Slashdot Mirror


IPv4 Will Not Die In 2010

darthcamaro writes "A couple of years ago, the big shots at IANA (that's the people that handle internet addressing) issued a release stating that the IPv4 address space was likely to be gone by 2010. Here we are in 2010 and guess what, IPv4 with its 4.3 billion addresses will NOT be all used up this year. In fact there could be another two years worth of addresses still left at this point. 'We're at about 10.2 percent (IPv4 address space) remaining globally,' John Curran, president and CEO of ARIN said. 'At our current trend rate we've got about 625 days before we will not have new IPv4 addresses available. We're still handling IPv4 requests from ISPs, hosting companies and large users for IPv4 address space, but that's a very short time period.'"

264 comments

  1. IPv4 doesn't die by rvw · · Score: 3, Insightful

    IPv4 doesn't die - it just runs out of available addresses.

    1. Re:IPv4 doesn't die by A+beautiful+mind · · Score: 3, Funny

      Old programmers don't die, they just use an exploit to induce an overflow in the "time left to live" counter that runs the Reaper's scheduler.

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    2. Re:IPv4 doesn't die by six11 · · Score: 2, Insightful

      IPv4 will die shortly after x86 does, which is to say: a long time from now.

    3. Re:IPv4 doesn't die by Anonymous Coward · · Score: 0

      Old pop singers never die; they just fade away after three and a half minutes. Who said that first?

    4. Re:IPv4 doesn't die by Ruede · · Score: 1

      "We're still handling IPv4 requests from ISPs, hosting companies and large users for IPv4 address space, but that's a very short time period.'"

      duh oh rly? quite obvious...

    5. Re:IPv4 doesn't die by Retric · · Score: 4, Informative

      One of the quick and dirty ways to continuing to use IPv4 is to have some of the huge chunks of the address space given back. Do FORD, MIT, Apple, IBM, etc each need 256^3 addresses? (http://xkcd.com/195/) IPv4 has almost 256^4 or around 4 billion IP's that's almost one IP per person on the planet and plenty to last a *LONG* time.

    6. Re:IPv4 doesn't die by Goaway · · Score: 2, Insightful

      At current trends, the 10% remaining will last less than two years. 256^3 addresses is less than half a percent. One of those huge blocks would be gone in about a month. Even if you freed up every single IP address, that would not last very long. Probably less than ten years, as demand grows.

    7. Re:IPv4 doesn't die by u38cg · · Score: 1

      They probably will when the economic case becomes overwhelming, but at the moment it would be an admin nightmare to carry out with no upside for those corporations. The problem is really that IPs are not allocated with any kind of economic efficiency - I have a static IP, for no good reason. But I can't sell it to someone who needs it. If the system were reformed so IPs could be transferred and sold (presumably as blocks to ease routing issues) you would see a lot of this problem solving itself.

      --
      [FUCK BETA]
    8. Re:IPv4 doesn't die by Bruha · · Score: 2, Insightful

      There are nearly 9 billion people on the planet. The problem of taking a Class A away from a company is that they would have to take years and millions of dollars to redo their address space to what you'll let them keep. We do not have that kind of time, and it's not as easy as you think to do such a thing. Getting a lawyer would be cheaper compared to the costs of changing ip addresses. There are servers out there that have ip's hard coded into them at the costs of tens of thousands of dollars to get it changed.

    9. Re:IPv4 doesn't die by Red+Flayer · · Score: 1

      IPv4 has almost 256^4 or around 4 billion IP's that's almost one IP per person on the planet and plenty to last a *LONG* time.

      Oh?

      I personally account for something like 10 or 15 IP addresses (two work computers, two home computers, two networked printers, various other devices with an IP address assigned for networking). And I know plenty of people with more than me.

      What happens when even more devices need IP addresses?

      The numbers we're speaking of may seem astronomical, but they are still finite...

      --
      "Trolls they were, but filled with the evil will of their master: a fell race..." -- J.R.R. Tolkien on Olog-hai
    10. Re:IPv4 doesn't die by dgatwood · · Score: 1

      That's also forgetting that when you have an ISP granting a block of 8 IPs as many do, you lose 37.5% of your IPs to the network, broadcast, and router IPs. Granted, that's pretty much a worst case, but I suspect the percentage is still not small.

      Plus you have IP ranges that aren't usable---0.x.x.x, 10.x.x.x 127.x.x.x, 169.254.x.x, 172.16.x.x through 172.31.x.x, 192.168.x.x, 224.x.x.x through 239.x.x.x, and 255.x.x.x. That's about 7.8% of the usable address space by itself.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    11. Re:IPv4 doesn't die by Kymermosst · · Score: 1

      IPv4 has almost 256^4 or around 4 billion IP's that's almost one IP per person on the planet and plenty to last a *LONG* time.

      Yeah in the same way that two quarters is "almost" a dollar.

      Of course, that's ignoring multicast, private blocks, other special reserved blocks, and broadcast/network addresses that are not globally uniquely assignable to devices.

      --
      "Alcohol, Tobacco, Firearms, and Explosives" should be a convenience store, not a government agency.
    12. Re:IPv4 doesn't die by PitaBred · · Score: 1, Informative

      I have over 15 devices that have IP addresses at my home. If we exclude NAT (which is a hack and a hindrance to communication) I still get 2-3 "real" IP addresses with my family's phones and the computers. Many people need and use more than one IP address.

    13. Re:IPv4 doesn't die by Anonymous Coward · · Score: 0

      That's exactly whats happening. These companies with huge subnets will be forced to justify them which they obviously can't. The ip's will be slowly reclaimed.

    14. Re:IPv4 doesn't die by Retric · · Score: 3, Interesting

      IP's are given away and there is no reason to give them back so of course there is a lot of demand and we are "running out". But don't think just because IANA runs out of IP's you will be unable to get new ones. They will just come with a price tag. It's a classic land grab, and people that got large chunks of IP space are going to start selling them as soon as there is no free competition.

    15. Re:IPv4 doesn't die by Anonymous Coward · · Score: 1, Informative

      6.8 billion is not what I would call "nearly" 9 billion.

    16. Re:IPv4 doesn't die by gbjbaanb · · Score: 1

      Not necessarily, big players such as Google or Microsoft would purchase large numbers for themselves, ostensibly to resell as value-add for their products. Imagine Microsoft purchasing 200 class A netblocks and then bundling an IP with every (legitimate) copy of Windows 8.

      Of course, the rest of the world would scream foul, convert their machines to IPv6 and so I guess you'd be right - the problem would solve itself :)

    17. Re:IPv4 doesn't die by Chyeld · · Score: 1

      So really all you specifically need is two addresses, one assigned to you directly for your home gear and one on loan to you from your company for their gear.

    18. Re:IPv4 doesn't die by Anonymous Coward · · Score: 0

      Does this one address per 1.5 persons consider the addresses reserved for multicasting (Class D), Experimental (Class E) ranges, loopback reservations (127.X.X.X) or the fact that each individual subnet requires a minimum of three addresses (network and broadcast addresses must also be accounted for each subnet)? No, it does not.

      As networks are subdivided, it becomes even more wasteful, because each subnet (and each subnet of that subnet, et cetera) lose addresses. You can't avoid that because those "lost" addresses are necessary for the network to function. properly. As these are accounted for, our pool significantly drops from the ballpark estimate of one address per 1.5 persons.

      In the meantime, technology's not slowing to a crawl. Most developed countries are becoming increasingly Internet-integrated. I am in a two-person family and we each have two Internet addresses used by our workplaces, one address for our home, one for our 3g wireless card, one for our 3g-enabled ebook reader, and one each for our four mobile phones (since smartphones also have Internet addresses). That's four and a half addresses per person--and we're using NAT for all of the other goodies behind the home connection.

      Even my brother, who is not in the tech field, has home Internet access, a smartphone, and Internet access from work. That's at minimum three addresses that he is using.

      So using our current usage, which is typical of most US citizens, we're way over the one address per 1.5 humans. Compound this with the wasted addresses required for subnetting and ranges that are by their very nature unusable (classes D and E), and it becomes clear--at least to me--that NAT is not going to fix this problem.

      Do I think it's going to happen in the next two years? Maybe, maybe not. But it WILL happen in our lifetimes. I'm not happy about it because there will be bugs, and I'm sure I have sloppy code to rewrite somewhere, and above all else I will have to relearn a lot of it, like when I originally learned IPv4.

