Slashdot Mirror


IPv6 Adoption Up 300 Percent Over 2 Years

Mark.J - ISPreview writes "The Number Resource Organization, which is made up of the five Regional Internet Registries, has revealed that the rate of new entrants into the IPv6 routing system has increased by 300% over the past two years. The news is important because IPv4 addresses (e.g. 123.23.56.98), which are assigned to your computer periodically, are running out. IPv6 addressing (e.g. 2ffe:1800:3525:3:200:f8ff:fe21:67cf) was invented as a longer and more secure replacement." IPv6 is still gaining ground slowly, particularly in the US.

425 comments

  1. wow by Lord+Ender · · Score: 4, Insightful

    And the rate of downloads of Ubuntu 8.10 is up infinity percent in the past two years.

    --
    A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    1. Re:wow by Anonymous Coward · · Score: 2, Funny

      In other news, every milk drinker in the past 5 centuries have died and Franco is still dead!

    2. Re:wow by Anonymous Coward · · Score: 0

      Lots of people who drink milk are still alive. Roughly 6% of humans who have drank milk since the big bang are alive.

    3. Re:wow by davidphogan74 · · Score: 1

      And Vista came out, with better IPv6 support than XP.

      Just saying...

  2. up 300%? by circletimessquare · · Score: 5, Funny

    you mean it went from 1 person to 3 people?

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:up 300%? by Anonymous Coward · · Score: 5, Funny

      No, up by 300% would means there are now 4 users.

      </pedant>

    2. Re:up 300%? by xZgf6xHx2uhoAj9D · · Score: 4, Interesting

      No, the rate went up by 300%, not the total number of entrants. I.e., instead of 1 person/year we're now up to 4 people/year ;)

    3. Re:up 300%? by Aladrin · · Score: 3, Informative

      We get it from basic English skills. It's "up 300%" not "300% of what it was".

      1 -> 3 = 300% of what it was.
      1 -> 4 = up 300%.

      Again:

      300% x 1 = 3

      1 + 3 = 4

      --
      "If you make people think they're thinking, they'll love you; But if you really make them think, they'll hate you." - DM
    4. Re:up 300%? by xZgf6xHx2uhoAj9D · · Score: 4, Informative

      If something increases by 0%, that means it stays the same, not disappears completely. If something increases by 100%, that means it doubles, not stays the same. Induction can take it from here.

    5. Re:up 300%? by Smuttley · · Score: 5, Funny

      wow. I mean, like.. wow

      Where the heck do you guys get 4 from?

      --

      I can sum it all up in three words: Evolution is a lie.

      I guess you worked out "Evolution is a lie" is three words using the same calculation you made above.

    6. Re:up 300%? by Anonymous Coward · · Score: 0

      You mean that it went from 1 to 4.
      Google calculating percentage increase:

      ((4-1)/1)*100 = 300

      Of course, the person writing the article may not understand percentages either.

    7. Re:up 300%? by smurphmeister · · Score: 1

      But increased by means add to the additional amount.

      For example, if you had $1 and I said I'm going to increase the amount of your cash by $3, how much would you expect that you have? You'd expect that you'd have $4 total, not $3.

      So when they say, increased by %300, that means take the original amount and add 300% of that amount to the original amount...

    8. Re:up 300%? by BigJClark · · Score: 3, Funny


      Son of a.... *hangs head, hands over geek card*

      --

      Hi, I Boris. Hear fix bear, yes?
    9. Re:up 300%? by philfr · · Score: 3, Funny

      If something increases by 100%, that means it doubles, not stays the same. Induction can take it from here.

      So going up 300% means doubling 3 times ?

    10. Re:up 300%? by Hordeking · · Score: 1

      No, the rate went up by 300%, not the total number of entrants. I.e., instead of 1 person/year we're now up to 4 people/year ;)

      I &heart; Calculus!

      --
      Disclaimer: The opinions and actions of the US Gov't are in no way representative of those held by this author or its ci
    11. Re:up 300%? by Daimanta · · Score: 1

      "Induction can take it from here."

      I'm pretty lazy but if /. supported LateX input I might be bothered to prove your thesis by induction.

      Unfortunately, /. only accepts ASCII. We live the year 2008, is Unicode support too much to ask?

      --
      Knowledge is power. Knowledge shared is power lost.
    12. Re:up 300%? by 2nd+Post! · · Score: 1

      So evolution isn't a lie?

    13. Re:up 300%? by Tony+Hoyle · · Score: 1

      We live the year 2008, is Unicode support too much to ask?

      Given the topic.. is ipv6 support also too much to ask?

      I've a feeling slashdot will be 7 bit ASCII ipv4 long after everyone else has moved on.

    14. Re:up 300%? by krenshala · · Score: 1

      Ah, but if you had $1 and it was increased by $3, you would only have $3 total ... after the taxes took away $1 of it. ;)

      --

      krenshala

    15. Re:up 300%? by Rayeth · · Score: 1

      This is essentially the fact of the matter. IPv6 adoption is still so small as to not matter. 300% of a tiny number is still a tiny number compared to the size of the IPv4 addresses.

    16. Re:up 300%? by Daimanta · · Score: 1

      It's pretty ironic that a site calling itself "news for nerds" is still in the digital stone age. It wouldn't surprise me if the /. servers are still running Linux Kernel 2.2.x

      Is there a man or a taco that can give me some info about this and plans for upgrades regarding ipv6, unicode and other improvements?

      --
      Knowledge is power. Knowledge shared is power lost.
    17. Re:up 300%? by Anonymous Coward · · Score: 0

      No, its just a fad.

    18. Re:up 300%? by ailnlv · · Score: 1

      Who did you steal that card from?

    19. Re:up 300%? by Anonymous Coward · · Score: 0

      That's the beauty of a self-imposed "handing over of the geek card". The fact that you 1. know what a geek card is and 2. know that math mistakes are a card revoke-able offense is indicates you are still worthy of said card.

    20. Re:up 300%? by Anonymous Coward · · Score: 0

      Unicode? COONicode.

    21. Re:up 300%? by Anonymous Coward · · Score: 0

      IPv6 traffic increased quite a bit on the Amsterdam Internet Exchange. See the bottom graph:
      http://www.ams-ix.net/technical/stats/sflow/?type=ipv6
      IPv4 is 1000 times bigger, but IPv6 will catch up once Slashdot enters the 21st century.

    22. Re:up 300%? by Anonymous Coward · · Score: 0

      what, have they stopped feeding their trolls back at k5?

    23. Re:up 300%? by hguorbray · · Score: 1

      that's 4 words -or has your sig evolved ;-)

      I'm just saying....

    24. Re:up 300%? by Tweenk · · Score: 1

      "a" may not be a word, for some meanings of "word" - it doesn't convey information, but is only a grammatical boilerplate.

      --
      Those who would give up liberty to obtain working drivers, deserve neither liberty nor working drivers.
    25. Re:up 300%? by Anonymous Coward · · Score: 0

      It's pretty ironic that a site calling itself "news for nerds" is still in the digital stone age. It wouldn't surprise me if the /. servers are still running Linux Kernel 2.2.x

      At least they're still running Apache 1.3. Netcraft confirms it.

    26. Re:up 300%? by Smuttley · · Score: 1

      nice try.

      'a' and 'an' are the indefinite article. 'the' is a definite article. Articles are words.

      To say 'a' isn't a word is like saying 'the' isn't a word.

      Sorry to be pedantic but I teach English Grammar and Writing at university in China.

    27. Re:up 300%? by Smuttley · · Score: 1

      Just to be pedantic about myself before anyone else. There should have been a comma before "but" in my last sentence. ;)

    28. Re:up 300%? by Agripa · · Score: 1

      Unfortunately, I am 3 of the users since I now have 3 IPv6 subnets allocated to me.

    29. Re:up 300%? by rs79 · · Score: 1

      " you mean it went from 1 person to 3 people?"

      Exactly. Of course you don't hear from them cause they can't talk to the V4 network.

      I guess this is the best spin they could put on the numbers they had. They certainly wouldn't want headlines like "growth in number of new V4 hosts still exceeds total number of V6 hosts by a large margin"

      --
      Need Mercedes parts ?
    30. Re:up 300%? by mikkelm · · Score: 1

      I tried that with my bank. I told them that I knew what my Mastercard was, and that I know racking up debt without paying it was a bad thing to do, but they didn't see that the same way. :(

    31. Re:up 300%? by Fred_A · · Score: 1

      It wouldn't surprise me if the /. servers are still running Linux Kernel 2.2.x

      I would have sworn they were merely a few "door" programs on a DOS BBS...

      --

      May contain traces of nut.
      Made from the freshest electrons.
    32. Re:up 300%? by Bert64 · · Score: 1

      Linux 2.2.x supported ipv6...

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  3. what's that ip address? by Anonymous Coward · · Score: 1, Interesting

    Doing a trace route to that IP address went from my computer, to China, then back to my laptop, one more hop, and then timed out. Weird!

    1. Re:what's that ip address? by KlaymenDK · · Score: 1

      That's the first thing I did, too (thinking a "why you post my address?" post was probably lame). It timed out after some 25 hops.

      Trying it again now, whatever it is -- it's slashdotted! Oops, sorry I guess.

      First time we've slashdotted an unknown target?

    2. Re:what's that ip address? by Anonymous Coward · · Score: 0

      Maybe IPv6 is some kind of routing bytecode that is executed on your machine instead of an address. It looks suspiciously long to be merely an address.

    3. Re:what's that ip address? by 0100010001010011 · · Score: 1

      By "back to my laptop" did you mean actually back to your IP address or to a hostname called 'localhost'. My last 3 hops are:

      15 localhost (123.30.120.65) 278.356 ms 279.295 ms 280.059 ms
      16 localhost (123.30.120.22) 282.366 ms 283.057 ms 283.577 ms
      17 203.162.184.114 (203.162.184.114) 284.300 ms 273.151 ms 273.795 ms
      18 * * *

      If you do an NSlookup on 123.30.120.* it resolves to localhost but it's not my 'localhost'.

    4. Re:what's that ip address? by Anonymous Coward · · Score: 0

      inetnum: 123.23.0.0 - 123.23.255.255
      netname: VNPTinfrastructure-NET
      country: vn
      descr: Vietnam Posts and Telecommunications(VNPT)
      admin-c: NXC1-AP
      tech-c: KNH1-AP
      status: ASSIGNED NON-PORTABLE
      changed: hm-changed@vnnic.net.vn20081016 20081016
      mnt-by: MAINT-VN-VNPT
      source: APNIC

    5. Re:what's that ip address? by Anonymous Coward · · Score: 0

      Yes, the hostname of my laptop. Now, I recognized the IP address as the adapter of one of the address for the virtual NIC on my VMWare installation of Ubuntu.

  4. IPV4 addresses are NOT running out by Drachs · · Score: 1, Insightful

    God, I'm tired of it being repeated that IPV4 addresses are running out. Everybody who's not a journalist should know that it's not true.

    There's no reason every person on earth needs an IP. Nat+uPNP is perfectly capable and 100% backwords compatible.

    That's not even getting into all the millions of unused IP's being held by the early internet companies.

    IP's just need to be charged for on a early basis. Start with $1 per year per ip to EVERYONE who owns an IP's and you'll see the "IP Shortage" vanish overnight.

    1. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      Kapor is in his element now, fluent, thoroughly in command in his material. "You go tell a hardware Internet hacker that everyone should have a node on the Net," he says, "and the first thing they're going to say is, 'IP doesn't scale!'" ("IP" is the interface protocol for the Internet. As it currently exists, the IP software is simply not capable of indefinite expansion; it will run out of usable addresses, it will saturate.) "The answer," Kapor says, "is: evolve the protocol! Get the smart people together and figure out what to do. Do we add ID? Do we add new protocol? Don't just say, we can't do it."

      Source: http://www.mit.edu/hacker/part4.html

      Also posted before, for example at http://slashdot.org/comments.pl?sid=1046105&cid=25933303

    2. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 5, Informative

      God, I'm tired of it being repeated that IPV4 addresses are running out. Everybody who's not a journalist should know that it's not true.

      And everyone who's a network admin knows that it is.

      Nat+uPNP is perfectly capable and 100% backwords compatible.

      Great, so I can re-write every application to support a half-assed workaround like NAT. I'd much rather have each host bugging the crap out of the router to forward a specific port, please! than to just get the migration over with and be done with it. If you think that NAT+uPNP is a replacement for IPv6, then you need to find a hobby more suited to your skill level.

      --
      Dewey, what part of this looks like authorities should be involved?
    3. Re:IPV4 addresses are NOT running out by Kamokazi · · Score: 1

      We pay $8-$10/mo each for our ~150 IP addresses, and we're a relatively small company.

      I really don't think $1/year will make that much difference.

      --
      As our way of thanking you for your positive contributions to Slashdot, you are eligible to disable Slashdot 2.0.
    4. Re:IPV4 addresses are NOT running out by SanityInAnarchy · · Score: 4, Informative

      Nat+uPNP is perfectly capable and 100% backwords compatible.

      NAT is a hack, and uPNP is not universally supported -- not in the routers themselves, and not in every program you might want t ob accessible.

      Besides which, there are a limited number of ports, and you're still preventing people from picking a standard port and leaving it open, to connect to it later -- for instance, if my ISP NATs me, how do I ssh or vpn back home? Let alone run a webserver out of my house..

      That's not even getting into all the millions of unused IP's being held by the early internet companies.

      True, but consider that IPv6 would prevent anything like that from happening again.

      Start with $1 per year per ip to EVERYONE who owns an IP's and you'll see the "IP Shortage" vanish overnight.

      I'd also very likely see my own public-facing IP go away, and more and more ISPs NAT-ing all their customers -- who are then doubly-NATed behind their routers -- which is then a gigantic pain in the ass to deal with, versus simply upgrading to ipv6.

      I'd also likely see my hosting costs go up a bit.

      All to manage this artificial scarcity, and push it back for awhile -- which could be so easily dealt with by simply upgrading to ipv6, and giving an IP address to every device on the planet -- and, as a nice side effect, making it possible for me to assign a public-facing IP address and DNS entry for every toaster in my house.

      --
      Don't thank God, thank a doctor!
    5. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      You pay that much for having the address? Holy fark.

    6. Re:IPV4 addresses are NOT running out by SatanicPuppy · · Score: 1, Interesting

      rewrite? What world are you living in where you didn't already have to do that? The corp where I work has a huge number of ip4 addresses, and we actually average about 1 per business unit...That's not even 10% of our assigned ips. Even if we wanted to put more things directly on the net, we'd never be able to afford the corporate mandated security architecture for every exposed machine.

      Sounds to me like you're the one living in hobby-land. Most machines don't need an externally accessible IP.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    7. Re:IPV4 addresses are NOT running out by Ephemeriis · · Score: 5, Insightful

      God, I'm tired of it being repeated that IPV4 addresses are running out. Everybody who's not a journalist should know that it's not true.

      There's no reason every person on earth needs an IP. Nat+uPNP is perfectly capable and 100% backwords compatible.

      That really isn't entirely true.

      NAT and uPnP may work well for your average home user... But it causes some headaches in larger networks. And if you've got a pile of servers that need to be globally accessible - like webservers - you don't really have an alternative to multiple IP addresses.

      That's not even getting into all the millions of unused IP's being held by the early internet companies.

      This is certainly true. There are several huge blocks of IP addresses sitting unused. Freeing these up would go a long way towards keeping IPv4 alive. At least for a while...

      IP's just need to be charged for on a early basis. Start with $1 per year per ip to EVERYONE who owns an IP's and you'll see the "IP Shortage" vanish overnight.

      It might very well vanish overnight... But it'll return eventually. The fact of the matter is that we keep coming up with new reasons to route information over the Internet. And all these new devices and gadgets require an IP address.

      One of the cities that we support recently bought a new chiller for their ice rink. Their old one was just managed in-house. You had to be standing in front of the device to do much of anything. And if it was malfunctioning they had to send someone out to eyeball the machine. Their new one has a network jack and can be monitored remotely through a web interface. So we had to get them bandwidth and a static IP address so they could keep an eye on things even when nobody was physically at the civic center.

      Sure, there are some absolutely stupid and frivolous things we're doing these days. Folks don't need to be able to surf the Internet from their microwave oven. But it is getting to the point where we expect to be able to gather information from just about everything, and view it just about everywhere. Folks expect to be able to hit Google or Wikipedia from their cell phones. Lots of industrial equipment can be managed remotely. I know I routinely troubleshoot issues remotely.

      To a certain degree we can hide these devices behind NAT... I can have a dozen web-enabled appliances in my house and just use different ports forwarded through a single NAT'ed IP address to access them. But what about devices that don't necessarily sit behind a router? What about my web-enabled phone?

      And what happens when the ISPs start running out of addresses? Are they going to install giant NAT routers themselves? Are we going to wind up with several layers of NAT?

      --
      "Work is the curse of the drinking classes." -Oscar Wilde
    8. Re:IPV4 addresses are NOT running out by SatanicPuppy · · Score: 1

      We do the same, and we have a huge number of unused addresses. The way they're sold, you end up getting x with each class of line, so you buy a T2 or a T3 and you get a big pile of addresses, but we nat and proxy everything so we use hardly any of them.

      Hell, I get 5 free with my DSL account, and 5 bucks more a month wouldn't be a deal breaker even there.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    9. Re:IPV4 addresses are NOT running out by HexaByte · · Score: 1, Informative
      Just what are you writing that your apps require a public IP? Every app I - and the many companies I support - use have no problem with NAT. Most of our apps, of course, run internally in our network, which of course uses a private internal network, class A,B or C depending upon size.

      I'm quite happy with NAT.

      --
      HexaByte - he's a square and a half!
    10. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 4, Insightful

      Most machines don't need an externally accessible IP.

      Unless they want to use something as exotic and unpopular as BitTorrent, you might be right.

      --
      Dewey, what part of this looks like authorities should be involved?
    11. Re:IPV4 addresses are NOT running out by jellomizer · · Score: 0, Troll

      So you rather rewrite all your application to handle IPv6? You must need more work to do. Here is real life with real life.

      1. Many Legacy Applications which will cost millions of dollars to move over first to an OS/Hardware that can support IPv6. Then debug them and fix problems that have been resolved 20 years ago that resurface. BTW Most of these apps have poor documentation at best.

      2. Communication with less hip people. You may want to convert to IPv6 but the company you are sharing data with isn't so savvy. So you need to wait until they are ready. And they won't switch because you haven't

      3. Old Infrastructure ok your software can do it. Now you need to replace the infrastructure.

      So try to explain to your boss that it is better to spend 3 Millions of dollars for IPv6 jump. vs. Spending an extra $100k a year to keep the existing app running with NAT+uPNP patched code. (BTW if you fail to see the math it will take 30 years to get a return on the investment. )

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    12. Re:IPV4 addresses are NOT running out by TheRealMindChild · · Score: 1

      Great, so I can re-write every application to support a half-assed workaround like NAT

      Then you did it wrong. Quit assuming you have a clear path back to the client. An outbound connection from the client to the server is all you should need. Use that as a command connection. If you need more connections for data transfer and whatever else, you signal the client to send more connection requests to you. Even if the whole world switched to IPv6, the same "problems" you insist upon will still be there. People will be still going through a firewall/router, with all incoming connections blocked by default... so you STILL can't assume that you will have a clear path back to the client.

      --

      "When life gives you lemons, don't make lemonade. Make life take the lemons back!" -- Cave Johnson
    13. Re:IPV4 addresses are NOT running out by vadim_t · · Score: 2, Insightful

      Yes, NAT is wonderful.

      Like when I want to play a game online with me, a friend in my house, and people over the internet. Then we're sometimes confronted with that the game wants specifically port 12345 on UDP open, and there's no way to NAT that to two computers at once. There goes at least half an hour of everybody's time, plus another half an hour to convince the less technical players that no, it's not working and it's not going to.

      UPNP doesn't solve this problem, and is yet another horrible hack that should never have existed in the first place, along with NAT. Thanks to UPNP any crap you get infected with can request the router to open a port for it to receive instructions. Isn't that wonderfully convenient?

    14. Re:IPV4 addresses are NOT running out by Chris+Burke · · Score: 2, Interesting

      There's no reason every person on earth needs an IP. Nat+uPNP is perfectly capable and 100% backwords compatible.

      Yeah, unless you still hold out hopes that the internet could live up to its original promise of being a network of peers, where a person's home computer could be their server when they are out.

      Throwing people behind ever increasing layers of NAT erodes the functionality of the internet. If your goal is simply to disprove that IP addresses are running out, that may be acceptable. If you don't want to turn the internet into a series of essentially uni-directional gateways, then it isn't.

      I want a static IP. And it's not even an unreasonable request, we have the solution right here, it's just going to take time to get adopted. So what's yer beef?

      --

      The enemies of Democracy are
    15. Re:IPV4 addresses are NOT running out by GooberToo · · Score: 2, Insightful

      God, I'm tired of it being repeated that IPV4 addresses are running out. Everybody who's not a journalist should know that it's not true.

      There's no reason every person on earth needs an IP. Nat+uPNP is perfectly capable and 100% backwords compatible.

      I'm so tired of seeing someone post this rubbish every time these articles come out. uPNP is a security issue and many routers either don't support it or smartly have it turned off. NAT is a hak at best and limits the power of users while creating no end of issues for others. Anyone that still believes NAT is a solution compared to IPv6 is uninformed at best.

      Unless you see companies giving up massive IPv4 blocks (which isn't happening), we ARE running out of addresses. Period. We have two choices, force blocks to be freed, which is unlikely, or migrate to IPv6. IPv4 has so many issues, only a dope would spend political clout freeing IPv4 when we already have IPv6 which addresses the core issue while fixing so many of IPv4 woes.

      Does, "pick your battles", mean anything?

    16. Re:IPV4 addresses are NOT running out by fyonn · · Score: 1

      Nat+uPNP is perfectly capable and 100% backwords compatible{/i>

      and also not universal. there's also NAT-PMP and they don't interoperate. so if you've got a router supporting UPnP, and your machine/app supports NAT-PMP then it's not gonna work.

      dave

    17. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 2, Insightful

      Ugh, I meant to say more before I posted. Anyway, here's the rest:

      The main reason I mentioned publicly addressable hosts was that the OP brought it up when he mentioned UPnP in conjunction with NAT. No, you don't need (or want) every host to be directly reachable. When you do, though, a real end-to-end solution like IPv6 is vastly preferable to a slew of machines behind the NAT asking for port allocations.

      --
      Dewey, what part of this looks like authorities should be involved?
    18. Re:IPV4 addresses are NOT running out by archeopterix · · Score: 1

      Then you did it wrong. Quit assuming you have a clear path back to the client. An outbound connection from the client to the server is all you should need.

      Quit assuming there's always a client and a server. Ever heard of P2P?

    19. Re:IPV4 addresses are NOT running out by HexaByte · · Score: 0
      You state:

      Their new one has a network jack and can be monitored remotely through a web interface. So we had to get them bandwidth and a static IP address so they could keep an eye on things even when nobody was physically at the civic center.

      and:

      I know I routinely troubleshoot issues remotely.

      Try LogMeIn or GoToMyPC, or something similar. I manage nearly 100 remote PCs thru LogMeIn, and only 3 of them have static IPs.

      --
      HexaByte - he's a square and a half!
    20. Re:IPV4 addresses are NOT running out by A+beautiful+mind · · Score: 1, Flamebait
      IPv4 is running out, you idiot.

      Please, next time you feel the urge to post nonsensical drivel, think about it first. NAT + uPNP is NOT perfectly capable and compatible. It's a fucking ugly hack, causing numerous security issues or making them worse like the last DNS vulnerability. Also, if all the IPv4 ips would be sanely distributed and rationed, people calculated that we'd only gain a few months, a year more tops until the pool runs out completely.

      Why charge for IPs when all you need is to switch to a different numbering, solving the problem properly? You do realise that sticking with IPv4 will be a huge economic burden on the long term, don't you?

      Everybody who's not a journalist should know that it's not true.

