness", but I still managed to make the point that your jokes aren't funny.

    10. Re:Stupid arbitrary units of measurements by Dirtside · · Score: 1

      'less than one hundredth of 1% of Internet traffic is IPv6... equivalent to the allowed parts of contaminants in drinking water.'

      Like that means anything to me. Can they compare that percentage in terms of the number of pages per Library of Congress?

      No, it's the metric standard unit for measuring adoption of a new technology: Multiples of the allowed parts of contaminants of drinking water.

      Besides, what do you mean a "percentage" of a Library of Congress? It's an indivisible unit! Geez. :)

      --
      "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
    11. Re:Stupid arbitrary units of measurements by coryking · · Score: 1

      If you watch any thing on Discovery channel, you'd realize nothing is a "true" measurement until it can stretch across the globe or weight as much as elephants.

    12. Re:Stupid arbitrary units of measurements by PietjeJantje · · Score: 1

      According to wikipedia, Bill Gates wealth was $58 billion in 2007.

      A hundredth of 1% of that equals the neglectable sum of $5.8 million. I'd like to be contaminated with that!

    13. Re:Stupid arbitrary units of measurements by k2r · · Score: 1

      > until it can stretch across the globe or weight as much
      > as elephants.

      Your mom's weight in elephants would stretch across the globe ?

    14. Re:Stupid arbitrary units of measurements by Anonymous Coward · · Score: 0

      'less than one hundredth of 1% of Internet traffic is IPv6... equivalent to the allowed parts of contaminants in drinking water.'

      Like that means anything to me. Can they compare that percentage in terms of the number of pages per Library of Congress?

      Or maybe they could compare it to the percent of sperm in one ejaculation that need to reach the egg for the Internet to get pregnant with IPv6. BTW, does anyone know if I need a condom on each LAN port of my router or if one condom on the WAN port is enough?

    15. Re:Stupid arbitrary units of measurements by Thiez · · Score: 1

      He'll be smiling either way.

    16. Re:Stupid arbitrary units of measurements by ciderVisor · · Score: 1

      IPv6 is equivalent to 128 Routermast London Buses.

      --
      Squirrel!
    17. Re:Stupid arbitrary units of measurements by coryking · · Score: 1

      Might as well mix up all the measurements. Who knows, it might even result in this thing some of you lack known as "humor".

      I'm so smart, there wasn't enough IPv6 to map even a quarter of my brain. Your so dumb, they gave your braincells a subnet of 255.255.255.255

    18. Re:Stupid arbitrary units of measurements by Anonymous Coward · · Score: 0

      I think you've mistakenly assigned gravity to his post - he was being FACETIOUS. While his post is indeed "serious", it's only meant to be taken as seriously as, say, the holocaust. See? I didn't have to be entirely literal, but I still managed to make the point that you're a dumbass.

      P.S. "Funniness" is indeed a word. No need to make yourself look even more mentally challenged by making up words that already exist.

    19. Re:Stupid arbitrary units of measurements by Anonymous Coward · · Score: 0

      Sharing condoms? Ewwwww

  3. The end is nigh? by duckInferno · · Score: 2, Interesting

    Was IPv6 our only hope or do we have something else ready to go for when we hit that last address? And speaking of that, what WILL happen when we hit that last address? Will the internet suddenly die? Or will some people just not be able to connect because the IP is in use?

    --
    Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
    1. Re:The end is nigh? by lee1026 · · Score: 1

      Most likely some sort of NAT service. That is where multiply people share one IP address, and you use port addresses to tell apart whos who.

    2. Re:The end is nigh? by Daimanta · · Score: 2, Informative

      No, but you won't be able to make a site with a new ip-address, which is highly annoying. New people are not able to "join the internet" when the ISP runs out of IP-addresses. It's basically nasty.

      That's why I hope they will be prepared when the time comes.

      --
      Knowledge is power. Knowledge shared is power lost.
    3. Re:The end is nigh? by Jorophose · · Score: 1

      Nobody will be able to join anymore.

      But likely more usage of NAT will come up. But I hope not.

      As much as I hate IPv6's naming (394dhdhs::dihd83 is your IP address, remember that!) and the fact that anything can be named (do you really need to follow my toaster around?), it's the only way to go. Unless IPv4 can be extended?

      But you'll be fine, if you're in Europe or Canada or the US, plenty of IP addresses to go around, probably the same for kiwis and aussies.

    4. Re:The end is nigh? by mweather · · Score: 1

      And speaking of that, what WILL happen when we hit that last address?

      The same thing that happened when there was no more new land.

    5. Re:The end is nigh? by j+h+woodyatt · · Score: 2, Interesting

      What WILL happen is "carrier-grade NAT" deployments inside service provider networks.

      Residential and personal mobile device customers can expect to pay extraâ" on the order of US$5-10 per monthâ" if they want a public, i.e. non-RFC1918, IPv4 address assigned to them. Also, don't expect the carrier-grade NAT to support any kind of port forwarding whatsoever. Lastly, you can expect the NAT to implement address/port-dependent endpoint filtering.

      So, the writing for P2P applications like BitTorrent is pretty much on the wall now. Read it and weep, MF'ers, we TOLD you this would happen a long time ago, and you didn't believe us.

      --
      jhw
    6. Re:The end is nigh? by The+Cisco+Kid · · Score: 1

      Luckily:

      - Each website doesnt need a unique IP address. One server machine, with one IP address, can host as many sites as it's processor/memory/disk/bandwidth can handle. We're talking thousands here.

      - ISP's that provide access for end-users *already* use NAT. They also already have sufficent blocks assigned to them from the RIR's to allow for the number of connections that they can support based on other limitations (channels, phone lines, bandwidth, etc).

      The so-called 'running out of IP addresses' has been 'impending' for over 10 years. Most client machines running certain insecure platforms should be behind a NAT firewall anyway.

    7. Re:The end is nigh? by duckInferno · · Score: 1

      We'll make a real-life expansion and invade outland?

      --
      Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
    8. Re:The end is nigh? by sexconker · · Score: 1

      We won't be able to sell addresses anymore.
      Your ISP may then start saying "Oh hey, all apartment buildings get ONE IP."

      But hey, this is China/India's problem.
      No worries here.

      The REAL solution will come with internet enabled cell phones.

    9. Re:The end is nigh? by Brynath · · Score: 1

      Yeah I really think that the Naming policy of IPV6 is the biggest factor behind the poor adoption rate.

      I know how IP addresses work right now. They should have just put another .255 on it and used that, rather than rewriting the whole wheel.

    10. Re:The end is nigh? by witherstaff · · Score: 2, Informative

      Caveat - only 1 HTTPS per IP. But that really isn't that big a deal either

      Maybe a few of the Class A holders like Apple or IBM should give up some of their blocks. Take IBM as an example - they subclass internal networks so they have very very few 'real IP's routable.

      Or maybe if they use the evil bit within packets we could double our existing IP4 range!

    11. Re:The end is nigh? by lgw · · Score: 2, Insightful

      Companies really want enough bit to organize their IP address block well. IPv6 threw in enough extra bits where that was easily possible, but the committee totally dropped the ball on providing an actual address model for companies to replace what everyone uses 10.x.x.x for.

      What was needed was "first n bits tell you the size of all the following fields, next m bits are your ISP, next x bits are your company (the same value across several ISPs, if you pay for that), next y bits are yours to organize subnets as you like, last z bits are the machine". That would have been more functional that IPv4.

      There were enough bits, and it's a simple enough idea, but it didn't happen. Committees are like that sometimes.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    12. Re:The end is nigh? by Surt · · Score: 1

      There were other considerations during the reinvention. In particular, IPV6 routing requires much less cpu power.

      --
      "Who is the Journal of Quantum Physics going to believe?" --Stephen Hawking
    13. Re:The end is nigh? by Anonymous Coward · · Score: 0

      IANANE (I Am Not A Network Engineer)

      - Each website doesnt need a unique IP address. One server machine, with one IP address, can host as many sites as it's processor/memory/disk/bandwidth can handle. We're talking thousands here.

      That's true, for certain values of true. However, name-based virtual hosts only work so long as you only care about HTTP communications. The moment you want to do a server on any other protocol, you're back to the issue of only having a single IP address to play with.

      - ISP's that provide access for end-users *already* use NAT. They also already have sufficent blocks assigned to them from the RIR's to allow for the number of connections that they can support based on other limitations (channels, phone lines, bandwidth, etc).

      The so-called 'running out of IP addresses' has been 'impending' for over 10 years. Most client machines running certain insecure platforms should be behind a NAT firewall anyway.

      NAT is a horrible, hackish problem pretending to be a solution. Every TCP connection going through NAT requires an additional entry in a table, which can very quickly run out of space when using some protocols that open a lot of simultaneous TCP connections (P2P being a major one). And that's just TCP. UDP is a complex issue involving black magic and the invocation of minor deities. The only workable solution is to open holes in the NAT manually by means of port forwarding, and there is a limit to the number of ports available to be forwarded.

      Also, any references on the claim that ISPs use NAT in any major capacity? My (admittedly limited) understanding is that such a system would never scale to the number of users the average ISP has to service.

      And finally, NAT IS NOT A FIREWALL.

      Repeat it with me:
      NAT IS NOT A FIREWALL

      If your system is too bug-ridden to connect directly to the internet, put it behind a dedicated firewall, or don't connect it at all.

    14. Re:The end is nigh? by man_of_mr_e · · Score: 1

      Not entirely true. Yes, HTTP 1.1 can support many sites on one IP address, but https cannot. You can only have one secure "site" per IP address. If everyone is behind a NAT firewall, then that means all the viruses are behind it as well. Kind of defeats the purpose, does it not?

    15. Re:The end is nigh? by gehrehmee · · Score: 1

      I read that article as suggesting that they'll be using nat on the carrier's side of the modem only to provide IPv4 backwards compatability if addresses run out, which is really about the best you can possible do. If you want to address > 4 b illion hosts individually, you can (and indeed by definition will have to) use the IPv6 address...

      --
      "You know, Hobbes, some days even my lucky rocketship underpants don't help" -- Calvin
    16. Re:The end is nigh? by The+Cisco+Kid · · Score: 1

      Yes, https needs a unique IP per certificate/domain. But most sites dont need https.

      And 'everyone' isnt behind one NAT firewall, rather each customer gets *ONE* routable IP, and then the rest of their network (at least as far as 'client' workstation access to the net) is behind that.

      In fact I have this vision of everyone in the world getting one routable IPv4 address, and then extending that within their one network. Sort of like a phone number with extensions. In fact if someone designed replacements for TCP and UDP that worked in a similar manner, but instead of a single 'port number', it used something that looked like an IPv4 address itself (perhaps still with a 'port number' as well) the full connectivity problem of NAT could be addressed. Obviously you lose some of the security, but 'inbound' connections could be disabled by default and have to be explicitly enabled.

    17. Re:The end is nigh? by techno-vampire · · Score: 1
      And finally, NAT IS NOT A FIREWALL

      Agreed. NAT is not a firewall, nor is it intended to be one in and of itself. However, a home LAN behind a router, with NAT and all port forwarding disabled is somewhat more secure than it would be if all the machines had public IP addresses, simply because it's much harder to locate any one specific machine. It's not a firewall, and shouldn't be confused with one, but it is one of the bricks from which a proper firewall can be constructed for home or small business use. The important thing, here, is that you must avoid expecting more from it than it can do.

      --
      Good, inexpensive web hosting
    18. Re:The end is nigh? by petermgreen · · Score: 1

      there is a replacement for 10.0.0.0/8 btw it is FC00::/7

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    19. Re:The end is nigh? by Ironchew · · Score: 1, Interesting

      Residential and personal mobile device customers can expect to pay extraâ" on the order of US$5-10 per monthâ" if they want a public, i.e. non-RFC1918, IPv4 address assigned to them.

      Exactly. Artificial IPv4 address scarcity will create artificial value. As we've seen with shenanigans from most ISPs here in the United States, they'll milk this for all its worth. As long as the revenue stream of extortion is greater than giving billions more customers what they want, don't expect them to take the IPv6 plunge.

    20. Re:The end is nigh? by coryking · · Score: 1

      Nope. In the internet, we'll just build a new planet. That planet will either be IPv6, IPv4. My money says it doesn't matter because we'll find new, innovate ways to send our data so it doesn't matter if we are on the martian IPv6 network, or on the Hawian IPX/SPX network.

      No matter what the future holds, we will always be able to use our laptops to connect to slashdot.org or google. I would bet my entire life savings on that fact. The internet will never go away. It will just morph in to something new and better.

      I just think the days of it being 100% TCP/IP will hold true anymore. The internet will route around TCP/IP and all such protocols and encompass them all.

    21. Re:The end is nigh? by j+h+woodyatt · · Score: 4, Insightful

      Read the article more carefully.

      If the IPv6 transition never happens at all, which seems likely at this point, then the carrier-grade NAT engines are still needed for operating the IPv4-only networks we have today.

      If the IPv6 transition actually does happen, somehow, then you're right. The carrier-grade NAT engines are only needed for IPv4-compatibility. In the unlikely event that IPv4 goes the way of the OSI stack, then maybe the NAT engines will be obsoleted. Not until then.

      In any case, if you're using IPv4 now and you haven't started transitioning to IPv6, then you need to prepare for a future when most of your residential and mobile customers will be communicating with you from behind carrier-grade NAT engines that multiplex multiple customers behind a single address.

      For example: identifying your customers by the IP address from which they connect to you has always been a bad idea, but it will soon be an extremely bad idea.

      --
      jhw
    22. Re:The end is nigh? by lgw · · Score: 1

      Cool! fec0::/10 (the original site local, epic fail) was deprecated without replacement for years. You'll notice that while FC00::/7 will work as a replacement for 10.x.x.x, it's not the hoped-for improvement over 10.x.x.x, except that you have more bits. Well, maybe that will be enough.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    23. Re:The end is nigh? by JWSmythe · · Score: 3, Interesting

          I disagree.

          I used to run an amazingly high traffic site. It required quite a few GigE pipes to run the network. The datacenters combined would have required an OC192 to stay within acceptable growth potential.

          I had the urge to switch or run IPv6 in parallel. I found out what was proposed to be mandatory was quite a bit harder than it appeared.

          I never did find the clear path of "this is what you need to do."

          The only way I found to get my traffic to other IPv6 users was to tunnel IPv6 over IPv4. If (if, if) we had done it, it would have likely swamped those gateway services. Sure, some people want to make it happen, but what happens when many multiple big companies do it. I know Google set up the IPv6 version of their site, but they have quite a bit of negotiation power. My negotiation power was in that I could say "I'm going to need lots of bandwidth, make it available to me", and the provider would ensure it was available and that the standard growth potential was available. We had our growth down to a science, almost so much as I could tell you our aggregate 95th percentile for 12 months in the future +-5%

          If I, senior tech guy at a large bandwidth customer couldn't get it done, why do we think every home user, T1 user, and average Joe Slashdot User could get it done.

          If IPv6 is what we're SUPPOSE to be migrating towards, a clear well defined path must be established, and some sort of encouragement must be provided.

          IPv6 for us was just a play toy, even though I wanted it done. There was absolutely no demand for it. We were only using 6 to 8 /24's, so we weren't a huge burden on the available address space. Even still, I wanted to do it, and never got it done. Queries were left unanswered. No firm responses were ever given. Even the senior techs at the Tier 1 ISP's gave vague answers like "I think we can. Ya, we should be able to support it, but we don't know. We'll try to find out."

          Now I work for a company with even less pull. We discussed it, but it's a much different product, and was put together in such a way that you can't be fuzzy with it's addressing. Things are very specific. Clients will connect to exactly where you tell them, and there's no room for "and you could do this...." I no longer have the opportunity to even attempt to switch, and since the client base isn't prepared, it won't happen.

          I was looking forward to the change. I know there were neat proposals involved. Unfortunately, we were never able to implement it, and most people won't be able to.

      --
      Serious? Seriousness is well above my pay grade.
    24. Re:The end is nigh? by Chris+Daniel · · Score: 2, Informative

      In fact I have this vision of everyone in the world getting one routable IPv4 address

      One small problem: we already have over six billion people in the world, and 32 bits provides only about four billion values. Thanks for playing.

      --
      Don't blame me -- I voted for Roslin.
    25. Re:The end is nigh? by 19thNervousBreakdown · · Score: 1

      Caveat - only 1 HTTPS per IP.

      That's not necessarily true: Subject Alternative Name

      There's plenty of ways that turns out less than ideal, but 90% of the time if you're sharing an IP, it's not a big deal to share a cert.

      --
      <xml><I><am><so><damn>Web 2.0</damn></so></am></I></xml>
    26. Re:The end is nigh? by 19thNervousBreakdown · · Score: 1

      Not entirely true. Yes, HTTP 1.1 can support many sites on one IP address, but https cannot.

      That's also not entirely true: A few posts up, I schooled you on the wonders of Subject Alternative Name.

      --
      <xml><I><am><so><damn>Web 2.0</damn></so></am></I></xml>
    27. Re:The end is nigh? by QuoteMstr · · Score: 1
    28. Re:The end is nigh? by Cramer · · Score: 2, Informative

      Not anymore. Modern SSL versions provide a hostname hint in the (unencrypted) clienthello so single IP ssl virutal hosting is possible.

    29. Re:The end is nigh? by Cramer · · Score: 1

      NAT is a horrible, hackish problem pretending to be a solution.

      Horrible is a matter of opinion; I think it's clever. Hack? Sure. But it is most definately a solution. The only problems with NAT, aside from a very few complicated edge cases, can be attributed to poor protocol design and even poorer implementation... if you bind INADDR_ANY, you don't know what your address is until the connection is established, and you ask the kernel. getipnodebyname(gethostname()...) is just as wrong in today's world of NAT as it was in the years before NAT.

      Also, any references on the claim that ISPs use NAT in any major capacity?

      Many cellphone networks provide NAT'd private addresses unless you ask for "vpn service", etc. (and sometimes pay extra.) But it's rather rare these days -- you may not even know your phone is using a private address. I don't know of any commercial ISPs doing this today, but PSINet had some horrible windows only PoS that was NAT'd service. (it failed for many reasons.)

    30. Re:The end is nigh? by Morgor · · Score: 1

      That sounds awfully a lot like the old ISO addressing. They were terribly inconvenient, but are still used for a lot of telecom equipment (SDH/SONET is a good example).

    31. Re:The end is nigh? by PietjeJantje · · Score: 1

      Wow, that is the equivalent of running around the streets with a huge sticker attached on your forehead with all your private and address details.

    32. Re:The end is nigh? by amorsen · · Score: 1

      There were other considerations during the reinvention. In particular, IPV6 routing requires much less cpu power.

      "Much" is debatable. All you get at the individual packet level is that the router doesn't have to fragment packets. That's practically a nonproblem anyway, since 90%+ of routing is done between interfaces where fragmentation can't happen, and even in the cases where fragmentation can happen, it doesn't for 99%+ of the traffic.

      If you have a route lookup table in hardware (like Cisco tends to do), IPv6 requires more space. Somewhat mitigated by the fact that there should be fewer routes overall, since deaggregation should hopefully be almost non-existent. Either way, a current high-end Cisco router has 256,000 spots for IPv6 routes before it croaks, so Cisco gear is basically useless if IPv6 takes off... Anyway, IPv6 won't take off, so that isn't a problem.

      --
      Finally! A year of moderation! Ready for 2019?
    33. Re:The end is nigh? by bs7rphb · · Score: 1

      So, the writing for P2P applications like BitTorrent is pretty much on the wall now.

      P2P applications like Skype cope rather well with NAT, as it happens. That's 'rather well' from Skype's perspective, not from the perspective of the poor sod whose machine is routing hundreds of other peoples' phone calls.

    34. Re:The end is nigh? by Anonymous Coward · · Score: 0

      And if you're wondering how long we've got, look here.

    35. Re:The end is nigh? by b1t+r0t · · Score: 1

      We'll make a real-life expansion and invade outland?

      Or something similar, by invading and taking back some of the under-utilized class-A blocks owned by single companies or the US government.

      --

      --
      "Open source is good." - Steve Jobs
      "Open source is evil." - Microsoft
    36. Re:The end is nigh? by Richard_at_work · · Score: 1

      Tried getting a certificate from one of the big providers that allows for SAN? Either you won't be getting one, or it won't be cheaper than two individual certs. Theres a reason practically all hosting providers require you to have a unique IP for https.

    37. Re:The end is nigh? by Midnight+Thunder · · Score: 1

      Was IPv6 our only hope or do we have something else ready to go for when we hit that last address? And speaking of that, what WILL happen when we hit that last address? Will the internet suddenly die? Or will some people just not be able to connect because the IP is in use?

      I see the addressing problem like the Y2K issue, in that few will actually do the work until the last address is about to run out. Its all down to money and also the fact that network hardware providers are dragging their feet. The latter is an important point, since how do you migrate to IPv6 easily if the person supplying you your router, bridge, etc does not provider support for IPv6? In general it is a sheep mentality, in that few are going to make the leap until a greater mass has already paved the way in large numbers.

      I have been playing with IPv6 simply as a way to understand the issues involved. From doing so I discovered a few things:
        - Asia and Europe are doing more work than North America when it comes to IPv6. There are already ISPs in Europe, such s free.fr, that offer IPv6 connectivity.
        - The argument about numerical addresses is bogus, since with the advent of technologies such as zero-config you just use a name
        - The lack of DHCPv6 support is minor, since router advertisements does the job in most cases, though is non-negligible in other cases.
        - Cisco is yet to certify its whole line of hardware solutions IPv6 ready.
        - If you want IPv6 support on your home router you are either having to use the newer Apple Airport or install an open-source firmware, when possible
        - There are still important APIs that aren't IPv6 ready. Examples include libwww (Perl) and the network API for LibSDL.

      If you want to give IPv6 a go, then there are a number of solutions such as Freenet6 and Teredo, though I use Aiccu from Sixxs:

      https://www.sixxs.net/wiki/Aiccu

      --
      Jumpstart the tartan drive.
    38. Re:The end is nigh? by Just+Some+Guy · · Score: 3, Interesting

      If I, senior tech guy at a large bandwidth customer couldn't get it done, why do we think every home user, T1 user, and average Joe Slashdot User could get it done.

      I got it done perhaps because I'm not running a giant network. I set up tunnels from Hurricane Electric at home and at work, let our {Free,Open}BSD firewalls announce routes, and started using it. See my home page next to my name? There's no dancing turtle, but you can get to it over either protocol.

      One of the huge wins for me as netadmin is that I can stop screwing around with port forwarding just to be able to SSH or make VOIP calls from home to work or vice versa. I'm loving me some end-to-end connectivity again.

      --
      Dewey, what part of this looks like authorities should be involved?
    39. Re:The end is nigh? by DamienNightbane · · Score: 1

      I for one advocate nuking China and India back into the stone age when we start running out of IPv4. That'll free up a good two billion addresses right there, and probably a metric fuckton of bandwidth as well. It might even fix MMO economies too.

    40. Re:The end is nigh? by Surt · · Score: 1

      That's not all you get at the packet level.

      http://en.wikipedia.org/wiki/IPv6#Simplified_processing_by_routers

      --
      "Who is the Journal of Quantum Physics going to believe?" --Stephen Hawking
    41. Re:The end is nigh? by Cecil · · Score: 1

      Care to provide a link that suggests how to do this with Apache? Because I was looking (and experimenting) just a few months ago and came up completely empty with the latest version of Apache.

    42. Re:The end is nigh? by mrogers · · Score: 1

      Lastly, you can expect the NAT to implement address/port-dependent endpoint filtering.

      Apart from angry customers, what would the providers gain by choosing address/port-dependent filtering?

    43. Re:The end is nigh? by man_of_mr_e · · Score: 1

      Nevermind the fact that many protocols have problems with NAT, VOIP for instance, which is becoming more and more popular. Forcing vendors to use proprietary protocols like IAX and Skype to get around it.

    44. Re:The end is nigh? by man_of_mr_e · · Score: 1

      The certificate is only part of the problem, the other part is that HTTPS doesn't have a facility to use hostname to distinguish between sites, so it will send all requests to the same site.

    45. Re:The end is nigh? by 19thNervousBreakdown · · Score: 1

      Actually, the certificate is the entire problem.

      The connection gets encrypted before it sends the host header, so there's no way for the web server to know which certificate to send. Afterward, however, it's the same HTTP connection it ever was, and virtual hosts work just fine.

      I'm not sure where you got the idea that HTTPS is anything but HTTP, S, but that's just not the case.

      https://www.example.com/

      GET / HTTP/1.1
      Host: www.example.com
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
      Accept-Language: en-us,en;q=0.5
      Accept-Encoding: gzip,deflate
      Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
      Keep-Alive: 300
      Connection: keep-alive

      HTTP/1.x 200 OK
      Date: Tue, 19 Aug 2008 17:58:20 GMT
      Server: Apache
      Last-Modified: Tue, 12 Aug 2008 02:40:10 GMT
      Etag: "10497f-1a5-4543a30c69680"
      Accept-Ranges: bytes
      Content-Length: 421
      Keep-Alive: timeout=15, max=100
      Connection: Keep-Alive
      Content-Type: text/html

      That's an actual dump from Live HTTP Headers (domain was changed to protect the innocent), but notice the Host: header. Still there, even in HTTPS.

      --
      <xml><I><am><so><damn>Web 2.0</damn></so></am></I></xml>
    46. Re:The end is nigh? by j+h+woodyatt · · Score: 1

      Now tell me how Skype is going to work in an environment where everyone needs for their machine to be asleep— to conserve battery charge— when it's passively waiting for incoming calls.

      --
      jhw
    47. Re:The end is nigh? by j+h+woodyatt · · Score: 1

      More scalability. You can pack more customers behind the same NAT with APD filtering behavior than with EI or AD behavior.

      --
      jhw
    48. Re:The end is nigh? by The+Cisco+Kid · · Score: 1

      Properly implemented standards-compliant VoIP implementations don't have a problem with VoIP (Not conjecture, I run a VoIP system myself)

    49. Re:The end is nigh? by man_of_mr_e · · Score: 1

      I think you mean NAT, and yes they do.. because SIP, like FTP, includes IP addresses within the packets. Those IP addresses have to be either futzed with by the implementation (not standard compliant) or futzed with by the firewall, which isn't standards compliant either.

    50. Re:The end is nigh? by amorsen · · Score: 1

      That's not all you get at the packet level.

      You sound as if there's a list of a hundred points I forgot. In fact, the only other thing is that IPv6 headers don't have a checksum. Calculating the checksum is completely trivial when you are doing it in hardware, and if you're doing it in software, the IP header is in L1 cache, so you can fix it up faster than you can access memory or I/O anyway.

      --
      Finally! A year of moderation! Ready for 2019?
    51. Re:The end is nigh? by bs7rphb · · Score: 1

      Well, OK. It rather depends on your definition of 'asleep', but machines with spun-down disks and cpus throttled to minimum so they can be passively cooled seem pretty close to 'asleep' to me, and they'd still be able to listen to their network interface. Also wake-on-lan can do some pretty useful things. I'm not sure what this has to do with NAT though.

    52. Re:The end is nigh? by The+Cisco+Kid · · Score: 1

      I wont admit to being an expert on SIP, but I've never had to do anything special to get it to work over NAT. It 'just works'.

      In any case, my 'new TCP/UDP' idea, with 32-bit 'port numbers', would be an entirely new addressing scheme (albeit one which could overlay the existing IP4 backbone) pretty much requiring a rewrite/reimplementation of anything using it anyway. The point is, rather than trying to replace the middle of the network (ala IP6), write new 'ends' that use the existing middle. (Tunneling IP6 over IP4 is similar in idea, but it just isn't catching on, possibly because there are so few compelling apps that are only available that way)

      One neat thing about giving everyone their own 'address space' (subindexed to a single existing IP4 address) is that no new assignment authority needs to exist. End users (not running public servers) can use whatever dynamically-assigned IP4 they are using now, and 'new apps', using something like my idea would 'just work'. Consumer 'NAT' routers would need some support for this, either mapping specific subindexes to seperate 'inside' computers, or providing a way for an inside machine to request a dynamic assignment for communication. Obviously any new protocols built on top of this would have to implicitly be designed with its NAT-like operation in mind. At hosting/ISP ends, that have public IP's assigned to servers, no new routing technology would be required - everything would be done in software within the servers. Hosting provides with already permanently assigned IP4 space would automatically have all of the applicable IP4+subindex space for the addresses they already have. About the only thing needed would be a new way of publishing the 'new' address concepts either in DNS or something else.

      Eventually this could be extended, I envision things like mapping it onto internal RFC1918 space so entire networks could existing within the space of a single IP4 address, and yet still provide services that could be reachable from the 'outside' if desired.

      IP4 numbers would (sort of) work like AS numbers do now. The IP4 backbone wouldnt need to know anything about the new addresses, all it would need to route to would be the one IP4 address.

    53. Re:The end is nigh? by Surt · · Score: 1

      It is trivial, if you're doing it in hardware, but the point being that you could reallocate that hardware to handle the few extra bytes of header size. You also get jumbogram packets which can reduce router work load by reducing packet counts. When you add it all up, the trivial increase in header size from the larger address space doesn't compare to the savings to be had from the routing improvements as far as router hardware needs are concerned.

      --
      "Who is the Journal of Quantum Physics going to believe?" --Stephen Hawking
    54. Re:The end is nigh? by j+h+woodyatt · · Score: 1

      I'm actually thinking of devices, like phones and other personal mobile gadgets, that need to keep their wireless network interfaces in power-save mode most of the time to keep their battery life in the acceptable range. What this has to do with NAT: if you have to wake up every N seconds to send a bubble packet to keep the NAT from closing your otherwise unused hole to the not-very-scalable rendezvous server, then you can say goodbye to your battery life.

      --
      jhw
  4. Re:how fast? by duckInferno · · Score: 2, Funny

    Is it African or European IPv6?

    --
    Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
  5. You know what would help? by Anonymous Coward · · Score: 5, Insightful

    If people could actually get IPv6 service from their providers instead of having to route everything through congested tunnels, THAT would help.

    1. Re:You know what would help? by A+beautiful+mind · · Score: 5, Informative

      I'm kind of suprised that my ISP in Hungary is switching over it's infrastructure to IPv6 and making IPv6 available for the users by the end of this year. I consider it a huge step forward, plus the free porn here is a welcome bonus.

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    2. Re:You know what would help? by canuck57 · · Score: 2, Interesting

      If people could actually get IPv6 service from their providers instead of having to route everything through congested tunnels, THAT would help.

      Myth: We need IPV6

      Fact: PITA to use IPV6 so we use IPV4

      There isn't really a shortage of IP addresses at all. There is an extreme waste of IP space.

      Case in point, take China squandering class A after class A (x/8). Why not just NAT the typical home users? Could do the same in Chicago, NY, California and London too. I know businesses that still have /16 spaces when in fact a /24 would do. And any business today using network routable addresses internally, well, their incompetence shines through. 10/8, 192.168/16 and others, plenty of space.

      Take the waste of home IPs on my DSL, if you use one, you may be really using 4.

      • cable modem/lower default
      • your static IP
      • your static IP
      • upper local broadcast

      Or at least that is how my DSL used to work and my cable does today (yes, I have 2 static). There are some variations to this, but we waste most of the address space. In this case, 1/2 wasted and that is efficient.

      And like domain squatting, many companies IP squat hogging not just IPV4 space, but have hogged IPV6 space too.

      We haven't gotten to the logistics of the changeover and costs of IPV6, let alone the technical issues. At this point, IPV6 is pie in the sky for most. Oh, a few tunnel it over IPV4, or the ones with enough to rent fiber by the strand for bragging rights. But it is a macho thing.

      In the end, many years out IPV6 is needed. But it isn't that impending as Cisco and others who would profit by it would have you or I believe. That is why it's adoption is small until the costs and technical issues are completely addressed.

    3. Re:You know what would help? by Sentry21 · · Score: 1

      Mexican ISPs already NAT a large portion of their subscribers. End result? When someone does something bad (e.g. is being an asshat on IRC, a problem for me back when I was an IRC server admin), you can't narrow down to a specific person.

      In my IRC example, banning one IP address would kick off up to a hundred users - pretty insane, considering our net only had a 2400 user record, and half of them were from Mexico. Suddenly, I have 99 pissed-off users, and one asshat who just hops on a proxy instead.

      (Of course, since all of these users were teenagers, in the same neighbourhood of the same city and went to the same school, the easiest solution discovered by those of us dealing with Mexican asshats was to tell everyone who it was that had gotten them banned, and reassure them that after the ban expires (usually an hour to start), they won't get banned again unless the asshat acts up again. I'd imagine I caused a lot of threats, angry IM chats, and possibly savage beatings.)

    4. Re:You know what would help? by darkpixel2k · · Score: 1

      If people could actually get IPv6 service from their providers instead of having to route everything through congested tunnels, THAT would help.

      Agreed. At one point, just to learn about how IPv6 worked, I decided to try and convert my home network to be IPv6-only. I started with my firewall and tried to run it through sixxs. The part that was a major pain in the ass was that sixxis had some stupid 'points' system where you received just enough points initially to setup your tunnel to one of their brokers. About an hour after I setup my tunnel and exhausted my points, the tunnel broker went down. ...and it stayed down for over a month. Finally I said 'screw it' and totally failed to even get an IPv6 address assigned to a single computer on my network.

      I suppose at some point if Comcast starts making noise about offering it as a trial to adventurous customers I'll start thinking about it again.

      Screw the tunnel brokers.

      --
      There's no place like ::1 (I've completed my transition to IPv6)
    5. Re:You know what would help? by Anonymous Coward · · Score: 0

      Well, yeah. Since it's (almost) all tunneled, there are two segments that are IPv4 for every IPv6 segment, giving you a flat-out maximum of 1/3 IPv6, even if everyone adopted it, assuming the measurement is fair. If the measurement points are at top-level ISPs, it's amazing they have any IPv6 packets at all. If they consider IPv4-over-IPv6 as IPv4, then they discount the majority of tunneled traffic. Of course, if they're not really measuring packets but measuring registered addresses, virtually all tunnels use static addresses out of the tunnel's pool, not registered addresses. Almost nobody uses an assigned, registered address. Yet.

    6. Re:You know what would help? by Detritus · · Score: 1

      If I ever get a job at Skynet, I'm going to requisition a few dozen terminators and send them back in time to eliminate the inventors of NAT, and anyone who claims that it's a feature.

      Some of us want dozens of routable IP addresses, and we're stuck with the broken model of IP that is made available to the general public.

      --
      Mea navis aericumbens anguillis abundat
    7. Re:You know what would help? by totally+bogus+dude · · Score: 3, Insightful

      any business today using network routable addresses internally, well, their incompetence shines through. 10/8, 192.168/16 and others, plenty of space

      This is all well and good until you're setting up VPNs with your business partners; and if you're a large business, you not only use a lot of private address space, but you also have a lot of partners.

      But that's okay, you can just renumber your entire network every time you find you've chosen the same private addresses as the company you're doing business with. Or you can set up some crazy NAT scheme so you can pretend they're on a different address space, giving you a whole new set of problems.