    19. Re:IPv4 doesn't die by u38cg · · Score: 1

      That would be an open-and-shut monopoly abuse and would get slapped pretty hard - assuming that even Microsoft could afford it. I reckon that in a real free market, a single IP address would be worth something on the order of $50 - that's well beyond what's economically possible for Microsoft to take on.

      --
      [FUCK BETA]
    20. Re:IPv4 doesn't die by aardvarkjoe · · Score: 1

      6.8 billion is not what I would call "nearly" 9 billion.

      It is if you round to the nearest 9 billion.

      --

      How can we continue to believe in a just universe and freedom to eat crackers if we have no ale?
    21. Re:IPv4 doesn't die by Dwonis · · Score: 2, Insightful

      IPv4 has almost 256^4 or around 4 billion IP's that's almost one IP per person on the planet and plenty to last a *LONG* time.

      Now all we need to do is to replace all the routers on the Internet with ones that can manage 4 billion routing table entries. Wanna bet that IPv6 will be cheaper?

    22. Re:IPv4 doesn't die by Anonymous Coward · · Score: 0

      Yes, Yes, Yes, Yes!!!

  2. IPv4 not dying... by gandhi_2 · · Score: 3, Funny

    IPv4 not dying... Enterprise Networking Planet confirms it!

    That just doesn't have the same ring to it. ):

  3. Panic Averted - Resume Doing Nothing by Kenshin · · Score: 5, Insightful

    Another two years? Good, now we can all can put off panicking for another two years and not do anything to resolve this in the meantime.

    --

    Does it make you happy you're so strange?

    1. Re:Panic Averted - Resume Doing Nothing by Anonymous Coward · · Score: 1, Insightful

      That's the American way - if it doesn't hurt right now, it doesn't exist. Just look at Social Security, MediCare, MedicAid, the worthless dollar...

    2. Re:Panic Averted - Resume Doing Nothing by Anonymous Coward · · Score: 4, Interesting

      Worse than that, we'll continue to deal with the issues NAT causes, and I'm sure the various money grubbing ISP's will charge even more for additional IPs as we run out.

    3. Re:Panic Averted - Resume Doing Nothing by delinear · · Score: 1

      It goes hand in hand with our doing nothing about global warming policy (the hope being once that kicks in it'll reduce the populace and free up some IPs). Stay the course.

    4. Re:Panic Averted - Resume Doing Nothing by Nursie · · Score: 1, Funny

      Issues that NAT causes? Like shielding n00bs from the wilds of the internet?

      NAT is a blessing. It allows people to access the net without being exposed to it.

    5. Re:Panic Averted - Resume Doing Nothing by Anonymous Coward · · Score: 0

      Well the dearth of IPv4 addresses has been predicted for almost as long as the year of the Linux desktop. Neither has happened.

    6. Re:Panic Averted - Resume Doing Nothing by Dragonslicer · · Score: 5, Insightful

      Issues that NAT causes? Like shielding n00bs from the wilds of the internet?

      NAT is a blessing. It allows people to access the net without being exposed to it.

      Someone should write some software that can be put on a router that would offer the same protection without also causing all the problems that come with NAT. It would be like this large barrier that burns up any unauthorized data that tries to get by.

      Hopefully a good marketing person can think up a decent name for such a thing.

    7. Re:Panic Averted - Resume Doing Nothing by Hadlock · · Score: 3, Funny

      How about incinerator pit? Please contact me so I can get you in touch with my venture capitalists' financing division.

      --
      moox. for a new generation.
    8. Re:Panic Averted - Resume Doing Nothing by Anonymous Coward · · Score: 0

      ahh yes, global warming. Warmest summer in xx years? Proof of global warming! We must do something now!!!! Coldest winter in xx years? Ehh, that's just natural variation.

    9. Re:Panic Averted - Resume Doing Nothing by Anonymous Coward · · Score: 1, Funny

      So this is that big change that the Mayans forecast for 2012....

    10. Re:Panic Averted - Resume Doing Nothing by prandal · · Score: 1

      So the question we each need to ask, on behalf of ourselves and our employers, is how long will it take to transition my/our setup to IPV6?

      If the answer is greater than 2 years, it would be prudent to start doing something about it now.

    11. Re:Panic Averted - Resume Doing Nothing by fulldecent · · Score: 1

      It goes hand in hand with our doing nothing about global warming policy (the hope being once that kicks in it'll reduce the populace and free up some IPs). Stay the course.

      You have accurately compared responses to IPv4 and global warming: listen to underlings rabble about pseudoscience, find out that no problem exists, move on to next problem.

      --

      -- I was raised on the command line, bitch

    12. Re:Panic Averted - Resume Doing Nothing by Abcd1234 · · Score: 4, Funny

      Someone should write some software that can be put on a router that would offer the same protection without also causing all the problems that come with NAT. It would be like this large barrier that burns up any unauthorized data that tries to get by.

      Yeah yeah! You mean like that, you know, wall-thing they put in cars between the passengers and the engine compartment in a car. You know, the thing that's meant to stop people from being burned by some sort of, like, fire or something? Man, what a great idea!

    13. Re:Panic Averted - Resume Doing Nothing by Sancho · · Score: 2, Insightful

      Except that if you read between the lines, this is all a subtle stab at the 2 year estimate. "A couple of years ago" we were slated to run out of addresses by 2010. Now they're estimating 2 more years.

      We're bound to eventually run out, and it's probably going to be cheaper to start getting IPv6 out there now rather than at crunch time. But there's a lot that can be done to stretch out the IPv4 address space. I predict that we'll see major ISPs using NAT (and offering upgrades to real IP addresses for exhorbitant prices) before we see significant IPv6 adoption.

    14. Re:Panic Averted - Resume Doing Nothing by Anonymous Coward · · Score: 0

      Whoosh!

    15. Re:Panic Averted - Resume Doing Nothing by shentino · · Score: 1

      I think the reason that v4's are being used slowly is because now everyoe knows that they are scarce and are being conservative, and the people who grabbed the most of them back when they were being given away will find their holdings quite valuable.

      Just like china's recent move to lock in their rare earth supplies, companies that are sitting on piles of v4's will get VERY stingy with them and ensure a steady supply of them at OPEC level premiums.

      Reduced demand and reduced supply rate will ensure that the v4 pool will last a very long time indeed...even if the lower-class internet population is too poor to play with the big boys that will soon be poised to take over.

      v6 will only come around when v4 becomes expensive enough to be worth the bother. That is the business case that will get v6 pushed...assuming that the v4 barons don't obstruct it. Considering how profitable v4 access is going to become, I would not be surprised if they fight v6 tooth and nail. There is no business case, because at the moment the v4 barons have every reason to stand in the way, which by the way will make v6 adoption problematic.

      The sad thing is that until v4 barons finish sucking the market dry (which will unfortunately take a VERY long time thanks to hoarding) or v6 gets enough momentum and traction to provide refuge, us mortal folk will have to put up with overpriced rented and natted v4's that will have the convenient side effect of obstructing both home servers as well as p2p...the two things that all ISPs love to hate the most.

      v4 will die a slow painful death while corporate vampires suck it dry and milk it for every penny. Only after we have been thoroughly raped and pillaged by greedy ISPs giving us shitty NAT at outrageous monopoly prices for a VERY long while will v6 be able to arrive unimpeded.

      I'm afraid that by then, especially in this economy, that most of the internet population that needs v6 the most will have already pawned their surfboards and bid farewell forever to the great world wide web.

    16. Re:Panic Averted - Resume Doing Nothing by omnichad · · Score: 2, Funny

      coal, Y2k38 bug, exhaustion of hydrogen in the sun, universe expansion...

    17. Re:Panic Averted - Resume Doing Nothing by Yaotzin · · Score: 1

      I'm pretty sure there is something like that already, but I can't quite remember the name. Great wall of fire? Incineration barrier? Bitblocker? Digital Aegis? Conflagration-Wall?

      --
      Error: No error occurred
    18. Re:Panic Averted - Resume Doing Nothing by Guspaz · · Score: 1

      And let's not forget the possibility of forced re-allocations of class As.

      For example, does the Ford Motor Company really need sixteen million IP addresses? Take them back, make Ford go through ARIN. The US military has about 151 million addresses too...

      I'd like to say that no single entity should own an entire class A block, and that they should be forced to go through normal allocation channels.

      There's a precedent for this. Stanford voluntarily returned their class A to help relieve the IP crunch. Clearly the others need to be forced.

    19. Re:Panic Averted - Resume Doing Nothing by shentino · · Score: 1

      To get v6 internet, you need cooperation all the way up to the tier 1 providers. If even one of them isn't playing ball, the chain breaks.