      But how can I argue with that! Everyone who's not a journalist knows it's not true, well except the little fringe lunatic organization holding together the actual allocations of IPv4 addresses in Europe called RIPE, or the similar organizations all around the world. In fact, "There is now consensus among Regional Internet Registries that final milestones of the exhaustion process will be met in 2010 or 2011, at the latest, and a policy process has started for the end-game and post-exhaustion era."

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    21. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 1

      Just what are you writing that your apps require a public IP?

      As mentioned in another comment, I was responding to the OP's mention of NAT+UPnP as a substitute for public addressing.

      --
      Dewey, what part of this looks like authorities should be involved?
    22. Re:IPV4 addresses are NOT running out by ThePhilips · · Score: 1

      IP's just need to be charged for on a early basis. Start with $1 per year per ip to EVERYONE who owns an IP's and you'll see the "IP Shortage" vanish overnight.

      You miss the point.

      Internet now has much much more participants than 10 years ago.

      IPv4 are running out because compromise was made on management side. Essentially, Internet management is loose because people want to encourage participation. Do not forget that Internet is merely set of connected proprietary networks, operated by all possible entities. And every of the entities wants to have some address space to grow.

      I frankly do not see any problem with going to IPv6 as most of the network equipment was ready for several years now.

      There's no reason every person on earth needs an IP. Nat+uPNP is perfectly capable and 100% backwords compatible.

      Had you ever tried to operate middle to large sized network, you would understand that adding extra layer at every interconnect would make Internet infrastructure at least twice more expensive. I'd say that costs would at least quadruple since such smart equipment, supporting dynamic resource management, costs at least 4 times more if compared to its plain version. (e.g. compare prices on "switch" vs. "managed switch" to see the difference).

      Making Internet infrastructure expensive => killing Internet.

      P.S. And do not get me started on the "uPNP" bogosity which doesn't even belong to the discussion...

      --
      All hope abandon ye who enter here.
    23. Re:IPV4 addresses are NOT running out by GooberToo · · Score: 4, Informative

      Most machines don't need an externally accessible IP.

      Which has nothing to do with the IPv4 vs IPv6 debate. Regardless of which stack you use, you are never forced to have externally accessible IP addresses. This is what firewalls, routers, and reserved, non-routable addresses are for.

    24. Re:IPV4 addresses are NOT running out by TheLink · · Score: 4, Funny

      Incompatibility with bittorrent is often regarded as a feature by corporations.

      --
    25. Re:IPV4 addresses are NOT running out by vadim_t · · Score: 5, Informative

      Lots of them.

      Any kind of webserver. Try running two of them on the same IP address.

      Of the above, especially websites using SSL. Can't have more than one per IP address.

      FTP is a horrible pain when NAT is involved.

      Many video conference applications.

      Programs like instant messengers with file transfer.

      BitTorrent and any form of P2P in general.

      IPsec in transport mode

      Many games. Two players trying to play online doesn't work at all with some games, no matter how much you fiddle with NAT.

      Remote desktop. When troubleshooting, I can't just ask the person I'm helping to install VNC, because then I'd have to explain to them how open the port.

      I'm sure the list can get a good deal longer, but this seems enough.

    26. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      Or you could forward the port? The two machines in my LAN that I want BitTorrent on work just fine. If someone else in the company installs it, I'll try to get them fired anyway.

    27. Re:IPV4 addresses are NOT running out by Eil · · Score: 1

      IP's just need to be charged for on a early basis. Start with $1 per year per ip to EVERYONE who owns an IP's and you'll see the "IP Shortage" vanish overnight.

      Ordinarily, I'd be the last person on earth who'd suggest charging a fee for entirely virtual goods. The current domain registration and SSL certificate signing systems are both a complete farce at best and a bloody scam at worst.

      But there has to be better management of IPv4. I've worked for (or with) ISPs and web hosting providers who waste IPs like you wouldn't believe. At one ISP, every hosting customer is given four IPs free with their account and only about 20% ever use more than one. Entire /24s are allocated for some goon's project that never sees completion and the IPs are never freed up and reused. Where I currently work, there is not a single 192.168.x.x or 10.x.x.x network. I've seen more than one shop where every device on the internal office network (including wifi APs and printers) is given an Internet IP and then firewalled off from the Internet.

      I know these companies pay something for their IPs, but currently they're cheap enough that they can be wasted left and right. That needs to stop.

    28. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      Not that I agree either way but in peer-to-peer there isn't some sort of magical new way of making connections going on. You bittorrent software just acts as both a client and server simultaneously.

    29. Re:IPV4 addresses are NOT running out by X0563511 · · Score: 1

      There is always a server. Even multicast has a server.

      However, with P2P, a client acts like a server some of the time, and as a client others. It fills both roles as needed.

      Quit talking out of your ass.

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    30. Re:IPV4 addresses are NOT running out by GooberToo · · Score: 1

      I'm quite happy with NAT.

      Then your networking needs are simplistic at best. Take a look at how many coders are forced to implement "NAT punch-through" - and this is for fairly simplistic requirements. Wouldn't it be nice if the networking stack actually took care of the end-to-end details - as intended? And there are still times where heavily NAT'd networks still have problems with "NAT punch-through" if the need is as complex as peer to peer. Ya, I know...complex stuff like peer to peer. Wow.

      Wouldn't it be nice to actually have things "just work" while getting all the additional benefits IPv6 provides? Most in the know think so.

    31. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      anything that could potentially become self aware and harm me will never have an IP address. not in this house.

    32. Re:IPV4 addresses are NOT running out by socsoc · · Score: 0, Redundant

      Any kind of webserver. Try running two of them on the same IP address.

      Seriously? I guess you have never heard of virtual hosting.

      Remote desktop. When troubleshooting, I can't just ask the person I'm helping to install VNC, because then I'd have to explain to them how open the port.

      If you can't provide them with a batch file that opens port 5900 for you, then stop trying to do remote support. Also remote desktop != vnc.

    33. Re:IPV4 addresses are NOT running out by Jester998 · · Score: 2, Insightful

      Nat+uPNP is perfectly capable

      Spoken like someone who grew up with NAT being the norm. NAT is terribly broken, and UPNP is even worse. There shouldn't be a need to resort to hack-upon-hack to get networking to work. I long for the day when I only have to worry about routing & firewalling on my network again.

      That's not even getting into all the millions of unused IP's being held by the early internet companies.

      IP's just need to be charged for on a early basis. Start with $1 per year per ip to EVERYONE who owns an IP's and you'll see the "IP Shortage" vanish overnight.

      Great, $1 per IP. 2^32-1 possible IPs... that's only a touch over $4B per year. Who want to bet that Microsoft would eat up all it could, just to have control? Hell, at that price I'd buy a couple hundred just for me. Start talking several thousand dollars per IP per year and you might be on the right track... oh wait, no you're not, because it's an artificial scarcity. (Besides, who would the money for the IP addresses go to? IANA? What would they use it for?)

    34. Re:IPV4 addresses are NOT running out by Ephemeriis · · Score: 2, Insightful

      Try LogMeIn or GoToMyPC, or something similar. I manage nearly 100 remote PCs thru LogMeIn, and only 3 of them have static IPs.

      I think you're kind of missing the point of my post.

      I use LogMeIn for quite a few things. I've got it installed on my home computer, my work computer, and dozens of client computers. It works very well for me. It's a great solution for folks who can't or won't pay for a static IP address. But LogMeIn doesn't somehow magically negate the need for an IP address.

      If you've got bandwidth, you've got an IP address. And more and more devices have bandwidth these days. Which means more and more IP addresses in use. And once you run out of IP addresses it won't much matter whether you need a static or dynamic address, there won't be any available.

      --
      "Work is the curse of the drinking classes." -Oscar Wilde
    35. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      But if both peers are behind NAT, you need to forward ports in the router.

    36. Re:IPV4 addresses are NOT running out by Genevish · · Score: 1

      IPv6 is backwards compatible with IPv4, so you don't need to switch if you don't want.

    37. Re:IPV4 addresses are NOT running out by X0563511 · · Score: 1

      UPNP doesn't solve this problem, and is yet another horrible hack that should never have existed in the first place, along with NAT. Thanks to UPNP any crap you get infected with can request the router to open a port for it to receive instructions. Isn't that wonderfully convenient?

      Don't forget that with UPnP, the router is usually your firewall as well, and both the firewall and NAT get configured. If you had a public address, UPnP wouldn't be needed, but you would still need to open the port on the firewall. So, at first glance you would think that UPnP doesn't hurt vs public addresses... but I would hope you wouldn't sit naked (without a firewall).

      Ramble over.

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    38. Re:IPV4 addresses are NOT running out by suggsjc · · Score: 1

      making it possible for me to assign a public-facing IP address and DNS entry for every toaster in my house.

      Awesome, I can't wait till I can read a howto article that has the following:

      ...
      ping toaster1.example.com

      If no response, then you'll need to make sure that your toaster is connected to the internet and its DNS entry resolves.
      Once your toaster is online...

      --
      When I have a kid, I want to put him in one of those strollers for twins and then run around the mall looking frantic.
    39. Re:IPV4 addresses are NOT running out by Waffle+Iron · · Score: 2, Insightful

      The scheme would not be targeted at people like you. It's targeted at institutions like MIT, Ford and Halliburton. If they each had to start coughing up $24 million per year to hold onto their sparsely used /8 IP blocks, they'd be clamoring to unload them.

    40. Re:IPV4 addresses are NOT running out by tabrisnet · · Score: 2, Insightful

      He didn't say "two websites" he said "two webservers".

    41. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      You host the game on your computer, the friend at your house connects using local addressing, then your other friends use UDP 12345 to your public address.

    42. Re:IPV4 addresses are NOT running out by headbulb · · Score: 1

      OK explain how you are going to make a batch file work to open a port on their NAT router? Unless the router has upnp you're out of luck.

      But VNC does have a reverse connection. Thing going for it. But that still requires him to open ports on his side if the supporter has nat going on as well.

      The parent may find that useful.

      The internet is supposed to be peer to peer. Peer to peer has it's advantages. Better pings in games, less bandwidth used up since triangle routing does not have to be used. There is plenty of advantages.

    43. Re:IPV4 addresses are NOT running out by ardor · · Score: 1

      All of these are just workarounds for the very problems that NAT causes. In other words, with ipv6, I don't need virtual hosting, or strange batch files that open up ports. Instead, "it just works".

      --
      This sig does not contain any SCO code.
    44. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      They are running out. When will it happen is the only question.

      http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_11-3/113_ipv4.html

    45. Re:IPV4 addresses are NOT running out by Waffle+Iron · · Score: 1

      Why charge for IPs when all you need is to switch to a different numbering, solving the problem properly?

      Because the members of the oligopoly that run the Intenet industry know that charging for a scarce resource is a great revenue generator. They're not going to go through a bunch of effort just to give up that income opportunity.

    46. Re:IPV4 addresses are NOT running out by SatanicPuppy · · Score: 1

      We're talking corporations here, but I'll bite. I use bitorrent at home through a NAT. Works fine. I have a static IP, but the machine that has that IP isn't the machine I use for bittorrent.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    47. Re:IPV4 addresses are NOT running out by suggsjc · · Score: 1

      One of the cities that we support recently bought a new chiller for their ice rink. Their old one was just managed in-house. You had to be standing in front of the device to do much of anything. And if it was malfunctioning they had to send someone out to eyeball the machine. Their new one has a network jack and can be monitored remotely through a web interface. So we had to get them bandwidth and a static IP address so they could keep an eye on things even when nobody was physically at the civic center.

      Just curious, but can you only monitor it or could you "adjust" it to convert the ice rink into a swimming pool? If so, what is its ip address?

      Seriously though, while it is cool to be able to remotely monitor the ice rink, are we (in general) being too hasty to connect too many things to an exposed internet connection? I'm sure you did your due diligence, but I'd bet that lots of companies market internet connection as features without going through rigorous enough hardening/partitioning to prevent "hacking".

      --
      When I have a kid, I want to put him in one of those strollers for twins and then run around the mall looking frantic.
    48. Re:IPV4 addresses are NOT running out by tlhIngan · · Score: 3, Interesting

      Great, so I can re-write every application to support a half-assed workaround like NAT. I'd much rather have each host bugging the crap out of the router to forward a specific port, please! than to just get the migration over with and be done with it. If you think that NAT+uPNP is a replacement for IPv6, then you need to find a hobby more suited to your skill level.

      Or intelligently design protocols to assume that not everyone has a direct IP back to them? In the early days of online gaming, one had to forward easily a half-dozen ports (UDP, and maybe 3 ports TCP) to play online. These days, it's normally 1 UDP and 1 TCP port, if that.

      IPv6 won't change any of the issues seen with NAT. At best, you'll have a firewall blocking incoming connections to all but a single IP (the system providing the gateway and firewall), so you'll juat have huge spaces of IPv6 addresses that are unreachable anyways. So your toilet might have a real live IPv6 address, but it's not reachable outside the local network anyhow. Heck, that gateway may very well perform NAT on IPv6. To assume all the issues with NAT, firewalls, etc, go away magically by using IPv6 is naive - they're still going to be around. At the minimum, there's going to be firewalls up, and apps will still have to request people poke holes in it somehow. Most likely, nothing will change.

      Despite having all these addresses available to them, most ISPs will probably just offer the user 1 or 2 IP addresses (though, an IPv4 and IPv6 address), and charge them an extra $5/month for another one. Or maybe they'll get a clue and give them a pile of addresses, to which the user will probably just stick a router in and use 1 address. And might as well stick all the machines behind it in the private address range anyhow.

      IPv6 is important because we're running out of addresses (or some countries already have). But unless the protocol mandates things like evil bits and other junk, people are still going to put up firewalls, NAT-based routers, etc, and we're really just going to end up in the same situation we're in now. Everyone talks grand of "even your toilet can be connected", then it just takes someone to say "well, if it is, I don't want people to hack into it". IPv6 won't save us from buggy exploitable services, spam, OSes with poor default security, etc. The only thing it may save us from is that portscanning blocks of IPs got significantly harder, but botnets are good for that sort of thing. Heck, even exploits have seemed to work around the fact that a good chunk of people are behind a firewall.

    49. Re:IPV4 addresses are NOT running out by Dragonslicer · · Score: 1

      Any kind of webserver. Try running two of them on the same IP address.

      Seriously? I guess you have never heard of virtual hosting.

      I don't think virtual hosting works all that well across multiple servers, especially when the router doesn't know which server to send the packets to.

    50. Re:IPV4 addresses are NOT running out by b0bby · · Score: 1

      As he said, virtual hosts don't support SSL. That's why you won't see cheap hosts offer you an SSL option.

    51. Re:IPV4 addresses are NOT running out by Free+the+Cowards · · Score: 1

      I would hope you wouldn't sit naked (without a firewall).

      I do. Of course I run a reasonably secure OS, not that pile of junk Windows.

      --
      If you mod me Overrated, you are admitting that you have no penis.
    52. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 1

      I wasn't talking about corporations alone, BTW. I have a BT setup like yours, with the router configged to forward one port to my desktop, one to my wife's, and one to my laptop. It works, but you have to admit that it's a pain in the butt. Wouldn't it be easier to say "pass in to port 6881" and be done with it? I loathe UPnP because it lets untrusted client programs create ad-hoc forwarding rules on the router, so a piece of random malware can open up its own publicly-visible listening port.

      If you're going to have to migrate to a new protocol, whether it's IPv4+NAT+UPnP or IPv6, why not pick the better one, the one that's a superset of the other and doesn't add more complexity to the problem?

      --
      Dewey, what part of this looks like authorities should be involved?
    53. Re:IPV4 addresses are NOT running out by SatanicPuppy · · Score: 1

      It has to do with how many directly accessible external addresses there is an actual demand for at the current time, which is very relevant. Right now we have more than enough addresses to meet the demand, assuming we stop being so liberal with their distribution.

      I'm not anti-ip6, but I don't see a need to force an early migration to try and address an imaginary shortage.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    54. Re:IPV4 addresses are NOT running out by squiggleslash · · Score: 4, Insightful

      There's no reason every person on earth needs an IP. Nat+uPNP is perfectly capable and 100% backwords compatible.

      1. We're talking about network devices, not people.
      2. NAT+uPNP is not "100% backwards compatible". Older applications that need incoming connections certainly can't use NAT and uPNP. It's arguably slightly better on backwards compatibility than IPv6, but not greatly so.
      3. NAT and uPNP are hacks that do not solve most of the problems that IPv6 is designed to fix.
      4. If an OS supports IPv6 (and which popular operating systems do not? Mac OS X, Windows XP, Vista, and all desktop and server distributions of GNU/Linux I've seen lately support it out of the box, no special configuration required), then adding IPv6 support to your network is just a matter of adding a gateway/router that falls back to 6to4 if it can't get a valid IPv6 netblock. How is uPNP or NAT easier than that?

      In the end, we want peer to peer connectivity. That's what the Internet was designed for. We currently use a clumsy group of non-transparent hacks that "mostly work" to work around the fact that we can't give every device a predictable IP when it leaves the factory. IPv6 is a clean architecture that scales, that works predictably, that works now, and that allows peer to peer connectivity between IPv6 nodes transparently.

      The only reason why people aren't switching to it now is because everyone's still hung up on hacks to get IPv4 to work acceptably. If the router manufacturers followed Apple's lead and incorporated IPv6, including 6to4, into all new routers, most people would switch to v6 without even knowing it. We'd suddenly have an ecosystem where everything would "just work" - buy an Internet-enabled widget from the shop, plug it into any Ethernet port on your network, and it'd work, no configuration required, regardless of what it's supposed to do.

      To get there, we have to stop doing what we're doing.

      --
      You are not alone. This is not normal. None of this is normal.
    55. Re:IPV4 addresses are NOT running out by SatanicPuppy · · Score: 1

      I'm not against IP6, but I wrote all my IP4 stuff years ago, so it's not an either or thing, it's a "I've already got this and it works so..." thing.

      I fully expect to be on IP6 in the next 5 to 10 years, and the switchover will affect me at home practically not at all, but it'll kill me at work with all the proprietary horseshit we have deployed. Lot of people are going to drag their feet.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    56. Re:IPV4 addresses are NOT running out by vadim_t · · Score: 2, Interesting

      You host the game on your computer, the friend at your house connects using local addressing, then your other friends use UDP 12345 to your public address.

      That only works so long that:

      1. You're the only one who has this problem. Doesn't work when two other people are also going to share a connection.
      2. You can convince everybody that they move to your server. There can be a serious hassle in getting maps, mods, patches and so on set up.
      3. Your connection has enough bandwidth and low enough latency to work as a server.

      I shouldn't have to deal with this nonsense. Without NAT everybody could just connect to everybody else and the problem wouldn't exist.

    57. Re:IPV4 addresses are NOT running out by Tinik · · Score: 1

      Three words: Session Initiation Protocol

      It does not work through NAT without some nasty hacks, and even then it rarely works when there is NAT at both ends. It requires special SIP filters, keep-alives, and packet mangling, all of which become increasingly unfeasible as you scale up, and none of which are handled by UPnP

    58. Re:IPV4 addresses are NOT running out by GooberToo · · Score: 1

      Just because it's not externally addressable does not mean it should not have an externally addressable address. This is why I specifically mentioned routers and firewalls. This is also why I argue they are distinct issues.

    59. Re:IPV4 addresses are NOT running out by jguthrie · · Score: 1

      Actually, it's not that hard, at least if you're running Apache. You simply set up one server to receive all the incoming requests and then use Apache's proxy capability to forward the request to the server it should actually go to. My home network is like that. Actually, my home network also runs IPv6 and the IPv6 address resolves to the actual destination computer, but IPv6 connectivity being what it is (that is, nearly nonexistent) I needed to figure out how to make it work with the single IPv4 address I had.

    60. Re:IPV4 addresses are NOT running out by adonoman · · Score: 1

      No need to browse the web from a microwave, but why not give it a network connection so it can look up bar codes and automatically sets the time. I've seen non-networked versions of these, but the internal list they have quickly gets stale, and they're limited to a certain number of listings.

    61. Re:IPV4 addresses are NOT running out by GooberToo · · Score: 1

      There is always a server. Even multicast has a server.

      You should be 100% wrong on both accounts. In peer to peer, there is no server which is exactly why it avoids the client/server nomenclature. For multicast, there is no server - ever. There is only senders and joined receivers. Senders need never even know they are sending packets via multicast.

    62. Re:IPV4 addresses are NOT running out by nyet · · Score: 1

      There's no reason every person on earth needs an IP. Nat+uPNP is perfectly capable and 100% backwords compatible.

      Reminder: the port field is only 16 bits wide. Every single one of your NAT'ed sessions will be chewing into that space.

      NAT is a horrible hack and is no substitute for having properly addressable machines.

    63. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 1

      it'll kill me at work with all the proprietary horseshit we have deployed. Lot of people are going to drag their feet.

      We're running dual-stack here at work. I'm phasing in IPv6 clients and services as they come available. I really, really recommend this approach; if some service isn't as IPv6-compliant as it claims, you just turn it off and drop back to IPv6 while you wait for the next version to come out.

      --
      Dewey, what part of this looks like authorities should be involved?
    64. Re:IPV4 addresses are NOT running out by sexconker · · Score: 1

      I have many machines on my home network behind NAT.

      They all weather the torrent of bits just fine.

    65. Re:IPV4 addresses are NOT running out by sexconker · · Score: 1

      Many people do not want IPv6 because getting set up for it will be expensive and time consuming. Remembering or just typing an IP will be much more of a bitch. And some people don't want machines to have publicly accessible IPs. I for one don't want my fucking toaster or condoms to have IP addresses.

    66. Re:IPV4 addresses are NOT running out by Tony+Hoyle · · Score: 1

      ipv4 addresses *are* running out.

      The disagreement is only over when. The counter is currently at 821 days (a little over two years) however it fluctuates.. when I first started tracking it it was at 798 days. I've seen it over 1000 as well, when a large block was returned to the pool.

      Because it's not dropping linearly - some weeks way more IP addresses will be returned to the pool than used - it's hard to predict a real date. I'm thinking we'll last 5 years, but it's just a guess.

    67. Re:IPV4 addresses are NOT running out by geekoid · · Score: 0, Flamebait

      We've been a year away from running out for 5 years.

      So what happens if we don't upgrade?

      It means the internet remains as is.
      Sticking with IPv4 will be nore more of an 'economic burden' then it is right now.

      IT will not be the end of the internet.

      Considering IPv6 means the complete end of privacy and anonymity, I think dealing with IPv4 issues is worth the cost compared to being ably to put up effective borders on the internet. The wet dream of anyone who feels they need to control.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    68. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 3, Informative

      Many people do not want IPv6 because getting set up for it will be expensive and time consuming.

      Except it's not.

      Remembering or just typing an IP will be much more of a bitch.

      I haven't typed my IP since I added it to DNS.

      And some people don't want machines to have publicly accessible IPs.

      Then don't open the firewall.

      I for one don't want my fucking toaster or condoms

      I think (hope!) you didn't mean it that way.

      to have IP addresses.

      Then don't plug them into the LAN.

      --
      Dewey, what part of this looks like authorities should be involved?
    69. Re:IPV4 addresses are NOT running out by hardburn · · Score: 1

      You've been raked over the coals already for calling NAT/uPnP anything other than an ugly hack. But there's another problem here, which is how fast routers can route.

      When an IPv4 router wants to send a packet along, it looks up in a table for the routing portion of the IP (the /24 portion or whatever the netmask is). It then sends the packet out on the interface specified in the table, or the default interface if it doesn't find it. The problem is that as the IPv4 space fills up, the size of these tables gets very large. Even if you have enough memory to hold them, searching that memory takes a long time.

      IPv6 is a hierarchical address space, so the routers are laid out in a tree-shape rather than the ad-hoc setup of IPv4. The routers therefore only need to look at a small chunk of the address to know how to send the packet on. Then the next router takes the next chunk of the address, and so on.

      Additionally, the max packet size of IPv4 is 65k. IPv6 can use an optional jumbo payload feature to go up to 4G. You need the link layer to support more than 1500 bytes per frame (which is the traditional limit of ethernet and a few other link protocols), but in theory you could transfer almost an entire DVD in one packet.