      You're right in that the cost of actually changing to IPv6 right now far outweighs the cost of working around the problems caused by the limited address space, but it sure would've been nice if we'd had longer addresses from the start!

    8. Re:You know what would help? by huge · · Score: 1

      Very true.

      It would also help if the ISPs that actually provide IPv6 connectivity would also provide transition tools like 6to4 HTTP proxies.

      If that would be done, most of the home users with dual stacks (I *think* Vista comes with dual stack preferring IPv6 when AAAA records are present, can anyone confirm?) wouldn't even notice that all their HTTP traffic is via IPv6 while their torrents are still downloaded using IPv4.

      It would also be nice if hosting companies would start implementing IPv6 on their shared servers. All the users hosted on those shared servers would be able to provide IPv6 content to their customers without any extra effort.

      --
      -- Reality checks don't bounce.
    9. Re:You know what would help? by Anonymous Coward · · Score: 0

      Of course you ignored their request... "We're not ready for the world to know about this experiment yet, so don't go submitting this to Slashdot or Digg until the actual site is up."

    10. Re:You know what would help? by Anonymous Coward · · Score: 0

      From ipv6experiment.com link:

      "This page is describing the IPv6 experiment itself, and is primarily intended for networking researchers and software professionals to learn about and discuss the experiment. If you're here for the free content, it's not here! We're not ready for the world to know about this experiment yet, so don't go submitting this to Slashdot or Digg until the actual site is up."

    11. Re:You know what would help? by A+beautiful+mind · · Score: 1

      Posting about it is not the equivalent of a slashdot story, besides they've been presenting the link to large IT conferences all around the world - the cat is not exactly in the bag...

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
  6. Reasons. by morgan_greywolf · · Score: 5, Insightful

    The biggest reasons:

    1. Many consumer-grade routers do not support IPv6 out of the box.
    2. Some (most?) consumer ISPs do not yet support IPV6
    3. For both enterprises and individuals, there doesn't seem to be any cost justification for upgrading to IPv6. What's the benefit? It works now, right?

    And probably many others. The bottom line is that right now today, there isn't a 'killer app' for IPv6.

    1. Re:Reasons. by duckInferno · · Score: 1

      I don't know of any businesses that would be thinking "It works now, right?" in the face of impending service disruption.

      --
      Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
    2. Re:Reasons. by jeiler · · Score: 5, Insightful

      The Y2K issue was known and discussed in the media as far back as 1984, yet did not hit the awareness horizon of most big businesses until late 1998. That's fourteen years of "It works now, right?"

      --

      If you haven't been down-modded lately, you aren't trying.

      Sacred cows make the best hamburger.

    3. Re:Reasons. by duckInferno · · Score: 1

      Well I'm still alive, so they obviously got around to it in time :)

      --
      Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
    4. Re:Reasons. by jeiler · · Score: 2, Insightful

      I have the feeling this is going to be another last-minute panic like Y2K was. Of course, Y2K was a tempest in a teapot--I have to wonder if this is not also in the same league.

      --

      If you haven't been down-modded lately, you aren't trying.

      Sacred cows make the best hamburger.

    5. Re:Reasons. by DECS · · Score: 5, Insightful

      Interestingly, Apple's AirPort Extreme/Time Capsule firmware does support IPv6 as local-link only, an IPv6 node, or tunnel to IPv6. It also includes an IPv6 firewall supporting incoming IPSec authentication and Teredo tunnels (to get through NAT).

      Apple owns more than 10% of the retail WiFi N router market according to NPD.

      Mac OS X, XP and Vista all support IPv6, but having support in the router is the important part. Enabling a significant percentage of users to flip on IPv6 and tunnel right through their legacy ISP is already possible. IPv6 just needs a killer app.

      How about authenticated web apps? IPv6 secures traffic from the user to the cloud. That's something Apple has reason to push with MobileMe: "look at us, we have IPv6 security."

      Look at what Apple's doing with Back To My Mac to support authenticated connections using Wide-Area Bonjour Dynamic DNS lookups. This could be done via IPv6 using direct addressing. Apple will end up selling more routers, MM subscriptions and IPv6 will get its foot in the door for others to use.

      Will the iPhone Meet its Match from a Modern Day DOS?

    6. Re:Reasons. by bendodge · · Score: 3, Funny

      I know I can't get IPv6 here. I've called my local cable company (CableONE) and they told me "Oh, that's not being implemented in the US. That's over in Asia."

      But I must say that many new consumer routers advertise IPv6.

      --
      The government can't save you.
    7. Re:Reasons. by Anonymous Coward · · Score: 0

      Indeed. However, for point three, this is a good justification for it.

      Imagine your exec takes his laptop home, plugs it into his home internet connection, and all his corporate applications Just Work without setting up a VPN or anything. Doesn't have to call the helpdesk. Doesn't fiddle with it and break something. All protected by IPSec over IPv6.

    8. Re:Reasons. by bigstrat2003 · · Score: 2, Insightful

      Considering you were never at risk of dying from Y2K, does it matter whether they got to it in time, using your metric?

      --
      "16MB (fuck off, MiB fascists)" - The Mighty Buzzard
    9. Re:Reasons. by CAPSLOCK2000 · · Score: 5, Informative

      There is a killer app, It's called

      news.ipv6.eweka.nl

      It has 120 (!) days retention, and comes to you at gigabit speed.

      All for FREE if you use ipv6.

    10. Re:Reasons. by Sentry21 · · Score: 1

      How about authenticated web apps? IPv6 secures traffic from the user to the cloud. That's something Apple has reason to push with MobileMe: "look at us, we have IPv6 security."

      Put another way - 'Look at us, all of your traffic to us goes through some third-party router, and may well be getting sniffed on the way. If a hacker gets them, they win!'

      I know that's not true if SSL is used (and MobileMe does use HTTPS for push updates, somehow), but the average user doesn't know that.

    11. Re:Reasons. by petermgreen · · Score: 1

      Buisnesses generally already have thier IPs, unless they are rapidly growing the unavailibility of new IPV4 IPs won't effect them much.

      And unless they are really huge (there are some cable networks iirc that are too big) they can just use 10.0.0.0/8 for most of thier internal machines with proxies and/or nats providing access to the internet.

      The people who will be hit by this are home users who will be placed behind ISP operated nats (most likely with no mechanism for port forwarding) to make way for more lucrative buisness customers.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    12. Re:Reasons. by duckInferno · · Score: 1

      Dude! I could have been nuked in a traffic jam caused by malfunctioning traffic lights and jumbo jets crashing into the streets... and to top it all off, I would have missed taping a Simpsons rerun.

      --
      Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
    13. Re:Reasons. by DECS · · Score: 1

      IPv6 uses IPSec.

      MobileMe uses IPSec to sync with the desktop.

      What I'm saying is that it would make sense for Apple to push IPSec IPv6 connections to its web apps to provide the same level of security.

    14. Re:Reasons. by Ilgaz · · Score: 1

      I don't know about current (811N) generation but I was surprised that Airport setup utility even suggests you to turn on IPV6 on OS X. That is the 811.11G model (extreme).

      I hope it becomes like MPEG4/h264, you know nobody cared about Mpeg4/h264 until Apple figured it way early that is the future. I also remember everyone laughing to Apple for including 3G support to Quicktime as early as 2G was popular.

      BTW Linux/Windows nerds shouldn't suggest to their OS X friends to turn off IPV6, it is actually used as first choice on OS X home networks and it doesn't work "windows way".

    15. Re:Reasons. by Anonymous Coward · · Score: 0

      It's 802.11 not 811.11

    16. Re:Reasons. by morgan_greywolf · · Score: 1

      But I must say that many new consumer routers advertise IPv6.

      My LinkSys WRT54G, which is still a very popular router and still sells for new in many places, does not advertise IPv6 support at all. The Belkin and DLink routers friends of mine bought a year or so ago also don't support IPv6.

    17. Re:Reasons. by Spatial · · Score: 1

      That's a bit optimistic; you got turned into a duck and you're on fire. I don't really think you fared too well, all things considered...

    18. Re:Reasons. by lgw · · Score: 1

      No, Y2K was a very serious problem that was avoided at the last minute at great expense. The fact that the problem was blown out of propotion doesn't mean there wasn't a serious problem. Most paychecks/direct-deposits were done on machines that needed Y2K fixes, and how many people do you know that couldn't make it 1 month without a paycheck, even if that was the only Y2K problem?

      --
      Socialism: a lie told by totalitarians and believed by fools.
    19. Re:Reasons. by Whitemice · · Score: 1

      > 1. Many consumer-grade routers do not support IPv6 out of the box.

      Is this actually true? I've seen IPv6 support in numerous devices.

      > 2. Some (most?) consumer ISPs do not yet support IPV6

      Sadly true, although many large ISPs are using it internally. They just aren't routing it to their end users.

      > 3. For both enterprises and individuals, there doesn't seem to be any cost
      > justification for upgrading to IPv6.
      > What's the benefit? It works now, right?

      You don't need to "upgrade". You can run both, as we do, so you can get comfortable with IPv6. And in time you'll like IPv6 better as it solves allot of the hacks used in IPv4. It is simpler and, yes, *faster*.

      --
      Using "Common Sense" is being either to arrogant or to ignorant to ask people who know more about something than you.
    20. Re:Reasons. by symbolset · · Score: 1

      If your company doesn't have a huge IP block, I recommend showing up at the SCO liquidation auction. Rumor has it they have a three-letter .com address and a HUGE block of IP addresses. For the .com I would recommend a pornsite. It'll be a while before the stink is worn off it.

      --
      Help stamp out iliturcy.
    21. Re:Reasons. by j+h+woodyatt · · Score: 1

      Look more carefully at how Apple is using IPv6. What you will find is that Apple is using IPv6 mostly as a replacement for Appletalk and tunneling it over IPv4 where necessary. There is precious little evidence to suggest that Apple believes there will ever be a functioning IPv6 default-free zone that ordinary people rely on every day. In fact, just about the only major company I can think of that has done anything like that is Google, with their ipv6.google.com service.

      --
      jhw
    22. Re:Reasons. by Chang · · Score: 1

      Back to my Mac uses IPv6 via 6to4 tunnel.

    23. Re:Reasons. by jd · · Score: 1

      There are ISPs that provide IPv6 in the US and who can "replace" your existing ISP, but coverage is not that great. Tunnels, via services like Hurricane Electric, are generally better.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    24. Re:Reasons. by jandrese · · Score: 1

      You might be surprised how much consumer gear supports IPv6 these days. Not that it matters since it's almost impossible to find an ISP who will deal with IPv6. I have no interest in setting up a useless tunnel just to say I'm using IPv6, so until I can get an address from my ISP I'm not switching.

      --

      I read the internet for the articles.
    25. Re:Reasons. by huge · · Score: 1

      No, Y2K was a very serious problem that was avoided at the last minute at great expense.

      I'd not put it that way. Yes, it was serious issue in some cases but most of the serious issues were solved in advance.

      Most of the action during '99 was just cashing the customers who wanted to have "Y2K compliant" sticker attached to every kettle and pot. Sure, there were some surprises but not much.

      --
      -- Reality checks don't bounce.
    26. Re:Reasons. by gbjbaanb · · Score: 1

      Yeah, its true. Go to netgear or belkin and see if their routers support IPv6. Though I live in hope that they'll release firmware updates that do this, I won't hold my breath waiting for it.

      in fact, search netgear.com for "IPv6" and you get 2 results, for 2 products (a CM232 cable modem and CBVG834G cable router) which actually *does* support iPv6.

      Getting IPv6 support in the home routers is the major step that's required for IPv6 adoption.

    27. Re:Reasons. by amorsen · · Score: 1

      The WRT54G is software upgradable to IPv6. If IPv6 should take off, it's likely that they will, and otherwise you just need a third party firmware.

      --
      Finally! A year of moderation! Ready for 2019?
    28. Re:Reasons. by pla · · Score: 1

      3. For both enterprises and individuals, there doesn't seem to be any cost justification for upgrading to IPv6. What's the benefit? It works now, right?

      You left out "4. We have no need for IPV6 yet, or anywhere in the near future". Put simply, I haven't switched because it does nothing for me, while making addresses harder to remember as the sole reward.

      In the modern world, most machines have a private address connecting via a single externally-visible address. That applies to both homes and companies. You want more addresses? Take away the class-A blocks from the likes of Halliburton, Boeing, HP, and dozens of others that almost never need more than a routeable class-B (if even that much). And that whole "multicast" BS... Sounded great on paper, but I have never seen anything actually use it. 16 class-A blocks sitting unused right there.

      We don't need more addresses, we just need better use of the ones we have.

    29. Re:Reasons. by Ash-Fox · · Score: 1

      Imagine your exec takes his laptop home, plugs it into his home internet connection, and all his corporate applications Just Work without setting up a VPN or anything. Doesn't have to call the helpdesk. Doesn't fiddle with it and break something. All protected by IPSec over IPv6.

      In practice: Doesn't work at all because his home network like every other consumer home network doesn't provide IPv6 address allocation and there is nothing the IT staff can do about it.

      --
      Change is certain; progress is not obligatory.
    30. Re:Reasons. by Rakshasa+Taisab · · Score: 1

      Talking about killer app for IPv6, and yet forgetting the greatest potential one that you've linked in your sig; the iPhone.

      --
      - These characters were randomly selected.
    31. Re:Reasons. by CrazedWalrus · · Score: 1

      Consumer boxes don't have to support ipv6. The home router boxes everyone has and the isps give out nowadays can do the ipv6 on the internet and still dole out ipv4 addresses internally.

      For those who want all the benefits of ip6, click a radio button that tells the router to assign ip6 addresses from the isp and disable nat. You can still use the router as a firewall, so it's not like it's useless at that point.

      Want a financial incentive for the isp's? Here you go: you know all those router boxes you're giving out? You can replace them with switches or just tell the customer to buy a switch. They only need a router if they're using an old OS. That's quite a lot of savings, I'd think.

      That's not to mention the helpdesk support costs caused by people fighting with nat to make their games or voip apps work. It also simplifies the setup for isps who want to offer voip as a service as well.

      So there you go. Cost savings and easier to offer new products without nat-related headaches.

      Lack of incentive in this case is very much a failure to "think outside the box" and realize the potential.

    32. Re:Reasons. by ceoyoyo · · Score: 1

      Good. It's been a while since we had a little excitement.

    33. Re:Reasons. by Anonymous Coward · · Score: 0

      I think you need to look up the definition of "many". Your example of one model of router, however popular it happens to be, really says nothing about the statement that many routers advertise IPv6

    34. Re:Reasons. by DECS · · Score: 1

      How would the iPhone materially benefit from using IPv6 in the near term? There currently isn't much you can do beyond searching Google and looking at some "IPv6 only!!" content.

      Being able to BTMM and share files and VNC and stream iTunes might be cool at some point.

      Apple's secret "Back to My Mac" push behind IPv6

    35. Re:Reasons. by gewalkeriq · · Score: 1

      Yeah, a buddy of mine was the Y2k guy for a major hospital. Lots of medical equipment had to be upgraded (or scrapped) because of Y2K problems.

    36. Re:Reasons. by lgw · · Score: 1

      Don't mistake due dilligence for waste. Of course, there was *also* waste.

      --
      Socialism: a lie told by totalitarians and believed by fools.
  7. What's the downside? by XanC · · Score: 2, Interesting

    Between tunnel brokers and 6to4, really all of us who manage servers should have them on IPv6 in addition to IPv4. What's the downside to being ready?

    1. Re:What's the downside? by JamesRose · · Score: 2, Funny

      Never do a job now that can be done tomorrow, never do a job that can be done on thursday tomorrow.

    2. Re:What's the downside? by peragrin · · Score: 1

      ooh you r missing vital parts of that

      Never do a job at standard rates today when it can be done next week at overtime rates.

      --
      i thought once I was found, but it was only a dream.
    3. Re:What's the downside? by dwye · · Score: 1

      > What's the downside to being ready?

      Replacing all your old hardware, that still works, with new stuff (which might not work quite right, for all anyone knows). More precisely, having to convince your bosses (or your checkbook, for individuals) that it is worth the expense. This is worse if you control a leaf node, as it is something of a waste of money until your connections support IPv6, too.

      If you are buying new routers, anyway, it won't matter much. It will just be a checkoff item. If you were not planning to, however, it could be like an uninsured fire.

    4. Re:What's the downside? by fm6 · · Score: 5, Insightful

      What's the downside to being ready?

      Because it's work. Work takes time. Time is money.

      A certain product at a certain company (forgive my being vague, you know how these things are) has a network interface. This interface is currently IPv4 only, no IPv6 support. When anybody asks the design team why not, they say that no customers have asked for it. Somebody suggested that IPv6 was the sort of thing you want to support ahead of need, but these guys have a lot of deadlines to meet and not enough resources to meet them. They aren't about to spend time implementing features nobody's asked for.

      Of course, the time will come when their customers realize they've put off changing over to IPv6 much too long, and will start crash programs to make it happen. They'll demand that this product start supporting IPv6 immediately, if not sooner. So the design team will begin their own crash program, and IPv6 support will be added to the product in a hurry. The implementation will probably cost more and be less robust (at least initially) than if they'd planned ahead.

      But they have no incentive to plan ahead. It's a common pattern.

    5. Re:What's the downside? by Anonymous Coward · · Score: 0

      They aren't about to spend time implementing features nobody's asked for.

      [cough] microsoft vista [cough]

    6. Re:What's the downside? by Anonymous Coward · · Score: 0

      Why build it in now when you can build it in later when your customers really need it and will pay lots of money for new stuff later?

    7. Re:What's the downside? by BlueCoder · · Score: 2, Insightful

      I don't really understand what your saying. IPv6 works perfectly fine on local networks for consumers. If ISP's implemented IPv6 coming out of cable modems and DSL bridges we could turn off DHCP and NAT effectively turning the home routers into level 2 switches. IPv6 works perfectly fine at level 2 (mac addressing). If they can't convert the cable modems and DSL bridges then they could just distribute a software package to install a 6to4 tunnel to their IPv6 network.

      I actually looked at the issue, it's actually harder to talk about than it is to implement.

    8. Re:What's the downside? by xRizen · · Score: 1

      Firmware upgrades, dude. Seriously.

      Besides that: I have a Cisco router of a model that they stopped making in 2002. It supports IPv6. How the hell old is your equipment that it doesn't support IPv6, or more so that it can't do so with a firmware upgrade.

    9. Re:What's the downside? by Rodyland · · Score: 1

      You just described... pretty much everything in business.

    10. Re:What's the downside? by fm6 · · Score: 1

      Everything in modern publicly-held companies, anyway. They're all under enormous pressure to keep costs down. Sometimes I think we ought to bring back the robber barons. They had many faults, but at least they were capable of thinking beyond the end of the fiscal year.

    11. Re:What's the downside? by Sentry21 · · Score: 1

      I asked my favourite colocation/networking company, Peer 1 Networks, what their stance was on IPv6. The answer I got back (from their best salesperson) was that they were taking a 'wait and see' attitude. They had no intention of being first, being innovative, or for that matter, doing anything until they saw what other people were doing. There's no money in it, so why bother? IPv6 doesn't get you anything but additional infrastructure that a lot of people these days don't yet fully understand.

      I was disappointed, but I don't blame them. It would be great if they did, but honestly, while the tech geek in me wants it, the pragmatist knows that it's not really that useful... At least, not yet.

      Still, I pointed out to her that when it IS useful, it would be nice to be there already. She agreed on that, at least in principle.

    12. Re:What's the downside? by Rodyland · · Score: 1

      End of fiscal year?! Some managers have trouble thinking past the end of next week!

    13. Re:What's the downside? by petermgreen · · Score: 1

      IIRC there are a large number of routers (proper routers, not embedded linux systems that push everything through the CPU) that support IPV6 but only do so in software. Meaning that with a little IPV6 traffic they are fine but if you try and move the bulk of the traffic to V6 they can't cope.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    14. Re:What's the downside? by Hucko · · Score: 1

      No firmware available for my router. I've got no reason not to go to IPv6, but as of 2 months ago my router nor my isp supported it. I'm not buying another router until >24mbps is available -- to me. In Australia, the users are generally ready before the suppliers by around a decade.

      --
      Semi-automatic amateur armchair Australian philosopher; conjecture ready at any moment...
    15. Re:What's the downside? by Whitemice · · Score: 1

      What's the downside to being ready?

      Because it's work. Work takes time. Time is money.

      If this is the attitude of your IT staff they, and possibly you, should all be fired. Technology evolves all the time, keeping it up to date is part of the job.

      A certain product at a certain company (forgive my being vague, you know how these things are) has a network interface. This interface is currently IPv4 only, no IPv6 support.

      So? You can run both IPv4 and IPv6 without any problems. You can route IPv4 over and IPv6 WAN, no big deal.

      Because one or two products in your infrastructure don't support IPv6 is a lame reason not to roll out. None of our printers (JetDirect, etc...) support IPv6. So? The client communicate with the print server via IPv6 and the print server communicates with the "legacy" printers via IPv4. When we get new printers (which will support IPv6) it will all just work. Beats rushing to implement when the requirement suddenly arrives.

      --
      Using "Common Sense" is being either to arrogant or to ignorant to ask people who know more about something than you.
    16. Re:What's the downside? by fm6 · · Score: 1

      I'm talking the corporate level. They think ahead whole months at a time. Electronic Arts just gave up on acquiring Take Two Interactive because it wasn't going to happen in time to merge the product lines before Christmas. That shows thinking almost six months ahead!

    17. Re:What's the downside? by fm6 · · Score: 1

      ...but honestly, while the tech geek in me wants it, the pragmatist knows that it's not really that useful... At least, not yet.

      How about 3 years from now? That's when the IPv4 address space is supposed to run out of new address blocks.

    18. Re:What's the downside? by fm6 · · Score: 1

      If this is the attitude of your IT staff they, and possibly you, should all be fired. Technology evolves all the time, keeping it up to date is part of the job.

      Who said anything about an IT staff?

      So? You can run both IPv4 and IPv6 without any problems. You can route IPv4 over and IPv6 WAN, no big deal.

      Who said anything about routing?

      Try going back and actually reading my post this time.

    19. Re:What's the downside? by symbolset · · Score: 1

      Because it's work. Work takes time. Time is money.

      People who think like this are going to wait two years and then hire a consulting company to do a $250k study on the issue about whether or not it's time. Then in a nice catered meeting they'll discuss the powerpoint slides - with pie charts and bar charts made from numbers the consultants just made up. Knowledgeable organic employees will express an eager desire to move forward. They'll decide to wait. They'll do that every two years until the consultants explain "if you don't do it, your company will fail." At that point, there'll be a huge rip and replace operation that intermittently shuts down the business for six months and costs ten times what it should have.

      <sigh>I wish I weren't speaking from experience here.</sigh>

      --
      Help stamp out iliturcy.
    20. Re:What's the downside? by totally+bogus+dude · · Score: 1

      It's been a while since I've looked, but the lack of tunnel brokers means that most people using IPv6 are doing so via fairly congested links. So a site that's available via IPv6 as well as IPv4 is in many cases slower over IPv6. I think this is the reason why lots of people who do want to have an IPv6 version available (e.g. Google) are putting it on a different hostname, so it doesn't interfere with their "regular" site.

      There may also be other problems, e.g. some operating systems are now configuring IPv6 addresses by default, and if your site has A and AAAA records web browsers and so on will likely try to connect via IPv6 first... even though it's almost certainly not going to get anywhere. That means waiting for the initial connection to time out before it retries on the IPv4 address. The end result is that users who have no idea what IPv6 is may find your site frustratingly slow to access simply because you publish IPv6 address records in addition to IPv4 records.

      Wasn't there a big deal made over Vista having IPv6 enabled by default, and one of the common tips for improving (perceived) performance was to disable it?

    21. Re:What's the downside? by Ash-Fox · · Score: 1

      What's the downside to being ready?

      Beyond extra work, new networking hardware... Security is a major one. I personally don't feel very comfortable using IPv6 with the amount of exploits and issues getting continuously patched on the Linux kernel with it.

      --
      Change is certain; progress is not obligatory.
    22. Re:What's the downside? by Kashgarinn · · Score: 1

      "But they have no incentive to plan ahead. It's a common pattern."

      - you just wrote out the incentive to plan ahead. The fact they HAVE no incentive regardless to plan ahead just shows a lack of intelligence and it will hurt them because companies which allow itself to behave like that don't get a reputation for doing well.

    23. Re:What's the downside? by lucifuge31337 · · Score: 1

      "What's the downside to being ready?"

      Broken, and/or slow connectivity. IPv6 is NOT ready. Publishing AAAA records is a good way to cause yourself problems with virtually 0 benefit.

      --
      Do not fold, spindle or mutilate.
    24. Re:What's the downside? by residieu · · Score: 1

      Never put off for tomorrow what you can forget about entirely.

    25. Re:What's the downside? by residieu · · Score: 1

      I assume applying firmware updates on your network equipment is not something that gets done without significant testing. Why should they do that for equipment that already works?

  8. From wikipedia: QOS currently not used. by Anonymous Coward · · Score: 0

    Quote:

    Flow label - QoS management (20 bits). Originally created for giving real-time applications special service, but currently unused.

    This is the one feature I consider to be useful of ipv6 and it's not currently used. While I agree there is an addressing problem, it currently isn't affecting me or anyone else. I suggest the lack of benefits coupled with the lack of a major problem with the current ipv4 is causing this. Why spend the money for such little return?

  9. So if IPv6 is a water contaminant.... by hyperz69 · · Score: 4, Funny

    The the water is internet. Which comes into our houses view pipes.... OMG THAT PROVES IT. The internet IS a series of tubes! We were all sooo wrong ;\

    1. Re:So if IPv6 is a water contaminant.... by Anonymous Coward · · Score: 0

      We MUST protect our precious Internet packets from IPv6 infiltration!

  10. It is obvious by able1234au · · Score: 3, Interesting

    99% of IPv4 traffic is bittorrent. Switch it to IPV6 and the traffic figures will spike!

    1. Re:It is obvious by Darlo888 · · Score: 1

      99% of IPv4 traffic is bittorrent. Switch it to IPV6 and the traffic figures will spike!

      * RIAA figures show

    2. Re:It is obvious by 4D6963 · · Score: 5, Funny

      99% of IPv4 traffic is bittorrent.

      Coincidentally, 99% of percentages seen in Slashdot comments are made up on the spot.

      --
      You just got troll'd!
    3. Re:It is obvious by davburns · · Score: 1

      I've always wondered what would happen if we started a rumor that RIAA & MPAA couldn't detect sharing on IPv6.

      (Of course, that kind of deception would be just wrong; this is idle speculation. Don't go setting people up to get DMCAd or sued. Also, it's wrong to infringe upon copyrights in the first place.)

      It might even be true when it first starts, but I suppose it would be self-invalidating after a while.

    4. Re:It is obvious by canuck57 · · Score: 1

      99% of IPv4 traffic is bittorrent. Switch it to IPV6 and the traffic figures will spike!

      Why not NAT you home users, say packing 64536 users through one NAT IP, 64536:1 reduction in wasted IP space. Don't log it so the RIAA can sue for what does not exist. I know of at least one bit torrent user that would love that anonymity.

    5. Re:It is obvious by jamesswift · · Score: 2, Informative

      This is old http://torrentfreak.com/bittorrent-the-one-third-of-all-internet-traffic-myth/
      Got something more recent to back up that 99% claim?

      --
      i wish i could stop
    6. Re:It is obvious by osu-neko · · Score: 1

      ...

      *whoosh!*

      --
      "Convictions are more dangerous enemies of truth than lies."
    7. Re:It is obvious by jd · · Score: 1

      I thought it was 74.8% of percentages and 89.2% of all other statistics.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    8. Re:It is obvious by mskadu · · Score: 1

      Well said! I am surprised that no one's mentioned that the popular bittorrent client utorrent has added support for IPv6.

      Can this be taken as a step in that direction?

      --
      -- Mskadu (Blogs: http://mskadu.blogspot.com/ and http://mytechieself.blogspot.com/)
    9. Re:It is obvious by earthbound+kid · · Score: 1

      Aren't all Slashdot posts made up on the spot except for copy-paste trolls?

    10. Re:It is obvious by ZerdZerd · · Score: 1

      What about the other 14%?

      --
      I'm not insane! My mother had me tested.
  11. nonsense by amnezick · · Score: 0

    To me IPv6 is still nonsense. It is part IPv4 with something on the left side like area zone or ISP code or whatever. I would recommend IPv5: 0.aaa.bbb.ccc.ddd == our IPv4
    new IP addresses can be eee.aaa.bbb.ccc.ddd and there you have it. We already have regexps matching ipv4 .. just one more block for ipv5. all protocols can be easily adapted to support ipv4 wrapped in ipv5 and that's all there is to it.

    --
    mov ax,4c00h
    int 21h
    1. Re:nonsense by amnezick · · Score: 0, Redundant

      ok. i took a glance at that definition. even easier now: just make src/dst on 64bit and there you have it. eee.fff.ggg.hhh.aaa.bbb.ccc.ddd where efgh can all be 0 for our current ipv4 addresses. we already have cpus working on 64bit so ntoa/aton will fit in just "fihine"

      for future reference: "To me ipv6 is still nonsense" should be read just like that .. "to me" ;)

      --
      mov ax,4c00h
      int 21h
    2. Re:nonsense by afaik_ianal · · Score: 2, Interesting

      It's not that simple. IPv6 already has a space for IPv4 mapping. While it's not an all-zero mapping, IPv4 traffic can be routed across IPv6 networks relatively easily, and transparently.

      To move to your IPv5, you're still going to need to replace the core infrastructure, and change all the applications to support it. If you're going to do that, you might as well move to something that you're not going to need to replace again in a couple of decades, and something that's easy to route.

      The big L3 switches that drive your traffic across the net are not just PC's with a couple of NICs on them; they are highly optimised hunks of silicon, that try to route packets before the CPU even knows a packet has arrived for processing.

      It's a *lot* easier to decide which of the couple of hundred interfaces to direct traffic if that decision is being made primarily on a 4 byte pattern in a relatively known location. If you're going to go to 5-bytes, you might as well go to 64-bit. IPv6 has gone that little step further, using 128-bit addresses, but also taking out some of the "features" of IPv4 that lead to uncertainty in the positioning of addresses.

    3. Re:nonsense by Ash-Fox · · Score: 1

      I would recommend IPv5

      IPv5 is the Internet Stream Protocol.

      --
      Change is certain; progress is not obligatory.
  12. Uh, no, bad comparison by Ancient_Hacker · · Score: 1

    Not quite totally dissimilar to a good comparison.

    The allowed amounts of dioxin, TCE, and many other chemicals is down in the parts per billion. So the comparison is off by about five powers of ten.

    1. Re:Uh, no, bad comparison by ceoyoyo · · Score: 1

      Five orders of magnitude is pretty close in the world of journalism.

  13. Not needed. by Lord+Apathy · · Score: 2, Interesting

    Well at least not right now. With more allocation of IPV4 address we wouldn't be needed anytime soon. The company I work for has 56 public ip address for 3 webservers. The other 53 address are not even used, they are just parked for future use. If I was allowed to set the servers up the "right" way I wouldn't even need 3, just 1.

    --

    Supporting World Peace Through Nuclear Pacification

    1. Re:Not needed. by Lord+Apathy · · Score: 2, Informative

      There should be a karma hit for not using the preview button. It should be -1, Dumbass.

      That second line should read "With more intelligent allocation of IPV4 address we wouldn't be needing IPv6 anytime soon

      --

      Supporting World Peace Through Nuclear Pacification

    2. Re:Not needed. by Anonymous Coward · · Score: 0

      And how would you handle HTTPS traffic might i ask?

    3. Re:Not needed. by Anonymous Coward · · Score: 0

      I know what you mean. My university possesses a full class B network and uses liberal allocation methods to try and waste as much of that as possible. (yes, every switch, router, access point, and dhcp node uses a public IP) In reality, a NAT'd 10/8 network and a single public Class C would be more than adequate for the next 10 years.

    4. Re:Not needed. by mikael_j · · Score: 5, Insightful

      Why is everyone so eager to use NAT? I've never quite understood this, once NAT use became widespread things became a lot more problematic, in my first year of college all the workstations in the computer labs (Ultra 5s and older Sparcstation 5s) had public IP addresses and the ISP I used gave all 10 Mbps customers 5 public IP addresses. I've recently started taking a few college courses again, the uni's labs are all NATed (so you can't access /tmp or /var on workstationname-57.lab04.cs.unidomain.tld from home any more, you have to dump the files on your NFS mounted 150 MiB home dir and then access that, great fun) and my current ISP gives each customer ONE public IP address, but I suppose I should consider myself lucky for not being NATed...

      Seriously, we need to move back to an internet where a machine connected to the internet can almost always be assumed to have a proper, public, IP address. It would simplify a lot of things. Also, any trolls pulling out the "yuo cant has teh firawalls withouts teh NAT!!!11" crap can please not respond to this as packet filtering does not in any way require NAT. (Not directed at parent post, just tired of trolls and ignorant fools always using that argument).

      /Mikael

      --
      Greylisting is to SMTP as NAT is to IPv4
    5. Re:Not needed. by Lord+Apathy · · Score: 1

      I like how you get called a troll for correcting your own posts. Dumb ass moderators on crack again.

      --

      Supporting World Peace Through Nuclear Pacification

    6. Re:Not needed. by Lord+Apathy · · Score: 1

      While I agree there is something that seems wholesome and just plain right about a move back to a simpler and more purer form of internet. But with that being said not every machine that has net access needs or should have a public IP address.

      Right now in my home alone, right now around me, there are 4 machines with internet access. My sons computer, my computer, the htpc, and my pda. I don't want all these machines to have public IP address. I have one ip address assigned to a cheap ass router that handles all the translation.

      So instead of soaking up 4 ip address I use one, and one is all I need.

      --

      Supporting World Peace Through Nuclear Pacification

    7. Re:Not needed. by coryking · · Score: 2, Insightful

      Very simple. I have zero interest in granting public IP's to my private home network. Not even for security reasons. My home devices and my address scheme are really just nobodies business.

      Another reason people NAT is for address portability. There is *still* no way for small fish to get a IP that isn't bound to their provider.

      The "Anti-NAT" crowd are just like the "never use tables" or "semantic web" or "console forever" crowd. They are all religious zealots with far to much time on their hands.

    8. Re:Not needed. by ToasterMonkey · · Score: 2, Insightful

      What the hell? Did routers and firewalls all up and disappear with the advent of IPv6?

    9. Re:Not needed. by mikael_j · · Score: 2, Insightful

      I believe that to many people they never existed before (or without) NAT, they've just come to assume that NAT == "Hardware firewall" and no amount of explanation that packet filtering worked just fine for everyone before NAT came into widespread use seems to change their minds, it always comes back to "But, but, someone might see my computers...".

      /Mikael

      --
      Greylisting is to SMTP as NAT is to IPv4
    10. Re:Not needed. by lucas+teh+geek · · Score: 0, Troll

      Another reason people NAT is for address portability. There is *still* no way for small fish to get a IP that isn't bound to their provider.

      NAT helps this how exactly?