      The first thing that needs to happen for v6 to prosper is for v4 to suffer.

    20. Re:Panic Averted - Resume Doing Nothing by Sancho · · Score: 1

      Yeah. I'm frankly not convinced that we'll see crunch time in my lifetime. There's not a lot of incentive for most places to implement IPv6 until a significant portion of their customers demand it. Customers won't demand it until the sites they use require it. Sites won't want to require it because it limits their customer base. It's a massive chicken/egg problem.

    21. Re:Panic Averted - Resume Doing Nothing by tlhIngan · · Score: 1

      Worse than that, we'll continue to deal with the issues NAT causes, and I'm sure the various money grubbing ISP's will charge even more for additional IPs as we run out.

      And what makes you think ISPs won't charge per IP address on IPv6? Just because there's a lot of it, doesn't mean that they're going to give up a lucrative revenue source. Hell, they'll probably end up wasting most of it by having most of the addresses dropped at the router.

      Hell, they'll probably make sure it doesn't work the way it should with stateless autoconfiguration to make the routing rules simple.

      And we'll invent NATv6 to compensate.

    22. Re:Panic Averted - Resume Doing Nothing by Bigjeff5 · · Score: 1

      and it's probably going to be cheaper to start getting IPv6 out there now rather than at crunch time.

      We already are, all new PCs in the past few years are IPv6 capable, and most high-end routers and switches have been able to handle it for even longer than PCs have. We are fast approaching the point where there will be a very small number of people left behind by an IPv6 switch, and that can be handled with NAT.

      The thing is, at the top level switching from IPv4 to IPv6 is akin to having to destroy the old rail-road tracks before you can build the mag-lev line. Doing so is extremely expensive in many ways, even if they don't have to buy a single piece of hardware.

      You also can't start implimenting it piece by piece until ALL the big ISPs impliment it piece by piece. One company can't really do anything without cooperation from the others, so it ends up being a case of each company waiting for another to jump. Right now nobody is jumping, but when the pressure becomes great enough they'll all be jumping almost at once, and you'll see the ISPs spend massive amounts of money to get switched over.

      It's for this reason that I suspect they are going to make IPv4 last a long, long time. Two years is a minimum estimate, I'd wager they'll manage to hold off the switch to IPv6 for another 4-6 years.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    23. Re:Panic Averted - Resume Doing Nothing by Bruha · · Score: 1

      Companies deploying LTE networks are using IPv6 from the start. Any device that uses LTE will use IPv6

    24. Re:Panic Averted - Resume Doing Nothing by Chris+Burke · · Score: 4, Funny

      Grandparent:
      It would be like this large barrier that burns up any unauthorized data that tries to get by.

      Parent:
      You mean like that, you know, wall-thing they put in cars between the passengers and the engine compartment in a car.

      Ah, and the difference between people who's visualization of a "fire wall" comes from real life, versus Advanced Dungeons and Dragons becomes clear. ;)

      --

      The enemies of Democracy are
    25. Re:Panic Averted - Resume Doing Nothing by Bert64 · · Score: 1

      Ford don't even use those addresses on the Internet, they are only used internally for their LAN (where they should be using 10.x)... Ford's externally routable servers are in different ranges:

      dns005.ford.com has address 136.8.159.21
      dns006.ford.com has address 136.8.159.22
      extdns002.ford.com has address 136.1.7.11
      extdns001.ford.com has address 136.1.7.10

      Their web and mail seems to be handled by third parties now, but i dont think that was ever in their /8 block either.

      You also have HP, who thanks to their acquisition of DEC now own 2 A-class blocks... They actually make *some* use of them, but they also have other allocations as well.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    26. Re:Panic Averted - Resume Doing Nothing by Bert64 · · Score: 2, Informative

      You can use IPv6 and IPv4 at the same time, for instance one of my sites:

      www.ev4.org has address 213.165.238.250
      www.ev4.org has IPv6 address 2001:bd0:100:0:1::3

      The ipv4 address is shared (http/1.1 virtual hosting), but the ipv6 address is dedicated to that one site.

      The US government requires that any routing equipment must *support* ipv6, but not that it be used...

      We need governments, the ip registries and domain registries etc (basically anyone in a position to do so) to require that any internet accessible services are offered on both stacks, and for isps to be required to provide v6 connectivity at the same time as v4 (so people with modern equipment will end up using it without realising).

      You have to grow the egg artificially before it will hatch into a chicken...

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    27. Re:Panic Averted - Resume Doing Nothing by Bert64 · · Score: 1

      All modern OS's support v6 out of the box these days, but virtually no consumer level routers do...
      I spent ages looking for DSL routers which would support IPv6, and in the end my choice was between a custom built linux box, or a cisco. We need even the cheapest of routers to support ipv6 by default, and to enable it out of the box if the remote peer supports it too.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    28. Re:Panic Averted - Resume Doing Nothing by Sancho · · Score: 1

      Certainly, but it's still going to be a tough sell. As long as most websites have an IPv4 presence, there's no incentive for customers to go IPv6.

      A mandate like that would not go over well.

    29. Re:Panic Averted - Resume Doing Nothing by Tetsujin · · Score: 1

      fluoride, alien invasion, cheese making, fjords, unsafe railings on very high catwalks...

      --
      Bow-ties are cool.
    30. Re:Panic Averted - Resume Doing Nothing by eples · · Score: 1

      A firewall actually is meant to prevent a fire from getting in to a place, not to burn things up that try to pass it.

      There is a firewall in your car between the engine and dashboard, for example.

      --
      I'm a 2000 man.
    31. Re:Panic Averted - Resume Doing Nothing by Kymermosst · · Score: 2, Informative

      And what makes you think ISPs won't charge per IP address on IPv6?

      Well, by the current standards residential assignments in IPv6 will generally be allocated a subnet size of /48, /56, or /64 (out of 128) - see here for ARIN address plan. Given the fact that a subnet of one of those sizes will be required for even basic connectivity, the chances are that you will have a lot of v6 IPs included in the basic cost of your connection.

      I have IPv6 at home and have a /48 allocation.

      --
      "Alcohol, Tobacco, Firearms, and Explosives" should be a convenience store, not a government agency.
    32. Re:Panic Averted - Resume Doing Nothing by amorsen · · Score: 1

      DSL routers are universally crap. I don't understand why adding a DSL chip to an otherwise ok router makes it prone to random reboots, makes its wireless unreliable, and breaks UPNP... Yet that is pretty much my experience with all DSL routers. Oh and the DSL tends to be flaky too, for good measure.

      Meanwhile pure DSL modems are fairly universally good and stable.

      --
      Finally! A year of moderation! Ready for 2019?
    33. Re:Panic Averted - Resume Doing Nothing by Ancil · · Score: 1

      Hopefully a good marketing person can think up a decent name for such a thing.

      "QuickProtect"

    34. Re:Panic Averted - Resume Doing Nothing by springbox · · Score: 1

      UPnP?

    35. Re:Panic Averted - Resume Doing Nothing by Chris+Burke · · Score: 1

      You have to grow the egg artificially before it will hatch into a chicken...

      Nice, I like that.

      I've long said the answer to the chicken-and-egg question is the (chicken) egg, since any chicken had to come from a chicken egg, and however you genetically define "chicken" the "first" one wasn't layed by a chicken (by definition). But I never thought of it like that for applying the metaphor.

      --

      The enemies of Democracy are
    36. Re:Panic Averted - Resume Doing Nothing by Wildclaw · · Score: 1

      Except that if you read between the lines, this is all a subtle stab at the 2 year estimate. "A couple of years ago" we were slated to run out of addresses by 2010. Now they're estimating 2 more years.

      It has? This is where the internet wayback machine is so nice

      2007-01-25: Projected IANA Unallocated Address Pool Exhaustion: 24-Jul-2011
      2008-01-29: Projected IANA Unallocated Address Pool Exhaustion: 02-Jun-2011
      Now: Projected IANA Unallocated Address Pool Exhaustion: 30-Sep-2011

      As these are automated momentary estimations, they are fluctuating all the time, depending on current allocation rates which seems to depend on time of year. Generally, the numbers are the best during the winter with exhaustion dates being somewhat further away, around the midlde or end of 2011, while summer estimations move towards the earlier 2011 or even 2010. I don't see any evidence about your assertion that the exhaustion estimation date has been getting much further away.