      --
      Not a typewriter
    70. Re:IPV4 addresses are NOT running out by geekoid · · Score: 0, Flamebait

      What makes you think people are going to be able to run home servers? IPv6 wil make it easir for ISPOs to find and block home server. SO while you are technically true, it won't matter becasue you won't be allowed to access anything with it.

      IPv6, as great as it could be, will be hijack by industry and used as an internet border and control.
      Just looka t how corporations and countries are trying to do that now. It's only the weakness of IPv4 that makes it so damn hard.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    71. Re:IPV4 addresses are NOT running out by geekoid · · Score: 1

      Unless that chiller was the only internet connection the rink had, it didn't need a static IP.

      Pretty much true of ever device any any home as well.

      Just one more layer is all that would be needed.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    72. Re:IPV4 addresses are NOT running out by Chris+Burke · · Score: 1

      Huh? If my ISP wants to keep someone from initiating a connection to my home computer today, they can. What about IPv4 makes this hard?

      --

      The enemies of Democracy are
    73. Re:IPV4 addresses are NOT running out by CmdrPorno · · Score: 1

      So we had to get them bandwidth and a static IP address so they could keep an eye on things even when nobody was physically at the civic center.

      They don't need a static IP. Just open up the correct ports on the civic center's router and use a service like no-ip to map a domain to a dynamic IP address.

      --
      Sent from my iPhone
    74. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      Any kind of webserver. Try running two of them on the same IP address.

      Man, I thought this was Slashdot, where users knew the difference between "IP Address" and "endpoint". Running two web servers on a single IP is no trouble at all. Running them both on port 80 is not going to work.

    75. Re:IPV4 addresses are NOT running out by avaspell · · Score: 2, Interesting

      Sounds to me like you're the one living in hobby-land. Most machines don't need an externally accessible IP.

      You're precisely correct. However, this problem has nothing to do with externally accessible IP addresses. It's about connectivity and global uniqueness.

      Let's say that I run the network for small company A. We used 10. private addresses for our network layout. My company get's bought by slightly bigger company B, that also uses 10. address space for their network. In all likelyhood, we're going to have address conflicts. So, I have 3 choices for integrating the 2 networks:

      1. Renumber company A
      2. Renumber company B.
      3. Employ some kind of odd-ball double-NAT solution that makes both companies appear to have unique addresses from the other's perspective.

      You can very easily see that the lack of globally unique IP addresses in this situation has created a huge mess that takes a lot of time and money to resolve. If both company A and company B used globally-unique IP address (v4 or v6!), this would have never been a problem. And both companies can very easily hide internally accessible and externally accessible hosts via routing and firewall policy.

      In the company I work for, we deploy a VPN solution to allow 2000+ data gateways to connect to us to deliver data. Because each data gateway resides in a unique network often addressed via non-routable IPv4 addresses, I can never trust that the VPN IP that I assign to this data gateway will not conflict with the local network on which this is deployed. So, I got globally unique addresses from ARIN to do it. Guess what? I don't even advertise that route over BGP to the public internet! I only route it via my local AS. When people gather statistics by IPv4 usage, consider that there are quite a few of us who need globally unique IP space, but will never route that out publicly.

      IPv6 is designed to provide a global pool of unique addresses so large that everyone can have a globally unique addresses, regardless of how one wishes to use it. This means that networks become an issue of connectivity, not one of address management.

      The IPv6 working group almost got caught up in NAT mania: They initially created a reserved IPv6 space called "site local", which was designed to be treated in the exact same way as the current private address space. On further consideration, though, the working group decided that any "private" addresses are just silly and create more headache than what they are worth. The concept of "site local" simply means "I'm not going to advertise this route publicly". If you don't want to advertise your network over the public Internet, then just don't. Take your globally unique space and have fun with it.

    76. Re:IPV4 addresses are NOT running out by Harry+Coin · · Score: 2, Funny

      That's not even getting into all the millions of unused IP's being held by the early internet companies.

      True, but consider that IPv6 would prevent anything like that from happening again.

      Actually, if IPv6 is adopted, we'll see companies (even individuals!) sitting on ~5x10^28 unused IP addresses! Greedy bastards.

      --
      That's pre 7-11 thinking....
    77. Re:IPV4 addresses are NOT running out by Znork · · Score: 1

      Right now we have more than enough addresses to meet the demand

      We do? As far as I can tell it's actually getting quite hard to get your ISP to hand you /24 with no better excuse than 'I want them'.

      assuming we stop being so liberal with their distribution.

      Ah, so if we don't meet demand, then we can meet demand? Hmmm.

      It's not an early migration anymore. Personally I've been using 6to4 for ipv6 connectivity for two years by now, and most things work well. Mainly I use it to traverse otherwise natted firewalls, without having to set up more port forwards than I could count to for various services.

      To do what you want, to limit use of ipv4 addresses to the cases where they're necessary, to make that possible we actually need to deploy ipv6. The wider the deployment, the more you'll gain the ability to retain v4 addresses.

    78. Re:IPV4 addresses are NOT running out by DiegoBravo · · Score: 1

      I Agree with your others points but:

      >>> 4. If an OS supports IPv6 (and which popular operating systems do not? Mac OS X, Windows XP, Vista, and all desktop and server distributions of GNU/Linux I've seen lately support it out of the box, no special configuration required), then adding IPv6 support to your network is just a matter of adding a gateway/router that falls back to 6to4 if it can't get a valid IPv6 netblock. How is uPNP or NAT easier than that?

      Remember Y2K? how many apps (specially in-house) are there hoping to read/parse/use/backresolve those neat 4 decimal numbers? Yes... those are broken and should never have used plain ip addresses at all, but well, there are.

    79. Re:IPV4 addresses are NOT running out by sjames · · Score: 1

      IP's just need to be charged for on a early basis. Start with $1 per year per ip to EVERYONE who owns an IP's and you'll see the "IP Shortage" vanish overnight.

      Actually, a class C allocation already runs you $2500/year from ARIN. If you didn't already know that, you're not in a position to know if there's a shortage or not. Anyway, a dollar a year is chump change.

      Years ago, when requesting a class C from ARIN, they practically handed it to you the instant you sent the request email. "ARIN, may I hav...", "SURE! Here it is!!!".

      Now, you have to send a detailed strong justification (if you can) including some serious crystal ball gazing (unless you're a large ISP already). If it gets any worse they'll want pictures from your last colonoscopy as well. Try to get a class C from ARIN and THEN tell me things aren't getting tight.

      As for the millions of IPs in the legacy class As, those cannot simply be yanked back. They were requested and allocated fair and square under the old rules and the lawsuits will fly if ARIN tries to take them back. The injunctions would last well longer than the remaining v4 addresses will.

      The fact is, taking the legacy spaces back would barely make a dent in the situation anyway. It's a few millions out of 4 billion.

    80. Re:IPV4 addresses are NOT running out by X0563511 · · Score: 1

      If you are being provided data from me, you are a client and I am a server.

      Period. Just because this relationship only lasts a few minutes, doesn't make it any less of a client/server relationship.

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    81. Re:IPV4 addresses are NOT running out by sjames · · Score: 1

      So how do corporations feel about VoIP phones?

    82. Re:IPV4 addresses are NOT running out by sjames · · Score: 1

      I'll bet you've never tried to get a class C allocated to you(The smallest prefix that will actually get routed). There's a lot of public servers out there and they need public addresses. Practically everything else is already behind a NAT and it has already proven not to be enough.

    83. Re:IPV4 addresses are NOT running out by vadim_t · · Score: 1

      I know you can, but I used the web server example specificially because running web servers on ports other than 80 isn't terribly useful most of the time.

      You can use a proxy, but that adds some issues. Point was, you can't just set up a Windows and a Linux box each with a webserver and have it just work.

    84. Re:IPV4 addresses are NOT running out by QuantumRiff · · Score: 1

      try having an impromptu video conference with a customer...

      --

      What are we going to do tonight Brain?
    85. Re:IPV4 addresses are NOT running out by drsquare · · Score: 1

      Right now we have more than enough addresses to meet the demand, assuming we stop being so liberal with their distribution.

      If it's so liberal, why do ISPs only give you one IP address?

    86. Re:IPV4 addresses are NOT running out by raddan · · Score: 2, Informative

      I second FTP. What a mess. Unfortunately, it's one of the more widely-adopted file transfer protocols out there, and we have to support it.

      We're using OpenBSD's FTP proxy. It works well, and is easy to set up (much easier than it used to be, anyway).

      IPv6, DNSSEC, and ubiquitous SSL or IPSec are things that are long overdue.

    87. Re:IPV4 addresses are NOT running out by Guyver3 · · Score: 1

      under 10% utilization sounds like you should be giving back your allocation to the RIR/provider and taking something smaller.

    88. Re:IPV4 addresses are NOT running out by morgauo · · Score: 1

      What a great idea!

      So... then public IPs can be considered a techie luxury. No doubt resulting in residential ISPs not offering them anymore. Cool, then the only way information can be transfered from one computer to another will have to involve a server somewhere sitting on a comercial host. No more anything that involves one peer communicating directly with another.

      Hey, this idea is so great its revolutionary. Let's give it a new name. I know, how about AOL?

    89. Re:IPV4 addresses are NOT running out by Taibhsear · · Score: 1

      So if we (the US) finally convert over to IPV6 does that mean I won't have to mess with port forwarding in the router and the firewall and like 80 other programs just to be able to play a game online? (I haven't been able to just play a game online since the original starcraft)

    90. Re:IPV4 addresses are NOT running out by mellon · · Score: 1

      Most internet users are individuals, not corporations. So yes, in your situation, you're sitting pretty for now, but your situation doesn't generalize to the average user.

    91. Re:IPV4 addresses are NOT running out by ristonj · · Score: 1

      and, as a nice side effect, making it possible for me to assign a public-facing IP address and DNS entry for every toaster in my house.

      How many toasters do you own? How many do you need?

    92. Re:IPV4 addresses are NOT running out by mellon · · Score: 1

      VoIP and peer-to-peer work better with end-to-end connectivity. They can be made to work across NATs, but it's a *huge* headache. They can also be made to work by passing all traffic through corporate servers, which is great for corporations who want to be able to collect tolls, but kind of sucks for end users who don't want to pay them.

    93. Re:IPV4 addresses are NOT running out by phantomcircuit · · Score: 1

      Remote desktop. When troubleshooting, I can't just ask the person I'm helping to install VNC, because then I'd have to explain to them how open the port.

      You do know that RealVNC will connect out to you right?

      also TeamViewer is infinitely useful

    94. Re:IPV4 addresses are NOT running out by Mozk · · Score: 1

      QFT. Do not stick penis into LAN.

      --
      No existe.
    95. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      Considering IPv6 means the complete end of privacy and anonymity, I think dealing with IPv4 issues is worth the cost compared to being ably to put up effective borders on the internet. The wet dream of anyone who feels they need to control.

      Please refer to RFC 3041 to discover why this statement is complete and utter BS.

    96. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      "Any kind of webserver. Try running two of them on the same IP address." Host headers?

    97. Re:IPV4 addresses are NOT running out by Mozk · · Score: 1
      --
      No existe.
    98. Re:IPV4 addresses are NOT running out by j+h+woodyatt · · Score: 1

      Besides, who would the money for the IP addresses go to? IANA? What would they use it for?

      More importantly, what do they do if I respond to their demand for my money by telling them to go Cheney themselves? Oh, wait— I get it. This is some poor deluded child who thinks I should recognize his personal monarchy as the Internet taxing authority.

      When you're facing a huge pile of unused nails. Every tool begins to look like a hammer.

      --
      jhw
    99. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      making it possible for me to assign a public-facing IP address and DNS entry for every toaster in my house

      Geez, how much toast do you eat?

    100. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 1

      So if we (the US) finally convert over to IPV6 does that mean I won't have to mess with port forwarding in the router and the firewall and like 80 other programs just to be able to play a game online?

      Yes, that's exactly what it means - assuming your firewall is configured to pass the traffic.

      --
      Dewey, what part of this looks like authorities should be involved?
    101. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 1

      You do know that RealVNC will connect out to you right?

      How well does that work if you're also behind a NAT?

      --
      Dewey, what part of this looks like authorities should be involved?
    102. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 1

      Considering IPv6 means the complete end of privacy and anonymity

      How do you figure that?

      --
      Dewey, what part of this looks like authorities should be involved?
    103. Re:IPV4 addresses are NOT running out by Arterion · · Score: 1

      If you can't provide them with a batch file that opens port 5900 for you, then stop trying to do remote support. Also remote desktop != vnc.

      Please, tell me how I can write a batch file that will open port 5900 on a typical consumer router.

      --
      "That which does not kill us makes us stranger." -Trevor Goodchild
    104. Re:IPV4 addresses are NOT running out by canuck08 · · Score: 1

      But why should be spend money on numbers? Seems like a collosal waste of money to me.

    105. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      That's what zeroconf is for.

    106. Re:IPV4 addresses are NOT running out by canuck08 · · Score: 1

      I would like to hear more about this 'fucking-toaster' of yours. It sounds excitingly dangerous. Do you need to use an electrically insulated condom with that?

    107. Re:IPV4 addresses are NOT running out by canuck08 · · Score: 1

      quite arguing over the definition of the word server guys. The point is that NAT is not a big problem when only 1 of 2 communicating devices is NATed. When both are behind NAT you have a big problem.

    108. Re:IPV4 addresses are NOT running out by DeadBeef · · Score: 1

      Your post has a great summary of views that will have to be conquered before IPv6 will take off and start to benefit people.

      Setting up IPv6 ( from an ISP perspective ) is exactly as hard as setting up IPv4, once the service provider decides to deploy it, you aren't going to have much choice if you want it configured up or not ( at least to your CPE ).

      If you are typing IP addresses you are probably doing something wrong anyway, IPv6 might be the incentive that spurs you upgrade to /etc/hosts or maybe even this crazy thing called DNS that those crazy internet guys are using.

      If you are worried about having publicly accessible IP's put in some firewalling. Seriously, firewall those addresses off the internet, you might find that you actually want to open them back up so you can access it however. A stateful firewall has all the bits of a NAT box that actually give you the security that you probably like, translating the addresses doesn't.

      If you want internet addressable condoms, then don't connect them to a network.

      I'm really looking forward to people getting back end to end connectivity. But, I'm slightly nervous that the backyard computer crowd + clueless IT folk are going to ruin it because they will be scared of operating without the horrible kludge and resulting brain damage that is NAT, Hopefully they wont.

      --
      I am a lawyer and this constitutes legal advice and I shall indemnify you against any losses arising from taking it.
    109. Re:IPV4 addresses are NOT running out by GooberToo · · Score: 1

      You make this shit up as you go don't you. Clients can provide data to server.

    110. Re:IPV4 addresses are NOT running out by phantomcircuit · · Score: 1

      I was assuming that you would be able to forward the port.

    111. Re:IPV4 addresses are NOT running out by DeadBeef · · Score: 1

      The reality ( hand waving aside ), is that all RIR members are going to carry on requesting address space at about the same rate ( probably a little higher ) as they have for the last few years and we _are_ absolutely going to run out of IPv4 space. Look at the actual numbers:

      http://www.potaroo.net/tools/ipv4/index.html

      You can try to come up with some tax to reduce public address space usage, and increase the usage of ugly hacks like NAT, or you can encourage adoption of a new standard that has no practical limitations for address space usage.

      Building IPv6 networks challenges alot of your assumptions. You can build your networks mostly the same way that you build your IPv4 networks, but eliminating the scarcity of addresses means you can also build them a whole lot differently and better.

      I am convinced that most people in the IT industry have no idea how much brain damage NAT causes, and how weird some of the established ideas of how networks are built are.

      1. Why have a central firewall, rather than centrally managed firewalling rules and logging?

      2. Why have a central IPSEC box, rather than encrypt from each host to each other host.

      3. Why not build your office LAN with public DNS and public address space on the internet?

      I can probably guess all the answers that people will give to these ( and I don't even recommend going out and implementing all these ideas ), but once you have built networks with these ideas you will have learnt a heap about why NAT is bad for everyone.

      --
      I am a lawyer and this constitutes legal advice and I shall indemnify you against any losses arising from taking it.
    112. Re:IPV4 addresses are NOT running out by Zontar+The+Mindless · · Score: 1

      Your ISP, maybe.

      I have 4 machines here, and each of them has a public IP address.

      My ISP is Bredbandsbolaget (Sweden), BTW.

      --
      Il n'y a pas de Planet B.
    113. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      In the end, we want peer to peer connectivity.

      Who's we? Most if not all government agencies and most corporations do not want end to end connectivity with the world for all their desktops. If you want IPv6 adoption to grow you have to give people a real reason to use it and "peer to peer" is not one of them. Sure, go ahead and trot out P2P - but look around at the people that have money to spend on technology and how much they don't want P2P. As it stands right now there is no compelling business case for anyone to move to IPv6. Does bittorrent work for the average home user? YES! So wheres the motive for an end user to care?

      So lets see. Government: Does not want peer to peer. Corporations: Does not want peer to peer. End Users: Already HAS peer to peer. So where is the killer app that will draw the masses? So far all anyone has trotted out is how IPv4 does not work well for all the things it works just fine with. People don't care about "perfect" when good enough gets them what they want. Its not like IPv4 which everyone wanted, no one understands why they should care with IPv6 and when they finally take a close look it makes them care less.

      For most people 4 works just fine. They have IP space, they can reach what they need to reach and everyone can reach what they want to share. Thats the real reason 6 is not catching on - it isn't needed. Will it be? Maybe, probably, but only time will tell. But right now, the masses don't need it.

      And also, IPv6 is not more secure than IPv4. Hell look at the R0 flaw. Damn good thing the world didn't adopt IPv6 or really bad things would have happened. Try explaining that fuck up to risk averse coporations and government agencies. Yeah we pushed you onto a protocol you didn't need, gave you nothing you didn't already have and well - it did give you a big huge flaw that exposed your entire network!

      Oh but lets not forget IPSEC! WEEEEE, IPv6 hasd that built in! Yawn... and? Well that just solves everything doesn't it? I guess we can call 1985 and ask for them to eliminate those risks for us.

      And dear god, 6 isn't even backwards compatible with 4, so you have to run both to live in a world with 6 until everyone drops 4 (so figure thats a few decades off). So even if someone does agree that 6 will make them safer, we don't live in a 6 world yet so you have to stay in a 4 world for a long long time. So 6 doesn't make you safer unless, if you agree it even can, you completely drop all support for 4.

      And before you do that, don't forget that most firewalls don't support 6 properly (yet), IDS' still lack good support, SNMP is not properly supported on many network devices over 6, lots of network devices support 6 in software and not hardware making them dog slow, the stacks on most desktops (XP) don't support it fully (yes Linux rules here, but its not the desktop of choice), applications still need to be tested and made to work with and of course the masses dont need or even want IPv6 right now.

      IPv6 lacks the one thing that really does matter - it doesn't have a killer app, it doesn't solve a problem people have now so no one WANTS to use it. On top of all that what you get is a risky protocol that gives you 96 more bits, no implicit security from NAT (yes fan boys go ahead and pretend that NAT doesnt matter, but it does. Unroutable = bad guy can touch box. That is security) and a whole host of untested stacks, routers, firewalls, IDS' etc. - yeah I wonder why no one is jumping on this band wagon.

    114. Re:IPV4 addresses are NOT running out by LingNoi · · Score: 1

      This is a really big problem and many applications are forced to implement NAT-punch through to get around the archaic system we have.

      Problem is morons that come along thinking NAT == security and that IPv6 is going to let everyone see their boxes on the internet. *facepalm*

    115. Re:IPV4 addresses are NOT running out by sexconker · · Score: 1

      No. That would defeat the whole purpose.

    116. Re:IPV4 addresses are NOT running out by Tweenk · · Score: 1

      Try LogMeIn or GoToMyPC

      Pick the latter because the first is a PC=Windows troll for now. GoToMyPC even has some Linux support, though it's not as good as for Windows.

      --
      Those who would give up liberty to obtain working drivers, deserve neither liberty nor working drivers.
    117. Re:IPV4 addresses are NOT running out by LingNoi · · Score: 1

      All you're suggesting is hacks for ipv4, you've completely missed the point.

    118. Re:IPV4 addresses are NOT running out by Golddess · · Score: 1

      When the corporation is an ISP/Phone company and you're getting VOIP service from someone who is not them? Probably about the same.

      --
      "I'm not sure I like the fugnutish tone you used in your post!" -RogL (608926)-
    119. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      NAT IS NOT A FIREWALL, NAT is not a firewall, NAT IS NOT A FIREWALL.

    120. Re:IPV4 addresses are NOT running out by LingNoi · · Score: 1

      It's a good thing that it's backward compatible then isn't it?

    121. Re:IPV4 addresses are NOT running out by JesseMcDonald · · Score: 3, Interesting

      The problem with IPv4 isn't really that we're running out of addresses, although that could become an issue in the near future. No, the problem is routing. Reallocating the remaining IPv4 addresses would mean abandoning any presence toward maintaining hierarchical subnets. High-level routers would need to know where to send packets based on not just the /8 or /16 prefix, but perhaps /24 -- or worse. That's potentially millions of additional records in every router, when we're already having trouble with an explosion of routing-table entries. IPv6, on the other hand, has enough bits in just the upper (network) portion of the address (/64) to permit purely hierarchical routing to the ISP level, which means that the routing tables become far simpler. There's no need for each router to know about dozens -- perhaps hundreds, or thousands -- of minuscule disjoint subnets serviced by each ISP.

      The other advantages of IPv6, such as improved security and access to a routable /48 subnet for each local network, are merely bonuses. The routing issues alone are sufficient justification to migrate.

      --
      "The state is that great fiction by which everyone tries to live at the expense of everyone else." - Bastiat
    122. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      Do you know what you are talking about?

      >Any kind of webserver. Try running two of them on the same IP address.

      NLB, CARP... these both allow servers to share an address.

      >Of the above, especially websites using SSL. Can't have more than one per IP address.

      SSL has nothing to do with the amount of addresses per server. In an NLB or CARP array you can have the same SSL certificate installed on multiple servers. You can even share the SSL cert in a round robbin array (multi-public IP)

      >FTP is a horrible pain when NAT is involved.

      In an NLB array you can use IP affinity which resolves this issue. Don't know about CARP.

      >Many video conference applications.

      I haven't had an issue with this before, H323 gatekeepers are normally used in this scenario resolving any issues.

      >Programs like instant messengers with file transfer.

      Most oraganisations I work in have MSN running with no problem behind a firewall or NAT device. I can safely say in the past 5 years I have not had issues with this. Most stateful firewalls are Instant messenger aware.

      >BitTorrent and any form of P2P in general.

      If your a home user sure, maybe, unless you port forward to fix the issue... why is that a big deal?

      >IPsec in transport mode

      Ipsec shouldn't be started from a client unless it is remote access. A site to site vpn should be established from the edge of your network so that every device doesn't require an individual connection. In the case of remote access, most firewalls and clients have support for NAT-T now which resolves most VPN issues.

      >Many games. Two players trying to play online doesn't work at all with some games, no matter how much you fiddle with NAT.

      I suppose I should stop playing on steam, BF2142 and many of the other networks I play on because they don't work. Perhaps with older games a big maybe.

      >Remote desktop. When troubleshooting, I can't just ask the person I'm helping to install VNC, because then I'd have to explain to them how open the port.

      There are plenty of alternative better solutions to opening a port here, besides it has nothing to do with opening ports. Would you normally have the pc fully connected to the internet with no access control... this argument is flawed. www.gotomypc.com, or www.logmein123.com anyone?

      >I'm sure the list can get a good deal longer, but this seems enough.

      Don't get me wrong I'm not a hater, IPv6 is the way to go. I'm just sick of incorrrect information being thrown about.

    123. Re:IPV4 addresses are NOT running out by Melkman · · Score: 1

      But incompatibility with open VoIP standards like SIP and H.323 is an issue with corporations. And there are many more protocols that don't like NAT. Think external service brokers that register internal services. In the business world NAT must die. It's a hopeless kludge that is only being tolerated by the scarcity of public addresses.

    124. Re:IPV4 addresses are NOT running out by geniusj · · Score: 1

      RIPE is going to bitch-slap them if they do that for every customer..