      --
      TIAEAE!
    11. Re:Not needed. by coryking · · Score: 2, Insightful

      You gonna use your ISP's proprietary block of IP addresses to number your corporate lan? You want every computer in your office to rely on your ISP not switching their IP addresses, not going bankrupt, etc? No thanks. On IPv4 and IPv6, the only way to ensure you dont have to renumber your intranet because of the whims of your ISP is to use private IP addresses.

    12. Re:Not needed. by symbolset · · Score: 1

      Why is everyone so eager to use NAT? I've never quite understood this, once NAT use became widespread ...

      Do you really want to try and use an Internet where every Windows user who bought his shiny laptop at Costco has a publicly addressable PC, rather than one that's behind a home NAT router? Really? Be careful what you wish for.

      --
      Help stamp out iliturcy.
    13. Re:Not needed. by QuoteMstr · · Score: 1

      You're begging the question. I've been waiting for a chance to use that phrase properly.

      You assume that IPs need to be preserved, so you do good by only using one. Then you claim that moving to a more public internet is pointless because you don't need many IPs anyway. Because you've preserved them. Because they're scarce.

    14. Re:Not needed. by QuoteMstr · · Score: 1

      You're right. That's a serious problem. But why can't be get prefixes we can carry around between providers?

    15. Re:Not needed. by coryking · · Score: 1

      I believe it is a work in progress and from what I understand the idea of an AS isn't really part of the IPv6 deal unless you are "big" and qualify to get one. This is partly technical because our modern routing protocols just cannot scale to giving everybody an AS.

      Thus... anybody smaller then "big" will continue to use NAT to avoid getting locked into a proprietary address space.

      To me, another sign that we've outgrown what the TCP/IP abstraction provides.

    16. Re:Not needed. by QuoteMstr · · Score: 1

      To me, another sign that we've outgrown what the TCP/IP abstraction provides.

      To me, it's just another sign we need to carve out a block of IPv6 for private IPs.

      What's your proposed replacement "abstraction"? You haven't identified a fundamental problem with networking.

      When people say "we've outgrown $FUNDAMENTAL_ABSTRACTION", what they mean is "I'm having problems, and I think if I start over, they'll all just go away." The world doesn't work like that.

    17. Re:Not needed. by asdfghjklqwertyuiop · · Score: 1

      Because it would make internet routing tables too large. Instead of a route for a whole ISP that says "10.0.0.0/20 via interface0" you wind up with "10.0.0.0/24 via interface0; 10.0.0.1/24 via interface1; 10.0.0.2/24 via interface0;" etc...

    18. Re:Not needed. by coryking · · Score: 1

      I hate linking to videos, but this one by Van Jacobson might change the way you think about the problem space. Really, we need to start thinking out of the box here. We are in a TCP/IP rut.

    19. Re:Not needed. by coryking · · Score: 1

      And by the way, I'm not saying we throw everything away. Not at all. Unless "google.com" "myspace.com" and "billg@microsoft.com" work, an idea is worthless. What I'm saying is *how* we access those services will probably change and evolve from IPv4 and for long periods of time interoperable with it.

      The problem with IPv6 is it didn't ask for evolution, it expected everybody to switch over to something that kinda-sorta looks like IPv6 (ala flag days). They'd have been better to somehow "wrap" and "improve" IPv4 to keep backwards compatible.

    20. Re:Not needed. by QuoteMstr · · Score: 1

      Can you link to a text source please? I don't understand your claim that TCP and IP fundamentally hamper our progress.

    21. Re:Not needed. by 19thNervousBreakdown · · Score: 1
      --
      <xml><I><am><so><damn>Web 2.0</damn></so></am></I></xml>
    22. Re:Not needed. by Chang · · Score: 3, Informative

      IPv6 has a feature that allows an admin to renumber an entire network quickly an easily.

      See RFC2894

    23. Re:Not needed. by coryking · · Score: 1

      Sorry, it is a "Google Tech Talk" video where Google employees get to listen to lectures by smart people like Van Jacobson, Vint Cerf, the subversion guys, etc. I doubt they have a transcription of it.

      It is like 80 minutes long, but if you've got the time, I highly recommend watching it.

    24. Re:Not needed. by QuoteMstr · · Score: 1

      Thanks for the heads up, but this idea scares the bejeesus out of me. Often IP addresses are hardcoded in the strangest places. (Bad practice, but it happens.) I feel like this magic packet will create a Frankenstein network that will appear to mostly work, then fail catastrophically as soon as one of the old hardcoded IP addresses is used.

    25. Re:Not needed. by Chang · · Score: 2, Interesting

      Isn't this a problem with IPv4 renumbering also?

      I've been through several internal network renumbering projects to go from globally routable to rfc1918 and also from one 1918 space to another in the case of merger and acquisition.

      I would definitely use IPv6 router renumbering to help automate the process but it doesn't mean I don't need to understand the network flows either way.

      Router renumbering lets you perform an add prefix operation to get both prefixs in use. Then you update DNS and wait for sessions to restart naturally or you help that process along with some targeted restarts. After you monitor your network to ensure that the old prefix is no longer in use you can use a delete prefix operation to clean up the old stuff.

      The process is pretty much the same doing it manually or using router renumbering. The advantage is that you can use IPv6 renumbering abilities to help the grunt work on the routers.

    26. Re:Not needed. by coryking · · Score: 1

      See, I agree with you on this. Just like we can bask in garbage collection, gobs of CPU and terabyte disk drives... we'll figure out a way to burn those IP's (assuming IPv6 is adopted and not something else)

    27. Re:Not needed. by Sentry21 · · Score: 1

      Also, any trolls pulling out the "yuo cant has teh firawalls withouts teh NAT!!!11" crap can please not respond to this as packet filtering does not in any way require NAT. (Not directed at parent post, just tired of trolls and ignorant fools always using that argument).

      Well said, a point most people tend to miss when whining about IPv6. If you don't want people getting into your network - well, then say so! It's phenomenally trivial to set up a firewalling rule saying 'No inbound connections are allowed to this address range'. Using VLANs, you could easily subdivide your network, such that any systems you want accessible are on one subnet on one VLAN, and any hosts you don't are on another subnet on another VLAN.

      Some people argue that 'Oh, now people outside of my network know that a certain host is the one connecting!' Well, yes, that's true. However, all they know is an address in an address range. They don't actually know anything more than 'A host from this company is connecting', which is what they know now. Them being able to trace individual hosts can be a huge benefit for network admins, because now if someone is getting a lot of traffic from my office, I know exactly where to look without having to check the switch's logs (especially since the switch for our office is managed by someone else).

      Do you want outside organisations to find out that the person accessing their webserver is terrance.phillips.accounting.office.internal.company.com ? Well no, of course not - so don't use descriptive revDNS. Workstation-v1104.company.com would work just as well for all purposes, but not expose information to the outside world.

      So now we have a system that is as secure as NAT is, as 'private' as NAT is for all intents and purposes, and which can provide even more security up the pipe because the remote host can say 'Hey, you're not from user2023's IP address, so I'm not going to accept your session cookie'.

      Oh, and this is anecdotal, but I've found in the past that connecting through a tunnel broker, and then connecting via IPv6 to an IRC server through that tunnel, consistently had less latency than connecting to the same server over IPv4 from the same host (obviously not through the tunnel). Take THAT, overhead haters!

    28. Re:Not needed. by Wildclaw · · Score: 1

      If you want security you use a firewall, not a NAT.

    29. Re:Not needed. by theM_xl · · Score: 1

      It's not a problem under NAT, where you shouldn't actually HAVE to renumber the network because the range you're using is private.

    30. Re:Not needed. by gbjbaanb · · Score: 1

      Think for a second how a Skype call can arrive at your PC that is sitting behind a NAT device without any special configuration to allow it through.

      Think how secure your system is behind that NAT device. Its not an alternative for a firewall.

      Now, most (if not all) NAT routers come with a firewall already enabled. Moving to IPv6 won't change anything (except make everything easier to implement and provide you with all kinds of possibilities that you don't know you wanted until you get them)

    31. Re:Not needed. by Chang · · Score: 1

      Unless you are bought out, in which case you often have to renumber to fit into the new company scheme.

    32. Re:Not needed. by swillden · · Score: 1

      With IPv6, IP addresses will change all the time. There are privacy-enhancement proposals that suggest that every "client" machine should use a different IP address with every host it connects to (which could make ports obsolete, if we wanted to do that), and since with IPv6 there's no need for DHCP, many machines will generally pick a random IP (random in the bottom section, at least -- the network address, which implies the route -- would be picked up by listening) during network stack initialization, and then notify the local name server of their IP and name association.

      You can't apply IPv4 ways of thinking about addresses to IPv6. IPv6 eliminates a lot of the common concerns, and one of those is that it will force programmers to use name addressing, not IP addressing, because IP addressing won't be reliable. Name addressing will also be a lot simpler to use: Once you know the network you're on, you know the address(es) of the local name server(s), and you also know that all IPv6-capable machines on the local network will have automatically registered their names with it/them.

      From the developer's point of view, this means that if you need to talk to another machine, you address it by name, ignoring the IP address, which is somewhat unwieldy and very unreliable.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    33. Re:Not needed. by Anonymous Coward · · Score: 0

      I did think about it, and I don't see your point.

      You seem to think that a NAT doesn't help security in the least and that a firewall is the be-all, end-all of security.

      Fact is, when you say a NAT is not an alternative for a firewall you are just showing that you haven't thought it through yourself. NATs add security. That their security isn't perfect doesn't mean it isn't worthwhile. That it doesn't match a firewall exactly doesn't mean it isn't worthwhile. That they mean that I have 1 IP address for the 3 - 12 devices in my house is a win. IPv6 doesn't give me anything that my IPv4 NAT doesn't except extra work that I don't need.

      The most time I'll waste on IPv6 is posting to slashdot. IPv6 offers me nothing, it is stupid (yes, you love to hate him, but again he's right), and that's it.

      IMHO.

    34. Re:Not needed. by Anonymous Coward · · Score: 0

      I'm eager to use a NAT because I like the control that it gives me. I won't claim it does everything, or is a firewall, but it does have benefits to me (whether it benefits you or not wasn't a consideration, sorry!).

      Seriously, we need to move back to an internet where a machine connected to the internet can almost always be assumed to have a proper, public, IP address. It would simplify a lot of things.

      It would simplify some things I don't want simplified. And I don't see why we need to move back to that. I was there, I have no problems with NATs, I see no advantage to moving back. The first time I ran into a NAT I didn't like it. But after getting past its unfamiliarity, I was fine with it.

      You seem, from your use of "MiB", to be someone who likes to use something because you feel it is more "right" rather than for any practical considerations. Move past this and embrace reality. It will embrace you no matter what. Reference djb, who likes things to be what he considers to be "right" but derides IPv6 as impractical. He'd be all for a "right" solution, but one that doesn't take practical considerations into account is not "right".

    35. Re:Not needed. by Anonymous Coward · · Score: 0

      Why the hell would I possibly want my internal network exposed to the public internet?

      More importantly, why should a router 2 layers deep in my network need a public IP when it will NEVER have a reason to send data outside?

      If I want to send something to your network, I should be able to send it to ONE specific address. YOUR network should figure out what physical, or VIRTUAL machine to route it to.
      Using public IP's for every device on your internal network is not only wasteful, but also allows would-be attackers to analyze your entire internal network and routing structure, possibly exposing attack vectors for man-in-the-middle attacks among other things.

      The only arguments I've heard against NAT all boil down to one of two things: laziness and incompetence. I'm not saying NAT is some sort of Holy Grail, and it certainly is not the right tool for all situations, but to discount it entirely is just stupid.
      If you expose all your machines with a public IP address, I can learn a lot about your network topology without even probing it.

  14. How many sites can you reach? by QuantumRiff · · Score: 2, Insightful

    measuring the percent of traffic is not very reliable. Thats like saying how much internet traffic is used for Vonage, or Slashdot.

    More importantly, how many sites can be reached via IPv6? How many publish AAAA addresses in DNS? How many ISP's can route IPv6? I know that there is tunneling for running over IPv4, how much of that 99.99% of traffic might be doing that?

    --

    What are we going to do tonight Brain?
    1. Re:How many sites can you reach? by sjwest · · Score: 1

      We had AAAA records for our domain - our dns provider wiped them no reason was given - a job i have avoided since.

      As to ipv6 well most consumer kit does not support ipv6 (unless you flash your linksys specific model) and no we dont have linksys routers.

      While some might say there ready for ipv6, and the software is there the routers joe average uses (not Cisco) is yet to get there.

      joe average can adjust there ipv4 router easily for a new isp. If my isp said i needed an ipv6 router then we would need to purchase routers capable of v6.

      ipv6 means hassle - and the big isp's know that and stick with what they know.

    2. Re:How many sites can you reach? by postbigbang · · Score: 1

      If there's an ISP out there that can't route IPV6, then move away from them, quickly. It's not that tough.

      That said, the reason IPV6 adoption isn't huge is just the fact that with the 10^37 addresses, every molecule on earth hasn't been assigned an address.....yet.

      Seriously===> IPV6 is employed to subvert NATing, which in turn, lets people traceroute you very handily. Paranoid types please chime in here. IPV6, IMHO, is one of the looniest changes ever made to the Internet. It will be the source of unceasing problems for decades to come.

      --
      ---- Teach Peace. It's Cheaper Than War.
    3. Re:How many sites can you reach? by coryking · · Score: 1

      I agree and I dont buy the "firewall" arguments either. Firewalls still have the same problems on a home network as NAT'ing does (after all, your IM program has to tell your firewall to punch a hole for it via UPnP). Firewalls have the additional problem that if firewall is somehow comprimised and turned into an open router, your entire network is exposed. I dunno about anybody else, but my home network is wide the hell open with C:\'s shared and everything. You can call me stupid, but on a private block of IP's, you'd either have to compromise the 802.11g bridge or somehow route from public to private address space (or break into busybox on the DSL modem). I feel pretty damn cozy and safe behind my actiontec DSL router and the hell am I going to trust a Public/Firewall/Public setup.

      IPv6 is seriously a solution in search of a problem. It isn't being adopted because nobody wants it!

    4. Re:How many sites can you reach? by QuoteMstr · · Score: 1

      So you're saying that a IPv4 home NAT router will fail safe, and an IPv6 home firewall will fail open? I don't see any reason IPv6 equipment can't be made to fail safe.

      Besides, there are plenty of ways your home network can be compromised. If a machine is turned into a zombie, an attacker can use that machine to browse your local network. A private IP space alone is a shower curtain, not a bank safe.

    5. Re:How many sites can you reach? by postbigbang · · Score: 1

      That's two of us.

      How many IPV4 addresses left now?

      No one is going to listen to us.

      Half a league half a league half a league on....
      Into the jaws of hell rode the 10^37 to paraphrase Lord Tennyson.

      What were these guys smoking? I want some of that delusional stuff. Sure beats the reality of MAKING THE UNIVERSITIES NAT THEIR FAT A's and B's !!!!

      After all, doesn't an IPV6 aid the RIAA in tracking down those bandit MP3 thieves???? No NAT means you can nail a user straight away, right???? Ye gawds.

      --
      ---- Teach Peace. It's Cheaper Than War.
    6. Re:How many sites can you reach? by coryking · · Score: 1

      All of that is true, but you are gonna have to do a hell of a marketing job to convince most people. NAT just feels right on an emotional "human" level. Firewalls dont.

      Worse then that, you have to convince me to switch from something that works well enough. Honestly? As far as I can see, IPv6 offers nothing over IPv4 but more address space. That might sell to the network admins, but it will not sell to the rest of the internet world (i.e. the guys paying the network admins).

      What *will* sell, I predict, is a new protocol that fixes the address space and solves problems felt by internet users. Imagine if somebody cooked up a way to handle authentication that made it easy to hunt down spammers? Imagine if you could post to slashdot truly anonymously? Imagine if the internet protocols had a way to ensure you don't create a bunch of sock puppet accounts because it knows who you are? Imagine if you could be 100% certain you are visiting bankofamerica.com? *Those* are the *real* pain we all feel. I am 90% sure the next protocol we do a mass migration to will solve at least some of those problems because people will gladly pay for them. IPv6 does *nothing* to solve them, all it does is solve some esoteric problem with addressing.

    7. Re:How many sites can you reach? by QuoteMstr · · Score: 1

      Tennyson's cavalry men knew they would be facing certain death:

      Was there a man dismay'd?
      Not tho' the soldier knew
      Someone had blunder'd:
      Their's not to make reply,
      Their's not to reason why,
      Their's but to do and die:

      Sysadmins, on the other hand, are paid to "reason why", and to think. Tennyson's poem is about a heroic devotion to duty. Opposing IPv6 is a postmodern exercise in shortsighted idiocy.

    8. Re:How many sites can you reach? by coryking · · Score: 1

      Yup. Correct me if I'm wrong, but the bottom half of the IP address will be your mac address. Unless you are smart and know better, all "the man" has to do is pull your ethernet card out and get your mac address and *BAM* you are screwed. NAT gives you a couple outs "gee... you mean I have to secure my wireless router? or "gee... I had a lan party that day and had 30 people using my network... talk to them!"

    9. Re:How many sites can you reach? by QuoteMstr · · Score: 1

      All of that is true, but you are gonna have to do a hell of a marketing job to convince most people. NAT just feels right on an emotional "human" level. Firewalls dont.

      That's too bad.

      As much as it pains me to say it, I think we'll see an IPv7 or somesuch that provides strict backwards-compatibility with IPv4 while expending the address space.

      solves problems felt by internet users

      PKI is what you're looking for. A change in internet protocol won't help one damn bit with the problems you mention. A combination of opportunistic encryption and DNSSEC, on the other hand, will go a long way toward making the world a better place.

    10. Re:How many sites can you reach? by postbigbang · · Score: 1

      We would disagree.

      It's our duty to prevent the madness of addressing every molecule in the known universe with their own fracking address, not to mention the pair up with a MAC address. Or a user identity or other hashing datum.

      Fie on your perception, as it's misplaced devotion to idiocy incarnate. There is no good reason to address the universe down to the quark. There is no good reason to reveal the atomic source point of communications-- unless you're one of those odd advocates of no anonymity in the slightest.

      Instead, break the monopolies of unused CIDR block. Do the math.

      --
      ---- Teach Peace. It's Cheaper Than War.
    11. Re:How many sites can you reach? by postbigbang · · Score: 1

      Oh, right.

      And these days, how many MAC addresses can't be easily re-written, forged, or otherwise mangled for fun and profit?

      Passwords are nice. NATing is nice. But the rules say that with a big enough hammer, you can break anything. Ask the NSA.

      --
      ---- Teach Peace. It's Cheaper Than War.
    12. Re:How many sites can you reach? by coryking · · Score: 1

      That's too bad.

      I'll get over it, dont worry. But I still dont trust firewalls.

      As much as it pains me to say it, I think we'll see an IPv7 or somesuch that provides strict backwards-compatibility with IPv4 while expending the address space.

      Doesn't pain me. I fully expect it.

      A change in internet protocol won't help one damn bit with the problems you mention.

      Nope. What I expect is will layer another heap of goo on top of TCP/IP and talk over that instead. Future versions of web traffic or bit torrent fragements will be "routed" in some abstract way that makes then care less if they hop across a boundary like IPv4 or IPv6 (or SMS or anything). In other words, in the future our protocol stack will transcend TCP/IP and everybody would have their own little private IPv4 universe or LANWorks (HVAC's network protocol) or anything. The bit torrent traffic will just route on the top of it all.

      And before you call me nuts, I'm not alone in thinking this way. Old school internet guys like Van Jacobson agree with me.

    13. Re:How many sites can you reach? by QuoteMstr · · Score: 1

      It's our duty to prevent the madness of addressing every molecule in the known universe with their own fracking address, not to mention the pair up with a MAC address. Or a user identity or other hashing datum.

      Get off the diction smack, will you? Language like this makes you sound simultaneously pompous and idiotic.

      And yes, in fact, direct addressing would do a world of good. It's not as if your IPv4 address provides you with anything but the faintest illusion of privacy: ISPs keep logs, you know. Tor and other real anonymous routing services will be available in the IPv6 world too.

    14. Re:How many sites can you reach? by coryking · · Score: 1

      Yes, all those can be forged by people in the know. Sally Sue using her bit torrent client on a "stock" IPv6 installation has just given her MAC address to the RIAA. Pretty much all that is required after that is for a slick laywer to make the case she was using the computer with the MAC address in question to download N'Sync and New Kids on the Block.

      I'm surprised so many here on slashdot, "Fuck the RIAA" central don't see IPv6's use of your mac address as a huge problem. IP addresses have never given away something like a mac address (and we all would rightly laught at those "Your IP address is exposed" banner ads).

      Now a "stock" IPv6t network will give the feds pretty much all the proof they need to tie our internet usage to our specific computer unless we know exactly what we are doing.

  15. Wait... by XanC · · Score: 2, Funny

    Let me get this straight... It's not a truck?

    1. Re:Wait... by negRo_slim · · Score: 3, Funny

      Let me get this straight... It's not a truck?

      No it's like a truck, except you can't dump stuff on it like it's a big truck.

      --
      On the Oregon Cost born and raised, On the beach is where I spent most of my days
    2. Re:Wait... by Sentry21 · · Score: 1

      But... do you tie it to the roof then, like with a small truck? I'm confused. I was going to buy a sofa from Ikea's website, and I need to know how to get it home. If I can't dump it in the back of the intertruck, what are my other options?

    3. Re:Wait... by i81b4u · · Score: 0

      Good. What is a truck?

      Lectroid,
      Planet 10

    4. Re:Wait... by negRo_slim · · Score: 1

      If I can't dump it in the back of the intertruck, what are my other options?

      Try sending it in an Internets to your staff.

      --
      On the Oregon Cost born and raised, On the beach is where I spent most of my days
    5. Re:Wait... by vaz01 · · Score: 1

      Get back in the truck, goat!

  16. Makes me happy by ugen · · Score: 5, Interesting

    It may be just me, but I always felt IPv6 is a solution looking for the problem.

    There is a reason IPv4 is so well entrenched. Other than availability of software, hardware and services, it is convenience of handling IPv4 in all those things. This is what permits developers to create all those wonderful products, administrators to effectively administer them and users to enjoy them. A primary reason to that is IPv4 address size - it is 32 bit which is natively handled by all current hardware, and easily remembered by humans (short term) in its quad decimal form.

    IPv6 has neither of these features. It is difficult to deal with in software (I know, I do this for a living), does not fit into any native data type (and won't until we move to 128 bit architectures - which does not seem to be very soon), cannot be remembered or used by a human (so effective administration requires magic automatic tools), does not give itself with any convenience to routing related data structures (like radix trees). All this for dubious benefit of addressing directly (in non-hierarchical manner) of every toaster in the world. This is directly opposite to the way the Real World operates (i.e. your home has an address, but noone gets to talk to your toaster directly without going through you first.

    If I were solving this, I'd suggest separate and non-directly routable IPv4 address spaces for separate countries (and, perhaps, for other entities). And lots and lots of NAT or proxying. Of course that is kind of what is happening anyway.

    China would be happier that way too. In case of cross-border cyberattack, just cut external links and your country is self-sufficient and interconnected :)

    Anyway, I am ready to bet some cash that IPv6 will never become a major transport protocol.
    I know I will do whatever I can to keep it far far away.

    1. Re:Makes me happy by OverlordQ · · Score: 4, Informative

      It may be just me, but I always felt IPv6 is a solution looking for the problem. [..] And lots and lots of NAT or proxying.

      And NAT is a problem masquerading as a solution.

      Anyway, I am ready to bet some cash that IPv6 will never become a major transport protocol.
      I know I will do whatever I can to keep it far far away.

      And I'll keep on enjoying all the free services people provide for IPv6 enabled hosts.

      --
      Your hair look like poop, Bob! - Wanker.
    2. Re:Makes me happy by convolvatron · · Score: 2, Funny

      dont be so hard on him, you know how different it is to do prefix based forwarding with a radix structure on a 8-64 bit prefix instead of a 8-30 bit prefix?

    3. Re:Makes me happy by Anonymous Coward · · Score: 0

      until we move to 128 bit architectures

      In other words: Never? IPv6 addresses don't need to be looked at as 128 bit numbers. The address has a network part and a local part. Anyway, the 32 bit addresses of IPv4 are often treated byte-wise because of the different endianess of different architectures. Programmers know how to handle numbers which exceed the architecture's limitations.

    4. Re:Makes me happy by Timmmm · · Score: 2, Informative

      "[IPv6 addresses do] not fit into any native data type (and won't until we move to 128 bit architectures - which does not seem to be very soon)"

      Wow are you serious? Never heard of structs? And we all know NAT is a very annoying 'solution'. I think the real problem with IPv6 is that is isn't sufficiently backwards compatible with IPv4 (hence all that 6-over-4 and 4-over-6 nonsense.

      That and it isn't really needed yet.

    5. Re:Makes me happy by Anonymous Coward · · Score: 0

      And I'll keep on enjoying all the free services people provide for IPv6 enabled hosts.

      Ummm, what are those exactly?

    6. Re:Makes me happy by Permutation+Citizen · · Score: 4, Insightful

      You (and many people) are so accustomed to NAT you don't even see how wrong it is.

      There is nothing really difficult to use IPv6 address instead of IPv4. Writing (or even using) a network application having to deal with NAT is a real pain.

    7. Re:Makes me happy by stevied · · Score: 4, Insightful

      If I were solving this, I'd suggest separate and non-directly routable IPv4 address spaces for separate countries (and, perhaps, for other entities). And lots and lots of NAT or proxying. Of course that is kind of what is happening anyway.

      Eww. Lots of room for bugs and weird feature interaction in the design of protocols that have to punch through NATs, either that or everyone has to role out new helper modules / ALGs each time some wizzy new app is invented.

      IPv6 is really a clean-up job. Combing the complexity back out of the network has got to be a win for reliability, ease of administration, and perhaps even security. I'm in favour, though I have to say I'm doubtful about it happening any time soon.

      I think the most optimistic scenario is this: when IPv4 exhaustion hits, particularly in countries that have to yet to have their internet 'boom' and so will have a very low number of existing addresses per capita, obviously some sort ISP side NATing is going to be required. People may decide that they might as well implement IPv6 and TRT anyway, particularly if they're deploying new hardware / software combinations (netbooks? set-top boxes?) and so can dictate IPv6-readiness. Hopefully once sufficient numbers of IPv6-only nodes are out there, it'll seem worthwhile rolling out IPv6 on servers.

      The alternative, ultimately, is people auctioning off tiny IPv4 address blocks and exponentially bloating routing table sizes, or a horrible twisty unreliable world of multiple NAT or ALGs, where net neutrality is a quaint concept consigned to history ..

      And yes, printable IPv6 addresses are ridiculous. Admins will have to get used to trusting DNS (or /etc/hosts) when configuring stuff .. :)

    8. Re:Makes me happy by ugen · · Score: 5, Insightful

      I usually do not reply to my own posts (or replies to my posts) on /., but this is one area where I think it may actually be important.

      First of all, if I were to guess, I'd say that all those who replied while questioning my background don't actually do network development for a living. While I could start beating my own chest about how most of your traffic right now probably goes through something designed by me, that would be beside the point (and noone knows you are a dog on the Internet :) ).

      That said, a few points specifically.

      1) "Never heard of structs?". Structures are orthogonal to the size of IP addresses. You can represent IPv4 address as a structure (as original in_addr used to do, exactly because not all hardware supported 32 bit natively). You could do the same with IPv6 (or you can simply stuff it into 16 sequential bytes). What won't change is ability to perform operations directly on the data type.
      You can natively compare two v4 addresses by using a == b (which will translate into a single assembly instruction). You cannot do that on a 129 bit data item. Your choices are - memcmp, or defined operation (compare first 4 bytes, then next 4 bytes, then next, then next :) ). This is inefficient, prone to error and makes code less maintainable.

      2) Radix trees. Sure, anything can be stored in a radix tree with appropriately long prefix or appropriately large number of nodes in a prefix. What can't be done, however, is keeping this tree in memory (given current device and system memory sizes, which are in low gigabytes to a few dozen gigabytes). This problem is exacerbated by the fact that IPv4 address space is very compact of necessity (not too many holes, and everything is neatly CIDRed together), whereas IPv6 is of necessity full of holes (and designed to stay that way).

      3) Performance is a relatively minor consideration in this.

      As far as NAT goes - I firmly believe that solutions (in technology and elsewhere) are of two kinds - "organic", i.e. borne of and supported by needs and circumstances, and "artificial". Organic solutions are not always streamlined or pretty. Humans are a good example. A rock of salt is pretty darn inorganic (though I wouldn't want to stretch this analogy too far :) ) NAT is the former, IPv6 is the latter.

    9. Re:Makes me happy by Anonymous Coward · · Score: 0

      This post is a troll. The parent post is insightful.

    10. Re:Makes me happy by Surt · · Score: 1

      There are going to be more than 4billion homes in the next 50 years. Whose home doesn't get a home address?

      --
      "Who is the Journal of Quantum Physics going to believe?" --Stephen Hawking
    11. Re:Makes me happy by Surt · · Score: 4, Informative

      One of the key features of ipv6 is simplified routing (it was pretty much the #1 design improvement), so the amount of processing routers have to do goes way down, in spite of the higher bit count.

      Please read the first page of this:
      http://en.wikipedia.org/wiki/IPv6

      and of course more if you are seriously interested.

      --
      "Who is the Journal of Quantum Physics going to believe?" --Stephen Hawking
    12. Re:Makes me happy by blueg3 · · Score: 1

      If they really needed to do their job quickly, they'd do it on dedicated hardware that could handle 128-bit numbers natively.

    13. Re:Makes me happy by gclef · · Score: 1

      Admins will have to get used to trusting DNS

      Except that we just got finished convincing the admins that DNS wasn't trustable, due to Dan Kaminsky.

    14. Re:Makes me happy by Anonymous Coward · · Score: 0

      Anyway, I am ready to bet some cash that IPv6 will never become a major transport protocol.

      Somebody needs to pay the parent - they're right, ipv6 sure won't become a transport protocol any time soon... let alone a major one ;)

      http://en.wikipedia.org/wiki/Transport_layer

    15. Re:Makes me happy by QuoteMstr · · Score: 1, Insightful

      You can natively compare two v4 addresses by using a == b (which will translate into a single assembly instruction). You cannot do that on a 129 bit data item. Your choices are - memcmp, or defined operation (compare first 4 bytes, then next 4 bytes, then next, then next :) ). This is inefficient, prone to error and makes code less maintainable.

      Come on. If you do development for a living, you've heard of abstraction. If you're open-coding memcmp, you're doing something wrong. Just hide the comparison behind a nice typesafe inline function and you're actually in better shape than if you'd stuffed an ipv4 address into a long int.

    16. Re:Makes me happy by coryking · · Score: 1

      Question. How does a firewall make anything easier for my home network? Digsby, uTorrent and SageTV will all still need to talk to the firewall (probably UPnP) and tell it to punch a hole in it for them. Or are you suggesting that we should expect everybody to log into their firewalls to make exceptions everytime one of our useful software packages need to talk to the world?

      In other words, from an end user perspective, how is a firewall any different than a NAT?

    17. Re:Makes me happy by Just+Some+Guy · · Score: 4, Insightful

      While I could start beating my own chest about how most of your traffic right now probably goes through something designed by me, that would be beside the point (and noone knows you are a dog on the Internet :) ).

      I don't know if you're a dog, but I do know that you haven't designed recent hardware, or you'd know that:

      1. There are opcodes for doing 128-bit operations on modern CPUs, just like there were 80-bit FLOPs on 32-bit CPUs.
      2. One of the core design goals of IPv6 was to simplify routing, and they've succeeded. Route entries may use more bytes but there will be a whole lot less of them by design.
      3. You can represent IPv4 addresses with structs, but not an IPv4 header since they have variable lengths. IPv6 has fixed-length headers, significantly lessening processing and making hardware routing much easier to implement.

      If you like simplicity and elegance and performance, you'd love IPv6.

      --
      Dewey, what part of this looks like authorities should be involved?
    18. Re:Makes me happy by ion.simon.c · · Score: 1

      Weeeeeeeel, let's see... There used to be (and probably still are) *some* apps that haven't worked in with NAT... SIP is a glaring example. AIM file transfer didn't used to work behind a NAT.

      So... with a firewall, you just have to punch a hole to make it work. With a NAT (in some cases), you *can't* make it work.

    19. Re:Makes me happy by Freebirth+Toad · · Score: 1

      And NAT is a problem masquerading as a solution.

      That was a terrible pun.

    20. Re:Makes me happy by jguthrie · · Score: 2, Interesting
      It's just you. The IPv4 address space was way too small, probably because the guys who invented IP never envisioned the sheer volume of computers that want to connect to the Internet, and was allocated extremely inefficiently at first, probably because there was no obvious reason to be frugal with addresses, which led to the inequities of allocation that people complain about. The rising cost of addresses has caused people to become much more efficient in their allocations, but the inequities remain. Further, when IPv6 was just getting started, a large router might have 16 megabytes of RAM in it, so routing table size was a major concern, although the massive decrease in the cost of memory means that this also is less of an incentive than it once was.

      I think that the real problem with IPv6 lies not in any part of the IPv6 design, but in the transition plan. I mean, the 6bone folks were the transition plan and, as soon as the backbones thought they knew what they were doing, they pulled the plug on the 6bone. The problem, of course, is that demand for addresses happens not at the backbones, but at the leaves. Since, at the time they pulled the plug on the 6bone, there was not one single piece of end user access equipment available, there was no demand for the native IPv6 transport that the 6bone folks assured me was available. Also at the time there was no way to do IPv6 multihoming without being a TLA. (That's "Top Level Aggregator", which is IETF-speak for "one who purchases his addresses straight from the source.") I don't know if that's been changed or not, as multihoming started being a lot less interesting to me right about then. I do know there were draft specifications addressing that very topic.

      So, the transition is going very slowly. However, to assume that it isn't happening at all is to make the same mistake that short-sighted companies make. However badly those clueless individuals at the IETF managed to screw up the transition, the lack of IPv4 address space is a real problem now and that will only get worse in the future, and although NAT is easy to implement and quick to deploy, using NAT really is much less convenient than having live, routable addresses for all your systems.

      The point is that things have a way of changing and those changes are happening right now. All my access gear and workstations are now IPv6 capable and, in fact, make use of IPv6, although that's through near heroic effort on my part. In fact, I have been told by my hosting provider that they're going to start providing native IPv6 transport to my virtual servers. An email to Comcast (my home's feed is through Comcast business service) asking about IPv6 got me, not one, but two telephone calls from someone who was nice enough to explain Comcast's IPv6 deployment strategy, which boils down to: We're deploying native IPv6 transport to end users as soon as DOCSIS 3 is widely available. I can't wait.

      So, while I can count the number of actual live, remote IPv6 users that have hit my Web servers on my appendages without taking off my shoes, and I have never (not once) had a Gnutella connection over IPv6 despite supporting it for years, I have no doubt that the transition is well under way.

      Nor is the size of the address space particularly insane. The idea is to use extreme inefficiency of address allocation to make certain hard tasks easier. The point is not to allow every grain of sand to have it's own IP address, but is, instead, to reduce the likelihood that an automatic host address assignment would result in an address collision to the point where it's not worth worrying about, and that point is actually achieved. The other objection that is commonly raised, that you can't memorize IPv6 addresses the way you memorize IPv4 addresses, gets a big "so what?" from me. Nobody memorizes IPv4 addresses, either. That's what name servers are for.