    37. Re:Panic Averted - Resume Doing Nothing by Sancho · · Score: 1

      Not my assertion. I was using data and a quote from the summary.

    38. Re:Panic Averted - Resume Doing Nothing by jgrahn · · Score: 1

      Issues that NAT causes? Like shielding n00bs from the wilds of the internet? NAT is a blessing. It allows people to access the net without being exposed to it.

      Someone should write some software that can be put on a router that would offer the same protection without also causing all the problems that come with NAT. It would be like this large barrier that burns up any unauthorized data that tries to get by.

      That would be really stupid, when all you need is filtering in the destination IP stack which (a) knows which addresses want this filtering and which don't, and (b) has processing power to spare. I think they call this a "personal firewall", and I think I have heard that several popular OSes include one.

    39. Re:Panic Averted - Resume Doing Nothing by Bert64 · · Score: 1

      Yes, no incentive to go ipv6 only, but forcing them to go dual stack won't be too much of a burden. Once everything supports v6, people will end up using it without realising.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    40. Re:Panic Averted - Resume Doing Nothing by Nursie · · Score: 1

      Why?

      Seriously, why?

      My mother doesn't EVER need to run a piece of server software and her computer really does not need to be addressable by anyone else at all, ever. Why should it be?

  4. Increase in domain value? by Anonymous Coward · · Score: 0

    Does this imply that the value of latexcybersluts.com will increase, because someone (like Goldman Sachs) may buy the domain to reuse its IP address, thereby also stealing customers who use IP bookmarks?

    If you are launching a site and there's no IPs around, will a value of $10-20 be unstomachable?

    Will we see offers going out from ISPs to owners of little-visited domains asking if they would be interested in a buyback?

    Solution: We need IP trading exchanges!

    1. Re:Increase in domain value? by Anonymous Coward · · Score: 1, Insightful

      A domain doesn't necessarily equate to a unique IP address. Most "little-visited domains" are on virtual hosts sharing their IP address with many others, or they're on someone's home server where the IP address is needed for that home's internet connection.

    2. Re:Increase in domain value? by Anonymous Coward · · Score: 0

      You lie!
      If the browser session passes along a request to the IP address which includes which website it wants to look at, then why can't all little-visited domains be on virtual hosts and share their IP address with many others?

    3. Re:Increase in domain value? by petermgreen · · Score: 3, Informative

      why can't all little-visited domains be on virtual hosts and share their IP address with many others?
      Many can but as of right now if you want to use ssl/tls you pretty much need your own IP.

      with ssl/tls the server does not have the http request at the time the connection is negotiated and certificates checked so it can't use the name from it to decide what certificate to present.

      You can in principle have multiple domains on one certificate but it makes the certificate management far more of an administrative PITA (essentially the host would have to apply for a certificate on behalf of all the domains they host on an ip and get a new one every time a domain needed to be moved between machines)

      There is a ssl/tls extention which tells the server which domain is being requested during the ssl handshake so it can send out different certificates for different domains. Unfortunately the built in ssl support in xp doesn't support it (both IE and chrome use the windows built in ssl support, firefox doesn't).

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    4. Re:Increase in domain value? by gmack · · Score: 1

      What are are talking about is called Server Name Indication (SNI). Apache's mod_SSL has only recently started supporting it so older Linux distros don't support it yet on the server side either.

    5. Re:Increase in domain value? by shentino · · Score: 1

      This used to be a big reason for the need for many v4 addresses.

      Nowadays with HTTP/1.1, you have to make the host explicit in your request, and failure to specify is not optional.

      It does require a modern web server to handle things properly.

  5. Comment removed by account_deleted · · Score: 0, Troll

    Comment removed based on user account deletion

  6. Trends by mrpacmanjel · · Score: 4, Funny

    "...At our current trend rate we've got about 625 days before we will not have new IPv4 addresses available..."

    I think this:http://www.xkcd.com/605/ sums it up

    1. Re:Trends by rubycodez · · Score: 0, Troll

      that about sums up the work and methodology of the Climate Research Unit

    2. Re:Trends by A+beautiful+mind · · Score: 1

      Way to summarize a few decades' worth of work by hundreds of scientists. If that's your standard of proof, then I assume you wake up every morning and start your computing project with 2 tons of sand, because you just can't trust the hardware and software makers. I see that you're posting, so you must be really smart and hardworking too...

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    3. Re:Trends by PolyDwarf · · Score: 0, Troll

      Way to summarize a few decades' worth of work by hundreds of scientists. If that's your standard of proof, then I assume you wake up every morning and start your computing project with 2 tons of sand, because you just can't trust the hardware and software makers. I see that you're posting, so you must be really smart and hardworking too...

      If the GP needed sand, I think we all can see that you have an abundance flowing out of various orifices.

    4. Re:Trends by A+beautiful+mind · · Score: 4, Informative

      No, this sums it up. If you'd bother to read this or an estimation done by someone else, then you'd know that the uncertainty is less than 3 months with high confidence. Of course the 625 days thing is bullshit, but saying 1.5 years +-3 months is probably what will happen, unless something really major changes don't start happening in the IPv4 process, which I wouldn't say is too likely based on the fact that it would require immediate global cooperation (see how well that went in Copenhagen).

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    5. Re:Trends by rubycodez · · Score: 0, Troll

      yes, it is an accurate way to summarize their book-cooking and ex post facto predictions and treating measurements made by lip-blown hand shaped thermometers as equivalent to those made by latest digital transducer. They were in fact warning of deluge in years with more precipitation, drought in dry years, more violent hurricanes when a couple violent hurricanes occurred, more quantity of hurricanes in a yeaer with more than normal.....and of course the biggest folly is their "hockey stick" prediction while the earth thereupon went into cooling due to deep solar minimum. That is why they are "climatologists", activist with agenda getting funding for continuance of same. Real scientists have a very different opinion on the subject of AGW.

    6. Re:Trends by A+beautiful+mind · · Score: 1

      Fuck, how did you know it was me?!

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    7. Re:Trends by andreasg · · Score: 1

      Maybe he just trusts Amd/Intel to make processors that work but does not trust CRU to produce accurate predictions. If you trust some experts you do not have to trust them all.

    8. Re:Trends by paiute · · Score: 1

      Real scientists have a very different opinion on the subject of AGW.

      As do true Scotmen.

      --
      If Slashdot were chemistry it would look like this:Cadaverine
    9. Re:Trends by tsa · · Score: 1

      Yes yes, we know it already. All climate specialists are crackpots who only serve their own agenda. Can we please stop about global warming here on /.?

      --

      -- Cheers!

    10. Re:Trends by idiotnot · · Score: 1

      Actually, I prefer the mouseover on this one.

    11. Re:Trends by bkeahl · · Score: 0

      That's great! It does fit too. I'm wondering if market forces won't buy us a lot more time. As your link points out, demand is not fixed or necessarily going to increase.

    12. Re:Trends by FireFury03 · · Score: 1

      No, this sums [potaroo.net] it up. If you'd bother to read this or an estimation done by someone else, then you'd know that the uncertainty is less than 3 months with high confidence.

      "Given the skewed nature of the distribution of allocations it is difficult to be any more precise than this and although the mathematical model may claim today that exhaustion will occur at 10:32 am on the 14th of June 2011, the range of uncertainty in such a prediction spans years rather than seconds."

      One thing is certain though - we _will_ run out of IPv4 addresses soon. It doesn't much matter how soon at this point - it's soon enough that people should be seriously thinking about implementing IPv6 networks. And anyone writing network software would be very foolish to not have already implemented and tested IPv6 support at this point.

    13. Re:Trends by Pinky's+Brain · · Score: 1

      Not unless ICANN changes the existing policies to allow resale of assignments and gradual increases of costs of assignments as the pool of unassigned addresses gets smaller.

      At the moment there is no market.

    14. Re:Trends by A+beautiful+mind · · Score: 1

      Note, the statement that I made and the statement about the model by the author almost a year ago, is not contradictory. I wouldn't disagree that the uncertainty is years, as there is a small chance of a more than few months' worth of swing.

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    15. Re:Trends by rubycodez · · Score: 1

      no, can't stop discussing it, because those whackjobs are pushing to allow their mafia benefactors such as the World Bank and Goldman Sachs the means to steal billions of dollars in a "piece of the action" racket on every international financial transaction, and to increase investment value of interests in AGW-scam related financial instruments they are constructing. These thieves and fraudsters need to be routed out.

    16. Re:Trends by tsa · · Score: 1

      Then do something about it instead of moaning about it here. Go re-elect Bush or something. We've had global warming discussions here so many times it's boring now.