    125. Re:IPV4 addresses are NOT running out by slamb · · Score: 1

      Nat+uPNP is perfectly capable

      No, it's not. Every TCP connection needs a unique (src IP, src port, dest IP, dest port) tuple, and there are only 2^16 possible ports. Assignment is becoming so limited in Asian countries that I've heard of so many people being put behind one IP that they hit this limit when accessing certain popular websites (which of course require port 80 and one of a small set of destination IPs).

    126. Re:IPV4 addresses are NOT running out by geniusj · · Score: 1

      I'm with you, btw. What's worse is anycast applications. You might only need 10 anycast addresses for your application, but because anything /24 will likely be ignored by the majority of the BGP speakers out there, you're forced to use a much bigger block than you need to get it done. Getting that block for 10 IP addresses can be a hassle as well.

      I think that IPv6 will truly make a lot of peoples' lives easier and fix a lot of problems that users have with their internet connectivity (particularly p2p apps) currently.

    127. Re:IPV4 addresses are NOT running out by geniusj · · Score: 1

      Who's using UPnP in a corporate environment? Most enterprise firewalls don't support it anyway.

    128. Re:IPV4 addresses are NOT running out by asdfghjklqwertyuiop · · Score: 1

      Why would you want to cling to NAT and uPNP and port forwarding and fidgeting with server port numbers and all this other shit if you could just get rid of it all and have the same functions? It would be so much simpler.

      Asking why IPv6 should be adopted to replace these hacks is like asking "why would I walk across the street when I could call a taxi, get a ride to the airport, hire a helicopter and be airlifted across the street instead?"

    129. Re:IPV4 addresses are NOT running out by geniusj · · Score: 1

      These days, it's normally 1 UDP and 1 TCP port, if that.

      Hopefully SCTP catches on and we can drop that number of ports even further..

    130. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 1

      Years ago, when requesting a class C from ARIN, they practically handed it to you the instant you sent the request email. "ARIN, may I hav...", "SURE! Here it is!!!".

      That's an understatement. I worked at an ISP with two netblock, each allocated from one of our upstreams, and decided to ask for our own assignment. I was charged with putting together the documentation packet and technical plan for demonstrating why we need an allocation. About a week after we mailed it out, we got confirmation of our new /19 (32 "/24" or "class C") blocks. At that time, we handled about 4,000 customers with perhaps 500 phone lines.

      --
      Dewey, what part of this looks like authorities should be involved?
    131. Re:IPV4 addresses are NOT running out by Antique+Geekmeister · · Score: 1

      Which most corporate network admins absolutely do not want running. A bunch of people inside a company grabbing and sharing the latest 'Twilight' badly recorded knockoff DVD can grind a company's external bandwidth to a grinding halt, interfering with legitimate traffic. Even legitimate torrents such as the new Fedora 10 DVD can be a problem if too many people are torrenting it at once. And far, far too much of the traffic on Bittorrent is illegitimate: if I catch you running it on my network space, without permission, the first warning is polite, the second is disciplinary action. Such bandwidth is surprisingly expensive, and people bringing in their external USB drives to download music and videos will go home with the lawyers and security reviewing the contents of their USB media.

      A company that has a legitimate need for bittorrent can, and should, designate an external server for precisely this purpose. That's one IP address, maybe 10 if scattered around the world. Compared to the number of companies that have /24 address spaces and only really use 5 of them, this isn't a big IP address load.

    132. Re:IPV4 addresses are NOT running out by Antique+Geekmeister · · Score: 1

      You don't manage network connectivity across VPN's and multiple sites. I do. Changing the firewalls and VPN's and switches to support IPv6 is pretty expensive for a mid-sized business, and there's usually no cost justification for doing so until the old stuff is being replaced anyway.

    133. Re:IPV4 addresses are NOT running out by Antique+Geekmeister · · Score: 1

      Sure they do: you just need to use an alternative port. It's not ideal, but it works well with a redirect in front of it on the virtual host's HTTP web page.

    134. Re:IPV4 addresses are NOT running out by mysidia · · Score: 1

      NAPT+uPNP is not 100% backwards compatible. And it's also not very scalable, due to excessive memory resource consumption required on routers to implement NAT.

      The private IP space available is fairly small, and new networks always require public ips in order to be reachable from the world.

      New networks are coming up all the time, and there is a serious legitimate demand for IP space from new networks, and there eventually won't be enough IPs to even provide new networks with connectivity.

      For a network to not have a public IP space means that network can't be reached, i.e. Hosts on other networks can't surf to websites on the NATP'ed network.

      Millions of IPs is not very many. 10x that many ips are easily consumed in a single year, and the rate of growth is expanding.

      Those early internet companies received a registration letter for their IP space, such that they essentially OWN those ip addresses, and they're not going to renumber to free up space or stop advertising their entire block, without quite some persuasion, or be willing to start paying a third party yearly fee the third party has no right to charge, for that matter.

    135. Re:IPV4 addresses are NOT running out by loxosceles · · Score: 1

      Standard "block all new incoming connections except on ports a,b,c" firewalls can be implemented in software on in-use computers. Apps would no longer have to request (possibly colliding) rule exceptions from an external firewall; they would request permission from the localhost firewall. If the host itself is compromised an external firewall doesn't matter anyway, because malware can set up outgoing connections and use that as a tunnel back into the compromised machine, or it could get commands from a c&c site and run them whenever.

      Dedicated firewalls should be looking for traffic patterns and taking appropriate action, not keeping connection states and providing address translation.

    136. Re:IPV4 addresses are NOT running out by mysidia · · Score: 1

      NAT is somewhat scalable to the business unit level. But not much more.. if AOL wanted to implement NAT, the costs would be tremendous, due to the extreme memory usage required to record billions of translations for users' open connections. And God help them if some of their users were infected with a worm..... I suppose they could limit each user to 100 simultaneous TCP/IP connections and 100 UDP sessions; make customers pay for the required memory to use more.

      Sounds to me like you're the one living in hobby-land. Most machines don't need an externally accessible IP.

      They need a proper globally routable IP properly assigned for a good number of protocols to operate correctly.

      Many NAT devices offer "hacks" to try alter application traffic inside protocols like FTP to "fix" what NAT breaks, but this reflects the inappropriateness of using NAT except in limited circumstances; no device is perfect, and of course, there will be protocols the manufacturer doesn't bother to offer workarounds for.

      It is proper design that every host from which the internet is used utilize use a unique address for all communications with outside hosts.

      This does not mean the hosts need to be externally accessible: external accessibility is completely a matter of firewall policy, and it should have nothing to do with the IP address.

      However, every host should be capable of being accessed from any host on the internet, to its assigned IP, if the proper firewall and network security policy is put into place to authorize that access.

    137. Re:IPV4 addresses are NOT running out by loxosceles · · Score: 1

      Of the above, especially websites using SSL. Can't have more than one per IP address.

      SSL has nothing to do with the amount of addresses per server. In an NLB or CARP array you can have the same SSL certificate installed on multiple servers. You can even share the SSL cert in a round robbin array (multi-public IP)

      GP was talking about multiple SSL vhosts on one IP. There is a solution in a recent TLS extension (SNI), and it's implemented in modern SSL implementations, but older web browsers and older servers still can't do it. Since lots of people still use IE 6 and below (and IE 7 on winxp), SNI is a non-starter for serious SSL-enabled websites.

    138. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      UPNP? Reverse-Connect VNC?

    139. Re:IPV4 addresses are NOT running out by ub3r+n3u7r4l1st · · Score: 1

      Many MMO games will ban you if you have multiple people using a same IP address.

      For example, I used to attend a community college where ALL user machines (not file servers, web servers or mail servers, just user machines in computer labs) on campus (thousands of them) use one single IP. This gives us big problem to host tournaments because usually the software will flag as cheat.

    140. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 1

      You don't manage network connectivity across VPN's and multiple sites.

      And yet I do!

      Changing the firewalls and VPN's and switches to support IPv6 is pretty expensive for a mid-sized business, and there's usually no cost justification for doing so until the old stuff is being replaced anyway.

      Umm, I'm not sure exactly what you're replying to, but I never said otherwise.

      Having said that, IPv6's built-in IPsec is a nice replacement for VPN stuff, and OpenBSD can pass a lot of traffic on inexpensive hardware. My company is relatively small but we've been able to start rolling out IPv6 with zero budget by enabling it on the router, then slowly enabling and testing services as we get around to it.

      --
      Dewey, what part of this looks like authorities should be involved?
    141. Re:IPV4 addresses are NOT running out by Hydroksyde · · Score: 1

      You mean, like, how IP is supposed to work?

    142. Re:IPV4 addresses are NOT running out by Antique+Geekmeister · · Score: 1

      Perhaps I misunderstood your statement? IPsec is _not_ built into IPv6. Support for certain aspects of IPsec is built into IPv6, certainly. But they're rather different tools.

      You're also fortunate in having a small company without a lot of already existing infrastructure. You merely had to turn IPv6 on for your router. But in a larger company, your DHCP services, DNS, firewalls, access control for network services, printers, and internal switches will all need work. The reluctance to touch it and simply use a NAT protected internal network is compelling, and it scales well.

    143. Re:IPV4 addresses are NOT running out by DeadBeef · · Score: 1

      I wouldn't actually use P2P as any sort of reason for implementing IPv6, but I would use it as one example of a class of applications that will take advantage of end to end connectivity.

      The government and corporations ( and probably you ) will get over themselves when the applications start taking advantage of end to end connectivity.

      There is absolutely no real security added by translating addresses. Ask yourself this; if your upstream ISP decided to route 192.168.1.0/24 ( or whatever network you use at home ) at the outside interface of your router, would your router drop traffic that followed it? If it does then you have some stateful firewalling in place that would work equally well if you had public addressing. If your router does forward that traffic then the only thing saving you is NAT, you should probably do something about it.

      I think people taking the position that IPv6 is more secure probably are misleading people, I can't see a single reason why, it seems to be exactly the same from any metric I can measure with. Securing a dual stack scenario will be almost exactly twice the work, this would be the case whatever the technology was.

      The killer IPv6 app is IPv4 address space exhaustion, get used to it.

      --
      I am a lawyer and this constitutes legal advice and I shall indemnify you against any losses arising from taking it.
    144. Re:IPV4 addresses are NOT running out by marka63 · · Score: 1

      What makes you think people are going to be able to run home servers? IPv6 wil make it easir for ISPOs to find and block home server.

      What a load of howash. It's just as easy to discover servers with IPv4 as it is with IPv6. The ISP just need to look for the incoming TCP SYN packets to find a server.

      ISP generally say no servers because it is simpler than describing the conditions where a server at the end of a asymmetric would be ok and where it would not be ok. Remember a lot of the infrastructure is shared and you should play fair.

      If you run a server and do it in a manner that draws attention to you they have a excuse to shut you down. Run on in a manner that doesn't draw attention to you and they generally turn a blind eye.

    145. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      The killer IPv6 app is IPv4 address space exhaustion, get used to it.

      Or dear god, get over YOURSELF. No one is saying 6 does not have more space than 4, you are missing the point when you think THAT is a reason to care about 6. Seriously, no one NEEDS it right now, its a fucking joke that people pretend that the 4 space is going to run out in "2 years" - fuck we've been hearing this lie for years and years and years. Get over it, if 6 ever catches on it will because of pure laziness that no one bothered to come up with a protocol people actually want. It will become the 4 of the future, no one will care - it will just be a stupid unimportant protocol that no one but people like us even understands.

      6 is a nasty piece of crap on two slices of bread and we all have to take a bite. The smart ones will get people like you to eat it, suffer thru the early adoption nonsense, pour your treasure into it - and only after you have thrown yourself on that sword and if nothing better comes along the masses will slough into the fold and will use your pretty protocol as their whore. And you will wonder why you wasted your time on something that really doesn't matter.

      Yes, please do, get over yourself. Its unpopular, but 6 is just 96 bits - thats it. Will be using it? Maybe, unless something actually useful and killer comes along. I bet my money on the later.

    146. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      And what happens when the ISPs start running out of addresses? Are they going to install giant NAT routers themselves? Are we going to wind up with several layers of NAT?

      Em, actually, this is already the case for most of Asia. I remember someone commenting how a Central Asian ISP has one and they get their connectivity form a Chinese ISP who also does it and then he has a home router, so he's behind three layer of NAT. It makes, say, VoIP practically impossible.
      I remember eastern european ISP doing such things in the 90's and early 00's.

    147. Re:IPV4 addresses are NOT running out by TheLink · · Score: 1

      No problem with NAT there.

      A company I was in used VPNs between locations (BTW most of the VoIP tech does not use crypto).

      Internal calls = "free".

      When making external calls to different countries, the company can in theory pick the "best" location for each call to "exit" from (to that location's phone networks).

      --
    148. Re:IPV4 addresses are NOT running out by tacocat · · Score: 1

      There will always be NAT so that people can represent themselves as a single entity and protect their work flow. Think of it as a store front versus and bazaar shop. I don't think it is practical to have a large entity not have a consolidated (and NAT) representation on the internet.

      That said, it's also pretty lame to think that IPv4 is good enough.

      Question: I have a IPv4 ISP and a NAT home lan. Is there any generic (as in non-distro dependent) method of setting up an IPv6 internal NAT? How would you (or could you) overlay an IPv4 in the event you had internal hardware that couldn't handle IPv6?

      At least this way I can stay ahead of the curve and when the ISP comes up to speed it's trivial for me. What are the class C addresses?

    149. Re:IPV4 addresses are NOT running out by Eunuchswear · · Score: 1

      FTPS. Try figuring out how to NAT that at both ends.

      --
      Watch this Heartland Institute video
    150. Re:IPV4 addresses are NOT running out by Just+Some+Guy · · Score: 1

      There will always be NAT so that people can represent themselves as a single entity and protect their work flow.

      How do you mean?

      Question: I have a IPv4 ISP and a NAT home lan. Is there any generic (as in non-distro dependent) method of setting up an IPv6 internal NAT?

      Not that I'm aware of, but frankly, I've never gone looking for one (or known anyone who has).

      How would you (or could you) overlay an IPv4 in the event you had internal hardware that couldn't handle IPv6?

      Right now my little home router (WRT56G) offers IPv4 with DHCP and IPv6 with autoconf. Every device on my LAN that supports IPv6 automatically gets assigned an address when it joins the network. Honestly, I don't know what protocol I'm using unless I specifically pay attention. SSHing around hosts (or to the office) goes over IPv6, Jabber goes over IPv6, external websites go through a mix (with more supporting v6 as time goes on), and so on.

      --
      Dewey, what part of this looks like authorities should be involved?
    151. Re:IPV4 addresses are NOT running out by HexaByte · · Score: 1
      There is such a ting as a DMZ. For the most part, I want my internal network separated for the public network. When I need to do a "NAT punch-thru", a simple port forwarding rule suffices. P2P? I don't want it on my work networks, but bit torrent is happily serving up and pulling down ISOs on my home network as I write.

      I'm not saying IPv6 doesn't have many advantages, just that "the reports of IPv4's demise are greatly exaggerated".

      --
      HexaByte - he's a square and a half!
    152. Re:IPV4 addresses are NOT running out by sjames · · Score: 1

      If not for NAT, VoIP 2 VoIP calls anywhere to anywhere would just work with a simple entry in DNS (No need for the phone to 'log in' to a provider to keep a hole punched in the firewall. No need for a provider to act as a rendesvous point to tell your phone what additional holes it must punch in the firewall in order to actually complete the call.

      Because of that, no need to leave the firewall in a state where a virus can also punch holes in the firewall at will to recieve instructions from it's masters.

      As for firewall configuration, when it jsut filters rather than NAT-ing, it means you can do class based config. For example, the VoIP phone class permits just the necessary ports for VoIP, and then you just tell the firewall what MACs are VoIP phones. Likewise, you can have a webserver class, desktop class, etc. No need to worry about what to do when 5 different machines all want one particular port forwarded to them.

      The result is that a filtering firewall w/ v6 addressing can be easier, less trouble, AND more secure than a NAT based hack.

    153. Re:IPV4 addresses are NOT running out by Tubal-Cain · · Score: 1

      And a temporary one, at that.

    154. Re:IPV4 addresses are NOT running out by TheLink · · Score: 1

      That may be fine for personal calls made by private individuals.

      The problems with bittorrent and VoIP phones NOT being able to "just work" would be regarded as a feature to many organizations. Then they can control what works, and when.

      Similarly, the Big Media companies (and certain countries) might be quite happy for a world where only a relative and "blessed/vetted" few can broadcast to many.

      To them a scarcity of IPv4 public IPs resulting in more and more users having to be behind NATs and thus not being able to behave as "servers" to the rest of the world would be a feature ;).

      The odds are the people with power are going to realize that staying with IPv4 benefits them.

      Keep in mind, any _practical_ IPv6 transition path is likely to involve NAT or some form of proxying.

      Because if you want to talk to IPv4 _only_ servers, you will need IPv4 public IPs, you cannot just use an IPv6 only client _alone_. This is a fact.

      Given an IPv6 only client with no public IPv4 addresses, you will need a proxy or some form of NAT to talk to an IPv4 only server. And that proxy/NAT device is going to have to have a public IPv4 address.

      So if "NAT" is going to have to be used anyway, there will be great temptation for an ISP to just stick with IPv4-IPv4 NAT instead of investing $$$$$$$ in less tested IPv6 to IPv4 NAT/proxies. After all IPv4 to IPv4 NAT has been around for many more years than IPv6 to IPv4 NAT. If someone gave the ISP some encouragement to be "half hearted" with IPv6 plans, who knows what will happen.

      The way I see it, this 300% adoption counts for little as long as the popular servers (websites, game servers, search engines, news, social, blogs etc) are all IPv4 only. Can people play WoW if they don't have an IPv4 public IP and only have an IPv6 address? Can they check their webmail? Use IM? Does slashdot have an AAAA record? Does gmail? As it is, IPv6-only hosts are about as much part of the Internet as Novell IPX only hosts - i.e. they are not part of the real Internet at all.

      Lastly, I'm curious - which VoIP phones can work completely without IPv4? In short which phones are VoIPv6?

      --
    155. Re:IPV4 addresses are NOT running out by sjames · · Score: 1

      Unless you WANT to be controlled by corporate overlords, you are arguing FOR the masses to adopt IPv6 fast!

      AS for controlling VoIP and bittorrent on a corporate LAN, I presume that approved devices will be granted the needed access (by MAC address) at the firewall and others will NOT. Bittorrent on business LANs is a PITA to block now BECAUSE their NAT setups HAVE to allow hole punching just to make anything at all work.

      I have been running a dual LAN at home for several years now with a 6to4 setup on a WRT54gl. 6to4 was explicitly designed to be a transition measure so that endpoints could get up to speed without having to wait for ISPs to get with the program. 6to4 was speced out many years ago BTW, it's hardly new. There is a v6/16 allocated specifically for that purpose. That allows each and every existing v4 address to have a /48 in v6 space.

      I'm sure there are some big media companies that would love for IPv6 to go away, but they'll have a hell of a time suppressing the DOD's v6 initiative. The big carriers are likewise not likely to disqualify themselves from ever getting a government contract by blocking v6.

      There are v6 only networks out there. They access the web through one of several translation gateways (some are public).

      I never said all NAT should be scrapped right now (that's not practical), just that NAT is NOT preferable to v6 and will not solve the shortage of v4 addresses and so is NOT a valid reason to stay with v4.

    156. Re:IPV4 addresses are NOT running out by Zontar+The+Mindless · · Score: 1

      Well, according to the latest stats from RIPE, Sweden has 17,574,560 IPv4 addresses allocated, so that's approximately 1.90 addresses per inhabitant, or 3.94 per household.

      Of course, that doesn't take business users into account, but in our office we have three different companies on the same floor, all sharing the same public IPv4 address (our group actually uses a NAT behind the one sharing out the floor's public IP, and we use one or both of our corporate VPNs in any case), and our other 2 offices also each use a single public IP + NAT for their internal networks, if that tells you anything.

      BTW, it appears that Denmark has the most IPv6 addresses allocated among all of the RIPE countries by a wide margin.

      --
      Il n'y a pas de Planet B.
    157. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      I have to object to parts of your post:

      There's no reason every person on earth needs an IP.

      That's your opinion. It's not a fact.

      Nat+uPNP is perfectly capable and 100% backwords compatible.

      The NAT+uPNP combination is neither perfectly capable nor 100% backwords (sic) compatible.

      I expected better from one with such a low id. Perhaps you had a bad day.

    158. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      >And some people don't want machines to have publicly accessible IPs

      Just because every IP address in IPv6 is public doesn't mean it is "publicly accessible".

    159. Re:IPV4 addresses are NOT running out by Anonymous Coward · · Score: 0

      Please, tell me how I can write a batch file that will open port 5900 on a typical consumer router.

      Why would you want to? If you need access to a customer's computer on a regular basis, use WebEx, GoToMyPC or something similar.

      If you're too cheap to pay for it, then use VNC and create custom UltraVNC SC configurations and email them to the customer as needed.

      Hell, I've even used Windows XP's Remote Assistance, and it worked fine for what I needed it for, though it was a little cumbersome.

      Sounds to me like you're making things far more difficult than they need to be.

      In a corporate support environment, worldwide, I prefer WebEx, and leave the cost to the accountants :)

      Oh, and before someone jumps in to criticize, the previous is for ad hoc connections to arbitrary PCs that need to be supported, not servers. Remote server support is a different issue: At the very least you should be using a VPN connection... Anyway, at that point, opening ports on routers isn't an issue anymore.

    160. Re:IPV4 addresses are NOT running out by TheLink · · Score: 1

      As I mentioned, many powerful companies and countries may realize there are good reasons to stay with IPv4. The "problems" with connectivity you point out are features for them. They don't have to explicitly block v6, there are lots of things they can do and choose to not do.

      AFAIK, 6to4 is for IPv6 hosts to talk to IPv6 hosts (albeit over an IPv4 network). You cannot talk to IPv4 only hosts using it.

      Lastly automatic hole punching sounds rather strange in a corporate network. Which company actually does that? Approved devices that need bittorrent would be on the "DMZ" or have a static NAT. VoIP would be via approved gateways.

      If I were in charge of a corporate network, users wouldn't be able to automatically send packets out. Only certain things would be allowed out. Being allowed to automatically send packets out = getting blackholed ; complaints from ISPs etc about your IP range sending spam, DDoS and other crap.

      --
    161. Re:IPV4 addresses are NOT running out by MadMidnightBomber · · Score: 1

      I think this was modded flamebait by the same kind of person who wanted to plug their home DSL router into my /16 corporate net. (Connection policy was that you can have any kind of switch/router plugged in, as long as it's made by Cisco and we operate it.) The mod who did this may want to write a big post it note saying "I do not understand the implications of NAT as applied to end-to-end TCP/IP networking" and stick it on their forehead. It will save your colleagues a lot of time.

      --
      "It doesn't cost enough, and it makes too much sense."
    162. Re:IPV4 addresses are NOT running out by sjames · · Score: 1

      AFAIK, 6to4 is for IPv6 hosts to talk to IPv6 hosts (albeit over an IPv4 network). You cannot talk to IPv4 only hosts using it.

      Right. It's just a part of the solution. Specifically, it's the part that lets me run a dual protocol LAN right now rather than waiting for my ISP to actually do something.

      That's the point, ask my ISP about v6 and they'll probably say "huh? what's that?", but I'm running IPv6 anyway. I don't need to care if they are clueless about it. Unless they actually BLOCK 6to4 packets I have the benefits of v6 right now. If they DO block v6, they say goodby to government contracts since as of July they must at least minimally support v6.

      It also kills implementing NAT with the excuse that it's due to a v4 shortage when the real objective is any one of the less honorable things you mention. The old "honest, we'd do anything to not have to reduce functionality like this but we're stuck!" really falls flat when v6 is there.

      Automatic hole punching is quite normal in a NAT based firewall. In fact, STUN and the like depend on it. When a UDP packet goes out, it creates a translation entry. Packets coming back to that same port/IP pair from the recipient of the original outbound packet get reverse translated. It's exactly the sort of thing you see when the security people at a company mistakingly believe that NAT is the end-all and be-all of network security.