      One opinion, worth what you paid for it.

    21. Re:Makes me happy by coryking · · Score: 1

      Unless there is a huge entrenched reason that forces NAT vendors to specifically target them, nobody will use a protocol that doesn't work with a NAT.

      Beyond clueless NAT unaware protocols, punching holes in your firewall still breaks the whole "End to End" thing people like to talk about, doesn't it? Epescially given

    22. Re:Makes me happy by jd · · Score: 4, Insightful

      1. Not too many processors allow you to handle 1-bit or 4-bit structures, of which the IPv4 header contains many. The difference is the direction, not the direct handling.

      2. Since IPv6 should have fewer exceptions to general cases, the number of nodes in the radix tree should be significantly lower, so giving you a net save.

      3. Performance is so unimportant that IPv4 latency is one of the biggest things people loath and despise about IPv4. ATM is hardly a decent protocol, the payloads are absurdly small, but the latency is almost non-existent. As grids and clouds increase in usage, network latency is going to be the only latency that people will care about.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    23. Re:Makes me happy by Sentry21 · · Score: 1

      You can natively compare two v4 addresses by using a == b (which will translate into a single assembly instruction). You cannot do that on a 129 bit data item. Your choices are - memcmp, or defined operation (compare first 4 bytes, then next 4 bytes, then next, then next :) ). This is inefficient, prone to error and makes code less maintainable.

      Well this might be overkill, but most SIMD units I've seen or dealt with can handle up to 128 bits of data at once - meaning that a simple vectorized function can compare an IPv6 address in a single instruction, so...

      In regards to NAT, you seem to suggest that NAT is a natural, organic evolution from IPv4. I would argue that NAT is actually more like a disease - perfectly natural, and entirely undesired. NAT seems to me like chemotherapy is to cancer, actually. We have a problem, and we have a solution - and the solution is, in some cases, worse than the disease. So instead of just having cancer, we now have cancer and radiation sickness. Where the analogy fails is that things aren't going to get better - they'll just keep getting worse. All the radiation therapy is doing is making the pain last longer. IPv6 is the surgery that can excise the tumor entirely, and prevent the pain that we're going through from being necessary at all.

      Some things are organic, and some things are artificial. Sometimes, you have to understand that the natural will need to be replaced by the artificial, because the natural is failing, and it's going to take the host with it.

    24. Re:Makes me happy by ion.simon.c · · Score: 2, Funny

      What's wrong... NAT got your tongue? ;D

    25. Re:Makes me happy by CodeBuster · · Score: 3, Insightful

      And NAT is a problem masquerading as a solution.

      That depends upon your point of view. As the parent said (or at least alluded to), very few people have more than a handful of servers which need to be addressable from outside a private network and fewer still have more than 255 (class C). Indeed, large portions of the existing address space are being wasted or not used efficiently already so why should I spend a dime to upgrade my equipment simply because other people are wasting addresses or are deluded by the relative importance of their toaster compared to the rest of the hosts on the public Internet? There is also the convenience (from a security and filtering point of view) with heirarchical centralized control of traffic and routing into one's private network. I don't know about you, but I don't wan't just anyone to communicate directly with the hosts on my private network so for me (and a great many other people as the adoption rate of IPv6 shows) the NAT IPv4 Firewall Router fits the bill nicely.

      And I'll keep on enjoying all the free services people provide for IPv6 enabled hosts.

      You do that, but don't whine because you cannot connect directly to a toaster on my private network because I choose not to upgrade my equipment. When the upgrade will earn me more money then and only then will I consider it. Until then it is machts nichts.

    26. Re:Makes me happy by CodeBuster · · Score: 2, Insightful

      Even if everyone switched to IPv6 overnight there would still be IPv6 NAT or something basically equivalent to outside observers simply because directly addressable public hosts are dangerous and should be limited to controlled gateways so that the attack surface exposed by a private network is limited to those hosts which really need to be on the front line. Besides, it really wouldn't be a private network if every host was publicly addressable to arbitrary incoming traffic now would it?

    27. Re:Makes me happy by ion.simon.c · · Score: 1

      But, seriously... Why are you running services that require a firewall? Don't they do their own connection management?

    28. Re:Makes me happy by jandrese · · Score: 1

      Solution looking for a problem? The problem seems obvious: most estimates of when we run out of IPv4 addresses place it sometime around 2012, which isn't that far away. Even with NAT in place we're still running out of address space.

      --

      I read the internet for the articles.
    29. Re:Makes me happy by coryking · · Score: 1

      I've said it once, I'll paste it again, watch this lecture by Van Jacobson (guy who invented traceroute, Van Jacobson header compression, etc. Come back to me and say I'm not incorrect in saying IPv6 doesn't solve the new problem set we have.

      It is a long lecture (especially if you cannot stream it onto your Sage/MythTV like some of us ;-P, but it is very eye opening.

    30. Re:Makes me happy by ion.simon.c · · Score: 1

      Ah, right. I've seen this once before. It *is* a good lecture.
      I'mma gonna head off to bed shortly, but I'll re-watch it tomorrow and have a reply to your question. : D
      Lemmy see if I can recall the big point that he made... Wasn't he saying things like "If you just wanna pop on the network to print, you don't need a globally routeable address... you just wanna find the damn printer and print."?
      When we combine link-level addressing with stuff like ZeroConf, doesn't that allow us to just find the damn printer and print? : D

      Anyway. More tomorrow. Thanks for the link!

    31. Re:Makes me happy by Permutation+Citizen · · Score: 1

      Unless there is a huge entrenched reason that forces NAT vendors to specifically target them, nobody will use a protocol that doesn't work with a NAT.

      This is exactly why NAT is wrong. This is a severe limitation to internet innovation. Anyone working on a non trivial protocol must spend a large share of his effort to handle NAT. In some cases it is even not possible so a nice idea is simply dropped.

      IPv6 large adoption will allows more innovation in network applications. Then we will see how we were limited by IPv4.

    32. Re:Makes me happy by huge · · Score: 1

      And NAT is a problem masquerading as a solution.

      People seem to think that NAT was the reason why we haven't ran out of addresses yet.

      I'd dare to say that CIDR played even bigger role than NAT when it comes to shaping the internet to the form we see it today. CIDR was elegant solution to a problem that shouldn't have existed in the first place.

      --
      -- Reality checks don't bounce.
    33. Re:Makes me happy by stevied · · Score: 1

      I guess we need to make it trustable, then. I know he presented lots of very clever attacks in his presentation, but an internal query to an authoritative internal DNS server should be pretty safe.

      To be honest, even in the IPv4 world, it's not exactly best practice to hardcode IP addresses in the config of network devices, except where unavoidable. Sure, the risk of attacks on internal DNS is real, but the risk of unreliable network service because of byzantine configuration architectures is also real.

      I do wonder if we've just crossed a tipping point in technology generally where large numbers of people are beginning to see the advantages of removing unnecessary complexity (or avoiding new complexity.) The popularity of small netbooks running Linux might be evidence of this, as is the general revolt against Vista. If so, all that remains is to convince people that, despite some warts, complexity(IPv6) < complexity(IPv4+lots of bodges).

    34. Re:Makes me happy by Alioth · · Score: 1

      IPv6 has neither of these features. It is difficult to deal with in software (I know, I do this for a living), does not fit into any native data type (and won't until we move to 128 bit architectures

      It's not that difficult. In fact, it's not difficult at all.

      Just for fun, a retrocomputing project I'm working on is an ethernet card for an 8 bit 1980s home computer (the Sinclair Spectrum). Dealing with 32 bit addresses on an 8 bit system is trivially easy, even in Z80 assembly language. It would be no harder to deal with 128 bit addresses on a 32 bit machine.

    35. Re:Makes me happy by Anonymous Coward · · Score: 0

      It may be just me, but I always felt IPv6 is a solution looking for the problem.

      Let me guess: you're from the USA?

    36. Re:Makes me happy by Ash-Fox · · Score: 1

      And I'll keep on enjoying all the free services people provide for IPv6 enabled hosts.

      Such as?

      --
      Change is certain; progress is not obligatory.
    37. Re:Makes me happy by Anonymous Coward · · Score: 0

      And yes, printable IPv6 addresses are ridiculous. Admins will have to get used to trusting DNS (or /etc/hosts) when configuring stuff .. :)

      Yes, because DNS is absolutely trustworthy, and it won't be necessary for humans to worry their pretty little heads about addressing. I'm sure you think that the Windows Registry was a brilliant piece of engineering from an ease of troubleshooting perspective too.

    38. Re:Makes me happy by coryking · · Score: 1

      Kidna... I watched again :-) His thesis is that we are at the same kind of transition phase that we were when we moved from circuit switching "connecting wires" to packet switching "making endpoints".

      Basically, he is saying "guys, we need to think outside the TCP/IP box. TCP/IP was and is a great wildly successful protocol, but it changed how we do things enough that it created a new set of problems we now have to solve"

    39. Re:Makes me happy by coryking · · Score: 1

      Those IPv6 innovators will still have my firewall to deal with, and that is about the same set of problems. You still gotta get my firewall to open a port up for your non-trivial protocol and to it in way that doesn't require me to log into my firewalls webpage.

    40. Re:Makes me happy by stevied · · Score: 1

      You're right, DNS isn't trustworthy, so not only should we not use hostnames when configuring systems, we should train our users not to use them either.

      Honestly, we have to fix DNS. Even if your hardcoded literal IPv4 addresses are secure (and are they? If I can own your internal authoritative DNS server, there's a good chance I can spoof ARP, or bugger around with DHCP, or exploit that SNMP vulnerability that was kicking around recently..), there are quite a number of ways (start at slide 45) to steal all your users' data if DNS is vulnerable ..

      Learning new stuff is a PITA, especially if the old stuff still appears to be working well, but sometimes preemptive action saves pain in the long run. Ultimately IPv6 should result in a reduction in complexity, and that's almost always a good thing ..

    41. Re:Makes me happy by poot_rootbeer · · Score: 1

      You (and many people) are so accustomed to NAT you don't even see how wrong it is.

      Enlighten us, then. What's wrong with NAT?

      Writing (or even using) a network application having to deal with NAT is a real pain.

      I've never had a single issue with it -- the little black box that the cable company provided me handles all the magic transparently, as far as I'm concerned.

    42. Re:Makes me happy by stevied · · Score: 1

      Don't forget the bottom 64 bits of an IPv6 address are the host address, so a router won't have to worry about those much until it comes to the last hop.

      Also, easy renumbering (if it happens) should also allow more 'hierarchicalness' in addressing, -> shorter routing tables -> cheaper / faster routing. To be fair, ease of renumbering is at least theoretically orthogonal to address size, but autoconfig is being 'bundled' with IPv6 in a way it never has been with IPv4.

    43. Re:Makes me happy by stevied · · Score: 1

      I'm sure he's thinking of http://www.ipv6experiment.com/ ;-)

    44. Re:Makes me happy by TeknoHog · · Score: 1

      IPv6 has fixed-length headers, significantly lessening processing and making hardware routing much easier to implement.

      Sounds like PPC vs. x86 instruction length :)

      --
      Escher was the first MC and Giger invented the HR department.
    45. Re:Makes me happy by stevied · · Score: 2, Interesting

      IPv4 NAT is quite a nice fit for the issue of dealing with lots machines with dubious security wanting to run 'simple' protocols, in a world with limited public addresses available.

      Having said that, at least part of the perceived "niceness" is psychological: it puts a real system boundary right at the point where one feels there's a trust boundary (the edge of the local network.) And it's beginning to look (according to Dan Kaminsky, amongst others, and not just since the recent hysteria) like that feeling of security is misplaced.

      When I was at uni, all the workstations (at least the *NIX ones - I never touched our one Windows lab) had public IP addresses. We never had any security issues as a result, to the best of my knowledge. It's just a question of securing the configurations (using centralized management, diskless workstations, or whatever) and applying patches.

      NAT also makes running non-trivial stuff complicated. P2P. VOIP. 'Push' technologies (if the client has to keep a connection open to the server, that's not really 'push'.) Remote access, generally. Look at the hoops things like Teredo have to go through to deal one or two layers of NAT. Now try to imagine how that scales..

      And anyway, just because (in a theoretical future IPv6 utopia) we're not doing address substitution any more, doesn't mean we can't still have firewalls. ip6tables exists for Linux, and I'm sure the router manufacturers all have their solutions. It's still only one or two rules of config to drop incoming connections, if that's desired.

      Oh, and regarding toasters: i'm not sure that's the issue ;-) It'll be giving things like mobile phones, iPods and cars IP addresses and running P2P apps between them, I'm guessing.

    46. Re:Makes me happy by coryking · · Score: 1

      more 'hierarchicalness' in addressing

      Which is a bad, bad thing on mesh networks. TCP/IP really, really, really doesn't like meshes. It doesn't like you hopping around from various "access points" because it doesnt like you changing your address all the time.

      Wanna talk hack-job? Think how complex it must be to provide a TCP/IP stack to a cell phone or airplane that hops across access points. Sure they can proxy your web traffic to a central server, but your cell phone isn't getting a "native" TCP/IP connection...

      Wouldn't it be nice if the L3 networking stack was smart enough to deal with you hopping around?

      What is the point, you say? WiFi could create really nice neighborhood mesh networks that pretty much dont require physical links to operate. Go ahead, you try to do the IP addressing for one of those. Make sure the routing of the TCP/IP hierarchy can address me hopping from node to node or deal with changes in the mesh (i.e. going off line or out of sight).

      There are new problems to solve! TCP/IP is a great protocol, but it just doesn't fit the problems we are trying to solve these days.

    47. Re:Makes me happy by stevied · · Score: 1

      Transcript? Anyone? Pretty please? :/

    48. Re:Makes me happy by Permutation+Citizen · · Score: 1

      Excuse me for my laziness: see drawback section of NAT wikipedia article there.

      http://en.wikipedia.org/wiki/Network_address_translation

      Of course as a home user you are given only one routable IPv4 address and it is wonderfull to be able to connect all your devices using NAT. You may even believe it brings you security by hidding your computers true address.

      With IPv6, you will have as many routable address as you need. You will also have real security thanks to IPSec (one thing that is broken with NAT).

    49. Re:Makes me happy by stevied · · Score: 1

      But, seriously... Why are you running services that require a firewall? Don't they do their own connection management?

      It's a fair point, actually.

      Originally, there were a handful of services running on any given box, and we just made sure we configured each one properly. It was bit of a pain, particularly as config file formats weren't standardized, but inetd and hosts.{allow,deny} made it bearable.

      But then when the number of different services and platforms being deployed increased, we began to worry about the possibility of incorrect configurations slipping through the net - particularly on certain platforms (*cough*) where it wasn't easy / possible to lock down system services, or automate that with existing tools.

      Hence, the firewall: originally basically just a way of sticking access control rules for network services in one place (either on a single host, or for a whole (sub)net) -- and dropping a few types of badly formed packets along the way.

      The problem is, firewalls have become an object of near-religion devotion, accompanied by a loss of understanding of what they really do and why we need them. Dan Kaminsky's been banging on (since before the recent DNS stuff) about how you can't trust the 'local' network any more. And I think he's right. We need to secure the hosts, and secure the protocols, and drop the pretence that firewalls are much of a defence against modern attacks.

      (Note: IP spoofing is, IMO, a slightly different issue. Configuring your routers to drop packets that can't be coming from where they say they are is rather orthogonal.)

    50. Re:Makes me happy by coryking · · Score: 1

      found this buried in the video comments:

      a kinda-storta transcript

    51. Re:Makes me happy by stevied · · Score: 1

      IPv6 enables the 'hierarchicalness', but presumably doesn't necessarily enforce it. Hell, if necessary you can ignore the top 64 bits and just use the host id, and deal with 'routing' at L2. That's no worse than IPv4, and you've got another 8 bits of address.

      And there's Mobile IPv6, which still feels a little hacky, but seems better intergrated than IPv4.

      Off to watch the Van Jacobson video mentioned elsewhere in this thread ..

    52. Re:Makes me happy by stevied · · Score: 1

      Nice one, thanks. I'm not good at processing information that I can't hop around in and scan these days (I think it's age setting in.)

    53. Re:Makes me happy by coryking · · Score: 1

      That was me who mentioned it. Well worth it watching it (it was made in 2006).

      I'm not nuts, I just feel that TCP/IP was a great protocol, but we've got new problems to solve that really dont mesh with TCP/IP anymore. Things like NAT, VPN's or MobileIPs are signs that the protocol doesn't fit the task.

      But again... watch the video :-)

    54. Re:Makes me happy by Anonymous Coward · · Score: 0

      Wikipedia has pages?

    55. Re:Makes me happy by Surt · · Score: 1

      No, but unless you have an infinite resolution monitor, your web browser does. :-)

      --
      "Who is the Journal of Quantum Physics going to believe?" --Stephen Hawking
    56. Re:Makes me happy by sploxx · · Score: 1

      You can natively compare two v4 addresses by using a == b (which will translate into a single assembly instruction). You cannot do that on a 129 bit data item. Your choices are - memcmp, or defined operation (compare first 4 bytes, then next 4 bytes, then next, then next :) ). This is inefficient, prone to error and makes code less maintainable.

      Well, without showing any 'authority card' here, I'd like to ask/comment on how much your argument is valid:

      "this is inefficient": On endpoints, this hardly matters anymore, don't you think? On routers, what's the problem with synthesizing a 128bit comparison instead of a 32bit one into the chip?

      I also do not think that anyone cares about the number of assembly instructions anymore. Apart maybe from embedded devices, but I doubt there exist too many which have a high load because of all these 4x longword comparisons needed for IPv6. If they are that network centric, they will have specialized VLSIs (e.g. routers as I mentioned above).

      "prone to error and makes code less maintainable": Well, only in C system level code (i.e. probably just IP layer of the network stack in the OS), C++ should be able to map this quite conveniently and most application developers are probably using a higher level language anyway.

  17. Problem is... by Anonymous Coward · · Score: 0

    ...that when anyone buys a router, in 90% cases IPv6 routing is not available. Or at least disabled by default. I mean big ISP-grade routers, home routers, linux IPTables routing howtos, everything. Fix this first.

    1. Re:Problem is... by glitch23 · · Score: 1

      ...that when anyone buys a router, in 90% cases IPv6 routing is not available. Or at least disabled by default. I mean big ISP-grade routers, home routers, linux IPTables routing howtos, everything. Fix this first.

      I can't speak for home routers but ISP-grade (Cisco 76xx and routing modules for 65xx series switches) devices support IPv6 and they have for a while. There are some minor issues with the implementation that CIsco is working to fix (nothing is perfect) but generally the IPv6 support has been there for a while, from Cisco at least. As far as Linux iptables, I just put together a hardened RHEL 5.1 image and ip6tables were there. I didn't test them yet but the infrastructure seemed to be there, again, that is just for RHEL. Paradoxically, IPv6 is on by default in Vista and OS X, albeit the link local IP addresses. Search for "fe80::/10" at this link. They are equivalent to MS's IPv4 169.254.xxx.xxx addresses.

      --
      this nation, under God, shall have a new birth of freedom. -- Lincoln, Gettysburg Address
  18. How to really accelerate the migration... by Anonymous Coward · · Score: 5, Funny

    Make all porn only reachable through IPv6.

    1. Re:How to really accelerate the migration... by duckInferno · · Score: 2, Funny

      I don't know whether I could survive for that long.

      --
      Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
    2. Re:How to really accelerate the migration... by Michael+O-P · · Score: 2, Informative
      --
      I'm Peggy.
    3. Re:How to really accelerate the migration... by Spy+der+Mann · · Score: 3, Insightful

      Make all porn only reachable through IPv6.

      Did you check the post above you?

      From the post's link:

      We're taking over 100 gigabytes of the most popular "adult entertainment" videos from one of the largest subscription websites on the internet, and giving away access to anyone who can connect to it via IPv6. No advertising, no subscriptions, no registration. If you access the site via IPv4, you get a primer on IPv6, instructions on how to set up IPv6 through your ISP, a list of ISPs that support IPv6 natively, and a discussion forum to share tips and troubleshooting. If you access the site via IPv6 you get instant access to "the goods".

      Unfortunately, that won't work, because it's not aimed to the industry. The ones who decide whether the public will use IPv6 or not are the ISPs, and better internet access is definitely NOT in their agenda (Hellooo Comcast!).

    4. Re:How to really accelerate the migration... by Anonymous Coward · · Score: 0

      This site is planning to give away 100 gigs of porn for free, provided you can access it via ipv6.

    5. Re:How to really accelerate the migration... by Anonymous Coward · · Score: 0

      Amen!

    6. Re:How to really accelerate the migration... by houghi · · Score: 1

      100 gigs? What am I to do with the rest of my 4TB?

      As an answer: there are several providers that give free Usenet access, including binaries, to IPv6.

      --
      Don't fight for your country, if your country does not fight for you.
  19. Solution looking for a problem by TheRealMindChild · · Score: 2, Interesting

    The fact of the matter is, IPv6 is a solution looking for a problem. With IP shortages and the ease of NAT/PAT, most entities realized they don't need a whole block of IP addresses. Most of the time, one suffices. Else, a block of 8 almost always fits everyones needs. It is like trying to solve Y3K problems 992 years before we need to actually worry about it.

    Also, most of the world is using Windows XP. Can you show me where in my TCP/IP settings panel I am supposed to enter my IPv6 information? Exactly.

    --

    "When life gives you lemons, don't make lemonade. Make life take the lemons back!" -- Cave Johnson
    1. Re:Solution looking for a problem by OverlordQ · · Score: 5, Informative

      Also, most of the world is using Windows XP. Can you show me where in my TCP/IP settings panel I am supposed to enter my IPv6 information? Exactly.

      You don't. As is the benefit of IPv6, if it's installed it should be automagically configured. It shouldn't require manual configuration.

      --
      Your hair look like poop, Bob! - Wanker.
    2. Re:Solution looking for a problem by Spy+der+Mann · · Score: 1

      The fact of the matter is, IPv6 is a solution looking for a problem. With IP shortages and the ease of NAT/PAT

      And that's NOT a problem? I can't log in remotely to my friend's PC to give him tech support because his stupid ISP is behind a NAT.

    3. Re:Solution looking for a problem by gclef · · Score: 1

      Unless you want to use DNS...then your network admins need to set up a DHCP6 server. (yes, I think this is stupid.)

    4. Re:Solution looking for a problem by Epsillon · · Score: 1

      Not that simple. Open a cmd terminal and type:
      ipv6 install

      XP will obediently install the IPv6 stack and go looking for a rtadv server. If you haven't got an IPv6 gateway, you can configure a tunnel or rely on MS's implementation of Teredo. Only Vasti has IPv6 as standard. XP needs a magical incantation on the command line (gasp!) to get dual stack.

      --
      Resistance is futile. Reactance buggers it up.
    5. Re:Solution looking for a problem by Anonymous Coward · · Score: 0

      *cough*https://www.gotomypc.com*cough*

    6. Re:Solution looking for a problem by Anonymous Coward · · Score: 1, Informative

      *cough*http://www.webex.com/*sneeze*
      *bluuaaaargh*Reverse VNC*pfffft*

    7. Re:Solution looking for a problem by mikael_j · · Score: 1

      Sooo, someone suggests a solution to the core problem and you suggest a solution to the ugly workaround? Because that's what it looks like to me, and how well will various "solutions" like gotomypc work when both ends are behind ISP-controlled NAT gateways?

      /Mikael

      --
      Greylisting is to SMTP as NAT is to IPv4
    8. Re:Solution looking for a problem by Anonymous Coward · · Score: 0

      Yes. gotomypc.com works when both are behind a firewall. It is just as much a solution as upheaving the whole infrastructure of the worlds networks. That is, except it works now with current IP implementations.

    9. Re:Solution looking for a problem by mikael_j · · Score: 1

      And you don't see how it would be easier to have the network built in such a way that you wouldn't need to use a third party's "solution" to work around inherit flaws in the network?

      /Mikael

      --
      Greylisting is to SMTP as NAT is to IPv4
    10. Re:Solution looking for a problem by coryking · · Score: 1

      Better, it works regardless of the network underlying network implementation.

      it isn't a hack, far from it, gotomypc is an example of the future.

      That said, Fog Creek's co-pilot is better, though it requires you to install a teeny tiny client-side program first.

    11. Re:Solution looking for a problem by Whitemice · · Score: 1

      The fact of the matter is, IPv6 is a solution looking for a problem. With IP shortages and the ease of NAT/PAT,

      Oh yea, that will be lovely. If anyone thinks routing and packet filtering is in rough shape now! Just wait for hopping across multple NAT lines.

      Sorry, this is just STUPID! IPv6 works, it works today, on all the root DNS servers, on the entire backbone, and for many web-sites. Commercial-grade routers have been shipping with IPv6 support for years! (Cisco IOS 12.2.x). So if your equipment can't support IPv6 it has to be old as dirt or some bizarre off-branch junk. In either case it must be replaced for security related reasons anyway - dumpster time!

      IPv6 is easier to route and easier to configure. All around it is just a better protocol.

      Also, most of the world is using Windows XP. Can you show me where in my TCP/IP settings panel I am supposed to enter my IPv6 information? Exactly.

      Do two minutes of googling; enabling IPv6 is XP is elementary.

      --
      Using "Common Sense" is being either to arrogant or to ignorant to ask people who know more about something than you.
    12. Re:Solution looking for a problem by ion.simon.c · · Score: 1

      Untrue!

      Use radvd.
      Then, dump something like this into your radvd.conf:

      interface eth0
      {
                  prefix 2001:a:b:c::/64 { };

                  #DNS Server
                      RDNSS 2001:a:b:c::5568 {
                                      AdvRDNSSPreference 9;
                      };
                      #Router
                      RDNSS 2001:a:b:c:: {
                                      AdvRDNSSPreference 5;
                      };
                      #Localhost
                      RDNSS 0::1 {
                                      AdvRDNSSPreference 2;
                      };
      };

      And there you go!
      IPv6 full autodiscovery!

      Ask Google about RDNSS for more detailed information!

    13. Re:Solution looking for a problem by Akzo · · Score: 0

      Type "install ipv6" in the run dialogue or command prompt.

      --
      Sig is for Signature, so you don't have to manually sign every post.
    14. Re:Solution looking for a problem by Anonymous Coward · · Score: 1, Interesting

      Better, it works regardless of the network underlying network implementation.

      it isn't a hack, far from it, gotomypc is an example of the future.

      Gotomypc isn't the hack. The hack is NAT, and that poses a problem that Gotomypc has to solve.

      See, Gotomypc is a workaround against the problem caused by NAT which is a workaround against running out of IP addresses.

      Just by deploying IPv6 we could forget about hacks around hacks around hacks.

      Sigh.

    15. Re:Solution looking for a problem by TheThiefMaster · · Score: 1

      Actually you can add it as a protocol through the properties of the network connection.

    16. Re:Solution looking for a problem by Midnight+Thunder · · Score: 1

      If there is no rtadv server then the computers will fall back to a zero-config addressing mode. Basically this is a special address range, starting with fe80:: and suffixed by the MAC address of the given network interface. See this: https://www.sixxs.net/wiki/Subnet

      --
      Jumpstart the tartan drive.
    17. Re:Solution looking for a problem by gclef · · Score: 1

      And how many clients support that? None.

    18. Re:Solution looking for a problem by coryking · · Score: 1

      Just by deploying IPv6 we could forget about hacks around hacks around hacks.

      Your magic remote access protocol will still have to go across my hard-assed firewall policies. How will it be any different than going over a NAT?

      People will still use GotomyPC on IPv6 because it is easier to do over HTTP than it is to punch through a firewall, IPv6 or not.

    19. Re:Solution looking for a problem by Draco_es · · Score: 1

      You need to do a "ipv6 install" first. It's installed but not enabled by default(Vista is).

    20. Re:Solution looking for a problem by ion.simon.c · · Score: 1

      Ah. Boo, you're right. It's an Experimental RFC.

      There's some code here
      http://rdnssd.linkfanel.net/
      that claims to enable RDNSS support for Linux. I'll tinker with it this weekend and see if I can get it to work.

      I suppose that I'll also enable DHCP6, too. ugh.

    21. Re:Solution looking for a problem by ion.simon.c · · Score: 1

      Also, why do *you* think that requiring an admin to setup an DHCP6 server to pass DNS (and other) information to clients is dumb?

      (FTR, I think it's kinda dumb, too.)

    22. Re:Solution looking for a problem by gclef · · Score: 1

      Because the lack of (at least) a DNS server shoots an enormous hole in the entire "you can just let the clients auto-configure" claim about IPv6.

      Until the RDNSS RFC gets implemented by both the router and client vendors (I'd bet on at least 5 yaers for that, probably more), not a single enterprise is going to go entirely auto-config...because they can't. Which makes the whole auto-configuration claim look really silly.

  20. How to up the numbers by Anonymous Coward · · Score: 0

    Just get a few porn providers to use it, then WHAM!

  21. The free market can do some things by Zouden · · Score: 1

    But sometimes a government mandate is required to make big changes.

    --
    "A week in the lab saves an hour in the library"
    1. Re:The free market can do some things by huge · · Score: 1

      Which government would that be?

      --
      -- Reality checks don't bounce.
    2. Re:The free market can do some things by Anonymous Coward · · Score: 0

      Which government would that be?

      It ain't America, I'm still waiting for my metric system!

  22. Maybe it's like all the other "in 20 years" stuff by taustin · · Score: 2, Funny

    We'll be using IPv6 to run our fusion powered, flying cars to go to the moon?

  23. Read the article until the end by Permutation+Citizen · · Score: 1

    ...where it explains IPv6 will succeed anyway.

  24. A proposal by camperdave · · Score: 1

    Since there doesn't seem to be a name for the four hex characters between the colons, I propose that they be called "quads".

    Actually, I think that part of the reason IPv6 hasn't been as widely adopted as it should be is that it has an unfinished feel to it. Some places say you need a dhcp server. Others say it is self configuring. Some places say the zero prefix is used for IPv4-compatible addresses; others say ::ffff:0:0/96, still others say 2002:: The thing is, they are probably all right, but they are just being used for different purposes. The biggest reason, though, is that there has not been a firm switchover date. Unless and until there is a compelling reason to switch, IPv4 will still be the main protocol.

    Perhaps what we need is some sort of international IPv4 lights out day. On, say, 01-Jan-2010 IPv4 will no longer be routed. That way, ISPs would need to be compliant, or they will be off the air.

    --
    When our name is on the back of your car, we're behind you all the way!
    1. Re:A proposal by Anonymous Coward · · Score: 0

      DHCP servers do two things. [1] Allocate addresses. [2] Provide configuration informatin.

      IPv6 doesn't need DHCP for [1]. (Hosts need to know their own link-local ID and the network they're on. IPv6 routers respond to requests to find out the network, and the link-local ID is just the MAC)

      It does need DHCP for [2] unless you use another configuration mechanism. (DNS server, TFTP, NTP server. Domain name, etc etc etc.)

      What this allows is a stateless DHCP server though - since the server doesn't allocate addresses, it doesn't need a database. Failover and redundancy become trivial; merely have two stateless DHCP servers on the same subnet. So long as they have the same configuraiton, it doesn't matter if hosts get the same answers from two different servers.

    2. Re:A proposal by davburns · · Score: 1

      See http://penrose.uk6x.com/. There is a deadline, but nobody knows exactly when it will be. I think the potaroo.net analysis is the best I've seen.

      It's not that IPv4 won't be routed after that date, but sometime around there there will be IPv6-only nodes that you won't be able to get to if you're v4-only.

    3. Re:A proposal by gclef · · Score: 1

      What if you want (as many enterprises do) to have some record of which MAC address was assigned to a given IP? Then you have to go to stateful DHCP6.

      I'm going to bet almost every large network will end up running stateful DHCP6 for precisely this reason. Record-keeping and forensics are important...stateless autoconf makes that not work.

    4. Re:A proposal by jonfr · · Score: 1

      IPv6 doesn't need a dhcp server. That is the nice part. ISP part of IPv6 is even better, the routers of IPv6 only need a radvd ipv6 tool or something like it. Because of that, a hookup is going to be easy for the user. Just plug in and it should work.

      IPv6 address come in two types, Link & Global. Link has the same usage as 192.168.1.x in IPv4 and Global is IPv6 address that goes out to the internet.

      I use IPv6 and so far it has not been giving me any problems since I did start to use it.

      Google has a IPv6 address, it is located here, http://ipv6.google.com/

    5. Re:A proposal by sirambrose · · Score: 1

      I believe that the default ipv6 address is the 64 bit network address concatenated with the mac address. This makes any database of that sort redundant.

    6. Re:A proposal by gclef · · Score: 1

      Close, but not quite. By default, the MAC address of the interface is used for part of the address, but there's a possibility of collisions, still, so there is a whole system designed to make sure that two hosts don't use the same address, and what to choose if you do collide. If you're curious, Look up IPv6 Duplicate Address Detection.

      Also, due to privacy concerns, there's talk of having systems automatically rotate their IPv6 address (the host part, anyway) every few minutes, to prevent tracking by sites like double-click. (there's also talk of having systems generate their address cryptographically...if you're curious about that one, have a look at CGA: cryptographically generated addresses...no, I'm not kidding.)

    7. Re:A proposal by coryking · · Score: 1

      Another flaw in IPv6. Binding to the mac address. Now when I download britanny spears on IPv6 BitTorrent and I'm not clued into MAC addresses, the courts just need to look at my ethernet card to identify my computer (and thus me) as the guilty party.

      Another win for NAT. Sorry your honor, I have friends who use my network and since it is all private address space that doesn't get logged, while you can prove it was my network, you cannot prove it was me.

    8. Re:A proposal by symbolset · · Score: 1

      Sorry your honor, I have friends who use my network ...

      Was my wireless router sharing my Internet with the whole neighborhood? I had no idea! It just came that way. I plugged it in and it worked. Somebody should do something about that.

      --
      Help stamp out iliturcy.
    9. Re:A proposal by Chang · · Score: 1

      You can assign yourself an IPv6 address you know. You don't have to use autoconfiguration.

    10. Re:A proposal by coryking · · Score: 1

      Does Sally Sue Downloader know this? I might, but does it assign a non MAC based address *by default*? If it doesn't, lots of people are gonna be awfully surprised when the RIAA shows up and nails them based on their IP address.

      Suddenly those flashy "Your IP address is exposed" banner ads wouldn't be so funny, would they.

    11. Re:A proposal by ceoyoyo · · Score: 1

      "I propose that they be called 'quads'"

      Captain! The alien message is huge! Thousands of kiloquads! It's overloading the antenna!

    12. Re:A proposal by sirambrose · · Score: 1

      Of course there is a way to detect if an idiot manually configures his computer to have the same node address as your mac address. Similar techniques are used by windows to detect idiotic misconfiguration on ipv4 networks. There are other ways besides auto configuration to assign ip addresses, but by default it is done by combining the network address and the mac address. The point is that you don't need to have a dhcp server to keep track of the mapping between mac addresses and ipv6 addresses as long as all the clients are all using the auto configuration system. If some clients pick addresses at random, using a dhcp server will not do a better job of maintain a mapping from ip addresses to mac addresses than auto configuration.