      --

      -- Cheers!

    17. Re:Trends by metrix007 · · Score: 1

      Scotmen hold exactly the same opinion as their English brothers. Please.

      --
      If you ignore ACs because they are anonymous - you're an idiot.
    18. Re:Trends by Bigjeff5 · · Score: 1

      You realize that based on the rate of consumption a couple of years ago we were supposed to run out of addresses by 2010.

      Now based on the current rate of consumption we are supposed to run out of addresses some time in 2012.

      I think it's safe to say you can't accurately predict how soon we'll run out of address by basing it on the current rate of consumption, because it is fairly obvious that the rate of consumption changes as we approach the end.

      I estimate that within 10 years but not sooner than 5 we will run out of IPv4 addresses, and within 20 years we will have switched to IPv6.

      $50 says my estimate is more accurate - if less precise - than TFA.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    19. Re:Trends by Sophira · · Score: 1

      The GP was likening the usage of the phrase "Real scientists" to the True Scotsman fallacy.

    20. Re:Trends by rubycodez · · Score: 1

      Bush was on board with the scam too.

  7. Re:What about the domain parking, tasting, sniping by Kufat · · Score: 5, Informative

    Domain squatters and the like use one IP (and one server) for thousands and thousands of domains. They're parasites but they're not using anything like a significant fraction of the available IP space.

  8. Re:What about the domain parking, tasting, sniping by gandhi_2 · · Score: 1
  9. Re:What about the domain parking, tasting, sniping by me+at+werk · · Score: 2, Insightful

    Thanks to Apache and the miracle of Virtual Servers, one can use one IPv4 address to host thousands of domains! This depends on HTTP1.1, though, and old browsers can't handle it, but nobody cares about them.

    See: http://en.wikipedia.org/wiki/Domain_name#Use_in_web_site_hosting

    In conclusion, your argument is invalid.

    --
    For context, click Parent.
  10. Could last another 10 years... by geekmux · · Score: 1, Interesting

    ...if we actually went after those who currently hold "monster" /8 and even /16 blocks that aren't doing squat (pun intended) with them.

    I found my college campus computer lab has all of their workstations on the live Internet. No shit. Turned off the XP firewall and I'm pinging it. Props for them actually USING part of the monster /16 block they're assigned, but damn, talk about a Security nightmare...

    1. Re:Could last another 10 years... by EyelessFade · · Score: 5, Insightful

      Nothing new there. The university I work at have a /16 network. Everything has its own ip, even projectors. And by God thats how its supposed to work

    2. Re:Could last another 10 years... by FrostedWheat · · Score: 2, Insightful

      Having live IP addresses is the way it should be done. NAT offers no more security than a simple firewall in this case.

    3. Re:Could last another 10 years... by fbjon · · Score: 1

      I found my college campus computer lab has all of their workstations on the live Internet.

      Congratulations for describing exactly how the Internet should be. It's also not a security nightmare at all, it's SOP.

      --
      True confidence comes not from realising you are as good as your peers, but that your peers are as bad as you are.
    4. Re:Could last another 10 years... by PolygamousRanchKid+ · · Score: 4, Insightful

      ...if we actually went after those who currently hold "monster" /8 and even /16 blocks that aren't doing squat (pun intended) with them.

      When the IPv4 addresses run out, those "monster" holders will be doing something with them. Selling them.

      The "monster" holders are big IT players, and they would never give away something that they see could be a valuable asset in the future.

      Go knock at HP's door, with a bowl in your hand, and say: "Please, Sir, can I have some more IPv4 addresses?"

      "More? You want MORE!"

      --
      Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
    5. Re:Could last another 10 years... by IBBoard · · Score: 0

      verything has its own ip, even projectors. And by God thats how its supposed to work

      What, just in case someone wants to connect to the projector from some random remote location and display their own image?!? How many times do you ever need remote access to 99% of a University's computers, and 100% of its projectors?

    6. Re:Could last another 10 years... by Rolgar · · Score: 1

      That might well be, but there is over 2 billion addresses located in 126 privately held networks that don't need to be. How many of these organizations are using even 1% of the IP addresses at their disposal? Give them 5 class B's of their choice from their current class A, and reclaim the rest, then this issue will go away for a long time.

    7. Re:Could last another 10 years... by jcurran · · Score: 1

      We have been working on getting those with unneeded legacy blocks to return them, and have had some success: http://blog.icann.org/2008/02/recovering-ipv4-address-space/

    8. Re:Could last another 10 years... by sim82 · · Score: 1

      even though it is not up to date, I found http://xkcd.com/195/ to be quite interesting. It is surprising (well not quite surprising) that halliburton owns a /8 block ...

    9. Re:Could last another 10 years... by Anonymous Coward · · Score: 2, Insightful

      Give them 5 class B's of their choice from their current class A, and reclaim the rest, then this issue will go away for a long time.

      No, it won't. The equivalent of one class A net of IP addresses gets assigned every 28 days. It would buy a few months and the resources are better invested in the transition to IPv6.

    10. Re:Could last another 10 years... by geekmux · · Score: 2, Insightful

      Having live IP addresses is the way it should be done. NAT offers no more security than a simple firewall in this case.

      Ah, no, having live IP addresses is the way it was done, back before viruses, trojans, 10,000-node botnets, and Microsoft got involved. That "simple" firewall you speak of is now absolutely mandatory for damn near any business or home today.

      Trying to run the Internet "traditionally" on a 30-year old protocol is like trying to drive a Model-T on the freeway. Neither of the original designers ever envisioned what the future would bring.

      And yes, I realize that IPv6 design will help eradicate NAT, and get it back to the way it "should" be from an addressing standpoint, but one can also see that just from a Security view, IPv6 is a far cry from v4.

    11. Re:Could last another 10 years... by FlyingBishop · · Score: 3, Insightful

      The projector is mounted on the ceiling, and your laptop is on your desk. You wirelessly hook up the projector as an external monitor.

      You're in a lab, and your media server is in your room. You hook up and start streaming music. The possibilities are endless.

      All sorts of things Just Work so much better with ipv6.

    12. Re:Could last another 10 years... by Pinky's+Brain · · Score: 2, Informative

      They can't sell em, at best they can go into the ISP business with them.

    13. Re:Could last another 10 years... by Anonymous Coward · · Score: 1, Insightful

      You do realize that NAT != Firewall, right? You can have a firewall without a NAT gateway. Your local router will do that job, just like it does now. And it will be able to do it better as it's not spending cycles dealing with address translation.

    14. Re:Could last another 10 years... by diamondsw · · Score: 1

      NAT is not security. A firewall is. Learn the difference.

      --
      I don't know what kind of crack I was on, but I suspect it was decaf.
    15. Re:Could last another 10 years... by shentino · · Score: 1

      they don't call them monsters for nothing.

      Actually getting them to cough up their unneeded allocations will be a hellish fight.

    16. Re:Could last another 10 years... by omnichad · · Score: 1

      And that's why most home users will be behind a single NATed IPv6 address.

    17. Re:Could last another 10 years... by shutdown+-p+now · · Score: 1

      And yes, I realize that IPv6 design will help eradicate NAT, and get it back to the way it "should" be from an addressing standpoint, but one can also see that just from a Security view, IPv6 is a far cry from v4.

      From a security view, IPv4 has absolutely no advantage, since 1) NAT is a layer above it, and 2) You can have NAT for IPv6 if you so desire.

      Of course, from a security standpoint, a NAT is just a stateful firewall with a default setting of "deny all incoming", which can be trivially implemented for IPv6 as well.

    18. Re:Could last another 10 years... by u38cg · · Score: 1

      Unfortunately, IP allocations are not tradeable - if you try selling them off you will get a short, sharp ass-reaming from the relevant authorities, because they are (rightly or wrongly) culturally against them.

      --
      [FUCK BETA]
    19. Re:Could last another 10 years... by Bigjeff5 · · Score: 1

      It Just Works just as well on a Class A private network as a Class A public network. The difference being, of course, that you only need a couple public addresses as gateways for the private network, freeing up about 16 million public addresses.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    20. Re:Could last another 10 years... by Bigjeff5 · · Score: 2, Insightful

      126 * 28 days = 3,528 days, or just over 9 years, and that's only by re-allocating wasteful Class A's currently in use.

      9 years is a lot more than a few months.

      That's also the problem with these extrapolations, because as the addresses become more scarce the assignment rate slows down. When IPv4 addresses were first being handed out, they were given at a rate of 5-10 Class A's a week. We're down to one a month now, in a year it will be one Class A every two months, if that.