      If I were in charge of a corporate network, users wouldn't be able to automatically send packets out. Only certain things would be allowed out. Being allowed to automatically send packets out = getting blackholed ; complaints from ISPs etc about your IP range sending spam, DDoS and other crap.

      Ideally, yes. Practically, too many understaffed and overworked IT departments don't have the time to deal with the many issues that result such as security updates that fail, license managed business critical software that won't run, etc. Even if you decide to allow port 80 by default, you just re-introduced all your problems given the number of (protocol of your choice) over http that are out there.

    163. Re:IPV4 addresses are NOT running out by GooberToo · · Score: 1

      When I need to do a "NAT punch-thru", a simple port forwarding rule suffices.

      The simple fact you believe this is a solution means you really don't understand at all. For many real applications, this is not possible without a complete redesign of their protocol which requires the application to embed logic which belongs at the stack level. And guess what, this has been needlessly forced on many applications. In other words, it breaks applications. NAT is a hack. Anyone who believes NAT is a long term solution immediately revels themselves to not understand the issue at all.

      just that "the reports of IPv4's demise are greatly exaggerated".

      Only in the minds of those that don't understand the issue in the first place. Your statement is of course true, only so long as you believe the internet should only work for clients and running servers and/or peer to peer applications is a privilege to which few are entitled. Your argument holds water only so long as you believe we should limit common security models (well, common before NAT broke things - via random port allocation) which is actually built into the IP stack.

      Which brings us full circle. Either you can hide your head in the sand, encourage DOS attacks, diminish network security, encourage spam, break applications, force additional work on application coders (which belongs in the IP stack), and run out of IP addresses, or we can simply begin migration to IPv6 and make the networking world a better place.

      In short, the fact that you don't understand where we are really at should underscore the reports of IPv4's state is woefully under represented and certainly not exaggerated.

  5. Confusing headline by Bwian_of_Nazareth · · Score: 1

    So which is it... change of rate of adoption (as the summary indicates) or adoption (as the headline indicates)? (And no, I have not RTFA.)

  6. up 300%!!!! by Anonymous Coward · · Score: 0

    so we went from 20 ipv6 systems to 60. yippie...

    I so wish that the major backbones would grow a pair and simply start a migration plan and force all customers to upgrade to ipv6.

    Oh wait, they would have to spend money to upgrade their gear as well...

  7. Impressive by digitalPhant0m · · Score: 0, Redundant

    So now the total number is what... 4?

  8. 300%? by philippic · · Score: 2, Informative

    Ah, the IPv6 Mess.

  9. Re:Fun with statistics by Hatta · · Score: 5, Funny

    Why is that lying?

    --
    Give me Classic Slashdot or give me death!
  10. 300% by Anonymous Coward · · Score: 0

    That's impossible. No one can give more than 100%. By definition that's the most any one can give.

  11. Free cake... by Anonymous Coward · · Score: 0

    From 2 to 6 users! Cake for all 6 of you!

    1. Re:Free cake... by Anonymous Coward · · Score: 0

      The cake a lie.

  12. Um dx/dt != x by Anonymous Coward · · Score: 0

    The title is misleading, the rate of adoption went up 300%, that doesn't mean there are 300% more users.

  13. fp by Anonymous Coward · · Score: 0

    woot

  14. 0*1 = 0, 0*2= 0 etc by Anonymous Coward · · Score: 0

    In other news:
    The number of solid gold statues in my living room increased by over NINETHOUSAND percent

  15. 300% increase?? by Anonymous Coward · · Score: 0

    from 2 to 6 people??

  16. So this means... by Anonymous Coward · · Score: 0

    that it went from 1 person, to 4?

    1. Re:So this means... by Anonymous Coward · · Score: 0

      No, it's still just me. Before I just had my desktop on IPv6. Now I've added my laptop, printer, and server as well.

  17. The big boys are actually seeing some buy-in by Anonymous Coward · · Score: 0

    My company sells some monitoring software to people like Verizon Business and other MSPs and the big boys are finally seeing some IPv6 buy-in. There's a government mandate or two floating around as well (for their governmental services) that require it as well. It's one of our priorities in the next year or so.

  18. That looks silly.. by qoncept · · Score: 1, Insightful

    I'm not sure why but I was always under the impression that an ipv6 ip looked more like ipv4, ie, 192.168.1.1.1.1. The way it actually looks, why not just use MAC addresses?

    --
    Whale
    1. Re:That looks silly.. by josquint · · Score: 2, Interesting

      The way it actually looks, why not just use MAC addresses?

      IIRC, it does. I thought it appended the MAC address to the first part of the IP, and the second part is assigned(statically?) by the DHCP(?) server.

    2. Re:That looks silly.. by HBI · · Score: 2, Informative

      Well, one good reason is that MAC addresses do not have embedded routing information in them and do not pass off the local network. They were intended for local identification of the interface and have manufacturer information and a serial number in there by default.

      Another is that the MAC address space is smaller than the IPv6 space.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    3. Re:That looks silly.. by xZgf6xHx2uhoAj9D · · Score: 2, Informative

      Which part are you complaining about? The use of hex? The use of colons? The length? The use of hexadecimal digits is to make it shorter, I think (since the addresses are so long). I believe the colons are to unambiguously distinguish them from IPv4 addresses.

      One thing the summary didn't show was the use of the double-colon. IPv6 addresses commonly have long sequences of zeroes in them, so you can write something like 3f::4:1e:f106 and everything between the :: is zeroes (enough zeroes to make it the right length).

      It depends on how the networks are set up, of course, but a lot of IPv6 addresses will have MAC addresses embedded in them. The idea is that you as a consumer get a /64 subnet (instead of a single IP). You might typically then have 256 hosts in that subnet, and each host can have as many devices as it wants (each device distinguished by its MAC).

    4. Re:That looks silly.. by GooberToo · · Score: 1

      IPv6 has 64-bit addresses. MAC addresses are only 48-bits wide. Some addressing schemes use MAC addresses as part of the address to ensure no IP conflicts can exist.

    5. Re:That looks silly.. by Ephemeriis · · Score: 1

      I'm not sure why but I was always under the impression that an ipv6 ip looked more like ipv4, ie, 192.168.1.1.1.1. The way it actually looks, why not just use MAC addresses?

      You could, probably, represent both IPv4 and IPv6 identically if you really wanted to... I mean, ultimately, they're both binary numbers. It isn't like the computer is actually dealing with dotted decimals - that's just to make it human-readable.

      IPv6 uses hexadecimal instead of just plain decimal to make things shorter. Otherwise the addresses would be simply ginormous. And it uses colons, instead of periods, to unambiguously distinguish it from IPv4.

      As far as using MAC addresses... The only reason they look at all similar is because MAC addresses are also typically written using hexadecimal. Beyond that there isn't much similarity. MAC addresses are relatively short, and wouldn't provide anywhere near the address space that IPv6 does. I don't think they're routable either. And they aren't necessarily unique - just unique enough to make sure you aren't likely to have duplicates on your own network.

      If I recall correctly, IPv6 auto-configuration does make use of your MAC address. The idea is that you'd get a static IP block from your ISP, and instead of each device on your LAN getting a private IP address that isn't globally routable your router would generate globally routable IP addresses by appending the device's MAC address to the static IP block your ISP gave you.

      Of course you wouldn't have to do that... You could still take a single IPv6 address and NAT everything behind it if you really wanted to... And I guess it might make sense from the standpoint of providing a basic level of security... But there's no reason you couldn't just implement a real firewall instead.

      --
      "Work is the curse of the drinking classes." -Oscar Wilde
    6. Re:That looks silly.. by Jorophose · · Score: 1

      I do believe the main reason IPv6 adoption is so low is because it's looks like shit.

      Why couldn't we go x.x.x.x.x.x? Or make it 8 xs, or 16, or heck even 64 and make the unused ones "cleared". It's a lot easier to go 192.168.0.1 is my router, as opposed to 3443::43fff:#434434:FFDdfffd:FD3443 which is what my mind thinks when I see IPv6; a bunch of random mumble jumble, and this coming from someone who finds Perl legible.

      IPv6 is a problem masquerading as a solution looking for a problem.

    7. Re:That looks silly.. by Anonymous Coward · · Score: 0

      Actually IPv6 has 128 bit addresses. Much more than 64-bit.

    8. Re:That looks silly.. by squiggleslash · · Score: 1

      Using the MAC address is one way of allocating IP addresses, and it works similarly to how you describe.

      What you get from the ISP when you connect to the Internet is not a single IP address but a "network prefix". This looks something like 2001:1234:5678, or 2001:1234:5678:9abc.

      The former is used when you have multiple networks (and right now is also given to you if you use 6to4 routing - 6to4 is a way for people on IPv4 networks to use IPv6), the ISP sends you all packets beginning with those 12 digits, and then you use the next four for routing internally to one of 64k networks. The second is more typically what you'd get if your DSL or cable operator offered IPv6. It assumes you have one network.

      So you end up with a prefix that's 16 digits, however you prefer. To that, you devise IPv6 addresses for all your devices by appending 16 digits of your chosing. And the most common easiest way to do this is to use a kind of mangled version of the MAC address (which isn't normally 16 digits long, hence the mangling.) This is my not terribly easy to understand "IPv4 address + MAC address to IPv6 address convertor":

      printf "2002:%02x%02x:%02x%02x:0001:%s%s:%sff:fe%s:%s%s/64\n" $(echo $IPLOCAL | tr "." " ") $(cut -c1 < $E)$(cut -c2 < $E | tr "0123456789abcdef" "23236767ababefef")$(cut -c3- < $E | tr ":" " ") > /var/run/eth0.ip6

      The 2002: at the beginning is common to all 6to4 addresses. The :0001: is my local network prefix (because the IPv4 address turns into a 12 digit prefix, see above.) And the convoluted thing involving ff:fe and translating a digit to set one of the bits is how you convert a MAC address. Why it's like that I don't know. Slashcode has probably inserted spaces, for the original check here.

      The massive advantage of this scheme is static IP out of the box. As long as your network prefix never changes, the IP addresses of your devices will not change and always be predictable - just check the MAC address on the box, and use that to convert into a local address. This also means DHCP is unnecessary, and indeed DHCP is rarely used with IPv6. Something called RADV (route advertisements) are used instead, which tell devices what their IP addresses are and how to route. RADV is more slimline than DHCP as it doesn't need to record a network state, it just takes the external information and tells clients what's essentially static information.

      I've been using IPv6 for a few months now, and I have to say it's a very clean system. And it's nice having a system where everything works without hacks. I have proper reverse and forward DNS. I don't have to play with port redirection every time I start something like BitTorrent. It's very clean, and very elegant, and what it needs now more than ever are routers that support it.

      --
      You are not alone. This is not normal. None of this is normal.
    9. Re:That looks silly.. by GooberToo · · Score: 1

      You're right on that. It has two 64-bit addresses together.

    10. Re:That looks silly.. by Tony+Hoyle · · Score: 1

      That's what DNS is for. It'll probably be on ::1 anyway.

      With ipv6 you don't have to muck around with multiple subnets and trying to work out just what the hell the IP address of your new router is. You plug it in and the entire network sees it and uses it for routing automatically, with zero configuration required.

    11. Re:That looks silly.. by scientus · · Score: 1

      it has nothing to do with mac addresses, the decimal ipv4 notation is just silly so they changed it

    12. Re:That looks silly.. by Anonymous Coward · · Score: 0

      Sort of. The MAC address gets FFFE added into the middle of it, then this is added to the end of the address to for the link local IPv6 address. This is not really a public address, though and is used for communication between the devices sharing the link. This does not require a DHCP server at all and occurs every time you bring up an interface.

    13. Re:That looks silly.. by blind+biker · · Score: 1

      I have a friend and ex-colleague (I left the networking business about when IPv6 became crucial to our company) who has been involved with IPv6 more than the average CCIE for sure - because the applications we ran needed a shitload of IP addresses. Think several IP addresses per mobile phone. Think how many mobile phones there are in the world.
      Anyhow, he's been designing routes and networks with IPv6 since yr. 2000. He still hates passionately IPv6 addresses. In his opinion, and I agree, 2 to 4 more octets would have been more than enough to address the current problems and make IP addresses suitable for a very long time, and it would have speeded up adoption considerably.

      --
      "The agriculture ministry is not in charge of Gundam" - Japanese ministry official.
    14. Re:That looks silly.. by compro01 · · Score: 1

      They're numbers. You can represent them in whatever base you like. 192.168.0.1, for example, could just as easily be represented as C0A8:0001 (or C0A8:1, as RFC 4291 specifies you can omit leading zeros) or 11000000101010000000000000000001. Decimal base numbers are simply convenient for humans.

      IPv6 addresses are conventionally written in hex, as the decimal representation would be significantly unwieldy, as IPv6 addresses are 4 times the length of IPv4 ones (IPv4 is 32 bits, IPv6 is 128), so you'd have something like 255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.255.

      --
      upon the advice of my lawyer, i have no sig at this time
    15. Re:That looks silly.. by squiggleslash · · Score: 1

      It's used for both link-local and global addresses, and works the same way in both. Generally RADV will assign you a globally routable address that's exactly the same as your link-local except for the network prefix.

      --
      You are not alone. This is not normal. None of this is normal.
    16. Re:That looks silly.. by Anonymous Coward · · Score: 0

      it has nothing to do with mac addresses, the decimal ipv4 notation is just silly so they changed it

      That may be true, but the colon notation is completely idiotic.

    17. Re:That looks silly.. by kvezach · · Score: 1

      Colons already have another meaning in the context of network connections - port prefix. 192.168.0.1:80 is HTTP.

      What's IPv6's port prefix?

    18. Re:That looks silly.. by geniusj · · Score: 1

      That's what DNS is for. It'll probably be on ::1 anyway.

      With ipv6 you don't have to muck around with multiple subnets and trying to work out just what the hell the IP address of your new router is. You plug it in and the entire network sees it and uses it for routing automatically, with zero configuration required.

      I'm all about IPv6, and use it at home and wherever I can. But the same could be said about DHCP. All I have to do with an IPv4 router is plug it in and it'll grab a DHCP address. So the scenario is largely the same.

  19. 300%!!! by R2.0 · · Score: 0, Redundant

    Wow - usage went from 1 to 4! Outstanding!

    --
    "As God is my witness, I thought turkeys could fly." A. Carlson
  20. I think the slowly... by Raleel · · Score: 1

    particularly applies to the US, not necessarily the adoption part :)

    --
    -- Who is the bigger fool? The fool or the fool who follows him? --
  21. Obviously technologically superior by PolygamousRanchKid+ · · Score: 4, Funny

    The news is important because IPv4 addresses (e.g. 123.23.56.98), which are assigned to your computer periodically, are running out. IPv6 addressing (e.g. 2ffe:1800:3525:3:200:f8ff:fe21:67cf) was invented as a longer and more secure replacement.

    Look! IPv4 addresses just have numbers and dots. IPv6 addresses have numbers AND letters . . . and colons (TWO stacked dots)!

    No question, which one is better, and tastes better, and lasts longer, and is less filling.

    I'd like the IPv6 prefix dead:beef, please and thank, you.

    --
    Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
    1. Re:Obviously technologically superior by janeuner · · Score: 1

      You can want on dead:beef:: all day long - me and Windows ME have had ::dead:beef for a decade now.

    2. Re:Obviously technologically superior by cobaltnova · · Score: 1

      You'll have to settle for dead::beef, sorry.

    3. Re:Obviously technologically superior by Anonymous Coward · · Score: 0

      Come onto Anonet, and you can connect to the IRC server at dead:beef::1 (SSL preferred on 6697), and you'll find I've already got it :)

    4. Re:Obviously technologically superior by StikyPad · · Score: 1

      7AC7:1E55

    5. Re:Obviously technologically superior by Anonymous Coward · · Score: 0

      Colons taste better?

    6. Re:Obviously technologically superior by bar-agent · · Score: 1

      7AC7:1E55

      This looks familiar. I have no idea why a hex code would look familiar, but it does. What is it from?

      --
      i'd hit it so hard, if you pulled me out you'd be the king of britain [bash.org]
  22. It's true... by Joce640k · · Score: 1

    Most of the big blocks of addresses are *very* badly distributed.

    http://en.wikipedia.org/wiki/List_of_assigned_/8_IP_address_blocks

    Does Palo Alto research center need 24 million IP addresses? I'm pretty sure it doesn't.

    etc.

    --
    No sig today...
    1. Re:It's true... by X0563511 · · Score: 1

      Look how much the US DoD is taking up. Holy shit!

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    2. Re:It's true... by Just+Some+Guy · · Score: 1

      Look how much the US DoD is taking up.

      That's the privilege of making something.

      --
      Dewey, what part of this looks like authorities should be involved?
    3. Re:It's true... by sexconker · · Score: 1

      24 bits != 24 million

      2^24 = 16,177,216.
      And of course, many of those IPs will be unusable as addressable IPs for hosts.

  23. How many years before we run out of IPv4? by ACK!! · · Score: 0, Redundant

    I mean it seems like I have been seeing this statement for years. We are running out of IPv4 addresses and the sky is falling. There has to be something real behind at least part of this right? So does anyone have a real number or time in which we will really run out of IPv4 addresses?

    --
    ACK /ak/ interj. 2. [from the comic strip "Bloom County"] An exclamation of surprised disgust, esp. i
    1. Re:How many years before we run out of IPv4? by Anonymous Coward · · Score: 3, Informative

      http://www.potaroo.net/tools/ipv4/index.html

  24. Hmm by Anonymous Coward · · Score: 0

    46:49:52:53:54:21

  25. Sorry about that by Anonymous Coward · · Score: 0

    I will turn off my two routers ASAP.

  26. periodically? by socsoc · · Score: 0

    The news is important because IPv4 addresses (e.g. 123.23.56.98), which are assigned to your computer periodically, are running out.

    I dunno, most computers I know that receive IP address leases periodically use 192.168.x.x and 10.x.x.x because they are DHCP'd off a LAN. Please let me know when we run out of those. On the other hand, many computers with permanent IP assignments or consumer modems that request public IP addresses may be in danger...

    1. Re:periodically? by Anonymous Coward · · Score: 0

      For pete's sakes, do you know how much trouble it is to diagnose a connection for voice or video chat? It could be anything between their connection, their firewall, their NAT, my firewall, my connection, and my NAT. Lets take out two of those NATs and the diagnosis becomes 100 times easier because more often than not the problem is with the NATs.

    2. Re:periodically? by marka63 · · Score: 1

      Which is then NAT'd to a globally routable IPv4 address which are running out.

      Most ISP's I speak to are actually worried about how they are going to be able to supply their customers with access to a globally routable IPv4 addresses in the near future for all the legacy IPv4 equipment and software out there which needs
      such addresses. Every customer who currently forwards a port/protocol needs access to such a address which may or may not be easily shared with another customer. Double NAT does not work for such customers.

  27. That's my IP you insensitive clod. by Anonymous Coward · · Score: 0

    123.23.56.98 is my IP, you insensitive clod.

    So is 127.0.0.1 for future reference.

    1. Re:That's my IP you insensitive clod. by QuasiEvil · · Score: 1

      Talk about insensitive clods - 127.0.0.1 is my address! Stop using it! :)

  28. Relative instead of absolute? Round percent? by Anonymous Coward · · Score: 0

    Normally this is what you do to spin an adoption increase from 1 to 4 in a positive light.

  29. IPv6 address for slashdot.org by Radoslaw+Zielinski · · Score: 5, Insightful

    Any chance Slashdot could get IPv6 connectivity?

    Progress in this direction is "stuff that matters", after all...

    1. Re:IPv6 address for slashdot.org by janeuner · · Score: 1

      ^^ mod up ^^

    2. Re:IPv6 address for slashdot.org by paul248 · · Score: 1

      Someone should ask this question every time Slashdot runs an IPv6 story.

      In related news, http://python.org/ is accessible via IPv6 now.

    3. Re:IPv6 address for slashdot.org by mellon · · Score: 1

      That would be really cool. There are challenges, however - if you make yourself available via IPv6, devices that support IPv6 but don't have IPv6 connectivity may mistakenly try to do IPv6 first and time out. This was a problem with Mac OS X briefly, although it's fixed in the latest versions. I'm not sure what Windows Vista does these days.

      Point being, enabling IPv6 is not without cost. I have it enabled for my domains, and have gotten complaints. Telling the person doing the complaining to download the latest version of the software fixed the problem, but not every provider is going to be willing to do that. Although since /. is a geek site, they ought to be willing to do it.

    4. Re:IPv6 address for slashdot.org by innocent_white_lamb · · Score: 1

      devices that support IPv6 but don't have IPv6 connectivity may mistakenly try to do IPv6 first and time out. This was a problem with Mac OS X briefly,
       
      And is (apparently) currently an issue with Fedora 10.

      --
      If you're a zombie and you know it, bite your friend!
    5. Re:IPv6 address for slashdot.org by Bert64 · · Score: 1

      It's not so much about V6 support, as having misconfigured V6 routes...
      If your machine supports V6 but doesn't have any V6 connectivity, then it's connection attempt will return a host unreachable immediately and revert to V4. It's only when you have a V6 default route that goes nowhere that you start having problems.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  30. yay by Anonymous Coward · · Score: 0

    a 300% increase of 0 is still 0

  31. Enough jokes about it going from 1 to 3 people.... by Conspiracy_Of_Doves · · Score: 1

    Seriously, what percentage of internet nodes are now IPv6 compliant? Anyone have those numbers?

  32. Wow by kd3bj · · Score: 0, Redundant

    Great news! What _other_ two systems are using IPv6 now?

  33. I'll switch when my ISP does by jandrese · · Score: 3, Insightful

    First off, anybody who thinks that NAT is a long term solution to the IP address shortage is fooling themselves. NAT is a stopgap solution that has a scant handful of years left in it (some estimates say as little as 3-4 years). IPv6 is the only long term solution we have at the moment.

    The biggest thing holding me back from switching is that my ISP doesn't seem to care one whiff about switching. The only way I have available to get on is to set up a tunnel, which seems to defeat the entire purpose of IPv6. I don't want to run IPv6 just for the sake of saying that I run IPv6, I want to run it so I can have an address for every device and finally get rid of the annoying NAT solutions.

    --

    I read the internet for the articles.
    1. Re:I'll switch when my ISP does by TheRaven64 · · Score: 2, Informative

      Expect mobile phone companies to switch first. They are already NATing most of their customers when they want IPv4, but their next generation networks are IP-only and run everything else on top of IP. Using NAT will be a colossal pain for this, because they only have 2^24 (around 16 million) IPs in the 10/8 range and most mobile phone companies have a lot more than 16 million customers. You could NAT each cell, but then you'd have massive routing issues. Running IPv6 natively is going to be a much easier solution.

      Once the mobile phones are on v6, you're going to want your desktop to support v6 so that you can make VoIP calls to a mobile from there and sync your contacts and photos easily. Once most of the clients have switched, then the servers can start switching since they won't lose much business by it.

      And in an era when even a C64 running Contiki has support for IPv6, there's really no excuse for a device not to support it.

      --
      I am TheRaven on Soylent News
    2. Re:I'll switch when my ISP does by QuasiEvil · · Score: 1

      NAT is not a permanent solution, but there are so many places out there using public addresses everywhere - including, for example, my employer, where everything sites behind a firewall that forwards damn near nothing through. Sure, the production subnet can access the whole world, but what about those other two Class B subnets and another partial B that we own? Hint - not being used in any way where private addresses would make a difference.

      That said, I'm like you. When my ISP tells me "here's your IPv6 addresses, you might want to switch", I'll get right on it. (Speakeasy, you listening out there?) Until then, it's IPv4 for me.

    3. Re:I'll switch when my ISP does by Anonymous Coward · · Score: 0

      Setup at tunnel to an endpoint that is geographically close to you (at least network-wise, with low latency), get a subnet and viola you've got IPv6 addresses for every device.

      You'll still need IPv4 to access the IPv4 world, this wouldn't be any different from when your ISP provides you with IPv6 addresses.

      Oh, and BTW, currently running IPv6 just for the sake of saying that you run IPv6 actually helps speeding up IPv6 deployment.