  25. It also comes with a host of problems by Sycraft-fu · · Score: 2, Interesting

    A simple one is just dealing with IP addresses. Not too bad to remember an IPv4, especially since in a given network most addresses are largely similar. An IPv6 one is rather more difficult, and much of the self similarity is gone since the MAC is embedded. Thus you have to start to have better management to deal with the numbers.

    A bigger one is the cost of replacing high speed routers. Real high end gear tends to do things in ASICs. It's really the only way to achieve the speeds that people want. Doing it in software would be prohibitive, even if routers had massive CPUs, which they don't. Well, there's lots of gear out there that only does IPv4 in hardware. You want IPv6, it is all handled by the software and thus anything more than a small amount will crush it. It is, of course, not cheap to get an IPv6 upgrade, even when one is available.

    That's the situation on campus where I work. The network is Cisco 6500s at it's heart. They handle IPv4 with ease, including the incredibly complex access lists and routing tables we have. However, they do that because they can do IPv4 in hardware. Well they support IPv6, you just turn it on, however only in software. It we tried to use it, it'd grind everything to a halt. So if we want the hardware to do it? $10,000,000. Ya, let me tell you how interested anyone is in spending that, when what we have works great and we are getting our budget cut (again).

    Similar situation at larger levels, but even larger dollars. You don't go replacing these high end routers once a year. These things last for a long time. Thus there's lots of hardware out there that works great for IPv4, but can't do IPv6. Companies are understandably not interested in sinking tons of cash to upgrade, especially when it seems to gain nothing.

    So even if IPv6 were just turn a switch, I could see adoption being slow because it don't really solve any problem. However it does introduce it's own problems, which makes it just that much slower.

    1. Re:It also comes with a host of problems by bepe86 · · Score: 1

      You don't need to upgrade the entire 6500; you can upgrade the supervisor with a cef engine with hardware support for IPv6 - of course , this means you'll have to take the unit down, but you should _never_ run single 6500's anyways, so a good chance to test layer 2 and layer 3 failover/redundancy.

    2. Re:It also comes with a host of problems by Sycraft-fu · · Score: 1

      I am aware of that. The price I quoted was for the new supervisor engines. There are more than a few on campus.

      As I said, this stuff is not cheap.

    3. Re:It also comes with a host of problems by xRizen · · Score: 1

      In an IPv6 network, most addresses will share a prefix which will probably be about half of the address.

      Also, MAC is only embedded (by default, too, not out of necessity) in link-local addresses. You don't need to use those.

  26. France is ready, except for Windows by Anonymous Coward · · Score: 1, Informative

    In France, all the major ISP (Free, Orange, Neuf, etc.) and several small ones (like Nerim) provide a /64 segment as part of the usual "triple play" package for 30€.

    The 2 minors problems are :
      - the user has to activate the IPv6 for the gateway, in a web interface of the ISP (easy, just a checkbox)
      - the user must have to have an IPv6-ready OS : nothing to do for GNU/Linux, a choice in a menu for MacOS, but a pain in Windows

    As for the servers, IPv6 support is mandatory in all administrations (all equipment must be able to route et handle IPv6, but the application can still be in IPv4) and IPv6 has been declared "strategic mission" in CNRS (National French Research Center; that is all public research).

    Telecom companies are also beginning to use IPv6 in the mobile television on cellphone.

    So we can say that in France the situation is OK, except that IPv6 must be manually enabled by the user.

    1. Re:France is ready, except for Windows by phoenix.bam! · · Score: 1

      For Windows XP type:
      netsh interface ipv6 install

      or
      ipv6 install

      depending on your service pack level. That was torture.

  27. Comment removed by account_deleted · · Score: 4, Interesting

    Comment removed based on user account deletion

  28. Mod parent up. by khasim · · Score: 2, Insightful

    And don't forget that it is one more thing that can go wrong.

    Remember, you ALWAYS run the MINIMUM on your servers. If you don't absolutely need IPv6 today, then don't put it on.

    1. Re:Mod parent up. by fm6 · · Score: 1

      I disagree with your logic. Yes, no IPv6 is one less thing to go wrong. But if it is going to go wrong, don't you want it to go wrong now, when you still have IPv4 to fall back on? A few years from now, you won't.

  29. Vista vs. IPv6 by mi · · Score: 1

    I'd say, IPv6 is being accepted even slower, than Windows Vista. Khmm...

    --
    In Soviet Washington the swamp drains you.
  30. Comment removed by account_deleted · · Score: 3, Funny

    Comment removed based on user account deletion

  31. Lack of embedding (and DJB) by Etcetera · · Score: 1, Redundant

    djb, love him or hate him, called this out years ago...

    http://cr.yp.to/djbdns/ipv6mess.html

    Lack of IPv4 embedding in IPv6 has to rank as one of the dumbest decisions of all time. It reminds me of that "anti-spam proposal evaluation worksheet" that floats around in the comments here from time to time.

    Your plan fails because it:
    [X] Demands immediate and total cooperation from everyone at once.

    1. Re:Lack of embedding (and DJB) by Daimanta · · Score: 1

      "Your plan fails because it:
      [X] Demands immediate and total cooperation from everyone at once."

      It is called government intervention. Seriously, the government can do some good work in this field like mandating ipv6-compatibility for ISPs. That will solve approx. 70% of the problems. The other 30% is the users and technology(routers,modems, Windows)

      --
      Knowledge is power. Knowledge shared is power lost.
    2. Re:Lack of embedding (and DJB) by gujo-odori · · Score: 1

      Having the government mandate that ISPs have ipv6 compatibility is /not/ a solution. Having the government mandate an HDTV cut-over date with no more analog wasn't really a solution either, insofar as HDTV is an answer to a problem that not many people have (yes, I have a large LCD TV now, but the large CRT TV it replaced fully met my needs and looked great; I would happily have bought another one but they've become scare on the ground). IPv6 is also largely solving a problem that (practically) no one has.

      If IPv6 were really /needed/ the market would have already done far more to bring it into wider use. The fact of the matter is, everyone is getting along just fine on IPv4. No one out there today /needs/ 6. There are some people who want 6, and they tend to be running 6 tunnels, but even they don't need it. They just want it.

      What would I do if my ISP cut over to 6 only tomorrow? Well, change ISPs. But if they all did, I'd just run a 6-to-4 gateway at my network edge and everything on the inside would still be 4. There's no need/no point in changing that, and for nearly everyone, NAT is the only solution really needed.

      ISPs could take NAT even a step further than they do now; for customers in dynamic IP pools, those addresses could even be NATTed out of RFC 1918 space. Besides freeing up a lot of IPv4 addresses, it would have a pretty dramatic effect on a lot of botnets. Anyone who really needed a global IP at their network edge would just have to pony up for a static IP; but then, many of the people who really /need/ that global IP are already paying for a static one.

      When IPv6 was laid out, a huge IP address shortage was seen coming over the horizon. No one realized then just how effectively NAT would solve that problem. IPv6 could be scrapped and the only people who'd care are those who've invested time/money/their emotions into it.

    3. Re:Lack of embedding (and DJB) by Estanislao+Mart�nez · · Score: 1

      If IPv6 were really /needed/ the market would have already done far more to bring it into wider use. The fact of the matter is, everyone is getting along just fine on IPv4.

      That argument doesn't work. Why? Because the problem with IPv6 adoption is that it's a costly choice that doesn't pay off unless your counterparts also voluntarily choose the same way. None of the benefits of IPv6 are worth anything if you don't have other folks' IPv6 nodes to talk with.

      It's a classic Prisoner's Dilemma. If everybody cooperates, everybody ends up better off than in any other outcome; but if you cooperate and everybody else defects, you end up worse than everybody else. This means that everybody will defect, because they are unwilling to bear the risk that others will defect if they cooperate.

      Note that I'm not arguing that IPv6 does in fact offer compelling advantages to everybody. What I'm arguing is that even if a significant number of folks could benefit from it, the market might still not offer it.

    4. Re:Lack of embedding (and DJB) by coryking · · Score: 1

      Why should they? It will stifle network protocol innovation for decades. Just because they europeans always seem to get their governments to mandate protocols like GSM means we need to as well. In most cases, it was our innovations that lead to their ability to even have a protocol to mandate. If we didn't invent TCP/IP, they wouldn't have anything to mandate (didn't they have some goofy ass government mandated network before?)

      If we start mandating protocols, who is gonna invent the replacement for TCP/IP? Hint: not us.

    5. Re:Lack of embedding (and DJB) by Ash-Fox · · Score: 1

      Lack of IPv4 embedding in IPv6 has to rank as one of the dumbest decisions of all time. It reminds me of that "anti-spam proposal evaluation worksheet" that floats around in the comments here from time to time.

      On every Internet IPv6 network I've used, I've been able to connect to IPv4 addresses. The networks had a IPv6 to IPv4 gateway, the gateway was essentially a NAT.

      --
      Change is certain; progress is not obligatory.
    6. Re:Lack of embedding (and DJB) by Daimanta · · Score: 1

      Childish flag-waving. Honestly, if we want to progress from the ancient ipv4 standard we need to get someone powerful to back it i.e. the government. How in the hell can this stifle protocol innovation for decades? We move to a better standard without the shitty ipv4 problems like NAT and a lack of IP-addresses.

      --
      Knowledge is power. Knowledge shared is power lost.
    7. Re:Lack of embedding (and DJB) by Leebert · · Score: 1

      Having the government mandate an HDTV cut-over date with no more analog wasn't really a solution either, insofar as HDTV is an answer to a problem that not many people have (yes, I have a large LCD TV now, but the large CRT TV it replaced fully met my needs and looked great; I would happily have bought another one but they've become scare on the ground).

      No, the government didn't mandate an HDTV switch. It mandated a digital TV switch. It did this to reclaim some spectrum that the People own that was being wasted on analog television.

      The difference here is that the People own the spectrum. Network providers own their networks. There is no direct parallel.

    8. Re:Lack of embedding (and DJB) by mishehu · · Score: 1

      I always love the folks that assume that the "market" is a sentient being looking out for the best interests of all. Wrong. Just as the parent stated with the Prisoners' Dilemna, everybody does it or nobody does it. The problem then gets pushed up higher to the application developers who have to find elaborate work-arounds for their protocols and applications. Many VoIP professionals are very familiar with things like STUN and TURN... ugly hacks that could be done away with if we all switched to ipv6...

      It also likely does not help adoption that we have a few very large ISP's in the USA. Has Ma Bell *ever* moved fast to adopt a new technology? Remember the old Saturday Night Live skit where "we've just lost Peoria. We don't care, we don't have to. We're the Phone Company."

    9. Re:Lack of embedding (and DJB) by stevied · · Score: 1

      I never quite understood that little rant. Growing the address space size will by definition break stuff, because an old client won't have a way to specify the extra bits of a new-style address, and so won't be able to get a packet to where it's going.

      It's no use an IPv6 host being able to send packets an IPv4 host, if that host can't reply.

      (DJB is very smart about a lot of things, and also quite obstinate about a lot of others. Something he has in common with people like Linus and Theo de Raadt. Though to be fair, having strong opinions is fairly key to actually getting stuff done.)

      There are inter-op solutions, none of them particularly elegant, but hopefully they're all transient. 6to4 and Teredo give IPv6 connectivity through an IPv4 network, and TRT gives reasonable (i.e. hopefully no worse than IPv4 NAT) IPv4 connectivity to IPv6 only hosts.

    10. Re:Lack of embedding (and DJB) by stevied · · Score: 1

      In most cases, it was our innovations that lead to their ability to even have a protocol to mandate.

      This is one of the interesting little wrinkles about tech. The early innovators prove that something can be done, where nobody else would have tried. But those who come later get to analyze the problems of the first version, and spend more time fixing them. Think NTSC v. PAL, think Linux desktops v. Windows ;-)

      While places like China are, I'm sure, not terribly pleasant to live in, they may just be able to leverage this phenomenon. We've invented the science & tech., they're catching up, but their social and political structures may allow them to do it 'better.' China seems quite hot on IPv6. They are also increasingly focussed on environmental issues. They get a lot of stick on that front because of the sheer number of people, and the rate of industrial / technological expansion they're undergoing (with the related increases in pollution, CO2 emissions, etc.) But they are are already looking at solutions here, and unlike the West they can and are beginning to enforce them on a wide scale.

      Not a prospect to be welcomed by individualists and libertarians, but if it shows the world that solutions on this scale are possible, the rest of us may choose to follow on voluntarily. That would be an outcome worth having ..

    11. Re:Lack of embedding (and DJB) by gujo-odori · · Score: 1

      Being wasted in whose opinion, exactly? Certainly not the people's, most of whom would be quite happy to keep things just as they were. The digital TV cutover was solely a government-and-industry thing. The opinion of "The people" didn't matter.

  32. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  33. obligatory by Anonymous Coward · · Score: 1, Interesting

    'less than one hundredth of 1% of Internet traffic is IPv6... equivalent to the allowed parts of contaminants in drinking water.'

    The Net considers IPv6 to be damage and routes around it.

    1. Re:obligatory by symbolset · · Score: 1

      The Net considers IPv6 to be damage and routes around it.

      And the feeling (and the routing) is mutual.

      --
      Help stamp out iliturcy.
  34. Here's a reason to switch by dronkert · · Score: 2

    Some enlightened parties are providing free porn, music and warez over ipv6. That should draw the crowds! Binary news servers newszilla6.xs4all.nl and news.ipv6.eweka.nl are both freely accessible over ipv6.

  35. Show me a virtual hosting farm with IPv6... by victim · · Score: 1

    ...and I'll boost the numbers.

    When I last reviewed the Xen VPN farms out there I didn't find any with IPv6. It is on my short list of discriminators, not that I need it now, but I don't want to have to revisit the server to add it in the next couple of years when it is needed.

    I should probably add that I don't want to pay more than $10/mo for the server either. I don't need much of a slice. I get by fine on a vpslink level-1 server, though gandi is about to claim my business. 4x the ram, twice the disk, same price.

  36. The Boy Scout motto: who follows it? by reiisi · · Score: 1

    There were a few who prepared, and many of those told the rest what they were doing, so, by 1998, most businesses had some place to go for answers.

    I think that's the real reason y2k was relatively tame.

    That's what's happening here. Most companies don't know where to start. The question is how many people are doing the pioneering, and how long after the squeeze hits (hits the small countries first, probably) will individuals have to put up with "carrier grade NAT" or whatever.

    But the real question is whether IPV6 is really scaleable. Without switchers to test it, we don't know.

    Personally, I don't much care for IPV6. I'd prefer a scheme where you have something like a high-bit extension rule that would allow anyone with a valid IP address and a working router to just add an octet for his sub-net of (about) 120 hosts and keep going. I'm pretty sure the idea was considered and there was a valid reason (not the obviously invalid reasons about trouble holding the market captive) for not considering it, but it sure seems to me like (it could have been) a great solution.

    I'm still not sure how to handle portable devices, since it would seem that the prefix pretty much limits where a device could be found, and therefore where it could connect.

    Another possibility would be only 64 address at a level, with the top two bits encoding some sort of function, like addresses relative to the local network and special function addresses. Maybe you could even make mobile devices accessible that way.

    Yeah, I know. These kinds of ideas were used in some of the network protocols that TCP-IP beat out. So there must have been good reasons.

    Anyway, would it be possible to concatenate 4-octet addresses. So my global IP address would consist of A.B.C.D:192.168.7.201 if my address on the local network is 192.168.7.201 and my router's address is A.B.C.D?

    Yeah, that could go really bad if implemented wrong.

    --
    Computer memory is just fancy paper, CPUs just fancy pens with fancy erasers; the 'net is just a fancy backyard fence.
    1. Re:The Boy Scout motto: who follows it? by amorsen · · Score: 1

      I'm pretty sure the idea was considered and there was a valid reason (not the obviously invalid reasons about trouble holding the market captive) for not considering it, but it sure seems to me like (it could have been) a great solution.

      Variable-length addresses were considered but it was decided that it would make hardware routing too difficult and in general it would be too complicated.

      At the time IPv6 was conceived, IPv4 wasn't such a dominant protocol (obviously it was on the Internet, but not in the enterprise or the LAN). People believed that it was possible to have an extra protocol running without too much trouble. In hindsight, a variable-length solution with classic IPv4 as a special case would have been better -- simply because it has a chance of being deployed. Hardware cost wouldn't be a problem, because only people needing the new-fangled addresses would have to pay it.

      Waiting for a 3+ GHz ARM, so we can see whether Steve will switch again.

      Start by getting FPU's into common ARM implementations...

      --
      Finally! A year of moderation! Ready for 2019?
    2. Re:The Boy Scout motto: who follows it? by Midnight+Thunder · · Score: 1

      That's what's happening here. Most companies don't know where to start. The question is how many people are doing the pioneering, and how long after the squeeze hits (hits the small countries first, probably) will individuals have to put up with "carrier grade NAT" or whatever.

      This is why I encourage as many techies to start playing with IPv6 and documenting/blogging about what they did and problems they solved. Once there is enough information out there, people won't be able to argue that there is lack of information on the web. It should be noted that there used to be a time when the only place you could get information on IPv6 were badly designed sites of 'task forces' and IPv6 research groups. Things are changing and details on getting to IPv6 are slowly surfacing.

      The major hurdle are ISPs, since few offer IPv6 connectivity, so in most cases anyone wanting to start supporting IPv6 needs to set up a tunnel. The USA has been mandating various parts of their government to migrate to IPv6, though in reality they should start off by mandating ISPs to support IPv6 and then it will be easier for everyone else to make the shift.

      --
      Jumpstart the tartan drive.
  37. A few problems to start with mah knuggaz. by Anonymous Coward · · Score: 0

    A few problems with this.

    First, there have been town criers out preaching about IPv4 problems for many years now even before the release of the Vista infection. Now the problem with this was that there is no linguistics that the average person can understand and relate to. With Y2K it was simple, "your infrastructure is about to totally collapse, I hope you like the bronze age." This was supported hype backed up also by Hollywood with their movies. Where else to you hear about IPv4 limitation problems but nerd and geek places and chat?

    Second, typical to most things that are drastic humanity will stick to the frog in slow rising heat response. Short of feces hitting a fan there is no inclination for change anywhere in the industry where it would matter in regards to momentum of change. Sure you can have IPv6 support native in things like routers and Vista infected computers but what good does that do when the source for IPs still is locked solid in IPv4 like ISPs?

  38. Of course it's small by ak_hepcat · · Score: 1

    Have you tried to get IPv6 support from even MAJOR vendors?

    Name one cablemodem or DSL vendor that supports client-side IPv6 addressing? No? How about just the management side of the CM or EMTA? Still hard pressed, right?

    Have you tried managing firewalls with IPv6 ?
    Well, sure, you can kind of do it in sort of an ad-hoc fashion, with no bearing to your existing IPv4 implementation -- yep, they get their own objects and rules.

    Hey, Checkpoint, the whole point behind Object-Oriented-Management is that we can build an object with all of these things... IPv4 addresses, IPv6 addresses, heck, why not even MAC addresses? Are you telling me that You can't figure out how to make it work without resorting to doubling up on host-objects (one for each class), and making them into 'groups', just so I can manage my ruleset appropriately?

    Don't even get me started on Cisco and the ASA.

    That said, I'm routing IPv6 on my IP core. I've got two tunnels set up so I can use V6 at home and at the office for testing. I'm just waiting on those darn vendors.

    --
    Support FSF: Stop thinking with your wallet, and think with your imagination. (cc/non-commercial)
  39. It's all up to the ISP's by BlueCoder · · Score: 1

    We all use DHCP and NATing. The greater internet itself can remain IPv4 for ten or more years but there is no reason that users need to be connected though IPv4. Furthermore with 6to4 even if the ISP's infrastructure hardware is IPv4 users can trunk over it to the ISP's IPv6 network easily.

    I think what ISP's are actually fearing is the all user IP's will become static then because of the nature of IPv6 but if they wanted there are things they can do to maintain the status quo such as binding specified mac address.

    P.S. One interesting aside about IPv6 is that since it should remain mostly static, your IPv6 address can be used to track you. I can easily imagine database companies selling names, addresses and phone numbers based on IPv6 addresses. I'm surprised ISP's haven't implemented it just for that, within a few years it would take them mostly out of the loop for address records and ISP subpoenas (except for final confirmation). I imagine it would really cut torrent traffic down. But then of course everyone can still argue how their computer or wifi access point got hacked. All you got to do is subpoena a spammer and he can detail how they hijack computers with viralus trojans.

    1. Re:It's all up to the ISP's by iburrell · · Score: 1

      Actually, IPv6 can be better than IPv4 in terms of privacy. The naive implementation uses the MAC address in constructing the IPv6 address which makes it stable and leaks private information. Newer specs talk about using random bit strings for addresses. And varying addresses over time. It is even possible to use different addresses for different destinations.

    2. Re:It's all up to the ISP's by knorthern+knight · · Score: 1

      > Newer specs talk about using random bit strings for addresses. And varying
      > addresses over time. It is even possible to use different addresses for
      > different destinations.

      Errr, uhmmmm, no. Not unless ISPs implement dynamic IP addresses on IPV6. (Watch the purists go stark raving berserk over that). In the new world order, your ISP hands you a *STATIC BLOCK* (usually /64) of IPV6 addresses. Regardless of how much you jump around inside that block, simple modulo arithmetic can tell an outsider whether it's the same household or not.

      --

      I'm not repeating myself
      I'm an X window user; I'm an ex-Windows user
  40. Re:You know what's nonsense? by Anonymous Coward · · Score: 0

    I agree, it's fucking childish. Reminds me of those people who insist on pasting "sigs" into every one of their posts in order to thwart people who have the display of sigs disabled in their preferences. The only good thing about it is that it makes it really easy to figure out who the poster was when you're metamoderating.

    I always metamoderate such posts negatively, BTW - that is, positive mods on such posts get marked Unfair, negative mods get metamodded Fair.

  41. What is the problem? by bepe86 · · Score: 1

    I fail to see what's taking so long - NAT is never a solution, and when ISP's starts handing out private IP's, the internet has truly lost. TCP/IP has always been about end-to-end connectivity, and NAT, while it may be handy in some cases, and helps saves a huge part of the adress space, it's not a good solution in the long run.

    IPv6 on the other hand has plenty of advantages over IPv4 - the most obvious is the increased address space. Another, more unknown advantage, is the much simpler header, which in IPv4 has a lot of unnecessary fields, either because they're handled by other layers, or because the internet has changed since the protocol was born.

    This lighter header, means less processing of the packet is needed, and routing operations should be simpler, and faster.

    Another advantage is support for jumbograms (great for high speed point-point links), better support for mobile IP, and the huge address space, in combination with the large number of bits avilable for subnetting, should decrease the size of the global BGP table (which contains over 130 000 entries last time I checked).

    So, it has these advantages:

    - restores end-end connectivity

    - less overhead on stable, dedicated point-point lines => more throughput

    - simpler header, smaller routing tables => faster routing

    - more subnet bits => allows for more flexible network designs

    - better multicast support

    In conclusion, if you fail to see the advantages, you're not a network engineer, or you shouldn't work as one.

  42. Should have gone to A.B.C.D.E.F.G format. by mgkimsal2 · · Score: 5, Interesting

    We could have even just added a 3 more positions in the address and assumed a default of 1.1.1. as the default prefix if none was given. That would have given us 16 million * the current 4 billion addresses - 64 quadrillion addresses.

    At the risk of repeating the 'no one needs more 640k', I'd have to say that I think 64 quadrillion is more than usable for the next several years. The upshot is that it would have been much easier to deal with that. From a pragamatic viewpoint, there's a whole lot of software out there invested in the dotted quad format. Modifying that to deal with a few more X.X.X places wouldn't have been as hard (think GUIs that check IP validity, for example) as moving to IPv6.

    Lame excuses, perhaps, but I think we'd have seen much faster adoption to a format like X.X.X.X.X.X.X because it's an incremental, not radically different.
     

    1. Re:Should have gone to A.B.C.D.E.F.G format. by xRizen · · Score: 5, Informative

      IPv4 addresses can be represented in IPv6 as 0::10.10.1.12 (Or as 0::FFFF:10.10.1.12 in some cases.)

      I don't see that using dots instead of colons makes a transition any easier.

    2. Re:Should have gone to A.B.C.D.E.F.G format. by Fulcrum+of+Evil · · Score: 2, Insightful

      We could have even just added a 3 more positions in the address and assumed a default of 1.1.1. as the default prefix if none was given.

      Great, now the addresses are 7 bytes long and you still have to update all your routers and computers. What makes you think it'd be any easier?

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    3. Re:Should have gone to A.B.C.D.E.F.G format. by Firehed · · Score: 5, Insightful

      Well that whole 640k thing with regard to IP addresses has been largely negated by the adoption of routers within the home. Back when cable/DSL adoption was first starting, many people would end up with a switch and then have to call up the ISP for a second IP address. And with several computers in every home these days (not to mention other devices that grab IP addresses - games consoles, WiFi cell phones, network printers, etc), that plausibly could have become a very big issue very quickly. I've got at least a dozen pieces of hardware that consume a local IP address (not to mention the two or three VMs I have going at any given time), and it's a very good thing they don't each consume a slot in the worldwide public address space.

      For all practical purposes, even an A.B.C.D.E would probably be enough thanks to routers - that still gives us ~1 trillion unique IPs worldwide. Of course if we were to make the switch it would make sense to give us the additional headroom. I'm hardly intimately familiar with the inner workings of IPv6 but assume it has benefits beyond mere address space, but the added complication to sysadmins of dealing with something like "2001:0db8:0000:0000:0000:0000:1428:57ab" (thanks, Wikipedia) is simply a nightmare in the making. Four bytes versus sixteen? I can remember which computer is 192.168.0.11 on my local network easily enough (and could certainly remember my public IP if I were bothered, as it never seems to change despite not paying for static), but you can practically smell the smoke coming out of my head after just looking at that.

      It's certainly forward-thinking, but having (estimated) fewer atoms in the universe than IPv6 addresses available is just slightly overkill, doncha think?

      --
      How are sites slashdotted when nobody reads TFAs?
    4. Re:Should have gone to A.B.C.D.E.F.G format. by Sentry21 · · Score: 3, Interesting

      The first broadband ISP I ever had was Shaw Cable, and back then, there was no such thing as 'broadband routers' - heck, we couldn't even justify buying a switch, so we just used a 10baseT hub (ew).

      Imagine my surprise when I found out that our networked Brother printer, which we had only used over Appletalk-over-Ethernet, had had a public IP address for a year. Fortunately, it seems that the printer designers had (for whatever reason) prevented printing/access from non-local subnets, limiting the number of people with access to it to somewhere around 64 or 128 (we weren't part of a full class C, for sensible reasons).

      Oddly enough, the ISP wanted you to pay for extra IPs - but didn't require it. Honour system ftw.

    5. Re:Should have gone to A.B.C.D.E.F.G format. by perlchild · · Score: 1

      How about we look at ARIN first. Despite the fact that a quadrillion is still a small portion of the available space, they still expect an isp to pay for getting assigned one. Since your isp's don't want to pay to upgrade their equipment to give you something you likely won't know enough about to desire and pay for, they don't upgrade.

      IPv6 adoption will start when you can't get assigned a block or address, or when it becomes free(at least to tier 3 and below isps). I'll grant Tier 1s might be considered a special case, because of size, etc... profitability of being able to tunnel ipv4 in ipv6 etc...

      But as long as a mom and pop has to pay 3000$/year to get a block of ipv6, don't expect them to spring for it. And unlike you've been told, they're the adoption drivers of the internet... Mostly because they don't have anything to lose

    6. Re:Should have gone to A.B.C.D.E.F.G format. by Anonymous Coward · · Score: 5, Informative

      Really? The dots vs colons thing is the single most problematic thing I've encountered. No seriously - network level is easy, just upgrade firmware or hardware. It when working with configuration files and addresses that IPv6 sucks. Firstly, : was already very widely used used, for separating IPv4 address from port number.

      Just using abcd.abcd.abcd.abcd.abcd.abcd.abcd.abcd would have meant that abcd.abcd.abcd.abcd.abcd.abcd.abcd.abcd:443
      would have worked much like 123.123.123.123:443, though obviously distinguishably - hex and more sections.

      People seem to have settled on enclosing the IPv6 address in square brackets to make it work reasonably parseably (given abbreviation, see below) into config files and urls and stuff, at least that seems to be the most widely used convention. i.e. [abcd:abcd:abcd:abcd:abcd:abcd:abcd:abcd]:443
      It works okay, but it could have been simply avoided, damnit.

      Secondly, the :0000:0000:000: to :: abbreviation rule was actually a terrible mistake. It makes parsers somewhat harder to write, and means that IPv6 addresses can't be munged with regexes nearly as handily as IPv4 addresses, which seriously inconveniences time-pressed sysadmins. Yes, Ipv6 address are long if unabbreviated. But without the abbreviation they would have been REGULAR.

    7. Re:Should have gone to A.B.C.D.E.F.G format. by Anonymous Coward · · Score: 2, Interesting

      Well, there's the RFC1924 option.

      Then, IPv6 addresses would be represented in base85 encoding, delimited by something - The RFC strongly hints [].

      Might be nice though e.g.:

      [4)+k&C#VzJ4br<0wv%Yp]

      - note that this is not confusable with the now-conventional [xxxx:xxxx::xxxx:xxxx] because : is not one of the allowed characters in the base85 scheme in the rfc.

      Always 20 characters from a certain set between [ ] . Easily matched with regexes, shorter (much shorter) than a hex address.

      Yes, it looks a bit line-noise-y, but it's far more regular.

    8. Re:Should have gone to A.B.C.D.E.F.G format. by Anonymous Coward · · Score: 2, Informative

      ipv6calc supports the rfc1924 format, even if few apps do...
      apt-get install ipv6calc
      ipv6calc -Ibase85 -Oipv6 '4)+k&C#VzJ4br<0wv%Yp'
      1080::8:750:8052:72a8

    9. Re:Should have gone to A.B.C.D.E.F.G format. by Auntie+Virus · · Score: 1

      The first broadband ISP I ever had was Shaw Cable, and back then, there was no such thing as 'broadband routers' - heck, we couldn't even justify buying a switch

      Ok there were no commercial cheap Dlink or Linksys(gag) routers back then. But that certainly doesn't mean you needed to have all your boxen exposed on a Shaw's public IP. Yikes.
      Here in Calgary, while I waited for Shaw to be available in my 'hood, I was already using NAT (ip masquerade) on a Linux box, doing ppp dial-up to Telus (man that sucked). Once Shaw was available, a simple re-config and Bob's your auntie.

      --
      Why yes, I *AM* new here. Why?
    10. Re:Should have gone to A.B.C.D.E.F.G format. by cheater512 · · Score: 1

      IPv6 addresses have brackets around them.

      E.g. http://1:8080/

    11. Re:Should have gone to A.B.C.D.E.F.G format. by cheater512 · · Score: 2, Informative

      And Slashdot chewed my url.

      It should have been [::1]:8080

    12. Re:Should have gone to A.B.C.D.E.F.G format. by Anonymous Coward · · Score: 0

      Uh. The post you replied to mentioned the square brackets?

      The brackets are technically NOT part of the IPv6 address syntax spec though, they're a secondary convention that is now fairly widely adopted by various specs (such as http urls...) and applications.

    13. Re:Should have gone to A.B.C.D.E.F.G format. by Cramer · · Score: 2, Insightful

      This doesn't matter AT ALL since IPv4 systems cannot talk to IPv6 systems, and v.v. They. Are. Completely. Alien. Networks. It just makes it easier to transport IPv4 across IPv6. Without a proxy/translator/etc. IPv6 and IPv4 hosts cannot talk to each other. This is why IPv6 will take decades to be openly adopted -- if ever. (It's already been a decade, btw.)

    14. Re:Should have gone to A.B.C.D.E.F.G format. by rtb61 · · Score: 2, Interesting
      The delay in the switch from IPv4 to IPv6 is greed by ISPs pure and simple. ISPs get the IPv4 address range basically for free and then charge customers for access to that address range, money for jam. They will simply resist IPv6 for as long as they can (the bad ISPs) because their profits from IPv4 will disappear as they have to give away IPv6 for free.

      This of course is only as far as the greedy, traffic blocking, no server, ass hat ISP's. Their are plenty of regional good ISPs that believe in providing quality customers services at a reasonable price eg. http://ipv6.internode.on.net/, they of course will be the ones who end up crippling the IPv4 profits.

      So home based server appliances, for email, voip, web serving, will kill IPv4 because they will want their IP address for free and, not to forget smart phone/PDAs and UMPCs all with their own IPv6 address, for instant global mesh networking, so yeah billions of adresses and the typical user will have at least three, home server, smart phone/PDA and UMPC.

      --
      Chaos - everything, everywhere, everywhen
    15. Re:Should have gone to A.B.C.D.E.F.G format. by MRAB54 · · Score: 1

      IPv4 addresses can be represented in IPv6 as 0::10.10.1.12

      "The "IPv4-Compatible IPv6 address" is now deprecated because the current IPv6 transition mechanisms no longer use these addresses. New or updated implementations are not required to support this address type." ::FFFF:a:b:c:d is the new standard according the to rfc...not sure what the hell the difference is.

    16. Re:Should have gone to A.B.C.D.E.F.G format. by DGolden · · Score: 5, Funny

      Hmmm. Base 85, eh?

      I hereby propose a closely related 40-character format, where each base85 value is represented by a pair of letters, consonant-vowel -
      The "bananafofana" IPv6 address notation...

      17 consonants: bdfghjklmnpstvxwz
      5 vowels: aeiou
      => 85 distinct consonant-vowel pairs
      (dropped c,r because of confusion possibilities with s/k,l. h is tricky for some non-english speakers, but it can typically be learned. I tend to think of x as the ch sound in irish/scottish "loch", but, well, it doesn't matter all that much.)

      First, transform to base 85 is performed as per the RFC1924. Then,
      rather than mapping to 85 different ascii characters, the 0-84 base85 digits are mapped to consonant+vowel pairs in consonants*vowels sequence i.e.
      ("ba" "be" "bi" "bo" "bu" "da" "de" "di" "do" "du" "fa" "fe" "fi" "fo" "fu" "ga" "ge" "gi" "go" "gu" "ha" "he" "hi" "ho" "hu" "ja" "je" "ji" "jo" "ju" "ka" "ke" "ki" "ko" "ku" "la" "le" "li" "lo" "lu" "ma" "me" "mi" "mo" "mu" "na" "ne" "ni" "no" "nu" "pa" "pe" "pi" "po" "pu" "sa" "se" "si" "so" "su" "ta" "te" "ti" "to" "tu" "va" "ve" "vi" "vo" "vu" "xa" "xe" "xi" "xo" "xu" "wa" "we" "wi" "wo" "wu" "za" "ze" "zi" "zo" "zu")

      These pairs are then concatenated to give a 40 character nonsense word string -

      So, for example, 1080:0:0:0:8:800:200C:417A => base85 4-68-70-46-66-12-63-31-61-19-4-37-53-75-0-58-57-65-34-51 (from the RFC)

      => [buvoxanevefitoketegubulipowabasosivakupe]

      There, much better ;-)

      Maybe spaces should probably be allowed between every 8 characters, just to make it a bit more legible. Especially out loud :-)

      Q. Hey, what's that server's address, again?
      A. [ buvoxane vefitoke tegubuli powabaso sivakupe ] !!!

      --
      Choice of masters is not freedom.
    17. Re:Should have gone to A.B.C.D.E.F.G format. by iminplaya · · Score: 2, Insightful

      I don't see that using dots instead of colons makes a transition any easier.