      It would buy a few months and the resources are better invested in the transition to IPv6.

      You're obviously not very good at business, because with any change the conversion to a new system is never worth it until the cost to maintain the current system is as expensive or at least very close to the same cost. Right now for the Tier 1 ISPs, the backbone of the internet, it is still significantly cheaper to extend IPv4 than to make the switch to IPv6. Doing so could cost them hundreds of millions, if not billions in manpower costs (the hardware should be pretty much there already).

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    21. Re:Could last another 10 years... by Bigjeff5 · · Score: 1

      I don't really see why it's surprising, they are a large, old company. Large companies at the birth of the Internet tended to pick up Class A's and B's, and used them.

      Are you surprised IBM has a Class A?

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    22. Re:Could last another 10 years... by Bigjeff5 · · Score: 1

      Which, of course, is absolutely friggin retarded.

      They'll be forced to change this position if we approach the end of allocatable IPv4 addresses and the Tier 1 players still aren't willing to play ball.

      If that happens, IPv4 won't be going away from another decade or more, as there are billions of addresses tied up by these giant holders.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    23. Re:Could last another 10 years... by Anonymous Coward · · Score: 0

      How is that supposed to work any differently than if your projector had a 10.0.0.0/8, 172.16.0.0/12, or 192.168.0.0/16 address? Does a projector really need to have a routable IP address from the Internet?

      I understand that in an ideal world expressed by many on /. everyone would have their own "real" IP address, and how the Internet would be free, and how we wouldn't have to deal with NAT! But with IPv4 we have what we have (as much of a mess as it can be sometimes) and to expect that a projector should have a publicly routable IP address, that can be much better utilized somewhere else now or in the near future, is very unreasonable. With IPv6 maybe thats how its supposed to work.

    24. Re:Could last another 10 years... by A+beautiful+mind · · Score: 2, Informative
      128? The legacy address space is 57 /8s, and at least 25 of that by my count is already "reclaimed" or reserved for some purpose. A good chunk of the remaining 22 /8s is in use, so let's say we can get half of that reclaimed in the ideal case. That's 11 /8s. We used up 13 /8s last year, so it'd last us 10 months. It would take longer to reclaim that space than it would help us pushing out the due date of IPv4 exhaustion.

      When IPv4 addresses were first being handed out, they were given at a rate of 5-10 Class A's a week.

      Um, this is basic math. If we would have been giving out 5-10 /8s per week, we would have exhausted the complete range of addresses in less than a year. I don't think that happened back in the 90s.

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    25. Re:Could last another 10 years... by u38cg · · Score: 2, Insightful

      I think the position will change, but only after some kicking and screaming. As for unused allocations, even if all these were freed up, it would only provide a few more months of capacity, so the debate over what to do with them is really moot.

      --
      [FUCK BETA]
    26. Re:Could last another 10 years... by sean.peters · · Score: 2, Insightful

      That's also the problem with these extrapolations, because as the addresses become more scarce the assignment rate slows down.

      Yeah, that's why this whole "peak oil" thing is bogus - because of course as we run out of oil, our rate of using it will go down!

      ...

      You see the problem, right? At some point we're going to start feeling some pain - we'll be foregoing the use of an IP address that we could really put to productive use - but we can't because getting one is too difficult/expensive. The point is that your problems start long before you use up the absolute last bit of a valuable, scarce resource./p.

  11. 2012 by DamegedSpy · · Score: 1

    ONOZ! RUN! 2012 is also coming in the internet world! Well, more seriously, there is IPv6 so we don't have to worry for now(except for the harder to memorize addresses of the IPv6) I wonder how much we have left of IPv6? Maybe 2-3 decades? nahhh lets just wait until we have less than 10%(IPv6 Addresses) to make speculations.

    1. Re:2012 by Anonymous Coward · · Score: 0

      You don't realize just how many more addresses are available in IPv6. If I didn't screw up the calculation, you can have 6.6x10^19 IPv6 addresses per cm^2 of Earth surface! Counting both landmass and oceans in. That is 66 billion billion addresses per square centimetre. Some of the address space is reserved etc. but more than half is actually available for globally reachable unicast addresses.

      Here: http://www.tcpipguide.com/free/t_IPv6AddressSizeandAddressSpace-2.htm are some other examples that may help understand the size of the address space.

    2. Re:2012 by jack2000 · · Score: 3, Funny

      Yeah if only there was a way to assign names to these hard to remember numbers, universal names that anyone can use to get to that exact ip address that they wanted. Dumb people will use the name system all the time!
      OH I KNOW! We'll name it DUMB NAME SYSTEM! DNS for short!

    3. Re:2012 by petermgreen · · Score: 4, Interesting

      Yes there are a lot of ipv6 addresses, however looking at the total size of a 128 bit address space is very misleading as ipv6 addresses are designed to be allocated in a more heirachical manner and designed to support stateless autoconfiguration for clients. Originally end sites were meant to be allocated a /48 though ripe now seems to be pushing for smaller allocations to smaller end sites.

      Plus only 2::/3 is assigned to the ipv6 internet with other address space being reserved for other purposes.

      Those figures would give us 2^45 end sites, this should be enough that we don't run out of addresses any time soon but it's a lot less than the ammount people assume from just looking at the number of bits in the IP.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    4. Re:2012 by omnichad · · Score: 1

      Well there still have to be numbers to point to.

    5. Re:2012 by Bigjeff5 · · Score: 1

      Dumb sounds mean, we'll just call it Dynamic, what a sexy word that is! We can add exclamation points too, to make it even more exciting!

      Dynamic! Name System, or D!NS!

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
  12. I genuinely wish they would just give it all away. by kieran · · Score: 2, Insightful

    We'll never be able to justify the cost of implementing IPv6 properly until it becomes something customers are demanding, and that won't happen until there is stuff on the Internet people want that to reach couldn't get hold of an IPv4 address.

    Still, I suppose I just have to be patient.

  13. Whats the point? A three year old estimate is off by Troy+Roberts · · Score: 3, Interesting

    Big F...ing deal! How many predictions are accurate for three or more years? The original prediction was made in May, 2007 and current prediction has slipped the date from December 2, 2010 to November 18, 2012 not quite a 2 years. I challenge anyone to find accurate predictions that are 3 1/2 years old.

    We need to be moving to IPV6 as quickly as possible. We may have a bit longer than was predicted 3 1/2 years ago. The thing that is scary is have we made much progress in moving to IPV6 in the last 3 1/2 year? I think not much. So, whatever the actual exhaustion dates are for IPV4 address. We can be certain that we are 3 1/2 years closer than we were and we have done almost nothing to prepare.

  14. Deja Vu? by rgfranks · · Score: 1

    Hasn't this story appeared previously (over and over again)? It sounds like peak oil.

  15. Not entirely true by macemoneta · · Score: 1

    That's the point at which IANA is no longer the one handing out addresses. It's also the point at which the market for IP addresses opens, and companies start selling subnets.

    There aren't 4.3 billion Internet facing IP addresses. The bulk are held and used internally by companies (for no good reason). People complain about NAT all the time, but it works. How many Internet facing IP addresses are used by Google's quarter million servers?

    $ host google.com
    google.com has address 64.233.169.104
    google.com has address 64.233.169.105
    google.com has address 64.233.169.106
    google.com has address 64.233.169.147
    google.com has address 64.233.169.99
    google.com has address 64.233.169.103

    Does any company really need more than a /29 subnet?

    --

    Can You Say Linux? I Knew That You Could.

    1. Re:Not entirely true by morgan_greywolf · · Score: 1

      Google uses a far more distributed network. Your 'host google.com' won't return the same addresses every time. For example from my network:


      $ host google.com
      google.com has address 74.125.45.99
      google.com has address 74.125.45.103
      google.com has address 74.125.45.104
      google.com has address 74.125.45.105
      google.com has address 74.125.45.106
      google.com has address 74.125.45.147

      it's an entirely differeent set of IP addresses.

    2. Re:Not entirely true by fbjon · · Score: 1

      You mean NAT solves more problems than it causes? I don't buy that for a second.

      --
      True confidence comes not from realising you are as good as your peers, but that your peers are as bad as you are.
    3. Re:Not entirely true by A+beautiful+mind · · Score: 5, Insightful

      It's also the point at which the market for IP addresses opens, and companies start selling subnets.