    4. Re:I'll switch when my ISP does by geekoid · · Score: 1

      NAT has a little as 3-4 years left for 8-9 years.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    5. Re:I'll switch when my ISP does by sjames · · Score: 1

      Try setting up 6to4. You get all the addresses you need and you don't have to wait for your ISP to join us in the 21st century. It's not perfect, but it's a bit more distributed than a tunnel and it works well now. Given the crappy rate that ISPs are supporting v6, it may end up being the mechanism of choice for a few years.

    6. Re:I'll switch when my ISP does by j+h+woodyatt · · Score: 1

      Once the mobile phones are on v6, you're going to want...

      No, your phone will tunnel IPv4 over IPv6 to get out of the mobile network through a NAT gateway. This is the Dual-stack Lite architecture.

      --
      jhw
    7. Re:I'll switch when my ISP does by Anonymous Coward · · Score: 0

      You can forward a subnet over your tunnel and hand out IP's to all your devices, which are then publically available on the v6 internet. Make sure you do filtering either at your local tunnel endpoint or on all your devices, of course!

    8. Re:I'll switch when my ISP does by r7 · · Score: 1

      NAT is not a permanent solution

      Nice try but pure fabrication. NAT, aka private address space, is not going away. Telcos/ILECs blocked NAT when IPv6 was being developed and have since then spent a lot on marketing IPv6 without NAT/rfc1918 as a solution too all our problems. In so doing they have delayed the adoption of IPv6 by many years. How much longer will their transparent opposition to IPv6 NAT delay the inevitable? That is the question. No, we are not going to assign public IP addresses to every network-enabled computer and other device. And no, we are not going to implement IPv6 until NAT is fully supported. This is the reality that those who claim, falsely, that NAT is not a solution, are trying to ignore.

      Sadly, due to telco/ILEC influence there is not likely to be a single IPv6 NAT implement for several years. When it does happen, and it will, there is likely to have already been multiple IPv6 NAT implementations which network programmers will have a hard time reconciling. The problem is vendor lock-in, which astroturfing ILECs cannot achieve without blocking NAT, and in the process 'owning' all of your IP-enabled devices.

      See also
        http://www.networkworld.com/news/2008/072109-nat-housley-qna.html
        http://www.techworld.com/networking/features/index.cfm?featureid=4167
        http://archives.devshed.com/forums/networking-100/security-gain-from-nat-top-5t-2323463.html

    9. Re:I'll switch when my ISP does by Bert64 · · Score: 1

      As i have native v6 connectivity at home, i would use v6 connectivity to the phone if possible, without tunneling... Assuming the telcos don't block it.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  34. Who needs to do what? by Lord+Byron+II · · Score: 1

    The one thing I don't understand about all of these IPv6 stories is who are we waiting on? Do I need to make some change to my router? My computer? Should I be calling my ISP demanding that they make the change?

    1. Re:Who needs to do what? by Ephemeriis · · Score: 1

      Do I need to make some change to my router? My computer? Should I be calling my ISP demanding that they make the change?

      Yes.

      You'd need a computer capable of dealing with IPv6. For the most part, currently-available operating systems are ok. Windows XP, Vista, just about any flavor of Linux/BSD, and Mac OS X all support IPv6.

      You'll also need a router that can deal with IPv6. I have yet to see any home-grade router that supports IPv6.

      You'll also need an ISP that will give you IPv6 service. There are precious few of them out there.

      You'll also need sites that support IPv6, unless you just want to tunnel everything.

      --
      "Work is the curse of the drinking classes." -Oscar Wilde
    2. Re:Who needs to do what? by Anomalyst · · Score: 1

      ATT in IL tells me that IPv6 connectivity is over a year away. If my tier 1 provider doesn't offer it (for neither DS3 or Fiber internet connections), not much purpose of doing it internally.

      --
      There is no right to feel safe thru security vaudeville at the expense of everyone's freedom, privacy and tax money.
    3. Re:Who needs to do what? by TheRaven64 · · Score: 1

      I have yet to see any home-grade router that supports IPv6

      Apple's newer routers all do. They set up 6to4 by default, so all computers can get a routable v6 address.

      You'll also need an ISP that will give you IPv6 service. There are precious few of them out there.

      Sadly true. I'm not aware of any in the UK, although JANET is upgrading to support v6 everywhere by the end of next year.

      --
      I am TheRaven on Soylent News
    4. Re:Who needs to do what? by squiggleslash · · Score: 1

      You'll also need a router that can deal with IPv6. I have yet to see any home-grade router that supports IPv6.

      Apple's Airport does IPv6. Of course, you're a nerd, so you can always roll your own. That's what I did.

      You'll also need an ISP that will give you IPv6 service. There are precious few of them out there.

      No, you don't. You need an ISP that doesn't actively block IPv6, but an IPv4 ISP that doesn't aggressively block traffic should be good enough. Your two options on a legacy network are either 6to4, which requires the minimum work on your part, has routing that's relatively efficient (compared to the alternative) and which doesn't put you under the thumb of third parties, or tunnel brokering, where you set up a 6in4 "tunnel" to a broker who'll give you a free /64 netblock.

      Warning: AT&T FastAccess in Florida blocks 6to4, so tunnel brokering is your only bet if you're a customer of their's. I use Earthlink. Earthlink does not natively support IPv6, but 6to4 works, and works well.

      There is no good reason not to switch to IPv6 in 2008.

      --
      You are not alone. This is not normal. None of this is normal.
    5. Re:Who needs to do what? by sjames · · Score: 1

      A combination of all of the above. Ideally, your ISP would be fully IPv6 and would assign you a prefix. Then' you'd just need to get the v6 stack installed on your computer(s).

      Since the odds are that your ISP is still at the "what's that" level WRT IPv6 (since it's apparently too much to ask that a company that makes all of it's income providing internet service would keep itself within a decade of current on internet protocols), you will have to end run them.

      Your best option there is to set something up with 6to4 tunneling and use it as a v6 router for your home network. If you have a Linux box on a public IP, you can use it as your gateway. Or you can put ddwrt or openwrt on a compatible AP and use that. Other options depend on your OS. With XP or Vista, you can use teredo tunneling.

    6. Re:Who needs to do what? by Guyver3 · · Score: 1

      D-link announced their product lines will provide support for IPv6 at the last RIPE conference (pretty sure this happened at the recent Dubai conference). In fact if you can get your hands on a DIR-615 (Rev C) it allows you to configure static, 6in4, pppoe and then advertise a range to your machines behind it.

    7. Re:Who needs to do what? by mellon · · Score: 1

      The latter. But you will probably need to at least install new firmware in your router. If you're running Linux, Vista or OSX 10.4 or 10.5, and you have good IPv6 connectivity, it will mostly Just Work, but you need IPv4 connectivity to connect to most internet sites these days, so you can't run v6-only yet.

    8. Re:Who needs to do what? by zrq · · Score: 1

      I'm not aware of any in the UK

      http://www.aa.nu/kb-broadband-ipv6.html

    9. Re:Who needs to do what? by Bert64 · · Score: 1

      Quite a few ISPs do in the uk, nitrex.net, goscomb.net, ovh.co.uk do for colocated servers, he.net do v6 hosting in the uk too...

      Apple don't make routers, just wireless access points, and they are about the only consumer oriented networking devices with any v6 support... Your alternatives are linux based devices with third party firmware, and expensive highend kit like cisco.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  35. User traceability & Up 300% from a tiny base by redelm · · Score: 1
    "Figures don't lie, but liars figure" [Mark Twain]

    Yes, IPv6 is up. It could hardly be otherwise from such a small base. However, I still have major concerns about privacy/anonymity/security and separately about overhead.

    I would not be at all surprised to see IPv6 as the choice of policemen and totalitarian states. Far easier user traceability.

  36. oooo by revxul · · Score: 0, Redundant

    I know I'm gong to be modded down for this crack, but...

    Wow! It went from one user to three!

    --
    Truth, Just Us, And Hatred For All Mankind!
  37. The OTHER "Mac" Addresses by Anonymous Coward · · Score: 0

    What's not mentioned in this article is the fact that a significant percentage of the increases are coming from Macintosh OS X systems being brought online, which enable IP6 by default.

    1. Re:The OTHER "Mac" Addresses by StikyPad · · Score: 1

      They probably thought it was redundant to mention, since the word "computer" basically means "Mac" in most developing nations. Hugely popular.

  38. Re:Enough jokes about it going from 1 to 3 people. by revxul · · Score: 1

    I had to get mine in. I'm done now. I also, in seriousness, want the raw numbers.

    --
    Truth, Just Us, And Hatred For All Mankind!
  39. So where is the IPv4 to IPv6 translator servers? by foniksonik · · Score: 1

    Seems like we all could switch over fairly easily if there was a DNS type of system for translating between the address spaces.

    Would work like this:

    Every current IPv4 address would be assigned a concurrent IPv6 address.

    When a client node requests an IPv4 address, that request gets routed to a DNS type server somewhere close by which translates it to an IPv6 address and passes the request on to the proper end node along with the requesters IPv4 address for return responses which then get routed similarly.

    As more IPv6 client and server nodes come on line, more and more simply pass through the translation router with no modification.

    i'm sure I've vastly simplified things, care to comment?

    --
    A fool throws a stone into a well and a thousand sages can not remove it.
  40. IPv6.66 by Anonymous Coward · · Score: 0

    Just wait until IPv6.66, Fractional Satan Edition. Only then will our colons contain enough bits to address every atom in the universe.

  41. So what? What should I be doing? by edmicman · · Score: 1

    It seems like every month we see something more about IPv6, and the pressures to move to it, etc. etc. My question is, from both a corporate and home end-user perspective, what should I be doing?

    We're a small company, in a small office. We have a T1, we run a Windows domain, and host our own web and mail servers. We have NAT inside the office, and holes poked through our firewall for the external facing servers. We're all on XP workstations. What should we be doing, if anything?

    At home, I'm on a residential cable modem. Everything is behind a WRT54G running DD-WRT. I'm running Ubuntu on my laptop, my wife has XP. I've got a couple other hobby PCs, but nothing publicly accessible yet, but everything inside the network is locally addressed 192.168.etc. What should I be doing, if anything?

  42. Reserve an IPV6 block by Rinisari · · Score: 1

    How would I go about reserving an IPv6 block for myself? Is there a central agency controlling that yet? Is a reservation free, or is there a periodic payment?

    1. Re:Reserve an IPV6 block by MythoBeast · · Score: 1

      Go through Freenet. There are so many addresses available that they give them away without effort:

      http://www.linuxjournal.com/article/5988

      --
      Wake up - the future is arriving faster than you think.
    2. Re:Reserve an IPV6 block by gclef · · Score: 1

      It depends on the region you're in. ARIN and RIPE have slightly different policies. In general, you can't get a block for a person the way you could with IPv4 in the early 90's. However, if your org can get PI space in IPv4, odds are very high that you'll qualify for the same in IPv6.

      If you just want some IPv6 addresses sub-assigned to you to play with, have a look at Hurricane Electric...they're running one of the biggest tunnel broker ( http://tunnelbroker.net/ )setups out there, and are giving out /64s (and /48s, I think) for folks to experiment with IPv6.

    3. Re:Reserve an IPV6 block by John+Hasler · · Score: 1

      Or you could just pick one at random...

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  43. So... by Anonymous Coward · · Score: 0

    Three users then.

  44. Oh yeah, uPnP, nice, nice by Nicolas+MONNET · · Score: 1

    Have you ever looked at the specs? Did you understand anything?

    I thought so.

    Here's a simple case where you can't argue there's enough IPv4. Soon all mobile phones will be IP capable. Each having a unique address would be nice. BOOM! Impossible with IPv4. Not even enough room in 10.0.0.0/24 *right now* to put all mobile phones.

    1. Re:Oh yeah, uPnP, nice, nice by geniusj · · Score: 1

      Comcast already had this problem with their cable modems and set-top boxes. They moved the whole network to IPv6 to solve it.

      Also, I think you meant 10/8 not /24..

  45. Make it work! by Aladrin · · Score: 2, Interesting

    I seriously considering setting up my internal network for IPv6 and trying to get connected to the web via IPv6, but ran into so many roadblocks that I just gave up.

    It's no wonder adoption is so slow if this is the way things are.

    --
    "If you make people think they're thinking, they'll love you; But if you really make them think, they'll hate you." - DM
    1. Re:Make it work! by Oooskar · · Score: 1

      I, myself, just visited http://www.whatismyipv6.net/ and found out that I have become IPv6 connected without knowing it. So apparently, it doesn't have to be that painful.

    2. Re:Make it work! by j+h+woodyatt · · Score: 1

      Hee!

      --
      jhw
  46. Amazing. by EddyPearson · · Score: 1

    So the number of users has skyrocketed from 4 to a whopping 12.

    --
    You feel sleepy. Close your eyes. The opinions stated above are yours. You cannot imagine why you ever felt otherwise.
  47. Do you remember CSS? by Nicolas+MONNET · · Score: 2, Insightful

    Do remember how long it took /. to move from a tablefest of tagsoup to a CSS-based design? A good 10 years, give or take.

    IPv6?

    1. Re:Do you remember CSS? by OzPeter · · Score: 1

      And they had to have a competition to get someone else to write for them ;-)

      *ducks

      --
      I am Slashdot. Are you Slashdot as well?
    2. Re:Do you remember CSS? by IGnatius+T+Foobar · · Score: 1

      Do remember how long it took /. to move from a tablefest of tagsoup to a CSS-based design? A good 10 years, give or take. IPv6?

      True, but the difference here is that there's no need to wait for the Slash bunch to implement it. Their hosting provider can set it up for them, right down to the machines that it's running on. As long as the load balancers being used are IPv6-ready, it's probably just a couple of days of work. It isn't Slash that needs to be IPv6-aware, it's Apache and Linux. And it is certain that Apache and Linux can speak IPv6.

      --
      Tired of FB/Google censorship? Visit UNCENSORED!
    3. Re:Do you remember CSS? by Radoslaw+Zielinski · · Score: 1

      True, but the difference here is that there's no need to wait for the Slash bunch to implement it. Their hosting provider can set it up for them, right down to the machines that it's running on. [...]

      The hosting provider will not be able to add AAAA DNS records nor configure the Apache vhosts. It has to be the Slashdot team.

  48. The potential of IPv6 is kinda scary. by RulerOf · · Score: 5, Interesting

    And everyone who's a network admin knows that it is.

    You're right, 100%, and I fully support IPv6 adoption end to end, because I know managing port assignments is a pain in the ass for non-UPnP compatible apps, and the problems that NAT has created. Even more absurd is the solutions to those problems (e.g. Skype-style) that are more like hacks than fixes.

    NAT has created a very lazy fix to the problem of network security and filtering. If you're behind NAT, you're not addressable unless UPnP or an explicit port forward does it for you, and that's extremely convenient.

    In a situation where every single computer in a network is internet addressable (something not always desired in business, which is probably the reason IPv6 adoption is so slow), you have to implement a very strict firewall to block and filter unsolicited traffic to those machines. If you're NATing them, as long as your network is physically secure, you don't have a problem.

    This puts a lot less stress on network security than there should be in a business environment, and much less attention to what should or shouldn't be allowed through a local firewall, let alone a site firewall.

    I'll stop ranting, but the point is that NAT has created an artificial deficit of proper network security, and I fear that when IPv6 becomes ubiquitous, NAT will linger on as a replacement for real security. The skills required to secure a fully addressable network of machines simply aren't needed in the majority of current environments because making every host in a network internet addressable today is simply not an option.

    --
    Boot Windows, Linux, and ESX over the network for free.
    1. Re:The potential of IPv6 is kinda scary. by TheRaven64 · · Score: 4, Insightful

      Rubbish. Border security is not security. You can get exactly the same 'security' as NAT with a trivial firewall on IPv6 that blocks all inbound connections and maintains state tracking for UDP ports. You can set up NAT with a default route so one machine gets all inbound packets destined for the public address and not redirected by an outgoing connection, and you can have firewalling without NAT. The two concepts are orthogonal. What makes you think that consumer-grade IPv6 routers will not default to blocking all ports?

      --
      I am TheRaven on Soylent News
    2. Re:The potential of IPv6 is kinda scary. by b0bby · · Score: 1

      You make a lazy, extremely convenient fix sound like a bad thing ;)

    3. Re:The potential of IPv6 is kinda scary. by Just+Some+Guy · · Score: 4, Insightful

      This puts a lot less stress on network security than there should be in a business environment, and much less attention to what should or shouldn't be allowed through a local firewall, let alone a site firewall.

      I disagree. Say your current NAT setup is:

      22->192.168.0.1:22
      80->192.168.0.1:80
      25->192.168.0.2:25
      143->192.168.0.2:143

      The firewall equivalent is:

      block all
      pass (22, 80) to 192.168.0.1
      pass (25,143) to 192.168.0.2

      The decision making process is identical. You've already decided which ports are which machines should be exposed, and that's the hard part! Once you're past that, the semantics of NAT and a "default deny" firewall are almost identical.

      --
      Dewey, what part of this looks like authorities should be involved?
    4. Re:The potential of IPv6 is kinda scary. by GooberToo · · Score: 1

      Don't be confusing the subject with informed posts! The last thing we need is someone posting on the topic who actually understands the subject matter. Now get back to work!

    5. Re:The potential of IPv6 is kinda scary. by GooberToo · · Score: 1

      are almost identical.

      With one little distinction - things work correctly by default with simple routing and without magicaly requirements in the applications - and usually with less work and less load, and less memory requirements on the firewall.

      Said another way - firewall good - NAT bad.

    6. Re:The potential of IPv6 is kinda scary. by RulerOf · · Score: 1

      The decision making process is identical.

      They're similar, but not identical.

      The fundamental issue NAT poses to me is the fact that an entire network appears as a single host to the outside. Making *everything* addressable changes the entire layout of the network and even the way you would visualize it from a connectivity and an administration point of view.

      It may be a lot more natural to a network professional, but if your only experience with high level networking is operating on them as opposed to maintaining them (which is my case), it's an entirely different ballgame.

      FWIW though, I know I need to dive into some reading material and a Lab.

      --
      Boot Windows, Linux, and ESX over the network for free.
    7. Re:The potential of IPv6 is kinda scary. by Just+Some+Guy · · Score: 1

      You won't hear me arguing.

      --
      Dewey, what part of this looks like authorities should be involved?
    8. Re:The potential of IPv6 is kinda scary. by Just+Some+Guy · · Score: 1

      FWIW though, I know I need to dive into some reading material and a Lab.

      Here's your lab. Get a connection up and running and start experimenting!

      --
      Dewey, what part of this looks like authorities should be involved?
    9. Re:The potential of IPv6 is kinda scary. by sjames · · Score: 1

      In a situation where every single computer in a network is internet addressable (something not always desired in business, which is probably the reason IPv6 adoption is so slow), you have to implement a very strict firewall to block and filter unsolicited traffic to those machines. If you're NATing them, as long as your network is physically secure, you don't have a problem.

      A simple default policy denying incoming connections (if SYN set but not ACK, drop it and for UDP, only allow inbound after outbound) is hardly a burden. Probably, firewalls should come with that as the default (and probably will). If the network admins can't handle it from there, you're doomed anyway. The advantage is that they can now start from a simple base that provides exactly the security available now and then gently move into a more proper setup.

    10. Re:The potential of IPv6 is kinda scary. by QuantumRiff · · Score: 1

      Thank you for your most agreeable post, I can't help but find it funny when people think NAT is a firewall. They seem to think that IPv6 will make their computers directly accessible from anywhere in the world... At my last job, I had a /24 network of routable IP's assigned. I didn't use NAT, but because I had a proper firewall (or hell, even a basic firewall), only about 16 were potentially reachable, and only on the ports i explicitly allowed. NAT IS NOT A FIREWALL! anytime you open a direct connection (like say, with UPnP) you are going straight through your NAT connection, and it can be used to attack you...

      --

      What are we going to do tonight Brain?
    11. Re:The potential of IPv6 is kinda scary. by avaspell · · Score: 1

      And everyone who's a network admin knows that it is.

      NAT has created a very lazy fix to the problem of network security and filtering. If you're behind NAT, you're not addressable unless UPnP or an explicit port forward does it for you, and that's extremely convenient.

      In a situation where every single computer in a network is internet addressable (something not always desired in business, which is probably the reason IPv6 adoption is so slow), you have to implement a very strict firewall to block and filter unsolicited traffic to those machines. If you're NATing them, as long as your network is physically secure, you don't have a problem.

      Although I agree with your points , your post has kind of fallen into the NAT trap itself.

      When most people talk about security through NAT, it's never been about "addressability". It's been about reachability. NAT offered a convenient means of deploying a default security policy that says "people secured by me can get out, but noone can get in". There's no reason whatsoever that default firewall/router policy at both the corporate and consumer levels can do this with IPv6 very easily with a couple of canned policies. In fact, people wishing to seem "ultra-secure" can still use their firewall as a transparent proxy for their outbound connections, thus making all of their normal traffic still look to come from the router/firewall in question! With IPv6, firewall/router policy could stay exactly the same, with one key feature: everyone has a unique address.

      In fact, people wishing to use uPNP to make dynamic firewall policy changes can still do so! Except that instead of using oddball port mappings, we can just route the same standard port over to the proper address. Done. There's nothing inherently wrong with uPNP for consumers wishing to maintain decent security without needing to know the details on how the security policy works, but with IPv6 it's now about real security, not getting around address scarcity.

      This puts a lot less stress on network security than there should be in a business environment, and much less attention to what should or shouldn't be allowed through a local firewall, let alone a site firewall. I'll stop ranting, but the point is that NAT has created an artificial deficit of proper network security, and I fear that when IPv6 becomes ubiquitous, NAT will linger on as a replacement for real security. The skills required to secure a fully addressable network of machines simply aren't needed in the majority of current environments because making every host in a network internet addressable today is simply not an option.

      As stated above, I agree that making every host internet reachable is not an option, but making every host internet addressable is. People can choose at that point to continue to use NAT/Transparent proxy services to mask the true source of requests, or they may not. At least it's a choice. As for me, I'll make every one of my hosts internet reachable with a decent security policy and take advantage of all of the benefits both in capability and in troubleshooting, thank you very much. :)

    12. Re:The potential of IPv6 is kinda scary. by triad512 · · Score: 1

      Please correct me if I'm wrong.
      To my sense it depends on what you what to happen when there is a software failure.
      In the case of firewall, if the sofware fails because of an exploit, brute force or any other case which makes the firewall stop. The packets will go trought without any filters because the ips are routable.
      In the same this happen where NAT is involved. 'Natting' will also stop thus dropping every packets. I don't think you can use only one of the two solutions, but you cannot rely on filtering alone.
      ~M

    13. Re:The potential of IPv6 is kinda scary. by flyingfsck · · Score: 1

      The consumer grade firewalls just need to be a little different in order to provide default security to consumers or small businesses. They should block all addresses unless explicitly allowed/assigned by the LAN DHCP and should not allow incoming connections. IPV6 doesn't mean an end to centrally controlled DHCP address assignments.

      There are still situations where NAT would be used, even with IPV6. For example when you have a multitude of complex, identical mobile systems, such as ships, aircraft, tanks, armored personnel carriers and so on. Since these machines are complex and hard to set up, you want them to be identical on the inside, which implies some sort of NAT on the outside.

      --
      Excuse me, but please get off my Pennisetum Clandestinum, eh!
    14. Re:The potential of IPv6 is kinda scary. by Just+Some+Guy · · Score: 1

      In the case of firewall, if the sofware fails because of an exploit, brute force or any other case which makes the firewall stop. The packets will go trought without any filters because the ips are routable.

      I'm sure there is some firewall, somewhere, that fails to "default allow" but I've never seen one. If OpenBSD's "pf" fails, then it's probably because the entire machine is down and no longer passing any traffic at all.

      I don't think you can use only one of the two solutions, but you cannot rely on filtering alone.

      Consider yourself corrected. :-)

      --
      Dewey, what part of this looks like authorities should be involved?
    15. Re:The potential of IPv6 is kinda scary. by zippthorne · · Score: 1

      So.. you get the exact same security as NAT, by implementing NAT on IPv6?