      It would mean not having to use the the damn shift key.

      --
      What?
    18. Re:Should have gone to A.B.C.D.E.F.G format. by DGolden · · Score: 1

      Uh. Hey. Why did I reverse w and x? That was dumb. Oh well. Note to implementors: w should be before x.

      --
      Choice of masters is not freedom.
    19. Re:Should have gone to A.B.C.D.E.F.G format. by tyrione · · Score: 1

      This reminds me of the whining about ObjC/Smalltalk syntax versus C++. People write the worst self-documenting code in C++ yet people complain that it's too hard to use ObjC and get used to the syntax.

    20. Re:Should have gone to A.B.C.D.E.F.G format. by Firehed · · Score: 2, Interesting

      Could you explain how that behavior would change at all with the advent of IPv6? I'm certainly not claiming you're wrong, but until I have a direct pipeline to the internet running to the house, I still have to go through some sort of ISP.

      The no server clauses are absolutely BS, but my current ISP (Charter) doesn't seem to care, or at least do anything about it. I don't have a static IP (thanks, DynDNS), but they don't block incoming on port 80 so for demoing work to clients and accessing my local install of SugarCRM from the road, I don't have to mess with alternate ports.

      Having said that, the mainstream use of home servers are still a way off. If/when they exist in the mainsteam, it'll almost certainly be primarily for media and document access (basically SFTP or some sort of wide-area Samba, and probably a long-range Bonjour broadcast for grabbing your iTunes library). The vast majority have no interest in running their own website; having some sort of presence via Wordpress, Blogger, or maybe whatever the modern-day equivalent of Geocities is will be more than enough for most people. The slashdot crowd are the exception to the rule, with a small cluster of boxes running homebrew apps and doubling as a replacement for the furnace. The spam implications of a home-based email/SMTP server make me slightly nauseous, and I envision VOIP remaining relatively peer-to-peer for the foreseeable future. Don't get me wrong - I want them to stop fucking around with what I can do with my connection... I just don't see it being that big of an issue. When configuring a DNS server becomes as simple as plugging in a toaster, we'll talk.

      --
      How are sites slashdotted when nobody reads TFAs?
    21. Re:Should have gone to A.B.C.D.E.F.G format. by jlb24601 · · Score: 2, Informative

      Note, though, that IPv6 was intended to solve more than just the address space exhaustion problem. More than anything the large address space was intended to deal w/ the growth of the core routing tables, along w/ allowing for cleaner auto-addressing (DHCPv6 is more for providing DNS server addresses instead of address allocation), IP mobility, and anonymous addressing. There's also the side benefit that network scanning becomes pretty damn hard...

    22. Re:Should have gone to A.B.C.D.E.F.G format. by jacquesm · · Score: 1

      Second that, the ':' convention really sucks. I never got why they thought it was the way to go with expanding the address space.

      It's a bit like this, if you are counting from 0 to 100 you end at 99, after that you're going to use '100', not '1:00'.

      (and that would have been a logical alternative as well, simply making the individual fields in the dotted quad addresses 16 bits).

    23. Re:Should have gone to A.B.C.D.E.F.G format. by SamSim · · Score: 1

      I think 64 quadrillion is more than usable for the next several years

      This strikes me as an approach which replaces one problem with two problems.

    24. Re:Should have gone to A.B.C.D.E.F.G format. by Zironic · · Score: 1

      Because it wouldn't look completely alien? Seriously, IPv6 adresses are not human usuable.

    25. Re:Should have gone to A.B.C.D.E.F.G format. by Anonymous Coward · · Score: 1, Interesting
    26. Re:Should have gone to A.B.C.D.E.F.G format. by JPeMu · · Score: 1

      Well a quick glance at PeerGuardian shows me 774,128,775 IP's being blocked (Ad's, Spyware, Government and Anti-P2P). That's a nice little reserve of Candidates-For-Reissue for when our backs are against the wall imho ;) DT

    27. Re:Should have gone to A.B.C.D.E.F.G format. by Anonymous Coward · · Score: 0

      I disagree

      dots are much more readable. The colons make it hard to read the address (harder to distern individual numbers) and also confuses with MAC Addresses.

    28. Re:Should have gone to A.B.C.D.E.F.G format. by dynamo52 · · Score: 3, Funny

      I like this one [ delusive sometime volatile tubelike pipeline ]

      --
      Like this comment? I accept Bitcoin! - 153sc8UUBXyp12ofQqfAWDmJrzyiKCYC1x
    29. Re:Should have gone to A.B.C.D.E.F.G format. by TheThiefMaster · · Score: 1

      IPv6 addresses don't have to be excessively long, I have: 2001:XXXX:XXXX::1 (obviously the Xs aren't really the address, but giving an address on a lowly home internet connection on slashdot seems like a bad idea)
      Autoconfig defaults to adding the link's mac address to that as well (with FF:FE in the middle), so I also have a longer (almost max IPv6 length) address for the same connection.

    30. Re:Should have gone to A.B.C.D.E.F.G format. by catwh0re · · Score: 1
      To make serial numbers more language friendly I usually read them with verbs inbetween..

      E.g. 0C 88 65 36 5C 65 14 8D B5 3E 47 D9 20 11 9F 90 would be zero-C did an 88 to 36, over 5C while 65 watched with 14 and 8D, B5 joined in on the fun while 3E took 47 to D9, and 20 did 11 with 9F inbetween 90.

    31. Re:Should have gone to A.B.C.D.E.F.G format. by gbjbaanb · · Score: 1

      No. If you're counting from 0 to 100, you stop at 100... :)

      Its not like that anyway, I mean - you count 0 to 9, and then go "1" and "0", and if you continue adding decimal positions, you end up with "1,000". Everybody (except programmers) writes numbers in the human-readable format with place separators, and parsers happily recognise and deal with them.

      Remember: computers are there to make our life easier, not the other way round. Putting the colons in is fine.

    32. Re:Should have gone to A.B.C.D.E.F.G format. by VdG · · Score: 2, Interesting

      I think your thinking is too limited. What about the rise of mobile devices? Billions of cell 'phones soon; I dread to think how many RFID chips. And who knows what else? These are things which really need globally unique IDs. IPv6 is intended to be overkill, so that whatever comes along it'll be able to cope.

      Regarding the addressing issue which seems to concern so many people, DNS should handle most of it, (truly unique numbers actually make that simpler, I'd think). If you really need to speak to someone about a number, in most cases you should just be able to give them the last few bytes. "1428:57ab" seems fairly manageable.

    33. Re:Should have gone to A.B.C.D.E.F.G format. by Tuoqui · · Score: 1

      The problem with using :'s in IP addresses is that they make them look like the typical notation for MAC Addresses (01:23:45:AB:CD:EF). It would be like putting .'s in the place of comma's in english can you believe how hard that would make things to read?

      --
      09F911029D74E35BD84156C5635688C0
      +2 Troll is Slashdot's way of saying groupthink is confused
    34. Re:Should have gone to A.B.C.D.E.F.G format. by Anonymous Coward · · Score: 0

      Just remember this: The parsers are written by programmers!

    35. Re:Should have gone to A.B.C.D.E.F.G format. by Xizer · · Score: 1

      The real joke here is that you actually use PeerGuardian.

    36. Re:Should have gone to A.B.C.D.E.F.G format. by bugg · · Score: 1

      You know a similar abbreviation rule exists with IPv4, right?

      % ping 192.168.1
      PING 192.168.1 (192.168.0.1) 56(84) bytes of data.

      --
      -bugg
    37. Re:Should have gone to A.B.C.D.E.F.G format. by KDR_11k · · Score: 1

      I think he means that some ISPs treat fixed IPs as a premium service and are therefore less inclined to change to a scheme where everyone gets a static IP. It's of course possible to work around that but many large customers don't want to.

      --
      Justice is the sheep getting arrested while an impartial judge declares the vote void.
    38. Re:Should have gone to A.B.C.D.E.F.G format. by Atti+K. · · Score: 1

      Even /. doesn't support IPv6. At least not in URLs.
      Ha!

      --
      .sig: No such file or directory
    39. Re:Should have gone to A.B.C.D.E.F.G format. by CastrTroy · · Score: 2, Informative

      The first cable internet providers had entire neighbourhoods show up as local networks. You'd be able to see the windows shares of everybody in your neighbourhood. I think home routers have done a lot for internet security, in that it now requires effort on the user's part to get any open ports on the actual PC. There are still a few problems, like insecure wireless, but I think that routers do more good than bad for most home users. That's why we need to get rid of dial-up. Every try installing windows 98 on a computer hooked up to dial-up? The second you connect to the internet to download SP2, you get a virus.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    40. Re:Should have gone to A.B.C.D.E.F.G format. by morgauo · · Score: 1

      I agree but once the parser is written once is it that hard to make a library out of it and not have to deal with it again? Although it certainly could have been done better is this an issue that should hold back deployment? I for one fear the day that most ISPs NAT their customers rather than make the switch... And the silence from the masses whom only care about email and p0rn will be deafening.

    41. Re:Should have gone to A.B.C.D.E.F.G format. by B'Trey · · Score: 1

      Well that whole 640k thing with regard to IP addresses has been largely negated by the adoption of routers within the home.

      Uh, what? If anything, routers by themselves increase the need for IP addresses since they increase the number of subnets, and the more subnets you have the more inefficiently you're using your address space.(1) I suspect that you're talking about the use of NAT (Network Address Translation), which allows you to use private IP space behind your router but still reach the public Internet.

      (1)Inefficient in terms of total number of host IPs available. More subnets are more efficient in that they can often reduce waste in terms of unused addresses.

      --

      "The legitimate powers of government extend only to such acts as are injurious to others." Thomas Jefferson.

    42. Re:Should have gone to A.B.C.D.E.F.G format. by Qzukk · · Score: 4, Funny

      [ buvoxane vefitoke tegubuli powabaso sivakupe ]

      Why is it suddenly raining blood?

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    43. Re:Should have gone to A.B.C.D.E.F.G format. by The_reformant · · Score: 1

      I've got each digit of my ip address on its own ip address. I dont think you can overestimate the number required.

      --
      I have discovered a truly remarkable sig which this post is too small to contain.
    44. Re:Should have gone to A.B.C.D.E.F.G format. by poot_rootbeer · · Score: 1

      Yes, Ipv6 address are long if unabbreviated

      Indeed, a whole 128 bits long in binary representation...

    45. Re:Should have gone to A.B.C.D.E.F.G format. by 5n3ak3rp1mp · · Score: 1

      Nice! Only modification is to abandon the X and replace it with another consonant. Too sketchy to pronounce, sounds too much like a Z in pronunciation.

    46. Re:Should have gone to A.B.C.D.E.F.G format. by residieu · · Score: 1

      Choosing not to pay for IPv6 when there is no demand for it from their customers, and they can get IPv4 addresses for free is not greed. It's common sense.

    47. Re:Should have gone to A.B.C.D.E.F.G format. by rawg · · Score: 1

      I would love to switch my ISP to IPv6, but most of the hardware in use doesn't support it. From the customer to the gateway. Soon as I see everyone with support, I'll make the switch. But I don't want to create extra work for support and spend tons more money on hardware.

      --
      The above is not worth reading.
    48. Re:Should have gone to A.B.C.D.E.F.G format. by Fulcrum+of+Evil · · Score: 1

      IP addresses aren't for humans in the first place.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    49. Re:Should have gone to A.B.C.D.E.F.G format. by Anonymous Coward · · Score: 0

      Well, that's why I suggested something a bit like a greek-chi-like pronunciation rather than the standard latin. http://en.wikipedia.org/wiki/Chi_(letter)

    50. Re:Should have gone to A.B.C.D.E.F.G format. by Kalewa · · Score: 1

      Congratulations, you've discovered Swedish.

    51. Re:Should have gone to A.B.C.D.E.F.G format. by jgrahn · · Score: 1

      This doesn't matter AT ALL since IPv4 systems cannot talk to IPv6 systems, and v.v. They. Are. Completely. Alien. Networks. It just makes it easier to transport IPv4 across IPv6. Without a proxy/translator/etc. IPv6 and IPv4 hosts cannot talk to each other. This is why IPv6 will take decades to be openly adopted -- if ever. (It's already been a decade, btw.)

      What you say must be deliberately misleading (unless you were just trying to point out that there are few IPv6 hosts to talk with out there.)

      Sure, an IPv6 stack cannot talk to an IPv4 stack, but in reality all IPv6 hosts are also IPv4 hosts, with two stacks. Most serious software includes IPv6 support and will use either one, or both.

    52. Re:Should have gone to A.B.C.D.E.F.G format. by RichardX · · Score: 1

      Congratulations! You've been dugg.. well... Reddited. Your comment is linked on the front page of Reddit right now, with 216 upvotes!

      --
      Curiosity was framed. Ignorance killed the cat.
    53. Re:Should have gone to A.B.C.D.E.F.G format. by Cramer · · Score: 1

      It's not misleding at all. If you are on an IPv4 network, you cannot talk to anything on an IPv6 network. They must both talk IPv4 or IPv6. They are two different things, that form two different networks. We might as well be talking appletalk and vines -- again two completely seperate networks.

    54. Re:Should have gone to A.B.C.D.E.F.G format. by arth1 · · Score: 1

      Secondly, the :0000:0000:000: to :: abbreviation rule was actually a terrible mistake. It makes parsers somewhat harder to write, and means that IPv6 addresses can't be munged with regexes nearly as handily as IPv4 addresses, which seriously inconveniences time-pressed sysadmins. Yes, Ipv6 address are long if unabbreviated. But without the abbreviation they would have been REGULAR.

      You forget that IPv4 addresses also have the same shorthand, but instead of doubling the separation symbol, you use just one.

      Try it. ping 127.1

      What IPv6 did was trying to make it easier to see what had been omitted.
      Only die-hard geeks will know that 123.45.67 expands to 123.45.0.67 and not 123.0.45.67, but with the IPv6 implementation, 123:45::67 is unambiguous.

    55. Re:Should have gone to A.B.C.D.E.F.G format. by sjames · · Score: 1

      Could you explain how that behavior would change at all with the advent of IPv6? I'm certainly not claiming you're wrong, but until I have a direct pipeline to the internet running to the house, I still have to go through some sort of ISP.

      Because the RFCs call for handing out nothing smaller than a /64 (for auto configuration purposes). It's hard to justify charging a significant amount for a resource that is practically unlimited (such as IPv6 addresses) but easy to justify for a scarce resource (like v4 addresses).

    56. Re:Should have gone to A.B.C.D.E.F.G format. by Anonymous Coward · · Score: 0

      Then why should us humans use it on our computers?

    57. Re:Should have gone to A.B.C.D.E.F.G format. by Fulcrum+of+Evil · · Score: 1

      They shouldn't. Use domain names instead. The only time you need to see ip addresses is when configuring a router or something like that, and that is usually something a network admin does.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    58. Re:Should have gone to A.B.C.D.E.F.G format. by Dolda2000 · · Score: 1

      I can remember which computer is 192.168.0.11 on my local network easily enough

      Well, in all honesty, that's just easy because the 192.168.0.0/24 prefix is just standard, no? As for my local 6to4-based IPv6 network, I can easily remember the standard addresses that I've set, like 2002:52b6:8514:100::1, since "2002" is the standard 6to4 prefix, "52b6:8514" is just the hex encoding of my public IPv4 address, and "100" is a prefix that I've chosen for that subnet. Even if it were not easy to remember in itself, it gets stuck quickly in muscle memory. Sure, it may not be terribly easy to recite over a phone line or so, but how often do you do that with IPv4 addresses anyway?

      It's certainly forward-thinking, but having (estimated) fewer atoms in the universe than IPv6 addresses available is just slightly overkill, doncha think?

      Well, no. The reason for the large addresses is not so much just to have many addresses, but to arrange for simpler routing. In many ways, 128 bits may have been underkill. The last 64 bits are normally reserved for each local link (that may be considered overkill, though), so that leaves only 64 bits to arrange for hierarchical routing.

      And that's really the primary reason for backbone providers to switch to IPv6, the way I've understood it. We're not even almost out of IPv4 addresses, after all, but not having to have routers capable of 100 000+ lines of routing tables because the address space is so fragmented seems to be kind of appreciated.

    59. Re:Should have gone to A.B.C.D.E.F.G format. by DGolden · · Score: 1

      Silly python implementation of a revised variant here

      --
      Choice of masters is not freedom.
    60. Re:Should have gone to A.B.C.D.E.F.G format. by Sentry21 · · Score: 1

      Well as Windows 98 didn't have SP2, I'm assuming you mean XP...

      My cable provider blocked broadcast packets, so no one in our neighborhood could see anyone else any better than the rest of the world could see you, which was good. Broadband routers only help because they provide firewalling (a NAT necessity); the same could be done on new routers using IPv6; just have the router block incoming connections by default, and allow specific ports using... well, whatever protocol comes up. NAT-PMP seems oddly named for that, but it should work, as should UPnP.

      For an anecdote to compliment your complaint about viruses on Windows, a professor at my university once had his computer plugged into the network while installing Windows. It turns out Windows brings up the network during the install process. End result, his computer was infected with blaster before he was even done installing Windows. Pretty sad.

    61. Re:Should have gone to A.B.C.D.E.F.G format. by rtb61 · · Score: 1

      So why is email any different from a phone answering machine, especially a voip answering machine? Think a home website more as an answering service for all the incoming communications (even while you where out with wireless and IP mobile), with a confirmation of who you are as well as of course the logical expression of social networking ie. why myspace or facebook, when you can roll and control your own, all you need is the linking infrastructure.

      --
      Chaos - everything, everywhere, everywhen
    62. Re:Should have gone to A.B.C.D.E.F.G format. by mazarin5 · · Score: 1

      Half-assed python:

      address="1080:0:0:0:8:800:200C:417A"
      consonants = "bdfghjklmnpstvxwz"
      vowels = "aeiou"
      squibble = ''
       
      # parse the address
      chunks = address.split(':')
      n = len(chunks)
      x = ''
      for i in range(0,n):
              if chunks[i] == '':
                      x += chunks[i].zfill(4*(9-n))
              else:
                      x += chunks[i].zfill(4)
       
      # change to base 10
      x = int(x,16)
       
      # change to base 85 syllables
      while x != 0:
              m = x/85
              r = x - m*85
              x = m
              squibble += vowels[r%5]
              squibble += consonants[r/5]
       
      # string is built backwards, so fix it
      squibble = squibble[::-1]
       
      # print out in pretty groups
      print squibble[0:8] + ' ' + squibble[8:16] + ' ' + \
      squibble[16:24] + ' ' + squibble[24:32] + ' ' + squibble[32:40]

      --
      Fnord.
    63. Re:Should have gone to A.B.C.D.E.F.G format. by Anonymous Coward · · Score: 0

      HA! That is pure genius man. Nice to see other people with demons on the brain.

  43. My gut feeling? by coryking · · Score: 1

    IPv6 will fail and be replaced with a very different network stack where things like TCP/IP are abstracted away.

    Why do I say this?

    1) The world is document centric, not IP address centric. I want to access a collection of named documents and services from "slashdot.org". I dont care if these come to me by IPv4, NetBUI, IPX/SPX, Token Ring or Carrier Pigeon. I want to get "slashdot.org" and I want to make sure "slashdot.org" really is "slashdot.org" and not "somephishingsite.com"

    2) "End 2 End" isn't a selling point. I dont want my home network to be publicly visible.

    3) Protocols that route around my desire for #2 succeed. All good P2P clients support UPnP.

    3.1) Protocols that do not work with my desire for #2 fail. See Active FTP and the failed or failing IM networks and IM software that do not transfer files over NAT.

    4) Those P2P clients are proof that how documents get to me are independent of the underlying link. I have no doubt that BitTorrent could be easily adapted to operate as a wire protocol on 802.11g or on top of IPX/SPX.

    5) If (and a big one) IPv6 got any traction, smart entrepenuers will began creating new services or modify existing ones like BitTorrent to operate and bridge IPv4 and IPv6. Really smart ones will most likely realize that once they abstract TCP/IP out of their design, they can do other "fun" things like implement their file sharing network directly over WiFI or some other mesh type network.

    Conclusion?

    IPv6 might take off,but I doubt it. Once IPv4 addresses get scarce and there is a real cost to staying "IPv4", some young buck will have invented a whole new way of networking and we'll migrate to that instead.

    1. Re:My gut feeling? by Sentry21 · · Score: 2, Interesting

      I've been thinking about this sort of thing for ages, mostly in conjunction with ponderances on things like interplanetary news.

      Between Earth and Mars, you can't FTP - the RTT is so long that the protocol-specified maximum timeout expires before a response can be returned to you. Obviously loading up a web page would be a senseless waste of time. We would need a way of transporting or requesting information in batches in order to effectively communicate things like news between planets.

      In my mind, while at university, I envisioned a system consisting of 'packages', which contained some data or subset of data. It could be an entire website (which, for many companies, is merely a brochure, menu, etc. anyway), part of a website (an updated to a company's product information pages, for when e.g. Apple ships a new iMac), or even a single file - a press release, news clip, etc.

      Each parcel of information would belong somewhere in a heirarchy. You could start with 'Apple' and grab their default content (say, most of what's on their website at first glance), and then delve deeper into areas like 'support', 'developer info', and so on. Those packages, while not necessarily retrieved by default, could be requested, and would slot into the heirarchy. Without them, you see that they're there and what kind of content is available; you can then request the content be updated, and when the 'package' arrives, you suddenly have access to that content as well.

      Likewise, you could start issuing specific identification that computers could use to narrow down who you're looking for. Instead of www.apple.com, you could just do a search for 'Apple Computers' or 'Apple, Inc', and you would be able to find relevant information from (and about) the company. Because we can now uniquely identify business electronically, it's easy for someone writing a news article to 'tag' the article as being about Apple, Inc., and your client can do any associations you might want - stock updates, press releases (especially relevant press releases to the story), and so on, and whatever isn't local can be updated.

      Obviously, this would require two things; firstly, a complete overhaul in the way the internet works; secondly, local (possibly hierarchical) caches wherever relevant, so that information doesn't need to be transmitted multiple times. Also, the caches can pre-fetch or be pre-seeded content ahead of time, so that (for example) major/popular news sites could send updates to their content in batches every hour/day/etc.

      Because everything in this scheme would be tagged, dated, and versioned, it would be trivial to do a search for 'what this document (e.g. website) looked like in 2005', or 'a news article about communism from last Wednesday' or what have you.

      Somehow, though, I think this sort of thing is a long ways off. Then again, maybe not.

    2. Re:My gut feeling? by mikael_j · · Score: 5, Insightful

      1) The world is document centric, not IP address centric. I want to access a collection of named documents and services from "slashdot.org". I dont care if these come to me by IPv4, NetBUI, IPX/SPX, Token Ring or Carrier Pigeon. I want to get "slashdot.org" and I want to make sure "slashdot.org" really is "slashdot.org" and not "somephishingsite.com"

      So what you're saying is that you have no real reason to be anti-IPv6?

      2) "End 2 End" isn't a selling point. I dont want my home network to be publicly visible.

      So stick it behind a firewall that blocks incoming connections to all IP-addresses assigned to you unless you allow them?

      3) Protocols that route around my desire for #2 succeed. All good P2P clients support UPnP. 3.1) Protocols that do not work with my desire for #2 fail. See Active FTP and the failed or failing IM networks and IM software that do not transfer files over NAT.

      So, you'd rather have ugly workarounds than see the internet work the way it's supposed to work?

      4) Those P2P clients are proof that how documents get to me are independent of the underlying link. I have no doubt that BitTorrent could be easily adapted to operate as a wire protocol on 802.11g or on top of IPX/SPX.

      See answer to #1

      5) If (and a big one) IPv6 got any traction, smart entrepenuers will began creating new services or modify existing ones like BitTorrent to operate and bridge IPv4 and IPv6. Really smart ones will most likely realize that once they abstract TCP/IP out of their design, they can do other "fun" things like implement their file sharing network directly over WiFI or some other mesh type network.

      Have you even heard of the OSI model? Why in god's name would you want to have a Layer 3/4 P2P protocol? That's what TCP and IPv4/IPv6 are for.

      /Mikael

      --
      Greylisting is to SMTP as NAT is to IPv4
    3. Re:My gut feeling? by coryking · · Score: 1

      So what you're saying is that you have no real reason to be anti-IPv6?

      No, I'm not anti-IPv6 any more than I'm anti IPX/SPX. At an application level (i.e. writing this comment on slashdot), I could care less how this web page got here as long as I know I'm posting to slashdot and slashdot knows I'm "coryking". IPv6 will not get widespread adoption because it is boring, old technology that doesn't solve any new problems. It just puts a quick bandaid on old ones like "IP addresses".

      I certainly wouldn't bank my stock portfolio on IPv6 companies though.

      What I would bank on is when IPv4 becomes too costly to run because of address scarcity, we'll see a lot of new proprietary protocols that fix all the pain caused by the old TCP/IP mindset. Pain like identity management (and anonymous). Pain like not loosing my SSH session hopping around between WiFi access points. Pain like NAT (NAT is pain, but it is also the best hack we have right now for privacy.. IPv6 alone doesn't solve the privacy part). Pain like having some kind of "address" that I "own" (like my cell phone number... that thing goes with me independent of the provider I use... not so with IPv6/4).

      No. IPv6 offers nothing new and no compelling story to get people to spend their money on it. What is clear is the end times are probably near for IPv4 and companies, governments and consumers will all be looking for ways to solve their pain. I just dont think IPv6 is what most will spend their money on. I think it will be something completely different.

    4. Re:My gut feeling? by Anonymous Coward · · Score: 0

      Yes, yes. We need to invent some kind of Domain Name System where clients can simply use Names like Slashdot.org to access requested services and documents? But what should we call such a Domain Name System? Well, I give up.

    5. Re:My gut feeling? by coryking · · Score: 1

      you are actually onto something there. The trick to all this isn't going to be found in dull things like TCP/IP but in DNS, LDAP or some new directory service. It is really the "finding shit" space that needs a significant tune up. Make "finding shit" work, and it wont matter what flavor of IP you are using.

    6. Re:My gut feeling? by symbolset · · Score: 1

      Between Earth and Mars, you can't FTP - the RTT is so long that the protocol-specified maximum timeout expires before a response can be returned to you. Obviously loading up a web page would be a senseless waste of time. We would need a way of transporting or requesting information in batches in order to effectively communicate things like news between planets.

      NASA, oddly enough, already has an interplanetary network protocol. It seems to be working pretty well. Since it's a work of the US government licensing shouldn't be an issue. I don't know if it scales to billions of nodes yet, but then the Internet was once ten computers connected via serial cable. Anyhow, they've solved most of the issues of concern in your post.

      --
      Help stamp out iliturcy.
    7. Re:My gut feeling? by QuoteMstr · · Score: 4, Insightful

      Have you even heard of the OSI model? Why in god's name would you want to have a Layer 3/4 P2P protocol? That's what TCP and IPv4/IPv6 are for.

      I've noticed that most technical people pass through a phase where they want to do everything themselves, where writing to the bare metal is cool. We've all had that urge at one time or another. It takes a certain amount of humility and world-weariness to realize that there's plenty of good work that's already been done.

    8. Re:My gut feeling? by theM_xl · · Score: 1

      So stick it behind a firewall that blocks incoming connections to all IP-addresses assigned to you unless you allow them?

      Ah, but that's more work than I'd be doing now. There's also the fact that with NAT nobody outside knows for sure there's more than the single machine connected. Security through obscurity may not work in most situations, but it IS an additional layer.

    9. Re:My gut feeling? by amorsen · · Score: 1

      There's also the fact that with NAT nobody outside knows for sure there's more than the single machine connected.

      It is generally trivial to find out whether a traffic pattern is coming from one or several machines, whether they are behind NAT or not. The only thing you can't find out easily is which private addresses are in use. Not really a problem, there are only 4 billion IPv4 addresses, just try them all.

      --
      Finally! A year of moderation! Ready for 2019?
    10. Re:My gut feeling? by TheThiefMaster · · Score: 1

      The closest we can get to that is with HTTP/1.1, using HTTP Pipelining which needs two requests:
      Request page, using HTTP/1.1 with "Connection: keep-alive" header.
      Receive response, hopefully a "HTTP/1.1 200 OK" with another "Connection: keep-alive" header.
      Request all the images etc on the page one after the other in the same connection, without pausing for responses.
      Receive all the responses.

      With suitably set cache headers to allow local caches to serve the page without the delay.

      The only way to improve this is to add an additional response type, e.g. "HTTP/1.1 210 Additional", which the server would use (along with the "Location:" header) to give additional responses that it thinks the client needs or will need without them being requested.
      i.e.:
      Client: (on earth)
      GET / HTTP/1.1
      Host: uni.mars
      Connection: keep-alive

      Server: (on mars)
      HTTP/1.1 200 OK
      Connection: keep-alive

      --Data of index.html--

      HTTP/1.1 210 Additional
      Connection: keep-alive
      Location: /style.css

      --Data of style.css--

      HTTP/1.1 210 Additional
      Connection: keep-alive
      Location: /logo.png

      --Data of logo.png--

      etc.

    11. Re:My gut feeling? by Sentry21 · · Score: 1

      The problem is that the RTT to Mars can be as high as (about) 2600 seconds, and I don't know any server that's going to wait 45 minutes for a reply, or any client that will wait 45 minutes for an answer from the server. Keepalives and your suggestion (what basically amounts to cache seeding or push prefetching) are great, but on top of a protocol like HTTP it doesn't make sense.

      Heck, even TCP requires a SYN, ACK/SYN, ACK handshake, which means that even opening a TCP connection could take a little over an hour, plus another 20 minutes to get the data for your reply. Not very sensible, IMHO. A simple HTTP request ('Hey, can I have /index.html?') would take an hour and a half to get a reply. Not very sensible.

    12. Re:My gut feeling? by TheThiefMaster · · Score: 1

      So we're not going to really be able to visit Martian websites then :(
      Technically HTTP doesn't have to be over TCP, but regardless you're not going to get a reply sooner than the RTT to Mars without faking it with a local cache (and having an expires time on the page of more than the RTT to Mars) or using dns trickery to direct requests to uni.mars to a local server on the same planet as them.

      Incidentally, anyone know if the http "Expires:" in x seconds header is measured from the time the request is sent, the response is sent or the time the response is received? Normally latency is low enough for this not to matter, but in cases like this...

  44. Why it's really a good thing by geekmansworld · · Score: 1

    Whenever asked how any normal personal will remember 16-character hexadecimal addresses, IPv6 proponents always scoff and reply simply, "Well that's what we have DNS for..."

    This in my opinion is a terribly short-sighted answer. As Dan Kaminisky recently revealed, our existing DNS system is terribly fragile. I'm sure there are scores of system administrators out there who still rely on remembering IP addresses to manage and configure their networks. Take away that ability and suddenly everyone is dependant on DNS, which is badly in need of a redesign, and local naming schemes, such as WINS, Bonjour and locally-implemented DNS, which is highly inconsistent.

    Let's get naming schemes working properly first before we leap headfirst into non-memorable addressing. That's where the IPv6 crusaders should be focusing their efforts if they want to see movement on this issue.

    1. Re:Why it's really a good thing by iburrell · · Score: 1

      IPv6 could make the recent spoofing attack against DNS much harder. Instead of randomizing source ports, it would be possible to randomize source addresses. Each request could have a random address. There is enough space in the 64-bit local address part to make spoofing attacks infeasible. Unfortunately, rapidly changing IP addresses is not something operating systems and network infrastructure cope with.

  45. Why I don't use ipV6 yet by davidwr · · Score: 1

    ONE:

    If I did, I'd have to get a new hardware firewall and learn how it works well enough to trust it.

    NAT, for all its ills, is very easy to understand from a firewall perspective:
    Any unsolicited packet that isn't specifically forwarded to a specific machine inside the LAN literally has nowhere to go and gets dropped. That's easy to understand, easy to trust, and as a router firmware designer you have to go out of your way not just be careless to mess it up.
    IPV6 doesn't use NAT, which means before I buy a firewall that protects me, I'll have to not only learn how it works but learn how trustworthy and competent the company that made it is.

    TWO:

    I'm not even sure my ISP allows it, and rolling my own tunnels is just too much effort for too little payback. The cure for this may be government intervention and/or incentives. For example, if the IRS web site went ipv6-only for a day next March, with an ipv4-version notice that "if you can't see this page, you won't be able to do your 2009 taxes next year" that would get ISPs on the ball.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  46. Why bother? by Epsillon · · Score: 3, Insightful

    Until such time as some of the larger sites like, say, oh, I don't know, how about SLASHDOT get their finger out and install IPv6, people aren't going to bother. As a probably flawed analogy, would you buy a top-of-the-range games console with wireless everything and teraflops of processing power if there was not a single piece of software to run on it? Actually, this being Slashdot, you probably would just for bragging rights, especially if said CPU had a cool name like cellPwner pro or something. I know, bad analogy.

    ; > DiG 9.3.4-P1 > slashdot.org AAAA
    ; (1 server found)
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

    ;; QUESTION SECTION: ;slashdot.org. IN AAAA

    ;; AUTHORITY SECTION:
    slashdot.org. 3149 IN SOA ns-1.ch3.sourceforge.com.
    hostmaster.corp.sourceforge.com. 2008080600 14400 1800 604800 3600

    ;; Query time: 0 msec

    Go figure. This is why IPv6 isn't taking off and a pox on anyone who says otherwise. Trying to blame sysadmins for not deploying IPv6 is a downright insult. We're ready, Slashdot. Google's ready. A whole raft of other sites have connectivity and are ready. Looks like you're not.

    --
    Resistance is futile. Reactance buggers it up.
  47. That is because of religion by coryking · · Score: 1

    After all, if you allow for private addresses, then our Utopian world of every device connecting to every other device will be gone.

    Reminds me of the dogma from Tim Berners Lee & Crew about the semantic web business.

    Who cares if something like NAT makes sense. Who cares if the "semantic web" is unworkable in the real world? Being practice makes life easy and doesn't have pain. Being unworkable just gives you something to strive for.

    And like any good region or liberal cause, if we aren't feeling pain, we should be guilty.

  48. the P2P guys will figure it out by coryking · · Score: 1

    They'll route around everything just like they are routing around the RIAA, throttling or anything else.

    In fact, I think it will be the P2P guys that get us out of the old-school way of thinking about networking. IPv6 will not take off because we've outgrown the abstractions offered TCP/IP. We will abuse IPv6 the same way we abuse IPv4--they are square pegs trying to work in modern round holes.