      No. Repeat after me, there is no market in IPv4 addresses. The current rule is that when a RIR requests a block from IANA that would bring the IANA pool below 5 /8s, then every RIR gets one last /8 from the "final five". Then IANA is done and the RIRs have whatever addresses they have left in their unused pool. For AfrNIC it'll last decades, for APNIC/ARIN it's curtains in about a year.

      There is no market in IPv4. There never will be, because reclaiming addresses is too hard and routing can't handle it atm (routing too small blocks). Let's switch to IPv6 already, for fuck's sake, we'll have to do that anyway even if a miracle happens, technical problems get worked out and someone sets up an IPv4 market, about 6 months after.

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    4. Re:Not entirely true by Anonymous Coward · · Score: 0

      People complain about NAT all the time, but it works.

      Really? Today I had to tunnel through my dedicated server to view a website, because they banned the shared IP my UMTS-provider uses for NATing its customers.

    5. Re:Not entirely true by corsec67 · · Score: 1

      And, Google definitely has geographic distribution, where near Nagoya, Japan, that is:

      $ host google.com
      google.com has address 66.249.89.103
      google.com has address 66.249.89.99
      google.com has address 66.249.89.104
      google.com has address 66.249.89.147

      Interesting how the last bytes of the list I got are included in the list you got...

      My ping to those servers is under 10ms, as well.

      --
      If I have nothing to hide, don't search me
    6. Re:Not entirely true by bbn · · Score: 1

      $ host google.com
      google.com has address 74.125.43.104
      google.com has address 74.125.43.105
      google.com has address 74.125.43.147
      google.com has address 74.125.43.103
      google.com has address 74.125.43.99
      google.com has address 74.125.43.106

      Looks like Google just had you.

    7. Re:Not entirely true by sarhjinian · · Score: 1

      Repeat after me, there is no market in IPv4 addresses.

      Tell that to the people who were calling my former employer, offering to buy portions of their /16 for substantial amounts of money.

      --
      --srj/mmv
    8. Re:Not entirely true by A+beautiful+mind · · Score: 1

      Ok, let's say your former employer would have agreed. How would he assign the addresses to the buyer? How would he claim the money for the financial transaction without pissing off the $government of the country?

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    9. Re:Not entirely true by shentino · · Score: 1

      Not just holding, but hoarding.

      That's what people tend to do with scarce resources.

    10. Re:Not entirely true by Dirtside · · Score: 2, Funny

      then every RIR gets one last /8 from the "final five"

      And if BSG taught us anything, it's that the final five won't be who you expect!

      --
      "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
    11. Re:Not entirely true by Anonymous Coward · · Score: 0

      It's also the point at which the market for IP addresses opens, and companies start selling subnets.

      No. Repeat after me, there is no market in IPv4 addresses. The current rule is that when a RIR requests a block from IANA that would bring the IANA pool below 5 /8s, then every RIR gets one last /8 from the "final five". Then IANA is done and the RIRs have whatever addresses they have left in their unused pool. For AfrNIC it'll last decades, for APNIC/ARIN it's curtains in about a year.

      There is no market in IPv4. There never will be, because reclaiming addresses is too hard and routing can't handle it atm (routing too small blocks). Let's switch to IPv6 already, for fuck's sake, we'll have to do that anyway even if a miracle happens, technical problems get worked out and someone sets up an IPv4 market, about 6 months after.

      IANA does more than just IPv4 address; it does all the protocol registries created by the IETF, the enterprise numbers used in SNMP, and, oh by the way, the IPv6 addresses. It's v4 pool is exhausted then, but the organization is not done.

      And there will be a market in v4 addresses. Every RIR has a policy in place which allows that to emerge from its current grey market into the light.

    12. Re:Not entirely true by gbjbaanb · · Score: 1

      Tell that to the people who were calling my former employer, offering to buy portions of their /16 for substantial amounts of money.

      did they require a handling fee to enable their lawyers to begin the transfer process?

      "I'll buy your entire /16 for $15,035,955,122, but first, my good friend, I need just a small undertaking to be starting the transfer legal process, once I have received your small assistance in dealing with the lawyers who demand the insignificant sum of $1200 I shall immediately transfer the rest of the funds to your account for helping me with this. Please wire the money to me via Western Union and we can do good business with each other."

    13. Re:Not entirely true by NormalVisual · · Score: 1

      How would he claim the money for the financial transaction without pissing off the $government of the country?

      Interestingly there was a similar situation that occurred in Celebration, FL not too long ago. Celebration had been given a /16 many years before but had mostly let it lie fallow. Some bright bulb in the community HOA decided that there was money to be made by selling the use of the netblock, and owing to the HOA management's inexperience in regards to such matters, use of the netblock was unwittingly sold to a spam outfit. Before the community could see a dime, people in higher places found out about what was going on and things ended with Celebration having their control of the block revoked owing to the fact that they'd let it sit effectively unused for so many years.

      --
      Please stand clear of the doors, por favor mantenganse alejado de las puertas
  16. World endsz in 2012 anyway by nedlohs · · Score: 1

    So it's all good.

    Seriously random calendar rolling over, IPv4 addresses running out. At the same time! Proof that Jesus is coming back in 2012!?!

    1. Re:World endsz in 2012 anyway by jellomizer · · Score: 3, Funny

      Will his website be at address 255.255.255.254?

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
  17. Guess we'll just going to have to have... by A+beautiful+mind · · Score: 4, Insightful

    ...another financial crisis. Because that's the reason there was a slump in allocation rates. The current best projection for IANA pool exhaustion is Sep/Oct 2011. Without the financial crisis that would have been end of 2010. The IANA guys would have been dead on, if not for a once in a 100 years financial event.

    The tone of the submission is really silly. There wasn't 4.3B allocatable addresses in the first place. Out of the 256 "/8s" only 219.914 /8 is theoretically usable, even before subtracting the legacy allocations. The summary makes it sound like it was a doom-and-gloom prediction that didn't happen to be true, but that's not the case.

    Also, it's "not the next 2 or 3 years", based on the available number of addresses 1.5 years for the IANA pool and 2,5 years are hard bars until RIRs (regional internet registries) run out.

    --
    It takes a man to suffer ignorance and smile
    Be yourself no matter what they say
    1. Re:Guess we'll just going to have to have... by dunezone · · Score: 1

      Its been 1.5 to 2.5 years for the past 6 years.

    2. Re:Guess we'll just going to have to have... by Anonymous Coward · · Score: 1, Informative

      no it hasn't. In 2005 it was estimated to take 5-10 years. 2011-2012 is still spot on.

      Say hello to isp-wide nat and sharing the same IP with dozens of users.

    3. Re:Guess we'll just going to have to have... by A+beautiful+mind · · Score: 1

      [citation needed]

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    4. Re:Guess we'll just going to have to have... by noidentity · · Score: 1

      I'm not following how we'll run out. IP addresses are sort of like gold; they never get consumed, just used for a while, then perhaps sold to someone else. Even if the current allocator of IP addresses runs empty, there will still be the owners of the 4.3 billion addresses out there. I'm also guessing that the current seller has some sort of fixed price, which tends to suppress the natural market signal of a higher price that tells others that they're scarce and not to buy them unless they are really needed. No matter, though, once they "run out" and others start selling, the price will rise to an appropriate level.

    5. Re:Guess we'll just going to have to have... by shentino · · Score: 1

      And what's up with IP addresses being freaking HARD WIRED into devices?

      That could just as much be laziness as a big fat "mine mine mine"

    6. Re:Guess we'll just going to have to have... by Abcd1234 · · Score: 1

      I'm not following how we'll run out. IP addresses are sort of like gold; they never get consumed, just used for a while, then perhaps sold to someone else. Even if the current allocator of IP addresses runs empty, there will still be the owners of the 4.3 billion addresses out there.

      So, my clever friend, how do you propose those IP addresses get routed once this market opens up? And are you going to do the honours of running around replacing all the routers that can no longer handle the routing tables?

    7. Re:Guess we'll just going to have to have... by noidentity · · Score: 1

      Well obviously a single address won't be worth much then, only large blocks. The market will sort this out in pricing.

  18. Re:Whats the point? A three year old estimate is o by maxume · · Score: 1

    Entertainingly, we are moving to ipv6 as quickly as possible.

    --
    Nerd rage is the funniest rage.
  19. Re:What about the domain parking, tasting, sniping by gclef · · Score: 1

    If you'd read the Domain Tasting wiki article rather that just ranting, you would have found the following:

    ICANN reported in August 2009, that prior to implementing excess domain deletion charges, the peak month for domain tastings was over 15 million domain names. After the $0.20 fee was implemented, this dropped to around 2 million domain names per month. As a result of the further increase in charges for excess domain deletions, implemented starting April 2009, the number of domain tastings dropped to below 60 thousand per month.