      That's exactly why people are slow to switch. They're not thinking, "I want to keep using IPv4, so I'll use NAT" they're thinking, "I'm going to NAT anyway, and it kinda solves the IPv4 problem, so why bother going the extra step?"

      --
      Can you be Even More Awesome?!
    16. Re:The potential of IPv6 is kinda scary. by TheRaven64 · · Score: 1

      No, you get the same security as NAT by implementing a simple firewall. It's easier for programs to use, however, since the port and IP that they think they are using is now always the port and IP that is visible to the world.

      --
      I am TheRaven on Soylent News
    17. Re:The potential of IPv6 is kinda scary. by asdfghjklqwertyuiop · · Score: 1

      So.. you get the exact same security as NAT, by implementing NAT on IPv6?

      Right - not very much security at all.

      they're thinking, "I'm going to NAT anyway, and it kinda solves the IPv4 problem, so why bother going the extra step?"

      Why are they going to NAT anyway? There's no need for most of them to with billions of IP addresses at their disposal.

    18. Re:The potential of IPv6 is kinda scary. by geniusj · · Score: 1

      No NAT. Just a stateful firewall (which is part of what those consumer routers do already, after all..)

    19. Re:The potential of IPv6 is kinda scary. by geniusj · · Score: 1

      A one-to-many NAT requires a stateful firewall (or at least the stateful portion of it). If that stops working, no more connectivity for those hosts. Also, if that stops working, your internal network will be accessible to other hosts on the same broadcast segment as your external IP.

      Also, if your firewall goes down in the 'firewall-only' scenario, packets will stop being routed. Firewall rules are injected directly into the kernel or hardware (as the case may be), it's not like there's a process that needs to be running in order for the device to filter traffic. It's part of the packet-processing loop.

    20. Re:The potential of IPv6 is kinda scary. by Just+Some+Guy · · Score: 1

      it's not like there's a process that needs to be running in order for the device to filter traffic.

      Right. It's not like the firewall reaches into the stream and removes packets that aren't allowed. Instead, all packets go into the firewall and only the allowed ones are passed on to the rest of the stack.

      --
      Dewey, what part of this looks like authorities should be involved?
  49. Funny Title by larryboymi · · Score: 1

    I really enjoy statistics that are made to be big deals. Who says ____% over 2 years? Why not just up 150% over one? That's like saying in the past 23 1/3 years there have been 20 million people that died. Loses relevance. Blather. Blah.

  50. no, your numbers are wrong by circletimessquare · · Score: 4, Funny

    1. start with 1 throwaway silly joke

    1

    2. multiply that by the Humorlessness constant

    1 * H

    3. add 300% overhead cost of a mediocre informative rating

    1 * H * 300%

    4. factor by the coefficient of who gives a shit

    F(1 * H * 300%)W

    and you are left with 3 users of IPv6

    so there

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:no, your numbers are wrong by Anonymous Coward · · Score: 2, Funny

      3. add 300% overhead cost of a mediocre informative rating

      1 * H * 300%

      1 * H + (300% * 1)

      There, fixed that formula for ya.

    2. Re:no, your numbers are wrong by Ajaxamander · · Score: 1

      I would have modded you funny if your formula had ended up spelling something crass.

    3. Re:no, your numbers are wrong by HJED · · Score: 1

      actually it is 1h(3 * 1)

      --
      null
  51. The US is lagging by MythoBeast · · Score: 2, Insightful

    I'm wondering how far behind the popular adoption of IPv6, the nay-say'ers admissions that they were wrong will lag.

    Progress will never happen. Things will always be the way they are now. There's no reason to change now, and there never will be. Pshaw.

    --
    Wake up - the future is arriving faster than you think.
  52. Re:Enough jokes about it going from 1 to 3 people. by Ephemeriis · · Score: 1

    Seriously, what percentage of internet nodes are now IPv6 compliant? Anyone have those numbers?

    Not many. Certainly not enough to make even simple web browsing do-able over IPv6. Anyone with IPv6 connectivity right now is tunneling most of their traffic.

    Does Slashdot even have IPv6 connectivity?

    --
    "Work is the curse of the drinking classes." -Oscar Wilde
  53. Comcast? by Anonymous Coward · · Score: 0

    Someone tell that to Comcast residential services

  54. Re:First iP!! by dlaudel · · Score: 1

    That's IPv4.

  55. How IPv6 will happen, and why it hasn't yet by Nicolas+MONNET · · Score: 2, Insightful

    The main problem with IPv6's slow adoption is that no transition scenario was ever devised. The protocol was spec'd, implemented, debugged and ... that's it. Nobody ever asked the question, who's gonna switch and why?
    Currently, if you want to use the Internet, you need to be on IPv4. The only existing transition mechanisms are those which allows an IPv4 host to emulate IPv6 on top of it. And 100% of any other hosts you might be interested in talking to are on IPv4, even if they happen to also be on IPv6. So basically, in the rare cases where you can use IPv6, you can also use IPv4 to do the exact same thing.
    So there's no point.
    What's missing here (and has been missing since the beginning of IPv6) is a mechanism whereby an IPv6-only host can talk to an IPv4 host. I believe there's something called "nat64" that's being worked on, but it's in preliminary stages.
    Here's how it's going to happen: for a veeery long time (10, 20 years), most corporate networks will remain IPv4 only. They have no reason to switch. It's not just network stacks, it's networking equipment, firewall rules, inertia but also stupidity and incompetence. Consider this: right now, there are major websites still incompatible with Explicit Congestion Notification. It's not that they just don't implement it; it's that their networking equipment suffers from a 10+ year old bug that prohibits hosts with ECN enabled to access them. Non-buggy stacks just ignore the bit and let packets through, buggy ones silently drop the packets and cause the connection to hang. This used to be the case on www.cnn.com up until a few months ago, and is still happening on www.afp.com.
    Instead, it's mobile networks that will implement IPv6. There is not even enough addresses in a class A (10.0.0.0/24) to even give addresses to all mobiles phones in an European country. It's trivial to implement proxies for HTTP and other common protocols, so that those mobile devices will be able to see CNN.com. But obviously, it would be much better to have a way to NAT those devices onto IPv4.

    1. Re:How IPv6 will happen, and why it hasn't yet by I+Want+to+be+Anonymo · · Score: 2, Interesting

      I submitted this as an Ask Slashdot some time ago and it was rejected, but I'd really like opinions on it:

      How much of a problem/obstacle to adoption is the need for humans to deal with a 128 bit address?

      I can deal with xxx.xxx.xxx.xxx in my head where most of the x's are the same all the time, but yyyy:yyyy:yyyy:yyyy:yyyy:yyyy:yyyy:yyyy is simply too much.

      Is it such a pain to deal with such long addresses that admins who would be configuring v6 "just because" don't? Those of you who have v6 networks, are there automated tools that keep you from ever having to key in an address, do you have the address range printed on your t-shirt, or what?

      Would it have been better to use a smaller (40? 48?) bit range, and perhaps supplement that with an "extension" mechanism that could be appropriately sized for the network involved?

      --
      Anonymous Cowards get no respect.
    2. Re:How IPv6 will happen, and why it hasn't yet by JSBiff · · Score: 1

      I was thinking about this recently. I don't have the know-how to actually code up a proof of concept of my idea, but I did some 'high-level' thinking about the transition problem and posted an entry in my slashdot journal. I just Googled the NAT64 you mentioned, and that looks (from a cursory glance; I didn't have time to read the full draft RFC) like it's describing something like what I have in mind. I think once something like that is widely available, the 4-to-6 transition can begin.

      It would also help if device makers started supporting IPv6 in firmware. For example, you can find plenty of network and WiFi printers right now. Good luck finding one that supports IPv6 though. This is they type of thing where the government could step in and show some initiative. I'm generally a free-market guy, but with something like the IPv6 transition, sometimes some leadership is necessary to start things off. Seems like a government regulation mandating network device makers to start including IPv6 support in any device which claims TCP/IP compatibility [after some reasonable threshold date, say June 1, 2009, or Dec 31 2009], would be a good starting point.

    3. Re:How IPv6 will happen, and why it hasn't yet by marka63 · · Score: 1

      Actually NAT64 won't help them. They need NAT46 to get to the IPv6 only sites and that is actually a much harder problem than NAT64 which allows IPv6 hosts to initiate a connection to a IPv4 host.

      For NAT64 you just reserve a /96 and map the A records into the /96. As it is a known mapping the DNS and NAT64 box don't have to talk to each other.

      For NAT46 you need to tightly integrate the DNS and NAT46 functionality by having the DNS establish/request mappings in the NAT46 in response to DNS queries.

  56. Re:So what? What should I be doing? by b0bby · · Score: 1

    I'm in pretty much the same situation as you, and I'm curious as well. I use ipcop & Tomato on a WRT54GL, and ipcop at least doesn't have IPv6 support; DD-WRT seems to, but I don't think Tomato does. I guess I'll be waiting a while longer.

  57. Re:So where is the IPv4 to IPv6 translator servers by TheRaven64 · · Score: 1

    It's called 6to4. If you have a router that supports it then you can run v6 on your private network and every machine has a publicly-routable v6 address as long as your router has a routable v4 address.

    --
    I am TheRaven on Soylent News
  58. Technically, IPv6 is running out as well by geekoid · · Score: 3, Funny

    It's just there a lot more to go until the end~

    Hey, I did say technically.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    1. Re:Technically, IPv6 is running out as well by Anonymous Coward · · Score: 0

      If we start giving atoms their own IPv6 addresses then yes, you are technically correct.

  59. Re:So what? What should I be doing? by TheRaven64 · · Score: 2, Informative
    First thing to do is contact your ISP and ask to be assigned an IPv6 subnet. They will probably reply with 'we don't support IPv6, there's no demand for it.' You then ask them to log this request. Once enough people have done this, they will start routing v6 traffic, and then you can switch.

    Next, you deploy 6to4 on your routers and start running dual-stack clients. Then call your ISP again and say 'we're currently using 6to4, but we want to disable this soon and switch to a proper v6 address, do we need to go to one of your competitors to do this?'

    --
    I am TheRaven on Soylent News
  60. Phone numbers are NOT running out by Kenshin · · Score: 3, Interesting

    There's no reason every person on earth needs an IP.

    There's no reason everyone needs their own phone number, either. In the old days, several houses shared the same phone number. Calls were distinguished by different rings. They got along just fine with that.

    --

    Does it make you happy you're so strange?

  61. Re:Fun with statistics by Anonymous Coward · · Score: 0

    running out??? I'm only up to 192.168.0.27 -- and that includes my toaster

  62. does IPv6 DNS work with Firefox on Windows? by YesIAmAScript · · Score: 1

    On my Mac (on right now), I can connect to IPv6 (http://ipv6.google.com/).
    On my PC on the same network, if I type http://ipv6.google.com/ into Firefox, it fails to connect. But I can use nslookup to look up ipv6.google.com (and get 2001:4860:0:2001::68), and then connect to http://200148600200168/ and it works fine.

    Does Firefox not work correctly with IPv6 on Windows?

    --
    http://lkml.org/lkml/2005/8/20/95
    1. Re:does IPv6 DNS work with Firefox on Windows? by YesIAmAScript · · Score: 1

      Hmm, before anyone complains, slashdot ate the brackets and colons in my IPv6 URL. I did type it properly according to the RFC, and it does work.

      --
      http://lkml.org/lkml/2005/8/20/95
    2. Re:does IPv6 DNS work with Firefox on Windows? by growse · · Score: 1

      You got network.dns.disableIPv6 enabled in about:config?

      --
      There is nothing interesting going on at my blog
    3. Re:does IPv6 DNS work with Firefox on Windows? by YesIAmAScript · · Score: 1

      No. But thanks for the tip. I checked it right now. network.dns.disableIPv6 is set to false and network.dns.ipv4OnlyDomains is empty.

      --
      http://lkml.org/lkml/2005/8/20/95
    4. Re:does IPv6 DNS work with Firefox on Windows? by YesIAmAScript · · Score: 1

      I found it.

      I'm not sure whose bug I would say it is.

      I have two network interfaces on my machine. Only one really has useful IPv6 connectivity. The other only has local network (maybe I should disable it completely). Well,the one with only local network had no IPv6 DNS configured, although the other did.

      I added IPv6 DNS settings to that interface (to match the other) and now name lookups work fine in Firefox. Maybe I should write a bug against Firefox? Since nslookup does work with that configuration, just firefox doesn't.

      --
      http://lkml.org/lkml/2005/8/20/95
  63. Re:So what? What should I be doing? by man_ls · · Score: 1

    DD-WRT seems to support it in theory, but almost twelve hours of keyboard time later, I was still unable to get it working with a Hurricane Electric tunnel despite following the instructions on multiple places to the letter.

    Pretty much like everything else I've seen. IPv6 stacks are happy to install on any machine and generate themselves fe80:: addresses, but expecting them to actually do anything is another matter.

  64. Re:Fun with statistics by sexconker · · Score: 1

    Nearly ALL marketing uses "3 times faster" or "300% better" when the truth is "3 times as fast" and "200% better". (And those are often lies too!)

  65. 0 * 300% = ??? by digitalsolo · · Score: 1

    So... 0% up 300% is... 0%

    Well, I'm impressed.

    --
    Just another ignorant American.
  66. Re:So what? What should I be doing? by sjames · · Score: 1

    Now is a good time to get up to speed. At home, set up 6to4 tunneling on your WRT (DD-WRT can handle that) and run a dual protocol LAN. Once you have the WRT sending v6 prefix announcements (with radvd) Ubuntu will just work. For the XP machine, just go to the network configuration and install the IPv6 protocol and enable it (if it's not already installed). Then it will just work as well.

    Once you have a good grip on things for the home lan, you can move on to the work setup.

    If your firewall or router at work is able, you can also set up 6to4 there and get your firewall rules set up. A good start is to set up one prefix for your DMZ (the public facing servers) and another for the office machines. For the office machines, a good start to the rules is to drop any incoming connection (SYN but not ACK set).

    By doing that now, when lack of v6 connectivity isn't a huge problem, you'll have an easy time of it when v6 becomes business critical.

  67. IP WHOIS for the win! by Jon.Laslow · · Score: 2, Informative
    Here's the IP WHOIS for the address:

    inetnum: 123.23.0.0 - 123.23.255.255
    netname: VNPTinfrastructure-NET
    country: vn
    descr: Vietnam Posts and Telecommunications(VNPT)
    admin-c: NXC1-AP
    tech-c: KNH1-AP
    status: ASSIGNED NON-PORTABLE
    changed: hm-changed@vnnic.net.vn20081016
    20081016
    mnt-by: MAINT-VN-VNPT
    source: APNIC
    person: Nguyen Xuan Cuong
    nic-hdl: NXC1-AP
    e-mail: cuong.ng@vnn.vn

    address: Vietnam Posts and Telecommunications (VNPT)
    address: 23 Phan Chu Trinh Ha Noi
    phone: 84-4-9430427
    fax-no: 84-4-8226861
    country: VN
    changed: hm-changed@vnnic.net.vn
    20070510
    mnt-by: MAINT-VN-VNPT
    source: APNIC
    person: Khanh Nguyen Hien
    nic-hdl: KNH1-AP
    e-mail: nguyehanh1183@vdc.com.vn

    address: Vietnam Datacommunications Company (VDC)
    address: Lo IIA Lang Quoc te Thang Long Cau Giay Ha Noi
    phone: 84-4-793 0563
    fax-no: 84-4-2811506
    country: VN
    changed: hm-changed@vnnic.net.vn
    20080717
    mnt-by: VNPT
    source: APNIC

  68. Re:So where is the IPv4 to IPv6 translator servers by Anonymous Coward · · Score: 0

    The IPv6 spec allows for this already. You can represent your IPv4 address as ::x:x:x:x, where each x is one octet of your IPv4 address. The issue comes when you have to convert from IPv6 transport to IPv4 and vice versa, which is what 6to4 is supposed to do. The issue is that SOMEONE needs to host the 6to4 endpoints to provide this service, which costs money in terms of gear, bandwidth and maintenance, among other things.

  69. How do I get a block of IPv6 addresses? by Tracy+Reed · · Score: 1

    It has been on my plate to get my company a block of addresses and IPv6 connectivity (through a tunnel for now since our uplink doesn't do ipv6 natively; it's time I asked again) but I've never been quite sure how to go about doing it. So, how do I get a block of IPv6 addresses assigned to me?

    1. Re:How do I get a block of IPv6 addresses? by squiggleslash · · Score: 2, Insightful

      You have two options. You can go via a Tunnel Broker, such as Hurricane Electric, or you can use 6to4.

      The advantage of the latter is that it just requires you already have a static IPv4 address, and the routing is relatively efficient. It also minimizes your dependency on third parties: while most TBs give you IPv6 for free, there's no guarantee they'll continue doing so.

      The advantage of a tunnel broker is that some ISPs block 6to4. Some people also claim it's more secure, but I don't buy the argument personally for a variety of reasons.

      Personally, I'd recommend going for 6to4. It's relatively easy to set up and doesn't involve anything other than the IP allocation you have now. 6to4 gives you 64k /64 IPv6 blocks per static IPv4 address, and it's real connectivity.

      --
      You are not alone. This is not normal. None of this is normal.
    2. Re:How do I get a block of IPv6 addresses? by Tracy+Reed · · Score: 1

      Unfortunately, we don't have our own ipv4 allocation now. We have a dynamically allocated IP which we NAT. We would like to be able to number our internal network with real reachable IP's. and we don't want to have to renumber our internal network if we change ISP's. We want to be able to take the space with us. That is why we want to get a 6 allocation.

    3. Re:How do I get a block of IPv6 addresses? by squiggleslash · · Score: 1

      Ok, then your best bet is going to be a tunnel broker for now. Hurricane Electric seems to be the most popular at the moment in the US. You'll get a static IPv6 block, the only limitation will be bandwidth and a reliance upon a third party.

      Don't worry too much about renumbering. Remember, this isn't IPv4 where every static IP needs to be encoded in a table mapped to a MAC address in dhcpd.conf, or else hard coded on the machines themselves. Updating for another netblock is going to be a matter of updating your RADV configuration (that is, changing the prefix in one place), and then either reconnecting every machine to the network or just waiting for every machine to refresh their details. The nearest you may have to a problem if renumbering is updating your DNS, so obviously you need set up DNS in a way that makes it easy to replace the prefix. Renumbering in IPv4 space tends to be more complex because:

      (a) IPv4 just doesn't do the prefix thing in the same way as IPv6 (it's fine if you're replacing /24 with /24, /16 with /16, or /8 with /8, but anything else, whether it's /24 with /16 or /6 with /6, is a PITA)

      (b) because you tend to be directly involved in allocating static IP addresses and have to configure dynamic ranges for dynamic IPs etc. With IPv6, everything's static, and everything's based upon something pre-encoded and predictable, namely the MAC address. There's no configuration, except DNS, involved.

      --
      You are not alone. This is not normal. None of this is normal.
    4. Re:How do I get a block of IPv6 addresses? by Tracy+Reed · · Score: 1

      Very useful reply. Thanks!

    5. Re:How do I get a block of IPv6 addresses? by marka63 · · Score: 1

      I've been running a tunneled IPv6 connection to HE for over 5 years now. The local end is a cable connection that gets re-numbered, without notice, around twice a year. I just configure the dhcp client to re-configure the tunnel on based on what dhcp returns. This gives me stable IPv6 addresses.

      # Configure local end of tunnel
      ifconfig gif0 create >/dev/null 2>&1
      ifconfig gif0 tunnel $new_ip_address 64.71.128.82
      ifconfig gif0 up
      ifconfig gif0 inet6 2001:470:1F00:FFFF::XXXX 2001:470:1F00:FFFF::XXXX prefixlen 128
      route add -inet6 default 2001:470:1F00:FFFF::XXXX

      # Configure remote end of tunnel over IPv4.
      # md5 hash of password
      pass=xxxxxxxxxxxxxxxxxxxxxxxx
      # user id from main page
      user_id=xxxxxxxxxxxxxxxxxxxxxxxxx
      # global tunnel id.
      tunnel_id=XXX
      args="ipv4b=$new_ip_address&pass=$pass&user_id=$user_id&tunnel_id=$tunnel_id"
      tunnel=`/usr/bin/fetch -q -o - "https://ipv4.tunnelbroker.net/ipv4_end.php?$args"`
      $LOGGER "IPv6 TUNNEL $tunnel"

      Work has has native IPv6 for years now. Most of my home to work traffic flows over the tunnel. More and more of my general traffic flows over the tunnel.

      When I started with HE they only gave out /64's. they now give out /48's which lets you support multiple networks at home without having to bridge the IPv6 networks together.

      HE support has also been wonderful the few times things have broken, especially as this is a free service.

      Thanks HE.

  70. IPX by Hobadee · · Score: 1

    Quick, everyone, switch to IPX!!! It would be SOOOO much better than IPv4 or IPv6!!!

    --
    ...Had this been an actual emergency, we would have fled in terror, and you would not have been informed.
  71. Personalized IPv6 configuration for Debian/Ubuntu by CAPSLOCK2000 · · Score: 1
  72. Year of the Linux^h^h^h^h^h IPv6 Desktop? by Tikkun · · Score: 1

    It will happen in 2009, I swear!

  73. First IP!v6! by CyborgWarrior · · Score: 1

    ::

    --
    If you can't say something nice, make sure you have something heavy to throw.
  74. Re:User traceability & Up 300% from a tiny bas by mellon · · Score: 1

    Eh? You think your IPv4 address is untraceable? Think again. IPv6 actually has some very serious privacy-enhancing features, like temporary addresses, which are intended to be used once and then discarded, so that web sites can't track you by IPv6 address. Of course, they can still track you to the prefix, but that's no worse than what you have right now with IPv4.

    On the other hand, with IPv6 addressing, you get end-to-end connectivity to the machine in your house, and you can generate IPv6 addresses randomly, which means that a virus trying to infect your computer has to try 2^64 different IPv6 addresses in order to get a single packet to your host. So it makes a lot of attacks that are dead easy in IPv4 really hard in IPv6. Big win. And it makes VoIP and peer to peer work a *lot* better. Another big win.

    But yeah, if you spend all your time surfing internet porn sites, IPv4 and IPv6 are pretty much equivalent, so there's no reason to upgrade.

  75. Re:So where is the IPv4 to IPv6 translator servers by mellon · · Score: 1

    There's work on this happening in the IETF. And you can already do this with Teredo, which any Windows Vista machine has installed. The trick is that you need to spoof AAAA records in the DNS to make it all work, and that's non-trivial and interacts badly with DNSSEC. However, not to worry - if you just do the AAAA translation on the host that's doing DNSSEC validation, you can validate the A record, then provide a translated address to the application.

    So the short answer is that if you want to do this, the technology is available, but it's not yet turnkey - you need to be a geek to get it working at this point. Stay tuned - in a few months that story will probably change.

  76. Re:Enough jokes about it going from 1 to 3 people. by takev · · Score: 1

    Still more than you think.

    A couple of weeks ago I started to notice that quite a few websites and other things where really slow and took around 30 seconds to a minute to actually draw the page.

    I couldn't figure out why, then because I was debugging something else I was using tcpdump on my computer, I searched for some information to help debug the problem and again got on a slow webpage. My tcpdump showed IPv6 DNS and HTTP packets being send which where not being replied.

    You see I somehow forget to add my Apple base station to the adsl-router-firewall to let the IPv6 tunneling through. So my webbrowser was trying the IPv6 addresses for each piece of media on the page, failing, timing out and falling back to IPv4.

    I think a good 5 % of the websites I was visiting had IPv6 enabled, granted I seem to go to websites for technical subjects and to asian websites for my micro helicopter hobby.

  77. Re:Fun with statistics by compro01 · · Score: 1

    Not to mention the dangling comparatives. 3 times faster than what, exactly?

    --
    upon the advice of my lawyer, i have no sig at this time
  78. Re:User traceability & Up 300% from a tiny bas by redelm · · Score: 1
    Of course I know IPv4 are traceable. With DHCP that often requires going through ISP logs, not a trivial task, nor one that can easily be performed past the log retention period.