    1. Re:the P2P guys will figure it out by wizden · · Score: 1

      Do you have any idea what you're talking about? I am actually curious. Do you have a replacement for the "abstractions" of TCP/IP. The internet will continue on because of us network engineers implementing IPv6 in the core and extending it to the edge. The internet routes around "everything" because of science and engineering. It isn't a political statement or new age concept.

    2. Re:the P2P guys will figure it out by coryking · · Score: 1

      You know what? The telephone company still continues on connecting wires as well. Our concept of "network" will evolve past both "end 2 end" and "connected wires". Sure TCP/IP will be around forever but it won't matter just like ATM, SONET, DSL, T1, OC3, ISDN and POTS are all still around but I dont care which of those I use to connect to the internet.

    3. Re:the P2P guys will figure it out by Eco-Mono · · Score: 1

      If you believe this you don't understand IPv6 multicast, or you don't believe that the ISPs will implement it.

      --
      (rot13) rpbzbab@tznvy.pbz
    4. Re:the P2P guys will figure it out by j+h+woodyatt · · Score: 1

      Well, I for one don't believe ISP's will implement IPv6 multicast, even if they can be dragged kicking and screaming into implementing IPv6 unicast, which I'm not sure I believe either.

      Certainly not all of IPv6 multicast will ever see the light of day. The best you can expect is that ISP's will allow, for an extra monthly charge of course, their business and enterprise customers to originate source-specific IPv6 multicast with global scope.

      You can forget all about any-source multicast. It's dead.

      --
      jhw
  49. Re:how fast? by Daimanta · · Score: 1

    I don't know! waaaaaaaaarrrgghhhhhhh!

    --
    Knowledge is power. Knowledge shared is power lost.
  50. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  51. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  52. Not how the net is used anymore by Anonymous Coward · · Score: 0

    I think IPv6 will never catch on because its not how we use the internet. The concept of a "global flat namespace" is not desired by corporate America. The closest we want to get is DNS. Sysadmins want control of their network. Flat networks are pointless.

    The next big leap will be the use of IPv4 over virtual networks. Something along the lines of the current VPN technology, but where every computer is "always on" many networks, instead of the current "one network only" rule.

  53. this is kindof misleading... the number of hosts by LukeCrawford · · Score: 1

    accessible via IPv6 (and the number of clients able to reach IPv6 hosts) is probably more important than the amount of traffic. all of my customers are dual-stack, and while only a trickle of data flows over IPv6, any customer can seamlessly connect to an IPv6 server over IPv6.

    the problem is that a large percentage of people on the net need to be dual-stack (or otherwise able to access IPv6) before anyone serious goes IPv6-only.

    the thing is, IPv6 is a much happier world for us all (both admins and end users) than nat hell. Sure, Nat seems to work ok at one level, when you split a single IPv4 address with your entire home network... but what happens when the ISP does the NAT and you have no public IPs at all? this will cut into your bittorrent habit.

    Personally, I suspect that we will see a huge amount of IPv6 hype as the v4 pool runs out... I'm not saying that IPv6 will win, just that there will be a lot of hype.

    Either way, things will get interesting. NAT hell will finalize the 'two tier' internet that was begun when ISPs started handing out dynamic addresses to dialup/dsl customers. Internet access behind NAT is largely a client-only experience, and many existing apps don't work well behind NAT (like bittorrent... remember, you can forward ports now, but at v4 runout, ISPs will start handing out NATted addresses to end users. and they are unlikely to forward ports for you.)

    IPv6 has its own challenges... the biggest problem with IPv6, though, is the chicken and the egg. Until more hosts support IPv6, there's not much point to using it.

  54. congested? really? by LukeCrawford · · Score: 1

    as far as I can tell, most of the tunnels are pretty quick. And most reasonably decent ISPs provide local tunnels for their customers.

    1. Re:congested? really? by petermgreen · · Score: 1

      one big problem is that home nat routers in general don't support acting as the tunnel endpoint and afaict most of the free tunnel services can't be used by a machine that is behind a home nat router.

      The one free service I know of that works behind a nat is freenet6 but their service sucks terriblly especially if you are outside the USA.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    2. Re:congested? really? by LukeCrawford · · Score: 2, Informative

      what about http://www.sixxs.net/ ? they support AYIYA tunnels which should work through nat, and they have European POPs, so it sounds like they might work much better for you.

    3. Re:congested? really? by petermgreen · · Score: 1

      downside of them is they insist on a real name and address (I dunno how seriously they enforce this but going in intending to break the TOS never seems like a brilliant idea) and then publish that in whois.

      The bottom line is for the almost zero benefit that IPV6 gives me I'm not going to pay any extra and I'm not going to reveal my private info to the world.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
  55. there is a lot of IPv4 waste by LukeCrawford · · Score: 1

    the problem is that undoing that waste is very difficult. do you really expect corporations to go through the expense of renumbering inefficient assignments, and then to *give away* a scarce resource? a scarce resource that may become quite valuable in 3 years?

    1. Re:there is a lot of IPv4 waste by Anonymous Coward · · Score: 0

      the problem is that undoing that waste is very difficult. do you really expect corporations to go through the expense of renumbering inefficient assignments, and then to *give away* a scarce resource? a scarce resource that may become quite valuable in 3 years?

      THe answer is force them. Many already have. Once the routing tables have changed, to bad so say, if you are using a 1980's config you get wipped out.

      It isn't technically tough to change, just have to convince the politically inept whiners.

  56. Re:this is kindof misleading... the number of host by Ash-Fox · · Score: 1

    IPv6 has its own challenges... the biggest problem with IPv6, though, is the chicken and the egg. Until more hosts support IPv6, there's not much point to using it.

    A lot of IP based software is incapable of using IPv6, I know this from experience when using exclusively a IPv6 address.

    --
    Change is certain; progress is not obligatory.
  57. I Know! How about IPv4x4? by Anonymous Coward · · Score: 0

    Four-octet IP address, four-octet port number, and NATting x NATing.

    Knock that sucker with a 4-by-4.

  58. IPv6 is overengineered by Anonymous Coward · · Score: 0

    The issue as I see it(this is just my personal opinion):
    - IPv6 was designed in a vacuum, it was designed to facilitate automatic readdressing. The dorks who thought this was a good idea A) don't understand applications or sessions and B) have no concept of PCI and the issues this creates with firewalls. "Yes, it just whacks all of your connections and things re-address. Damn application state! Damn database connections"
    - IPv6 was not designed to allow the same kinds of multi-homing that is possible with IPv4 BGP(see readdressing above). Since DNS has its own issues, BGP is the ONLY way to assure the same address is available via multiple providers. IPv6 takes that away
    - IPv6's ICMP equivalent is over engineered. MTU discovery mechanisms are moronic and too deterministic. As a firewall administrator, it should be my decision about what kinds of traffic are allowed through. Making IPv6's ICMP the equivalent to MTU detection, ICMP, and ARP means that more shit will get tunneled through their 'elegant solution'. Lookup ICMP/DNS tunneling if you want examples.

    I have a few more gripes but the IPv6 IETF has done a pore job of marketing their work.

    1. Re:IPv6 is overengineered by Chang · · Score: 1

      This is FUD

      I don't think you understand IPv6 router renumbering.

      You do do an add operation, update DNS, let sessions come up on the new prefix and then delete the old prefix once you are sure all the old sessions are gone.

      IPv4 renumbering does take place even for RFC1918 networks, during mergers or acquisition. When this happens - you end up doing a manual version of the IPv6 process and you still have to manage ending sessions.

      BGP - While it was a stated goal to try to force hierarchical routing tables in IPV6 - this is not a requirement of IPv6 BGP. You can multi-home in exactly the same way than you can in IPv4 BGP. In both cases upstream ASNs are working to try to minimize routing table growth.

      This ICMPv6 rant makes no sense at all. MTU discovery is optional - as an adminstrator - you can decide not to use it. As a firewall administrator - you must know that any rules that allows based on IP type or port number is subject to tunneling abuse. If you want to prevent that you need to use application proxies and not a packet filter.

    2. Re:IPv6 is overengineered by Anonymous Coward · · Score: 0

      I don't think you have ever worked on a sizable network. Renumbering can be a real bitch because of legacy. Existing sessions and legacy applications are a real problem, one in which IPv6's designers wrote a process into where they could have saved themselves time

      Once again, the IETF designed IPv6 to be a hard hierarchical address space. Yes you can not do that but what was the fucking point of once again, going through the work to make it a point when BUSINESSES would never invest in BGP like IPv6 IETF wants?

      My point is yet again, their packet size options, MTU discovery, etc... are all 'very robust' but take little into account on how the real world works. There is a LOT that firewall administrators will never let through. I say this having done my fair share of tackling MTU black holes because of VPN encapsulation and firewall interactions. IOW, same thing as above, the IETF spent a LOT of time trying to make really elaborate features to solve problems. As for the minimum MTU, 1280, that is retarded. VOIP packets are NO WHERE NEAR that size and it will waste a LOT of bandwidth, another example of WTF?

  59. Re:this is kindof misleading... the number of host by LukeCrawford · · Score: 1

    "a lot" ? examples? everything I use on a daily basis in the server space is v6 compatible and has been for a few years now. Clearly, servers will need to remain dual-stack until the v4-only client-side software cycles through, but old stuff that hasn't been updated in a while belongs behind a firewall/gateway no matter what transport the public internet uses.

  60. no, not given away... by Anonymous Coward · · Score: 0

    ...it should be *taken* away from them by law, call it eminent domain for the common good, and turned back to the pool for people to purchase. And place a small cap on how many addys any one entity can buy so they aren't snapped up by squatters. There is no ethical nor technical reason why all those class As should be held by a few companies or dot edus. They just did it in the olden days and now it is obvious it was a rip to the rest of the internet using public.

    1. Re:no, not given away... by darkpixel2k · · Score: 1

      ...it should be *taken* away from them by law, call it eminent domain for the common good, and turned back to the pool for people to purchase

      Sounds like socialism. I can't wait for the government to take money from me, my friends, my family, and the working portion of Slashdot for the 'common good' and give my neighbor free healthcare...I mean seriously--why should he have a job when he can get free welfare, free insurance, free food, etc... Shit--my neighbors purchased a new car with money taken for the 'common good'. It's better than what I can afford while being responsible with my money.

      Just about anything that is done for the 'common good' is socialism wrapped in pretty wrapping paper with an elitist bow.

      If you own something, no one has a right to take it from you. If a company 'owns' a block of IP addresses, you can't take it from them. Your only hope is that ICANN leases it to them and has the power to take it back.

      --
      There's no place like ::1 (I've completed my transition to IPv6)
  61. So how do I switch to IPv6? by jc42 · · Score: 4, Interesting

    I'm actually in one of the rare areas that have more than one ISP. We have three available here. Our current ISP doesn't implement IPv6, so I can't use it. I checked with the other two. Neither of them allows IPv6, either. None of the three admits to any plans to implement it.

    Most people have only one ISP, of course. What incentive does that ISP have to permit IPv6? I mean, here where we have three ISPs, none of them has an incentive to do it.

    I don't see how we can ever switch to IPv6 until the ISPs stop dropping all IPv6 packets, and start forwarding them properly. And that clearly ain't gonna happen without a bit of "government regulation" ordering them to do it or else. But with the current political setup here in the US, that ain't gonna happen, either.

    Anyone have any idea how to persuade the ISPs to come around?

    --
    Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    1. Re:So how do I switch to IPv6? by Whitemice · · Score: 1

      I'm actually in one of the rare areas that have more than one ISP. We have three available here. Our current ISP doesn't implement IPv6, so I can't use it.

      Yes, you can. It is called 6to4 and makes it elementary to tunnel IPv6 over and IPv4-only leg up to the IPv6 supporting backbone.

      --
      Using "Common Sense" is being either to arrogant or to ignorant to ask people who know more about something than you.
    2. Re:So how do I switch to IPv6? by Anonymous Coward · · Score: 0

      It's not that they're dropping it. They're simply not routing it to anywhere... There's a big difference there.

      Most telecom companies are starting to notice the increase in questions from their users about IPv6 and acting on that. If you watch the videos from the Google IPv6 conference in youtube, you'll notice that even cell phones are starting to support it (even my Nokia N95 supports it already). I've been hearing more and more about broadband services enabling IPv6 worldwide. A lot of telecom companies already have IPv6 at least running in experimental states in their networks , so it's only a matter of time... And money.....

      I say money because it's one of the biggest deterrents we have at work. We use a mix of hardware from a few of the top vendors and they're asking for insane sums to support our upgrade to firmware/IOS versions that support IPv6 fully. I cant go into the figures, but it's enough to hire a lot of FOSS developers, put them in a room for a year or more until they leave there with a fully supported IPv6 solution that does all the fancy stuff that the high end routers do.... And that would leave you money to ask them to code support for the latest USB version ;)

    3. Re:So how do I switch to IPv6? by ZosX · · Score: 1

      Well you could always tunnel over an ipv4 network to ipv6. not elegant, but hey it works.

    4. Re:So how do I switch to IPv6? by jc42 · · Score: 1

      It's not that they're dropping it. They're simply not routing it to anywhere... There's a big difference there.

      So what's the difference? Sounds like two ways of saying the same thing.

      If they're not dropping IPv6 packets, and not routing them, what are they doing with them? Putting them into a database, maybe, to be delivered when they enable IPv6? Forwarding them to the TSA or CIA? ;-)

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    5. Re:So how do I switch to IPv6? by Midnight+Thunder · · Score: 1

      First find out all the ISPs in your area and ask them about IPv6 support. Second to get on board while waiting for them to get their act together (assuming they haven't already done so), choose a transition solution. Some include:
          - Freenet6 - http://go6.net/4105/freenet.asp
          - Aiccu - https://www.sixxs.net/wiki/Aiccu
          - Teredo
          - Hurricane Electric - http://tunnelbroker.net/

      --
      Jumpstart the tartan drive.
    6. Re:So how do I switch to IPv6? by Just+Some+Guy · · Score: 1

      Don't switch. Instead, get an IPv6 tunnel and run both protocols in parallel. It's relatively easy and costs nothing, and you'll have access to everything in both address spaces.

      --
      Dewey, what part of this looks like authorities should be involved?
    7. Re:So how do I switch to IPv6? by Anonymous Coward · · Score: 0

      Anyone have any idea how to persuade the ISPs to come around?

      At the point in time where none of those ISP's can get an additional IPv4 address block (and therefore can't grow), they'll be very surprised to find competition connecting new customers with IPv6 (and carrier-grade NAT to IPv4 for backwards compatibility). No reason to persuade them to come around, but be ready to switch your own service quickly before they go under...

  62. tunnel brokers by LukeCrawford · · Score: 1
    really? define 'sucks terribly' (as in ping times)

    I guess they figure that if you are advanced enough to want IPv6 you can setup a PC router. Hm. I wonder what the operational costs of running a free V6-UDP-V4 tunnel broker would be.

    1. Re:tunnel brokers by petermgreen · · Score: 1

      right now the ping times don't look too bad (200 ms for crossing the atlantic twice is actually) but I have seen times of double that in the past on freenet6.

      The point is for anyone outside north america freenet6 is going to range from poor to terrible and as I said i'm not aware of any other free tunnel providers that work behind nat. And many ISPs don't provide tunnels, don't provide tunnels that will work behind nat or pull stupid shit like only giving out /64's (meaning unless you want to do without the only autoconfiguration system that XP supports you can only have one subnet)

      Hm. I wonder what the operational costs of running a free V6-UDP-V4 tunnel broker would be.
      probablly quite high, especially if you are not a major ISP.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    2. Re:tunnel brokers by xaxa · · Score: 1

      There is an anycast address for the nearest 6-to-4 tunnel -- 192.88.99.1. I set up Ubuntu to use this, and it's only adding 20ms or so to a ping time (pinging www.ja.net and gb.archive.ubuntu.com, since I'm in England).

      http://www.whatismyipv6.net/?s=IPv6_ping will ping my IPV4-in-IPV6 address, but I don't know if that works generally. There is an HTTP server on 2002:5d60:60bd::1, but no one has accessed it over IPV6 yet -- I don't know if it works.

      I had to telnet to my NAT router and give it a firewall rule to forward protocol 45 to my PC, which is probably a showstopper if your router doesn't let you do this.

  63. Take a look at Van Jacobson by coryking · · Score: 1

    He basically states the case that we are where circuit switching was at it's "end times". Gray beards from old telcos used to think the packet switching nerds with their new fangled TCP/IP were nuts. Jacobson claims we are now at the state where the level of abstraction we operate at calls for something different where it doesn't matter if the data comes from TCP/IP, NetBEUI, the toster or as a signal modulated in my cats meows. He is right. We should stop worrying about *how* our services connect and start worrying about the data they are sending gets to us.

    http://video.google.com/videoplay?docid=-6972678839686672840&hl=en

  64. Which law? by LukeCrawford · · Score: 1

    who has jurisdiction over the internet? many of the biggest wastes were allocated before ICANN existed.

    before you start calling for government intervention, remember that it isn't just your government that is involved here.

  65. The TechNet FAQ by westlake · · Score: 1
    the user must have to have an IPv6-ready OS : nothing to do for GNU/Linux, a choice in a menu for MacOS, but a pain in Windows
    .

    IPv6 for Microsoft Windows: Frequently Asked Questions [Updated January 10, 2008]

    What is new about IPv6 support in Vista and Windows Server 2008?

    Installed and enabled by default
    GUI based configuration
    DHCPv6 support
    Etc.

    How can I tell if the ipV6 protocol is installed for Windows XP?

    To determine whether IPv6 is installed, type ipv6 if at a command prompt. If IPv6 is installed, you will see a display of your IPv6 interfaces and their configuration. Otherwise, the Ipv6.exe tool will indicate that IPv6 is not installed.

    How do I install ipv6 protocol for Windows XP? SP2 or later.

    [Four methods step-by step]

    {from the Network Connections dialog box}

    6. In the Select Network Protocol dialog box, click Microsoft TCP/IP version 6, and then click OK.

    from the Windows XP desktop, click Start, point to Programs, point to Accessories, and then click Command Prompt. At the command prompt, type netsh interface ipv6 install.

  66. I existed before NAT by coryking · · Score: 1, Insightful

    And hell, I used to run ip_masq on my hand-me-down machine to get out on the interweb.

    You know what? You have no rights to my private network. NAT keeps you out of my affairs. It causes me some troubles, yes, but those troubles are far less costly then letting you snoop around my network.

    Firewalls that filter my data without going through a "portal" like a public/private address space are too insecure for me to trust. I feel much beter knowing you cannot, realistically, route into my network. A network that was [public-ip] [firewall] [public-ip] means once an attacker gets through the firewall, it is much easier to route packets in and out.

    I'm not even going to get into the reason the "big boys" use nat. They do it because private address space is portable and doesn't bind you to a provider. Since not everybody can be multihomed both on IPv4 or IPv6, it is a significant risk to invest your IT infrastructure in what is basically a proprietary IP address block.

    Remember when if you switched cell phones, you'd loose your cell phone number? Same thing at work here.

    1. Re:I existed before NAT by xZgf6xHx2uhoAj9D · · Score: 3, Informative

      Firewalls that filter my data without going through a "portal" like a public/private address space are too insecure for me to trust.

      And yet they're more secure than NAT, which you do trust?

      Ever wonder how you're able to receive calls on Skype through NAT? I'll give you a hint: your network is not terribly private behind NAT ;). Private from TCP packets, sure, but NAT has to be incredibly stupid when it comes to UDP.

      If you want to keep your network private, you should get a firewall that keeps your network private. NAT does not do that, but there are a lot of firewall implementations that will.

      In short, when it comes to security, public IP + firewall > NAT.

    2. Re:I existed before NAT by coryking · · Score: 2, Insightful

      I still dont buy it. Sorry. It just feels so natural to place my network on private, publiclly unprofitable address that I feel it is insane not to. It is so damn intuitive to me, and probably alot of other people--it feels like a violation of our core being when we let our personal computers sit out on the big bad internet.

      The "NAT is evil" argument just doesn't sit right. Sure it causes some pain, but only in stupid protocols that don't know how to use UPnP or do stupid things like active FTP.

      If you create a modern protocol that doesn't account for NAT, you created a protocol that will fail in the marketplace because people will blame your product, not their cute little netgear router.

      But honestly, when you boil it down we are both right and we are both wrong and are basically talking past eachother. The "fear" of mine about privacy and security is valid, and your concerns about being NAT being a pain in the ass is also valid. The true cuplrit here is we are asking more from our network stack (IPv4/6) then it can give us. Hence the point of my original post... the time of TCP/IP is coming to an end and we need to find better network protocols that make my security/privacy concerns go away and make thins less of a pain in the ass for you.

    3. Re:I existed before NAT by QuoteMstr · · Score: 4, Insightful

      If people like you ran the world, we'd still be afraid of using fire to cook meat, or of sowing grain to produce wheat. Fortunately, the world is usually run by people who apply reason.

      The OP is right. Packet filtering has nothing to do with NAT, and it's only your paranoia (or trollishness) that's preventing you from seeing that.

    4. Re:I existed before NAT by asdfghjklqwertyuiop · · Score: 1, Interesting

      You know what? You have no rights to my private network. NAT keeps you out of my affairs. It causes me some troubles, yes, but those troubles are far less costly then letting you snoop around my network.

      Firewalls that filter my data without going through a "portal" like a public/private address space are too insecure for me to trust. I feel much beter knowing you cannot, realistically, route into my network. A network that was [public-ip] [firewall] [public-ip] means once an attacker gets through the firewall, it is much easier to route packets in and out.

      You don't know what you're talking about. What on earth is this "portal"?? NAT doesn't keep people out of your affairs. Some people, perhaps many people, CAN route to your network. If your ISP created a route for your RFC1918 blocks, everyone connected to that ISP would be able to get into your affairs if you don't have a firewall that drops those packets. Practically all cable ISPs and some DSL providers plop all their customers on one big logical ethernet. Any of those people can, in theory, set up a route for your private network gateway via your public IP address.

      The ONLY thing keeping all these people off your network is your firewall. And guess what? That firewall works exactly the same way without NAT.

    5. Re:I existed before NAT by coryking · · Score: 1

      The IETF doesn't run the world either and despite them trying, nobody is gonna upgrade to IPv6.

      And dont get pedantic about NAT/Packet Filtering/Firewall with me. The point is you are still gonna have to punch holes though your "filter thingy" and all filters have the same problems. You have to first trust them and second tell them to punch holes in their firewalls for you.

    6. Re:I existed before NAT by dbIII · · Score: 1
      That's all irrelevant since there is going to be one way in to the area you control with or without NAT. You can even have a firewall, spam filter, even content filter plus transparent web proxy if you like on a bridge without it even having an IP address. Inputs and outputs are still at the IP level - aimed squarely at waht is behind it. Whatever gets behind it is whatever you let in, same as it has been even before we had NAT.

      Of course if you want to change anything you need another temporary way in.

    7. Re:I existed before NAT by bit01 · · Score: 1

      The "fear" of mine about privacy and security is valid,

      No it's not. Privacy and security is orthogonal to NAT'ing. By far the biggest hole on your network is all the software you're running on your computers (probably much of it un-audited and capable of sniffing your "private" network) that can happily "phone home" (using http if nothing else) and that has nothing to do with NAT.

      You've confused addressing with security. Just because Fort Knox has a well known address doesn't mean it's any less secure and all the craptastic workarounds to make hosts behind a NAT addressable do not substitute for real, actual, systematic addressing.

      I think you need to think about what "addressing" actually is. A workaround to get through a NAT is just another, albeit messy, form of addressing that is just as easy/hard to use for regular software as it is for malware. And making addressing hard for regular software just to make it hard for malware is not thinking it through.

      There are a host of applications where being able to easily and systematically address hosts in a "private" network would be a good thing.

      ---

      Don't be a programmer-bureaucrat; someone who substitutes marketing buzzwords and software bloat for verifiable improvements.

    8. Re:I existed before NAT by Just+Some+Guy · · Score: 1

      It just feels so natural to place my network on private, publiclly unprofitable address that I feel it is insane not to. It is so damn intuitive to me, and probably alot of other people--it feels like a violation of our core being when we let our personal computers sit out on the big bad internet.

      Here's some patchouli and a campfire songbook. News flash: your computer doesn't feel jack. Network admins who know about this stuff and tell you that you're wrong don't feel that they might be right. All the warm fuzzies in the world won't make NAT more secure than a stateful firewall, and the sooner you apply thinking and reasoning to the idea, the sooner you'll understand why.

      --
      Dewey, what part of this looks like authorities should be involved?
    9. Re:I existed before NAT by coryking · · Score: 2, Insightful

      By far the biggest hole on your network is all the software you're running on your computers

      Only because I've taken the steps to plug up the obvious stuff like making it almost impossible to route *into* my network. Now the attacks have evolved to work around the firewall/NAT.

      probably much of it un-audited and capable of sniffing your "private" network

      Audited, yes, but all of my computers are wide open and password free to improve the human factors like, say, the lady getting her pictures off my computer from the laptop (vista does act smart about this, btw, it keeps tract of the network you are connect to and can let you open or shut your "doors" based on your access point).

      There are a host of applications where being able to easily and systematically address hosts in a "private" network would be a good thing.

      Address translation or not, these are still gonna have to punch holes in my firewall (which would clearly be "default deny") and do it in a user friendly way that doesn't require me to log into my broadband router (which would still exist exactly to provide a firewall). ...Speaking of, we'll have to improve our routing protocols to deal with provisioning entire subnets to each customer instead of lumping many customers onto a single subnet. Thats an engineering problem though.

    10. Re:I existed before NAT by coryking · · Score: 1

      And to reply to myself, firewalls wouldn't stop most of the attacks you describe either. These kind of attacks dont operate on the network level but the application level. They'd require the firewall to dig really deep into the packet to see what is up. That kind of digging requires what is now expensive hardware (expensive = more than $50)

      Besides, we stand as much of a chance filtering them out of our networks as we do trying to block BitTorrent traffic on consumer broadband networks. They'll just invent better ways to hide their traffic.

      Stateful routing (i.e. firewalls and NATs) filter out the obvious stuff. Kinda like using SSH doesn't stop people from breaking into your server, but if you "turned of" SSH, people would just sniff your traffic and get your password.

    11. Re:I existed before NAT by Anonymous Coward · · Score: 0

      I just want to point out to readers of this thread that quoting an RFC doesn't mean the one doing the quoting knows what he is talking about.

      Here is a guess: A NAT killed your father and ever since then you've hated NATs, right?

    12. Re:I existed before NAT by eightball · · Score: 1

      nobody is gonna upgrade to IPv6

      You sure like your hyperbole, Mr Gates.. You mean, like, ever?

      You have to first trust them

      And you don't have to trust your NAT implementation?

      Look, IPv6 may make NAT unnecessary, but it will not make it illegal. You will be quite free to advertise whatever addresses you want and translate to whatever addresses you want to use (even IPv4 addresses most likely), use site or link local address, etc..

    13. Re:I existed before NAT by bit01 · · Score: 1

      Only because I've taken the steps to plug up the obvious stuff like making it almost impossible to route *into* my network. Now the attacks have evolved to work around the firewall/NAT.

      I'm sorry, but you've just demonstrated a poor understanding of computer security. Hundreds of thousands of lines of code versus the small number of ports open on a network interface with the small amount of associated code heavily audited? It's not even close.

      Audited, yes, but all of my computers are wide open and password free to improve the human factors like, say, the lady getting her pictures off my computer from the laptop (vista does act smart about this, btw, it keeps tract of the network you are connect to and can let you open or shut your "doors" based on your access point).

      Again, you have no understanding of security. Wide open still means your computers can positively identify each other with public/private keys, packets between them can be encrypted and not routed to the external net at all. No passwords or user interaction required.

      Address translation or not, these are still gonna have to punch holes in my firewall (which would clearly be "default deny") and do it in a user friendly way that doesn't require me to log into my broadband router (which would still exist exactly to provide a firewall).

      Read my post again. When no user intervention is required to punch through a firewall it's called "addressing" (albeit kludged addressing) and it's not firewalling at all.

      ...Speaking of, we'll have to improve our routing protocols to deal with provisioning entire subnets to each customer instead of lumping many customers onto a single subnet. Thats an engineering problem though.

      Sounds like you want to go back to the bad old days of UUCP, where you had to specify all the intermediate nodes to get your file to the destination. Fortunately we've moved beyond that with global addressing, whether on computer networks with IPv6 or in the real world with postal addresses.

      ---

      Don't be a programmer-bureaucrat; someone who substitutes marketing buzzwords and software bloat for verifiable improvements.

    14. Re:I existed before NAT by bit01 · · Score: 1

      And to reply to myself, firewalls wouldn't stop most of the attacks you describe either. These kind of attacks dont operate on the network level but the application level. They'd require the firewall to dig really deep into the packet to see what is up. That kind of digging requires what is now expensive hardware (expensive = more than $50)

      Where did they say that firewalls will stop that type of attack? All I'm saying is the so-called protection provided by NAT, particularly NAT with automated punchthrough, is close to non-existent and is not a justification for it. You are consistently trying to ignore that.

      Besides, we stand as much of a chance filtering them out of our networks as we do trying to block BitTorrent traffic on consumer broadband networks. They'll just invent better ways to hide their traffic.

      Yup, and NAT is useless for protection.

      Stateful routing (i.e. firewalls and NATs) filter out the obvious stuff. Kinda like using SSH doesn't stop people from breaking into your server, but if you "turned of" SSH, people would just sniff your traffic and get your password.

      Like I said, you don't understand security. You can't sniff SSH, that's the whole point of it's use of public/private encryption.

      You're either naive or trolling. If you're deliberately trolling I'd suggest you get a life, you need one. If you're just naive I'd suggest you learn a lot more about security before making any more posts about the subject. Bye.

      ---

      Advertising pays for nothing. Who do you think pays marketer's salaries? You do via higher cost products.

    15. Re:I existed before NAT by ToasterMonkey · · Score: 1

      The "NAT is evil" argument just doesn't sit right. Sure it causes some pain, but only in stupid protocols that don't know how to use UPnP or do stupid things like active FTP.

      Everything you call "stupid" broke BECAUSE of NAT. We need to upgrade all our "stupid" protocols to work around NAT, because IPv4 is insufficient for our current needs. NAT was a necessary evil, NOT something we should embrace when we have a chance to fix the underlying problems.

      Jesus, this is such a silly thing to debate. The Internet needs fewer bolted on pieces of crap that weren't designed to operate together. I just can't understand this defense of NAT. Not wanting to upgrade is OK, but sticking with NAT because it's... NAT, is bizarre. There is no value whatsoever. It is not a free firewall, it takes considerably more effort to make a NAT pass & filter traffic than it does a firewall to filter traffic. Seriously, a NAT is all the intelligence of a firewall plus a ton of unnecessary work to reroute traffic. IPv6 == no more mangling the traffic + same exact firewall logic. All the "good" that you think comes from NAT could be applied to packet filters. You want UPnP to punch holes into your packet filtering firewall automatically? Not impossible. Sounds dumb as hell when I say it like that, but you are the ones telling us NAT is more secure than packet filtering! UPnP was created solely to bypass the NAT "firewall", something that wasn't designed as a security measure in the first place, and just got in people's way. Scary thing is, I don't think most people really WANT a firewall... not if they're all clamoring for UPnP they don't.

      If you just want your crap to work and not have to mess with some network appliance, you really DIDN'T want the kind of firewall you think a NATing device is. You might want a host based firewall though.

  67. Re:I Know! How about IPv4x4? by AmonEzhno · · Score: 1

    I really like the idea :P The question is how to we input it...

  68. Re:how fast? by JWSmythe · · Score: 1

        0. It never managed to get off the ground. :)

    --
    Serious? Seriousness is well above my pay grade.
  69. Can you be more... specific? by greeze · · Score: 1

    equivalent to the allowed parts of contaminants in drinking water.

    Under the Bush FDA, that could be rather a lot.

  70. What regex problem? by CustomDesigned · · Score: 2, Informative

    Looking at an app that uses regex to match both IP4 and IP6 precisely (as opposed to numbers and dots or hexchars and colons), the IP4 pattern is:

    PAT_IP4 = r'\.'.join([r'(?:\d|[1-9]\d|1\d\d|2[0-4]\d|25[0-5])']*4)
    RE_IP4 = re.compile(PAT_IP4+'$')

    and the IP6 pattern is:

    RE_IP6 = re.compile( '(?:%(hex4)s:){6}%(ls32)s$'
                                          '|::(?:%(hex4)s:){5}%(ls32)s$'
                                        '|(?:%(hex4)s)?::(?:%(hex4)s:){4}%(ls32)s$'
            '|(?:(?:%(hex4)s:){0,1}%(hex4)s)?::(?:%(hex4)s:){3}%(ls32)s$'
            '|(?:(?:%(hex4)s:){0,2}%(hex4)s)?::(?:%(hex4)s:){2}%(ls32)s$'
            '|(?:(?:%(hex4)s:){0,3}%(hex4)s)?::%(hex4)s:%(ls32)s$'
            '|(?:(?:%(hex4)s:){0,4}%(hex4)s)?::%(ls32)s$'
            '|(?:(?:%(hex4)s:){0,5}%(hex4)s)?::%(hex4)s$'
            '|(?:(?:%(hex4)s:){0,6}%(hex4)s)?::$'
        % {
            'ls32': r'(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|%s)'%PAT_IP4,
            'hex4': r'[0-9a-f]{1,4}'
            }, re.IGNORECASE)

    Longer, but not any less handy. I mean, what do you care care once the
    expression is compiled?

    1. Re:What regex problem? by Anonymous Coward · · Score: 4, Insightful

      Not any less handy? you have _got_ to be kidding. You expect people to whip that monstrosity up every fucking time they want to match for addresses? When working over a serial terminal on a barely-capable quirky embedded shell? And who the fuck compiles regexes? Programmers, that's who. This represents the core problem - IPv6 addressing seems to have been designed by programmers, not sysadmins.

    2. Re:What regex problem? by cheater512 · · Score: 1

      Nope. The phpBB guys wrote a script to generate the IPv6 regex automatically. :)

    3. Re:What regex problem? by slash.duncan · · Score: 1

      > You expect people to whip that monstrosity up every
      > fucking time they want to match for addresses?

      "No, Mr. Bond, I expect them to die."

      More seriously, while that was to some extent my reaction as well (no less handy? WTF are you smokin'?), every sysadmin worth the name has his own little collection of scriptlets that he uses over and over that make his job easier, and this would be no different. How many do you think are reading this now, and noting it for later googling when it comes time to make the switch and they decide they need it? Write once, source it many times. It doesn't take a programmer to be able to do that, only a sysadmin too lazy to want to whip it up and test it every time it's needed, because why should they when it's already done and they can look it up?

      After the first time, they even have it locally, in the script they used it in last time, so they don't even have to go to the net for it.

      --
      Duncan
      "Every nonfree program has a lord, a master,
      and if you use the program, he is your master."
      R Stallman
    4. Re:What regex problem? by gbjbaanb · · Score: 1

      eh?

      Like r'\.'.join([r'(?:\d|[1-9]\d|1\d\d|2[0-4]\d|25[0-5])']*4) is any easier to remember.

    5. Re:What regex problem? by ConceptJunkie · · Score: 1

      Language, language, Anonymous. The potty-mouths these days.

      As IPv6 becomes more accepted it seems these kinds of expressions would be built into the tools. Unless your Microsoft, software tends to advance towards making repetitive tasks easier over time.

      If you're still "working over a serial terminal ion a barely-capable quirky embedded shell" you either need to upgrade your hardware, or if that's not possible, find tools to make accessing such a device easier, and if that's not possible, raise the rate you charge to work. Not everyone is an expert in QES (Quirky Embedded Shell (tm, pat. pending)) so take advantage of a seller's market.

      Of course, unleashing a string of obscenities requires less thought and effort.

      --
      You are in a maze of twisty little passages, all alike.
    6. Re:What regex problem? by jgrahn · · Score: 1

      Looking at an app that uses regex to match both IP4 and IP6 precisely (as opposed to numbers and dots or hexchars and colons), the IP4 pattern is:

      [Python re monstrosity deleted]

      Longer, but not any less handy. I mean, what do you care care once the expression is compiled?

      Why not just feed it into inet_pton(3) (which surely is available, under some name, in any serious language, including Python) and check for errors?

    7. Re:What regex problem? by Anonymous Coward · · Score: 0

      I'm not sure what's worse. That I believed the parent to be another generated spam, spewing out random crap... until I hit the bottom and read the final few sentences on IPV6. Or that I am still half convinced that it is just a bot and it just parsed the subject better than the usual.

  71. Confucius say by Profane+MuthaFucka · · Score: 1

    Confucius say "Man who upgrade to IPV6 find himself talking to clouds."

    --
    Fascism trolls keeping me up every night. When I starts a preachin', he HITS ME WITH HIS REICH!
  72. That settles it by Anonymous Coward · · Score: 0

    the study concludes 'less than one hundredth of 1% of Internet traffic is IPv6... equivalent to the allowed parts of contaminants in drinking water.'"

    IPv6 is the floater in the pool of IP addresses.

  73. Foo by Anonymous Coward · · Score: 0

    The problem with IPv6 is that it's too ungainly. I an happy with a 32 bit namespace, and would have been happy with a 33 bit namespace, but 128 bit? How many internet aware toasters are you guys planning to build? Who is going to eat that much toast, anyway?

    Also: I can find no clear explanation of scopes in IPv6. Yes, everything has an auto-address. HOORAY. Everything has a MAC address as well, but I don't refer to things by MAC. And I certainly don't want 99% of my clients with a public IP. With IPv4 that is asking for trouble, why would it be any different with IPv6?

    Why didn't we just add 2 more dots, call it IPv5, and prefix all existing addresses with 1.1. ? Seems to me that increasing the address space by a factor of 65536 would have been enough to satisfy demand without breaking everything. Personally, I won't adopt IPv6 until my ISP threatens me at gunpoint. Not only is there no clear reason for me to migrate, but there are several massive disincentives.

    1. Re:Foo by Anonymous Coward · · Score: 0

      I love toast. God, I love toast. And I believe all of China will love toast as well. Our bread-filled world needs IPv6.

  74. Re:You know what's nonsense? by Anonymous Coward · · Score: 0

    Dude, you know there are like 50 ways you could fix it so you never see TT again. And most wouldn't take you any longer than writing that post.

  75. Device/Service Support by The+Moof · · Score: 1
    Of course it's small. From searching AT&T's site (my DSL provider):

    Results of search for: ipv6
    Did you mean: ip ips
    Residential Products and Services
    No results available in this category.

    It looks like they might support it on their business accounts.
    Not to mention alot of devices don't support it yet. I know the DS specifically doesn't. I was actually commended by tech support for asking a "really tough question" when inquiring about IPv6.

  76. The reason's obvious by Anonymous Coward · · Score: 0

    the new address is 4 times longer. 4 times???? That's a freaking over kill. 4 times longer means 2^128/2^32 = 2^96 times larger in this case. That's like 10,000,000,000 distinct ip addresses for every single human on the planet. Sheesh, I'd have thought that the IEEE would be satisfied by 48 or maybe 64. Seriously, who wants to type 8 groups of 4 hex digits like 2001:0db8:0000:0000:0000:0000:1428:57ab
    ?

  77. I see a problem with the reasoning. by jd · · Score: 1

    1. Vendors won't support IPv6 because users don't need it for their current apps.

    2. Vendors won't add IPv6 to their current apps because it's not being supported by vendors.

    I don't see the users getting much input in all of this. The vendors won't create a killer IPv6 app because vendors won't support IPv6 on the network, and vice versa. The user is completely ignored and is totally outside of that equation. But the user is then blamed for the lack of IPv6 adoption on both sides, for failing to demand what was never on the table to begin with.

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
  78. My stupid point. by davolfman · · Score: 1

    In the end aren't we just going through a crapload of trouble to not just route heierarchical domain names? I mean it's not like we USE ip addy's if we can configure things so that we can reliably avoid it. They're just the skeleton upon which we stretch whatever naming system we're using like DNS or SMB.

  79. you're missing the point by commodoresloat · · Score: 1

    They're saying that IPv6 is like poison!!!

  80. Flawed study by jandrese · · Score: 1

    It looks to me like the study didn't really measure the amount of IPv6 traffic on the internet because it only looked for native IPv6 packets, which are extremely rare (as they have noticed) because very very few ISPs implement IPv6. Rather, most people using it are tunneling over IPv4 through tunnel brokers.

    Of course since most people realize that tunnel brokers are basically a waste of time, I wouldn't be surprised if the total IPv6 traffic was tiny even if you counted the tunneled stuff.

    We're in for some painful years shortly where IPv4 addresses are nearly completely out and people have to take crash courses in IPv6. Luckily, most hardware and OSes these days have IPv6 support, so a switchover is possible, but both application developers and ISPs are dragging their heels and making the problem worse.

    Of course running out of addresses doesn't mean the internet breaks outright. People who are already on it will still be able to connect and get where they need to go. It's just new people trying to connect that are going to be out of luck. People on dynamic IP addresses (PPPoE, DHCP) might find themselves waiting and waiting for an IP address when they connect, because their ISP was not able to provision more to handle their growth. New servers will have the biggest problem, you'll probably see a market spring up for second hand IP addresses for people who don't want to wait in line like everybody else.

    --

    I read the internet for the articles.
  81. Slashdot itself ... by Skapare · · Score: 1

    ... has no AAAA records for either "slashdot.org" or "www.slashdot.org".

    --
    now we need to go OSS in diesel cars
  82. What about ... by Skapare · · Score: 1

    ... MediaSentry? Do they have IPv6 access and capability?

    --
    now we need to go OSS in diesel cars
  83. Time for IPv7 by bradley13 · · Score: 1

    Like many of you, I've been following the IPv4 vs. IPv6 story from the beginning. The fact that adoption is proving so difficult is the practical proof of one and only one thing: the IPv6 standard is a mess. The single biggest problem is the lack of backwards compatibility, both on the wire and in text. IPv4 addresses should - and must - be a valid subset of whatever succeeds it. The best thing that could happen would be for the IT world to "get over" IPv6 and throw it out as a hare-brained, ivory tower failure. Start over andreate a new successor that is backwards compatible - there will be essentially no adoption problems.

    --
    Enjoy life! This is not a dress rehearsal.
    1. Re:Time for IPv7 by sega01 · · Score: 1

      There are too many flaws in IPv4 to not want to break compatibility. Most server software supports IPv6 fine, it is just the lazy (or uninformed) people who refuse to roll it out until IPv4 is exhausted. Sure, we could NAT on top of NAT, but we need to break out of the gortesque chain soon. Both of my domains (go-beyond.org and eleuther.net) are fully resolvable and reachable over IPv6. It is difficult for the early adopters, but you have to start somewhere. Please google and put some more informed thought into your stance on this.

    2. Re:Time for IPv7 by coryking · · Score: 2, Interesting

      Ever read mythical man month? IPv6 is a textbook example of the second system effect.

    3. Re:Time for IPv7 by Miamicanes · · Score: 1

      > There are too many flaws in IPv4 to not want to break compatibility. Most server software supports IPv6 fine,
      > it is just the lazy (or uninformed) people who refuse to roll it out until IPv4 is exhausted.

      Uh, right. And communism failed because the people forced to live under it didn't work hard enough to make it succeed, or subverted the plans of social engineers to pursue their own petty best interests.

      The problem with IPv6 is that it solves problems that already have cheap work-arounds, and introduces several billion new problems to complicate things and take their place. Like Marx, IPv6's designers grossly underestimated the importance of the human element wherever observed human behavior contradicted their neat, orderly theory. And ultimately, IPv6 will fail (or be subverted by its users) just like communism was.

      Read most complaints about IPv6, and you quickly see a common theme. People gripe a bit about lots of its details, but the one thing everyone bitches loudly about is the simple fact that no non-autistic human can meaningfully remember a real IPv6 address. Not some early-adopter experimental IPv6 address that can be neatly compacted down to 6 or 8 bytes, but a real, honest-to-god "AT&T has a subnet, that they've subnetted into 65k subnets, further subnetted into 16.8 million subnets" IPv6 address that really WILL take 40-80 characters to represent.

      Variable-length addresses might be "kludgy", but imagine IPv6 addresses looked like this:

      0x0000.a.b.c.d = legacy IPv4 address. Yes, 0x0000.192.168.1.100 still works as a private address, as does 0x0000.10.0.0.1.

      0x0001.a.b.c.d through 0xffef.a.b.c.d = IPv7 address. We've just expanded the address space by a factor of roughly 64k. The Powers that Be can slice and dice this new address space however they like... by geography, mode (multicast, etc), political boundary, business entity, or however they think makes sense.

      0xfffn.{5 to 20 (5+n, 0n16) additional bytes follow, all of which should be ignored by the router unless it explicitly knows what to do with them}. The "Always Provide A Graceful Upgrade Path" value. If, 50 years from now, it's decided that all new IP addresses should have 128 address bits, fine... legacy addresses still work, and new addresses that begin with "0xffff." can move forward to the next level.

      For an example of practical reality triumphing over academic ideology, just look at Intel-compatible CPUs. The 80386 could do linear memory and had orthogonal registers... but it could also run like a fast 8086, so there was no real reason to NOT use it for new computers instead of the 8086, 8088, or 80286. As a practical matter, that's exactly how it WAS used until Commodore went down in flames, Amiga software companies realized that you could write off every PC less than a 486-66 with 4 megs of RAM and STILL have a potential market several times as big as the Amiga market at its peak, and their developers simply REFUSED to deal with segmentation and wacky registers when every IA-32 CPU since the 386SX had orthogonal registers and linear memory addressing available. And thus DOS4GW, Commanche: Maximum Overkill, and Doom arrived. In other words, the new "386" features were THERE for anyone who wanted to use them, but for the most part they were harmless if you didn't. Then, look at what happened to the Itanium, when Intel decided to wipe the slate clean.

      IMHO, IPv6 is the new Itanium. It doesn't matter how hard its backers try to push it... stakeholders WILL fight back, just like they are now, and will either doom it to an academic footnote in history, or organically mangle & munge it into something more human-friendly. "The Powers that Be" can either go back to the drawing board and come up with a clean extension to IPv4, or they can wait until Microsoft, Cisco, Apple, and/or a few rogue Linux kernel devs take matters into their own hands and create de-facto workarounds that cause interoperability nightmares for the next generation of devs, admins, and users.

  84. Close, but no cigar... think up not across by LostMyBeaver · · Score: 2, Informative

    When there was no more space to build outward in Manhatten, then solution wasn't to try and produce more land. instead, they made the buildings taller (which worked well until '99)

    People have no problems remembering up to four three digit groups. So why not, expand the address space to support 0-999 values instead of just 0-255. Sure, 999 isn't a byte, but it's close enough to 2^10. Sacrificing the remaining 25 values won't hurt much. But more importantly, it would increase the address pool from 4.2 billion (minus invalid values) to 1,000,000,000,000 (a trillion) which still allows something like 200 IP addresses for every person on the planet. And with technology like NAT which should be employed for security purposes should be more than we could ever use.

    Not we just need some genious to figure out how best to map that mechanism to the base-2 or IPv6 world

    1. Re:Close, but no cigar... think up not across by Nutria · · Score: 1

      So why not, expand the address space to support 0-999 values instead of just 0-255. Sure, 999 isn't a byte, but it's close enough to 2^10.

      You seem to be of the belief that 0-255 is an arbitrary value, and that moving to 999 is simple because both 255 and 999 only take up 3 columns. That couldn't be further from the truth.

      --
      "I don't know, therefore Aliens" Wafflebox1
    2. Re:Close, but no cigar... think up not across by LostMyBeaver · · Score: 1

      No, having implemented IP stacks for embedded router stacks, I'm pretty sure I do in fact understand the protocol pretty well.

      What I'm pointing out is that the limitation which makes 3 digits in four groups ideal is that people find them easy to remember. By leaving 3digits by four groups standard, we can already suspect that people can continue to both remember them and not find them confusing.

      But to soothe your mind, alter the standard to a 9 bit octet (yes I know what octet means, but I don't know the word for a grouping of 9) and choose to max at 0-511 instead. Therefore we can provide a direct decimal to base-2 mapping and still increase the address space by a factor of 16. Either way, it should have a pretty major positive impact.

      Though now I'm getting carried away with this line of thinking. It appears that by using this method of thinking we could do something like use a double addressing system.

      So we can use 0.0.0.0-511.511.511.511 to isolate the portion of the Internet which should be theoretically identifiable publicly and revert to the more complex IPv6 numbering scheme to address private and utility devices. For example, for each mobile phone device which is ALWAYS dynamically assigned IPs and therefore would not benefit from the simpler form.

      I personally liked 0-999 instead of 0-511 since I feel that user inputable IP addresses should be more closely matched to human beings who think in base 10. From an IP stack development perspective, the only complication I see with this method is that IPv4 functioned so nicely since he subnet landed on a base-2 boundary. by placing it on a base-10 boundary instead, it would require an arithmetic comparison vs a binary comparison.

      P.S. before you get snooty, at least take the time to read the entire sentence you quoted. I'd imagine that after making a direct reference to 2^10, it would have been obvious that I clearly do understand the importance of the value 255.

    3. Re:Close, but no cigar... think up not across by Nutria · · Score: 1

      But to soothe your mind, alter the standard to a 9 bit octet (yes I know what octet means, but I don't know the word for a grouping of 9) and choose to max at 0-511 instead.

      If we still used 18- or 36-bit computers, then a 9-bit address would be reasonable.

      But it just doesn't "fit" in 8-bit machines. You'd need a 16-bit word, and thus waste 7 bits.

      by placing it on a base-10 boundary instead, it would require an arithmetic comparison vs a binary comparison.

      As an embedded developer, such expense and waste should horrify you. That it doesn't, is disturbing.

      I'd imagine that after making a direct reference to 2^10, it would have been obvious that I clearly do understand the importance of the value 255.

      I did notice that. But it was mentioned off-hand after spending much time on a 3-decimal-digit address. Thus I inferred that you didn't really understand what you were writing.

      --
      "I don't know, therefore Aliens" Wafflebox1
    4. Re:Close, but no cigar... think up not across by B'Trey · · Score: 1

      From an IP stack development perspective, the only complication I see with this method is that IPv4 functioned so nicely since he subnet landed on a base-2 boundary. by placing it on a base-10 boundary instead, it would require an arithmetic comparison vs a binary comparison.

      That's the only complication, huh? If you've really implemented IP stacks, you should understand the difference between those two in terms of processor clock cycles. Think in terms of, say, a router trying to match an access list to traffic on a gigabit link at wire speed. That "only complication" just slowed your entire network to a crawl.

      --

      "The legitimate powers of government extend only to such acts as are injurious to others." Thomas Jefferson.

    5. Re:Close, but no cigar... think up not across by LostMyBeaver · · Score: 1

      I'll conceed on this point to a certain extent. I had thought a little about how I would implement this scheme in software after the point and I'll also respond to your response.

      First the response.

      Routers are crap for gigabit anyway... they're 10 times worse for 10Ge. That's probably the number one reason why layer-3 switches are far more attractive in backbone environments. In fact, it took me years to find a router that cost less than $10,000 that could in fact handle 100Mbit traffic 24/7 (I mean run at full capacity 24/7) and that router implemented portions of the IP stack in FPGAs.

      If you're running a software based router to handle full gigabit traffic, then I'm forced to call you a tree killer (only joking). For a software based router to efficiently handle four gigabit ports at full capacity requires some pretty substantial hardware. Of course the #1 method of making it work better is to use a server Ethernet adapter which offloads at least the checksum calculations from the host machine. Sadly, most high end ethernet adapters stop there since to do much more they'd have to have interact more closely with the TCP/IP stack which generally doesn't work out too well in most OS NIC driver models.

      Now that I've attacked your line of thinking, let me make an ammendment to my line of thinking.

      I made another post suggesting capping the limit at 9-bits instead of 8-bits. This would work great since it would first of all keep the numbering scheme of the current IPv4 address space, expand the number of user inputable IP addresses by 16 fold, leave a tremendous number of address space in what I'd call the "utility area" or the space where trained (I hope) network professionals would configure large banks of auto configured addresses available (which would use a more complex numbering scheme). And best of all the math would pretty much all remain the same.

      The goal of the project isn't to make networking professionals lives easier. In fact, I'd rather make it harder to lay waste to all the guys out there that actually need 8 hours to perform simple router configurations. That's political though. The goal is instead to avoid making a bunch of home users and hobbiests that finally learned to recognize and IP address able to still recognize an IP address.

      Imagine this, your dad called you, there's something wrong with his computer and for some reason, before you can log on to fix the system from outside, you need him to reset his router to default settings and then open a port to let you in.

      So you pull up the instruction manual to the router after asking him for the model number and eventually after hearing the serial number and manufacturing date, he finally tells you the model. Now, you walk him through the reset process and the process of connecting to the proper wireless network.

      Now you want to get him to find out the IP address of the router. So you do an ipconfig, ifconfig, etc... and ask him to tell you the address.

      With IPv4 you can simply say "There should be something like a telephone number, but it's separated by dots instead of dashes and there are 4 groups instead of 3." From that point, it should only take two or thress tries to get him to find it.

      With IPv6 numbering, you're stuck with a "Ok son, let me get my glasses, you say there are a bunch of numbers with a bunch of colons or possible some colons and some dots, wow there are a lot of numbers here. This is twice as long as the code I had to type in when you walked me through reinstalling Windows XP on my machine".

      There's a value to the IPv4 numbering system in that it's short and sweet. IPv6 is too damn long. All our hopes and dreams of IPv6 being a perfect auto-configured world is crap too. So, if it means that software and hardware developers would be forced to optimize for an arithmetic operation as opposed to a binary calculation, as someone who would have to do it, I'd say "No problem, we'll find a way" since in reality it's true, we'd find a way.

      P.S. Let me

    6. Re:Close, but no cigar... think up not across by B'Trey · · Score: 1

      I am not and was not defending IPv6. I'm no more fond of it than you are. I was pointing out that your solution has serious performance implications, and you've said nothing to alter my opinion.

      The question of routers versus layer three switches is irrelevant. Putting the opcodes into hardware rather than software isn't going to change the fundamental issue. With IP addresses falling on a base 2 boundary, many of the most common operations are a simple AND of two numbers. That's one clock for most processors. You're masking bits. Arithmetic operations, on the other hand, require several clock cycles. Hardware doesn't change that.

      And an IP stack on a computer is one thing. The difference may or may not be insignificant there. But network operations are another matter entirely. And I can guarandamntee you that the difference won't be insignificant there.

      --

      "The legitimate powers of government extend only to such acts as are injurious to others." Thomas Jefferson.

  85. They both suck, but IPv6 has no excuse. by bytesex · · Score: 2, Interesting

    Both IPv4 and IPv6 suck. IPv4 sucks because it should have been just: dest-address, source-address, ttl (byte), flags (byte), size (short). 12 bytes instead of 20. IPv6 sucks because it wants to be too much and at the same time, simply isn't modern enough. How's about variable length addresses (my home network needs only 1 byte) ? How's about flags that say something about the scope of the packet (I don't want these packets to make it accross a router; I wouldn't have to spec certain address 'areas' as 'special') ? Why drop ARP (really, it was just fine) ? What's with the f^@%ing jumbogram (4 gigabytes of payload ? What concentrator is going to cache 4 gigabytes of payload ?) ?

    --
    Religion is what happens when nature strikes and groupthink goes wrong.
    1. Re:They both suck, but IPv6 has no excuse. by sega01 · · Score: 1

      Please, read before spreading this ignorant FUD. The IPv6 spec is quite modern and expandable in my mind. Every heard of ARP spoofing? NDP is vulnerable to the same thing but due to IPv6's extendablity there is a SEND (secure neighbor discovery) draft which solves that. There are many superiorities of NDP over ARP in the first place: http://en.wikipedia.org/wiki/Neighbor_Discovery_Protocol . IPv6 is not just about 128 bits of addesses, it solves many problems and implements many needed features (multicast fixes, IPSec). Variable length addresses just makes things messy, and the difference between 1 byte and 4 bytes is minimal for eliminating NAT and other IPv4 woes. Oh, and you don't have to have 4GB jumbograms now (but ever think about the future? I still like to stick with an mtu of 1500 personally).

    2. Re:They both suck, but IPv6 has no excuse. by jd · · Score: 1

      Also bear in mind that variable-length addresses were proposed as a part of the IPv6 specification (TUBA) but were rejected on the grounds of making the hardware over-complicated. I personally thought the idea quite neat, but admit that there isn't a vast amount of value in it. IPv6 addressing mimics variable-length addressing by means of the prefix, so you end up checking only one byte prior to the end of your prefix and one byte after, which is what you'd be doing with variable-length addresses.

      One thing that surprises me in the IPv6 discussion is that although people talk quite happily about data centers and high-end servers, not all such systems are set up on Ethernet. A fair percentage are set up on Infiniband, particularly for network storage, on account of the far lower latencies and far greater bandwidth. Infiniband is designed to cooperate with IPv6 - any packet on one can be trivially mapped onto the other - but there is no way of mapping Infiniband onto IPv4. NAT only goes so far. This means a data center with Infiniband local networking and IPv6 remote networking is simple to set up, simple to administrate, simple to develop, simple to maintain. Sure, it's not the dominant architecture, but by definition data centers are thin on the ground anyway. You don't want data centers to be a common design, you do want them to be an efficient design.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    3. Re:They both suck, but IPv6 has no excuse. by bytesex · · Score: 1

      This is not ignorant FUD; I'm currently building software for a concentration device for IPv6 - I've read the spec, and I don't very much like what I've read. IPv6 packet headers are HUGE (in comparison to some forms of traffic), and with variable address length, they do not necessarily need to be. The risk of ARP spoofing is minimal (at least not as big a risk as BGP or DNS poisoning) and you know that too; ARP never makes it across a router. Oh, and that jumbogram thing you call 'thinking about the future' ? It's an ugly add-on in the extension header. And you think variable address lengths make things ugly ? Try variable amounts of headers the way IPv6 does; that'll surely parse quickly on a hop device !

      --
      Religion is what happens when nature strikes and groupthink goes wrong.
  86. Re:how fast? by Anonymous Coward · · Score: 0

    Maybe it shouldn't have tried to carry that coconut.

  87. NAT will save the day *FOR IPV6* by knorthern+knight · · Score: 1

    The powers-that-be have finally admitted that DJB is right, and interoperability is a problem and are looking at defining an IPV6 version of NAT. See http://www.networkworld.com/news/2008/072108-ipv6nat.html for details. It'll have 2 uses...

    1) The many-devices-to-one-address-mapping that we all know and love with IPV4 NAT

    2) Automatic translation between IPV4 and IPV6. If you use the analogue-TV-to-digital-TV analogy, this NATing function is like the cheap converter boxes that allow your old analogue TV to receive digital broadcasts. Joe Sixpack will be told to plug his computer into the box, and the box plugs into his modem *AND THINGS WILL AUTOMAGICALLY WORK JUST LIKE BEFORE*.

    Item #2 is the biggie. If we can make the migration asynchronous (i.e. no "flag-day" when everybody must switch over at the same time) things become a lot easier. And when Joe's current computer, running Windows 98SE or WinME (don't laugh) dies, he'll buy a new one with Vista or WIndows 7, and it'll support IPV6 out of the box. Just like when your current analogue CRT TV dies, you'll buy a new one, and it'll natively tune in digital broadcasts. And you won't need the NAT box anymore, except as a security blanket.

    --

    I'm not repeating myself
    I'm an X window user; I'm an ex-Windows user
  88. Oblig by Anonymous Coward · · Score: 0

    http://xkcd.com/326/

  89. Missing: by Anonymous Coward · · Score: 0

    DNS and DNS updates.

    I don't want to have to type out each and every new computers IP6 address in the server DNS. I don't want to tell someone attaching themselves to my network "it won't work until I tell you what IP address you need".

    I need something where someone has a computer that calls itself "Andy" and is attached to my network. And "Andy" should get an IPv6 address and DNS should notice this new computer and update itself so instead of having to ask DHCP what IP address was handed out and type it in when I want to connect, I want to be able to go something like:

    $ ftp andy

    and get ftp access.

    I can do it with IP4.

    When can I do it for IP6?

    1. Re:Missing: by stevied · · Score: 1

      This DHCPv6 implementation claims to be able to do Dynamic DNS.

  90. 99% of percentages ... not on the spot by pbhj · · Score: 1

    I thought it was more like 50% and 49.9% were made up a while back on Wikipedia.

  91. Re:this is kindof misleading... the number of host by Ash-Fox · · Score: 1

    "a lot" ? examples? everything I use on a daily basis in the server space is v6 compatible and has been for a few years now.

    I'm just talking general software. But in my experience: Google desktop, Google earth, pretty much every instant messenger but some xmpp clients, media players etc.

    There is a lot more software that won't work when you have only a IPv6 IP address on your network card (yes, I had a proper IPv6 to v4 gateway setup).

    --
    Change is certain; progress is not obligatory.
  92. So IPv6 is basically a Homeopathic rememdy, then by rjamestaylor · · Score: 1

    nm, title says it all.

    --
    -- @rjamestaylor on Ello
  93. Are you in North America? by Midnight+Thunder · · Score: 1

    If people could actually get IPv6 service from their providers instead of having to route everything through congested tunnels, THAT would help.

    If you are in North America then you are probably going to wait, since while Europe and Asia are making the transition, North America seems to be dragging its feet. If you are interested in IPv6 connectivity from you ISP, get a whole of people to make enquires through official channels. If they feel there is a market then they may add support, even if it is experimental. Heck you could always ask to be signed up as a public beta tester when they first deploy IPv6. For the moment your ISP probably doesn't see the need or doesn't have the expertise and that won't change until people starting knocking on their door asking for connectivity.

    It should be noted that IPv6 is one of these technologies if implemented right many people will not realise they are using the technology because 'it just works'.

    --
    Jumpstart the tartan drive.
  94. IPv6 traffic is all pings... by volxdragon · · Score: 2, Interesting

    For the last 8 years I worked for a major switch/router manufacturer and we were one of the first to forward IPv6 traffic in hardware/silicon (rather than a software data path on a generalized CPU)...back then 99% of all IPv6 traffic (what staggering little there was at the time) were pings as people just tried to prove tunneling was working (screw doing native IPv6, you couldn't get beyond a LAN with that, no major ISP outside of Japan had native IPv6 service). Looking at current networks, it looks pretty much the same, still 99% pings...

  95. My ISP prevents IPv6 by bonkeydcow · · Score: 1

    I was gung ho to set up IPv6 at home. I run linux on all the systems and figured it would be a piece of cake. However when I got to the router they provided, it does not support IPv6, even with firmware upgrades. I am trying to check if they have newer versions. Since they supply custom firmware for the box, I can't just go buy one at the store.

  96. I have been wondering by Anonymous Coward · · Score: 0

    So, this big move to IPv6, Is this something that is recommended for LANS? I don't see a reason why a LAN would need 64 quadrillion addresses. Sorry, nothing sarcastic to say .. But if someone could enlighten me on this question, it would be nice.

  97. slashdot != ipv6 by Anonymous Coward · · Score: 0

    how poor is this?

    >>> dig -t aaaa slashdot.org

    ; <<>> DiG 9.4.2 <<>> -t aaaa slashdot.org
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22121
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;slashdot.org.                  IN      AAAA

    ;; AUTHORITY SECTION:
    slashdot.org.           495     IN      SOA     ns-1.ch3.sourceforge.com. hostmaster.corp.sourceforge.com. 2008080600 14400 1800 604800 3600

    ;; Query time: 79 msec
    ;; SERVER: 10.0.0.138#53(10.0.0.138)
    ;; WHEN: Tue Aug 19 15:28:08 2008
    ;; MSG SIZE  rcvd: 106

  98. IPv4 addresses are like oil... by Tillmann · · Score: 2, Insightful
    Hi,

    IPv4 addresses are like oil. We know we'll run out some day, but so far, it hasn't happened. So nobody really cares, no change happens, and we're stuck with old obsolete technology.

    So we can only hope that both IPv4 address space and oil will be exhausted soon, so that finally there's real pressure to switch to a better technology. Yes it will be expensive, yes some people well be annoyed by the change, but it will be a good thing.

    bye, Till

  99. We took the wrong path by Anonymous Coward · · Score: 0

    I think IPv6 has failed to garner any significant market share because the researchers who created it overthought the problem.

    We still have no idea what kind of security issues we will face in v6, nor how to truly secure it (yes, we can follow the directions, but what about the holes and workarounds that have yet to be discovered?).

    I think they could have done much better by coming out with an "IPv5" that simply has one more octet at the front. Routers could be programmed to filter/ignore it for compatibility on ISPs (while everyone has a chance to get their software updated), or to prepend our current four octets with "0.". It could be turned on in phases, starting with backbones and major sites (google, yahoo, etc.).

    IPv6 has been too much of a leap with too many changes, and therefore has not been successful. I'm not saying it is bad (it definitely has some significant benefits), just saying that there are easier ways to move forward.

    -m

  100. You got that idea from Stargate SG-1 by HTH+NE1 · · Score: 1

    "Praclarush Taonas isn't just the name; it's also the gate address."

    --
    Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
    1. Re:You got that idea from Stargate SG-1 by Lally+Singh · · Score: 1

      Does that mean that we'll eventually be the real gate builders?

      --
      Care about electronic freedom? Consider donating to the EFF!
    2. Re:You got that idea from Stargate SG-1 by Ant+P. · · Score: 1

      No, it just means you need to be from an incredibly advanced alien race to figure out ipv6.

    3. Re:You got that idea from Stargate SG-1 by Lally+Singh · · Score: 1

      <voice name="teal'c">Indeed.</voice>

      --
      Care about electronic freedom? Consider donating to the EFF!
  101. Re:You know what's nonsense? by residieu · · Score: 1

    I recommend throwing your computer out the window

  102. DNS by memoroid · · Score: 1

    hmmm...That's why we have DNS,don't we?

  103. I think the benefit to going IPv6 right now by LukeCrawford · · Score: 1

    Is that If there is much IPv6 hype in the future, or if IPv6 wins, you can say "I have x years experience with IPv6" (well, and more to the point, you have had x years of experience with IPv6. you have made your newbie mistakes that break things while IPv6 still doesn't really matter.)

  104. Turn it off by Anonymous Coward · · Score: 0

    First thing I do with any system is disable IPv6. Until I need to access something that is only reachable with it, then it stays turned off.

  105. If you think it doesn't matter by sjames · · Score: 2, Insightful

    To the MANY who think a few nat devices makes it all better, please think again.

    For one, most ISPs for home service already only give out 1 IP and we're still running out. Do you want your NAT to be behind another NAT (that you cxan't configure port forwarding on)?

    Virtual servers don't help a lot either. Believe it or not, not everything on the net is a web server. Do you want to discover in a few years that you CAN NOT get a colo box hosted, but you are free to get a "virtual" home page on a one size fits all web server?

    Unless IPv6 deployments get a lot more common, the other choice is to colo in IPv6 where perhaps one in a million people can even actually connect to it.

    While we're not out of v4 addresses yet, actually getting a block from ARIN has become increasingly difficult unless you're AOL, Comcast, etc. Years ago, you could just ask for a class C and receive within a day. Now, you have to send in increasingly detailed "justifications" and they are increasingly likely to be found "insufficient". Next I suppose you'll have to include the results of your last colonoscopy as well. New customers want IP assignments NOW, but ARIN doesn't want to give them out until you can prove you have a current need for them. That pretty well assures that only large providers will be in the running. Don't you prefer a net where there are small and more responsive providers out there? Perhaps some who are a little less quick to automatically yank your site down if the *IAA grumbles that one file might be copyrighted?

    As for why so many addresses this time rather than just adding an octet, consider that v6 has been specified for 10 years now and the adoption is pitiful at best. Do we really want to be right back here again in 2018?

    Part of the freedom of the net is inextricably linked with the ability to get an IP address to be on the net with. If you don't want net access bottlenecked and controlled more than it already is, you should support a move to IPv6.

  106. What's really killling IPv6.... by GrpA · · Score: 1

    Is the stupid restrictions arbitrarily imposed on getting a block imposed by self-important registrars (eg, APNIC, ARIN, etc). They are so desparate to control this resource that nobody want's to use it. Especially when they already have IPv4.

    Charging for IPv6 and rigidly controlling it's distribution is like building a five-hundred-lane toll-only-freeway with perfect roads right next to a two-lane freeway with acceptable roads, that is essentially free to use (because it was always there) and that isn't all that badly congested.

    If they gave huge chunks of IPv6 away for a few years to early adopters, as they did with IPv4, then it would be more likely to lead to an environment in which corporate use would have to follow after the enthusiasts who picked up early on the idea because it was free and subsequently developed applications that require it.

    Don't forget why we use WWW instead of the competing hypertext systems of the era... It was free and unrestricted. And once it's popular, there's a reason for everyone to use it.

    And all they need to do to maintain their future stranglehold on an essentially limitless resource is impose appropriate technical criteria for anyone applying (eg, only provide to people who can demonstrate they know what they are doing... Like they used to a long time ago) .

    Don't waste your time arguing that commercial realities will drive IPv6 implementation. I'm a consultant to government and the government has a real need for IPv6. They need it for VoIP and Toll Bypass between agencies and don't have enough IPv4 to meet this need - they all tend to use the 10.x.x.x block internally and then wonder why they can't connect up two agencies that have just merged... *sigh*.

    Yet despite this, they don't see any value in going to IPv6 if no one else is going to... Why? Because it's going to cost them a few thousand in fees to the APNIC each year, so they keep putting it off.

    If I could get a free permanent legacy block of IPv6 easily, I'd grab one... But there's no way I'd pay for one.

    The only reason IPv6 is dead is that it's somebody's cash cow... And no one wants to buy it.

    GrpA

    --
    Enjoy science fiction? "Turing Evolved" - AI, Mecha, Androids and rail-gun battles. What more could you want?
  107. Cisco and IPv6 by Midnight+Thunder · · Score: 1

    For those of you interested, Cisco has documented which pieces of their hardware is IPv6 ready: Cisco IPv6 Solutions

    --
    Jumpstart the tartan drive.