    IPv6 _can_ be used in privacy-enhancing ways, but where there is determined government opposition, it will not be. A communications authority could easly require that certain of the 128 bits addr contain UIDs. What could an ISP do?

  79. Important for Singularity? by Sybert42 · · Score: 1

    There may not be a need for 2^32 network elements for Singularity research. Once it hits, nothing else before it matters.

  80. That's... by Anonymous Coward · · Score: 0

    the first good reason I've heard for having a networked microwave. I don't think too many people would be happy about needing a network cable for the microwave so we'll be using wireless.

  81. Re:So what? What should I be doing? by Anonymous Coward · · Score: 0

    do we need to go to one of your competitors to do this?'

    "Competitors? What are those?"

  82. For everyone who says v4 isn't running out by FliesLikeABrick · · Score: 4, Insightful

    1) the fact that NAT exists means we ran out a long time ago

    2) NAT is not a proper solution. It crosses the Network and Transport layer boundary to provide a hack solution to a Network layer issue. Having something like NAT prevents anything besides UDP or TCP from being used behind a NAT, since NAT relies on port mapping between UDP and NAT

    3) What makes people think uPNP is a good idea? Wouldn't it be better to just have *real end-to-end connectivity* like was actually intended and used to be the case?

    4) As the world of networked devices and content providers increases as fast as it always has been or faster there will be a growing need for content providers (servers) that cannot be behind a NAT while still hoping to use well-known ports for services

    5) NAT does not scale. State tracking tens of thousands of connections? Since state needs to be tracked, load balancing something like NAT is just yet another hack on top of a hack.

    I would love to hear someone explain how using NAT is a feasible solution permanently. Reclaiming unused sub-allocations from legacy /8s and stuff is not a permanent solution, denying that IPv6 is needed due to the application of a growing list of band-aids is obnoxious to listen to.

    1. Re:For everyone who says v4 isn't running out by compro01 · · Score: 2, Insightful

      6) NAT aggravates the problem of a limited port addressing space. you've got 65535 ports, and a lot of those are intended for specific protocols. Also, anyone who thinks NAT is a solution should try running 2 HTTPS servers behind it.

      --
      upon the advice of my lawyer, i have no sig at this time
    2. Re:For everyone who says v4 isn't running out by Trojan35 · · Score: 1
      I would love to hear someone explain how using NAT is a feasible solution permanently.

      Because the complexity of frailty of NAT solutions keep IT workers in jobs.

  83. By Neruos by Anonymous Coward · · Score: 0

    IPv4 isn't the issue, it's the method of assignment that is the root problem.

  84. Re:Fun with statistics by sexconker · · Score: 1

    Whatever they're comparing it to. The competitor, usually.

  85. Re:So what? What should I be doing? by j+h+woodyatt · · Score: 1

    What should I be doing?

    Probably, not a lot. Either at home or at the office. For a while.

    At the office, wait until you need to grow past your current IPv4 allocation, or you find yourself wanting to do business with somebody who insists on communicating with you over IPv6 and not IPv4. That may take a while, depending on who you are.

    At home, you might load the IPv6 version of DD-WRT firmware on your WRT54G and sign up for a free tunnel broker account. Then you can see The Dancing Google Log. I know: W00t!

    --
    jhw
  86. I think the ultimate answer is IPv6 + NAT by JSBiff · · Score: 1

    Sort of. Ok, what I describe below might not really fit the definition of NAT, so read on for what I mean.

          Allow me to explain. One of the 'hardest' problems I hear mentioned when people discuss transitioning to IPv6 is the problem of legacy devices - printers, video game systems (think XBox Live), Tivos, etc.

          It occurs to me that, at the ISP level, or possibly at the home/company router level (depending on your needs, it could be either place), a device could 'translate' packets between IPv4 and IPv6, so that legacy devices talk using IPv4 to the router, and the router does something similar in concept to NAT, where it creates IPv6 packets to forward on to IPv6 hosts and devices.

          In such a situation, every ISP or home user can have their own entire IPv4 "virtual Internet" worth of IPv4 addresses.

          I posted a longer article, a few weeks ago, in my user Journal, describing in a little more detail what I have in mind. Is there any reason something like this couldn't be made to work, to assist in transitioning to IPv6?

    1. Re:I think the ultimate answer is IPv6 + NAT by avaspell · · Score: 1

      I read your journal, and you're essentially talking about is NAT-PT, or a derivation therein. However, there are a couple of essential problems with those solutions:

      1. Any protocol that imbeds IP address information into the upper-layer protocol will fail unless that mapping was previously created by the gateway.

      2. The solution requires that all communication be through DNS. If the legacy device has an app which doesn't do DNS, how can it reach the endpoint? It can't without a manual mapping in the gateway. And what if the endpoint on the other side is also behind such a gateway? How do I figure out what IPv6 address to map it to?

      Essentially, the IPv6 transition problem in it's current state was born because there are 2 primary issues when changing a lower-level protocol like IP:

      1. How do endpoints contact each other?
      2. How does the routing system get the packets to the endpoints?

      IMHO These 2 problems are antithetical to each other. Making a backwards compatible solution to the endpoint problem was causing considerible trouble for those trying to route packets. You have to remember that there were ideas in place to imbed IPv4 addresses into IPv6 packets at a lower layer, but those ideas were canned because they required essentially importing the pre-existing IPv4 BGP routing tables into IPv6, and network operators wanted not only a clean routing solution, but one that was going to clean up the global prefix advertisement space.

      So, being that IPv6 was largely created by network operators, a solution was chosen that would allow themselves to cleanly implement IPv6 (once you get the firmware updates, running a dual-stack backbone is actually really easy), and as the backbones could route the traffic, endpoints would deal with both existing.

      From a deployment standpoint is basically breaks down to:

      1. Do we want to design a protocol that is fast to deploy by backbone providers while continuing to maintain the stability of the existing network? Or,
      2. Do we want to design a protocol that is easily interoperable between endpoints?

      The designers picked option 1, believing that having a network up fast first and letting endpoints migrate slowly over to it was preferable to spending a ton more time getting a fully backwards-compatible network going so that people could switch really quick. Was that the right answer? I don't know. But we're living with option 1 today, let's see what endpoints can do about it.

    2. Re:I think the ultimate answer is IPv6 + NAT by JSBiff · · Score: 1

      In answer to your problems:

      1) "If the legacy device has an app which doesn't do DNS, how can it reach the endpoint?"

      This question, I think, has to be broken down into two cases, in order to answer it:

          Case A: The static IPv4 address endpoint it is trying to reach is a server which is still in operation, on the same IPv4 address, but the user has an ISP or backbone provider which is IPv6-only (so that, at some point, the traffic must go across one or more IPv6 only links), but there is still a coherent IPv4 "backbone" which, once reached, the data should be able to get to any IPv4 public IP address. In this case, the 'gateway' device does something which is the logical inverse of the current 6to4 tunnel system - more of a 4to6 - the IPv4 traffic gets automatically tunnelled through the IPv6 links to the nearest IPv4 'endpoint', then gets routed as IPv4 to the server. There might be 'traditional' IPv4 NAT involved in this, or not, depending on whether the end-user network has public addresses available for devices, or only private networks, much like today.

      Of course, the eventual goal is that the server migrates to IPv6 only as well. Hopefully the device maker has put out a firmware update by this time, but, knowing the reality of the industry, and that most devices, once sold, never get firmware upgrades. . .

            Case B: When the operator of the server migrates over to IPv6, they get to take their IPv4 address with them. The old IPv4 address becomes part of a new IPv6 address, with a standardized way of converting old IPv4 addresses to IPv6 addresses (standardized prefix, perhaps, similar to how 6to4 uses a standardized prefix?). So, when the old IPv4 device tries to contact the old IPv4 address, the translation gateway knows how to create an IPv6 address from the IPv4 address automatically, then forwards the traffic on.

      I think those two solutions could work to solve this problem, couldn't they?

      Now, in both of these cases, I'm essentially assuming that traffic is being initiated by the end-user device making an 'outbound' connection. This still leaves a question about how such devices could receive incoming traffic. This two needs two cases

            Case C: IPv6 host wants to contact the end-users IPv4 device. I think, in my journal, I might have touched on this, but basically, I think the 'translation gateway' could generate an IPv6 address from the local network's IPv6:prefix::IPv4:addr, which would allow an IPv6 endpoint to contact an IPv4 endpoint.

            Case D: IPv4 host contacting the end-user's IPv4 host through IPv6 links, where the end-user's IPv4 host doesn't have a 'public' IPv4 address. Much like the current Internet, you need at least 1 public IP address, and you use NAT and port forwarding, almost exactly the same as today, only with the IPv4 packet being tunneled over the IPv6 Internet (this stage would be quite a ways in the future, when significant chunks of the Internet are IPv6 only, so that your ISP maybe has no direct connection to IPv4 backbones). Somehow, there is going to have to be a table somewhere, like there are today, of how to route to a given public IPv4 address over the IPv6 Internet, so that the NAT gateway can receive the packet. Once the NAT gateway receives the tunneled packet, it does the normal IPv4 NAT/port forward to the private address.

      Maybe. I'm not so sure. I don't claim to have all the answers. Someone out there might have a better answer than me on this. It just seems like it should be *possible* to address most of these issues, if people are willing to work on it.

  87. Re:So what? What should I be doing? by edmicman · · Score: 1

    That makes me wonder, is there a listing somewhere of what ISPs and providers support IPv6? Residential and/or commercial? Are the major home broadband providers (Comcast, AT&T, etc.) even on board yet?

  88. Ooops...brain fart by Joce640k · · Score: 1

    I did of course mean "16 million"...

    (give or take)

    --
    No sig today...
  89. Tools are needed by Nicolas+MONNET · · Score: 1

    DNS is the solution to the problem you're describing; but the current common tools are probably not practical enough. What would be needed would be something based on mDNS, whereby each machine on the network would announce its name, and a DNS server would collect that information and distribute it as needed.
    Well it appears that avahi kind of does that (try avahi-resolve-host-name -6 hostname.local, assuming that IPv6 was enabled in avahi.conf), but it doesn't integrate automagically with standard hostname resolution AFAIK. But I might just be missing something.

    Is it such a pain to deal with such long addresses that admins who would be configuring v6 "just because" don't? Those of you who have v6 networks, are there automated tools that keep you from ever having to key in an address, do you have the address range printed on your t-shirt, or what?

    There isn't much entropy in most IPv6 addresses. The first 32 bits don't change much, you share most of it with everyone on the same continent, and then ISP. The lower 48 bits are usually mapped to the mac address. The lower 48 to 63 bits are basically free for you to do your own in-house routed network, so unless you have a router inside your network (not the one connecting to the outside world), it's 0.

    So far all intents and purposes, when you're managing a few machines, you will mostly pay attention the lower 48 bits.

    Would it have been better to use a smaller (40? 48?) bit range, and perhaps supplement that with an "extension" mechanism that could be appropriately sized for the network involved?

    No, the extended size allows for great flexibility in routing.

    1. Re:Tools are needed by I+Want+to+be+Anonymo · · Score: 1

      Certainly DNS keeps you from needing to use IP addresses for most day to day usage of any network.

      The issue is the lower level configuration that occurs before DNS will work - configuring DHCP servers, routers, etc. All the times that I would need to directly key in an IPv4 address now. It doesn't seem that v6 would require entering any fewer address than v4.

      And I can't remember individual v4 addresses, either. I only need to remember one address for the network at hand, and then I can derive the address of machine 1, machine 2, etc. But I don't think it's practical to remember even one v6 network address. But then, I find it hard to dial 10 digit phone numbers without making a mistake, so maybe I'm not the best example.

      I'm not really asking if it's impossible to do this, clearly it can be done, but the question is more about whether the inconvenience is a factor in slow adoption.

      --
      Anonymous Cowards get no respect.
    2. Re:Tools are needed by compro01 · · Score: 1

      Keep in mind, there are items in the spec to shorten addresses, such as skipping leading zeros and blocks of zeros. For example, 2001:0DB8:0000:0000:0000:0000:1428:57AB can be written as 2001:DB8::1428:57AB. Still longer than an IPv4 address, but fairly workable.

      --
      upon the advice of my lawyer, i have no sig at this time
  90. Almost. . . by JSBiff · · Score: 1

    There's an infinite difference between 0 and. . . almost 0. If IPv6 adoption was 0.001 percent of total Internet hosts last year, and it's 0.003 this year, that is, technically, 300% growth. Not necessarily very meaningful, but still 300 percent growth.

  91. Re:User traceability & Up 300% from a tiny bas by John+Hasler · · Score: 1

    > A communications authority could easly require that certain of the 128 bits addr
    > contain UIDs.

    The same authority could require that ISPs keep accurate, detailed logs and retain them forever.

    --
    Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  92. Holly crap by Seth+Kriticos · · Score: 1

    We are running out of IPv4 addresses? Why the heck did no one tell this before?

  93. IPv6 address abbreviation by JSBiff · · Score: 1

    IPv6 allows for address abbreviation. It is common for IPv6 addresses to have a relatively short network prefix, a bunch of zeros, then a non-zero host address. IPv6 specifies that addresses may be provided in a full form, or abbreviated form, where all the internal zeros are replaced by ::

    This still only helps so much but, you can think of IPv6 addresses more as

    pre:fix::host:addr

    Now, that said, IPv6 addresses do still tend to be pretty long, because the 'host' portion is often the 48-bit MAC address of the host computer. The upside is that allows for automatic configuration without needing DHCP. The downside is, common IPv6 addresses are still about 80 bits of information (32-bit prefix, 48-bit host).

    The real answer is, of course, host names/DNS. Don't bother remembering numeric addresses, except for the DNS servers, routers, etc and give them an address like:

    pre:fix::1

    (I believe you can statically assign an arbitrary host IP to something like a DNS server or router, so you can use ::1, ::2, ::3, etc. for the servers/devices that absolutely must be accessed by static addresses).

    It's not so bad remembering 2579:2a3d::1

    1. Re:IPv6 address abbreviation by I+Want+to+be+Anonymo · · Score: 1

      That seems fairly reasonable.

      Ok, now I'll change my question - are people like me running around with horrible misconceptions causing slow adoption of v6?

      --
      Anonymous Cowards get no respect.
    2. Re:IPv6 address abbreviation by JSBiff · · Score: 1

      I dunno, honestly, what is slowing adoption of IPv6. It seems more that no one is getting started. Here in the US, I don't know of any consumer ISPs that use IPv6. I'm not sure if any of the backbone providers use IPv6. Without the backbones and the ISPs switching, the switch can never really happen. Sure, people get use 6to4 or a tunnel today. But, if the ISPs, backbones, etc aren't changing, what's really the point?

  94. slashdot.org has no AAAA record by giggls · · Score: 1

    enough said!

    1. Re:slashdot.org has no AAAA record by mysidia · · Score: 1

      So? Google.com has no V6 record. But they do V6 anyways. It is common to use a different hostname, since poor V6 connectivity otherwise causes headaches for the many users that have some V6 support (i.e. Teredo on Vista), but bad or slow V6 connectivity.

      Having a V6 record for "slashdot.org" WOULD actually degrade the browsing experience for many users', and make many others unable to reach slashdot.org's site at all (blackholing phenomena), resulting in users leaving and going to other sites.

      $ host -t AAAA v6.google.com
      Host v6.google.com not found: 3(NXDOMAIN)

      $ host -t AAAA ipv6.google.com
      ipv6.google.com is an alias for
      ipv6.l.google.com.
      ipv6.l.google.com has IPv6 address 2001:4860:0:2001::68

      The _real_ WTF is:

      $ host -t AAAA ipv6.slashdot.org
      ipv6.slashdot.org has no AAAA record
      $ host -t A ipv6.slashdot.org
      ipv6.slashdot.org has address 216.34.181.48

    2. Re:slashdot.org has no AAAA record by marka63 · · Score: 1

      Actually www.google.com does have a IPv6 addresses. You just have to ask for them to be returned to you at the moment.

      % host -t aaaa www.google.com
      www.google.com is an alias for www.l.google.com.
      www.l.google.com has IPv6 address 2001:4860:0:1001::68
      %

      This is a logical next step in the transition from ipv6.google.com to providing IPv6 addresses for everyone on www.google.com.

  95. How do you register an ipv6 address? by LingNoi · · Score: 1

    Is there a way to even register a static ipv6 address?

  96. Just can't think of a reason change by davros-too · · Score: 1
    Changing over to IPv6 involves the cost of time spent, plus buying new routers, and who knows what other annoying and time-consuming things. I just can't think of any reason to invest in this when I have all the IPv4 addresses I need. My office networks are happy using NAT. My public servers have all the IP addresses they need for the foreseeable future.

    Until someone can explain to me some actual real benefit me and people like me are not going to undertake expensive upgrades. This is why a protocol launched in 1996 FFS is still not adopted, there's just no advantage - its solving a problem that has not arrived yet. When the problem does arrive I will be the last affected because I already have IP addresses.

    --
    In theory, there's no difference between theory and practice; in practice there is.
  97. Re:User traceability & Up 300% from a tiny bas by redelm · · Score: 1
    Sure. But logs have to be manually searched. An embedded UID does not. It also allows direct Traffic Analysis.

    Everything is a question of ease. Do you want this to be easy?

  98. not a fan... by pjr.cc · · Score: 1

    I was a fan of IPV6 when it first was proposed (back in '93 i think and it was a battle betwen ip128, ipng and something else), it looked like a good solution to what would evidently be a problem at some point.

    But these days its seems like no one actually learned from the mistakes of the past. All the things that were done wrong with ipv4 and now being done again with ipv6 (classes for eg)... "I can only have a /64 or /48 network?" are you for real?.

    I guess the point im trying to make is that /64 is a HUGE number, but back in my day when they were handing out class A subnets like candy, 32 sounded pretty big too. Given the love we have for gadetry, that address space will be consumed mighty fast and so we'll go through a very painful migration for something that may put us back where we were with people calling out the "doom of the ipv4 address space".

    On top of that we have idiots running around saying things like "NAT is evil! IPV6 will be the end of NAT" and in other areas the same thing except "we wont implement NAT for ipv6 in the linux kernel". Without even understanding the reasons NAT came to be in the first place. NAT was absolutely not developed as a solution to the ipv4 address space running out. In reality it gave people a way of "getting" an address space without having to be assigned one, not because it was hard to get one but because it was a temporary space. Later on this became very important because the internet suddenly became popular outside the academic space. When internet first came to Australia at the consumer level it was AGAINST THE TERMS OF USE to have more then one machine on the other end of the link, but thankfully by then we had linux with its natting kernel. Later home consumer routers became ubiquitous and the problem mostly solved itself. NAT also has its uses in the corporate world, which I wont bother going into.

    On top of that you have people who scream things like "NAT isnt scalable". Well, yes, If i try and push 1000 people through a single NAT thats going to be an issue. But its such a rediculous argument anyone who makes it should be shot anyway, I mean how dumb do you have to be to say something like that? have you never dealt with large networks?. That was never and will never be an issue regardless.

    But, for me the most important part of NAT is simple the ability to own my own address space - something that no one can decide for me, and if you think thats a bad thing then you really have lost the plot.

    As for NAT breaking protocols, well, IMHO people should be designing protocols to work through a NAT. In most cases it forces people to do things the right way (look at h323 as a good example, a very poor protocol that just doesn't work very well with or without NAT, and later SIP - personally, im not a big fan of SIP, but at least its better then h323) at the network layer. There are obviously places where NAT is definitely not feasible (incoming services for the most part). But every incoming service has an initiator, which should work behind NAT with few exceptions.

    But, anyway, i've had enough of a rant.

  99. What about non-zeroes? by KWTm · · Score: 1

    For example, 2001:0DB8:0000:0000:0000:0000:1428:57AB can be written as 2001:DB8::1428:57AB.

    That would make zero a desirable digit to have just from convenience, probably more so than it deserves since any random digit should be equally valid. Maybe we can have it so that
    2001:DB8:/1/:1428:57AB
    is short for
    2001:DB8:1111:1111:1111:1111:1428:57AB,
    and
    2001:DB8:/3e/:1428:57AB
    would mean
    2001:DB8:3e3e:3e3e:3e3e:3e3e:1428:57AB.

    We don't even need to make it a divisor of 16; for example,
    2001:DB8:/faded/:1428:57AB
    would be short for
    2001:DB8:fade:dfad:edfa:dedf:1428:57AB,
    an address easy to remember (for geeks, anyway). If everyone else wanted a mostly-zeroes IP address, I wouldn't mind getting the 2001:DB8:/faded/:xxxx or 2001:DB8:/c0de/:xxxx subnet or something. (I guess we can grab 65536 addresses at the same time since there are so many IPv6 addresses.)

    --
    404555974007725459910684486621289147856453481154 in hex is "You sank my Battleship?"
    [GPG key in journal]
  100. Out cruising the IPv6 space one day... by geekmux · · Score: 2, Funny
    (Cruising around IPv6 land, checking out nodes...)

    "Woah, a Duke Nukem Forever server? No way. How long has this been sitting here?!?"

  101. DirectAccess by Anonymous Coward · · Score: 0

    There is a fully fledged commerical reason for wanting IPv6 support and end-to-end addressing, from Microsoft of all people. It's called DirectAccess and corporate IT types want it.

    Basically, your corporate network is IPv6 IPSec based. Add a static IPv6 nameserver and put it on the internet. You just then allow your servers to be directly accessed over the Internet via IPSec IPv6. No messing around with VPNs, no nothing, your users will be able to access company resources on corporate laptops by just plugging them in to the Internet because your internal servers are just plain accessable via the 'net.

    Imagine if everything Just Works on your employees laptop - if they're physically wired in to your LAN, or sitting at Starbucks.

  102. Get rid of the anti-NAT fanbois to help IPV6 by knorthern+knight · · Score: 1

    Item #1 IPV6 is a good idea in principle

    Item #2 I am a big boy, and I can handle any problems NAT causes, up to and including a DMZ, or turning off NAT altogether.

    I understand that when the IPV4 version of IPSEC was adopted, a NAT-compatable version was voted down specifically in order to "break NAT". The net result is that IPSEC adoption has been hobbled. Talk about cutting off your face to spite your nose.

    And a note to all those aging pony-tailed hippies who remember "the good-ole-days of a fully-open internet". You're living in the same drug-induced twilight zone as the 20,000,000 aging baby-boomers who all remember having been at Woodstock in 1969. In the "good-ole-days", only sysadmins had real end-to-end connectivity. 99% of end-users sat in front of green-screen terminals like VT100's. And they toed the line, or got kicked off by a BOFH.

    The real reason that corporations love NAT is that renumbering when moving between ISPs is relatively painless. Move to a different ISP, and you only have to re-number a few publically visible servers. The 500 desktops in each building don't have to be touched. What's that you say? A *SIDE-EFFECT* of NAT is that office workers can't run VOIP, P2P, or any servers? One... two... three... awwwwwwwwwwwwwww.

    Take the anti-NAT fanbois and lock them up. Make IPV6 NAT-agnostic. Don't be assholes deliberately trying to break NAT. Use some diplomacy for a change, and you might find IPV6 adoption speeding up.

    --

    I'm not repeating myself
    I'm an X window user; I'm an ex-Windows user
  103. Use 6to4, no need to wait for ISP by Zo0ok · · Score: 1

    I know someone else already mentioned 6to4 but...

    If you have a router that is 6to4-capable, (ie, an Airport Extreme, or any router running DD-WRT or OpenWRT), you will have IPv6 independently of your ISP.

    Your routers public IPv4 address is used to create a whole fully valid IPv6 subnet. All your hosts behind your router will get real public-accessible IPv6-addresses.

    Even easier is to (on each host you want IPv6) install Miredo (implementing the Teredo protocol). In Ubuntu you basically make a
      $apt-get install miredo
    Thats ALL to get an IPv6 address that truly works. Works though a normal NAT without opening any ports or anything.

  104. As I tried to explain, by Nicolas+MONNET · · Score: 1

    There is basically no adoption of IPv6 because there's no point to it so far, because, today, if you have IPv6, you also have IPv4, and you end up using anyway, even when talking to other IPv6 hosts.