    In short, not only have you mis-understood how many IPs the abusers are using (as others have pointed out), you're also behind the times for what people are doing about that behaviour.

  20. The adaptation of IPv6 will free IPv4 addresses by SlOrbA · · Score: 5, Interesting

    I predict that 2012 we will still have available IPv4 addresses.

    This will happen because some IPv4 addresses will be reallocated as client-side doesn't need IPv4 addresses in IPv6 to access IPv4 resources. So IPv6 adaptation it self will slow the need to migrate to IPv6 as singular Internet Protocol.

    1. Re:The adaptation of IPv6 will free IPv4 addresses by bbn · · Score: 1

      This will happen because some IPv4 addresses will be reallocated as client-side doesn't need IPv4 addresses in IPv6 to access IPv4 resources.

      This is wrong. You do need an IPv4 address to access IPv4 resources.

      There is no IPv6 to IPv4 "NAT" technology that has not been deprecated.

      So likely we will all have dual stack IP connectivity, with a global unique IPv6 address and a local IPv4 address that will be NAT'ed at the ISP level.

    2. Re:The adaptation of IPv6 will free IPv4 addresses by TheRaven64 · · Score: 1

      You need an IPv4 address, but it can be NAT'd if all you are doing is accessing IPv4 resources. That means that ISPs can NAT their customers (so their computers will be double-NAT'd) for IPv4. They can still use IPv4 HTTP / SMTP / whatever, but they won't be able to host anything or run peer-to-peer IPv4 services, which should provide a lot of incentive for them to start using IPv6 (which will Just Work if both ends have v6 connectivity) for as much as possible.

      --
      I am TheRaven on Soylent News
    3. Re:The adaptation of IPv6 will free IPv4 addresses by Abcd1234 · · Score: 1

      They can still use IPv4 HTTP / SMTP / whatever, but they won't be able to host anything or run peer-to-peer IPv4 services, which should provide a lot of incentive for them to start using IPv6 (which will Just Work if both ends have v6 connectivity) for as much as possible.

      Wait, what? I can only assume the "them" in "incentive for them" must refer to the customer, because it certainly doesn't apply to the ISPs. What you just described is a great reason for ISPs to *not* provide IPv4. I can see it now: "Sorry Mr. Jones, but we can't re-enable bittorrent. You see, the worldwide shortage in IP addresses means that we must NAT you computer, and I'm afraid that breaks bittorrent. There's simply nothing we can do!" Meanwhile, the company stop blowing money to upgrade their backhaul network as total utilization suddenly plummets, while simultaneously thanking the lord above that the average customer is too uneducated to know what IPv6 is.

    4. Re:The adaptation of IPv6 will free IPv4 addresses by aztracker1 · · Score: 1

      And the next day uTorrent-IPv6 gets released (honestly, it may already support IPv6). Another issue is a uPNP-like support allowing for IPv6 clients on one side of a firewall to automagically poke holes in a home router.

      --
      Michael J. Ryan - tracker1.info
    5. Re:The adaptation of IPv6 will free IPv4 addresses by Abcd1234 · · Score: 1

      And the next day uTorrent-IPv6 gets released (honestly, it may already support IPv6).

      Yup, it very well might. Except, again, most people don't even know what IPv6 is, so no one will care.

      But, hey, let's say a few people care. Problem the first: The number of IPv6-connected torrent users is a miniscule fraction of the total users out there. As such, using IPv6 limits your choice of peers substantially, killing performance. Problem the second: If you adopt IPv6 today, that means a tunnel broker, and that means your bandwidth will be limited by your connection to the tunnel broker. So if the limited peer count doesn't kill you, the limited pipe to the tunnel broker almost certainly will.

      It's simple: The migration to IPv6 requires 1) intelligent customers who understand what IPv6 is and what it potentially offers, 2) a sufficient userbase to make the migration worthwhile to those smart enough to understand what IPv6 is, and 3) ISPs willing to do it against their own best interests. But none of those things exist.

    6. Re:The adaptation of IPv6 will free IPv4 addresses by bbn · · Score: 1

      If you adopt IPv6 today, that means a tunnel broker, and that means your bandwidth will be limited by your connection to the tunnel broker. So if the limited peer count doesn't kill you, the limited pipe to the tunnel broker almost certainly will.

      My home IPv6 is through a 6to4 tunnel. But the tunnel end point is only one hop away and can easily give me full bandwidth (I am on a 500 Mbit/s symmetric fiber).

      My hosting provider has supplied me with a real IPv6 subnet so no tunnel broker there.

      IPv6 is getting there. It does not have to be as slow as you think, if you have a decent ISP.

      By the way, there is already some limited bittorrent traffic going on IPv6. I am apparently not the only one around with connectivity.

    7. Re:The adaptation of IPv6 will free IPv4 addresses by Abcd1234 · · Score: 1

      My home IPv6 is through a 6to4 tunnel. But the tunnel end point is only one hop away and can easily give me full bandwidth (I am on a 500 Mbit/s symmetric fiber).

      LOLFR! If you think you are even *remotely* representative of the average household broadband user, trust me, you're *horribly* wrong. Hilariously, horribly wrong.

      Honestly, now I understand why some people think ipv6 actually has a chance of getting deployed before the IP crunch hits: Those same people are, apparently, living in a completely different world than the rest of us. :)

      By the way, there is already some limited bittorrent traffic going on IPv6. I am apparently not the only one around with connectivity.

      Yes, exactly. Limited. That's my entire point.

    8. Re:The adaptation of IPv6 will free IPv4 addresses by Anonymous Coward · · Score: 0

      How is that? I thought that clients with only a v6 address could only interact with a v6 server or peer. There is no v4v6 protocol conversion in the design of v6. There are ways to tunnel v6 over v4 intermediate nodes, but "dual stack" on both the client and the server is the order of the day for a long time to come. Until the last v4-only server is powered down, all (most) clients will need a v4 address. And what a mess the current IPv6 DFZ is.

    9. Re:The adaptation of IPv6 will free IPv4 addresses by bbn · · Score: 1

      I am on a 500 Mbit/s symmetric fiber

      LOLFR! If you think you are even *remotely* representative of the average household broadband user, trust me, you're *horribly* wrong. Hilariously, horribly wrong.

      You just live in the wrong place. All 1645 apartments in this apartment complex come with that speed. Its cheap too, we pay 6 USD/month.

      My point is that the upstream ISP already had a 6to4 tunnel broker. Yours might too. Any broker that is close to your ISP will not limit your speed.

  21. STUPID by mc1138 · · Score: 3, Insightful

    Whether or not the issue will be forced, the problem is that for most of the developing world they already are either running out or pretty damn close. Because of this, if the US doesn't jump on the band wagon we will continue to be outpaced by countries like China that are already neck deep in rolling out IPv6. This isn't a matter of when, just if, and really ought to be done gradually, but quickly, rather than wait till a moment to be forced. I encourage anyone that can to move as quick as they can towards this rather than sit and wait and watch the world pass them by.

    1. Re:STUPID by Anonymous Coward · · Score: 0

      The issue is not that other countries are running out of IPv4 addresses. They have access to the same ultimate supply of addresses that ISPs in the US do.

      It's that they're building new networks which makes it easier to deploy IPv6.

  22. Re:What about the domain parking, tasting, sniping by Bigbutt · · Score: 1

    I have 12 domains on one IP. Not to say that the different squatters aren't using a bunch though.

    Better would be to pull back IPs from the folks who don't need them.

    What about that block that the Ham Radio guys had out in San Francisco that was hijacked by the spammers? Or the companies and governments that have thousands of unused IPs? I used to work at one government place (contractor) and we had a large chunk for our site with about 2,000 employees.

    Where I work, we have 1,200 people in the company and we use four NAT'd IP addresses. Since I have to add them to my server to allow admin access to my tools, I know which ones I use.

    [John]

    --
    Shit better not happen!
  23. Nortel's class A? by Fractal+Dice · · Score: 1

    Doesn't Nortel have an entire class A network (47.x.x.x) to itself? Having that returned to the pool after the death roll is complete should presumably buy a little time?

    (I guess that falls into the "On the other hand, ARIN is also having some success in reclaiming unused IPv4 address space back from organizations that aren't using all of their addresses." line from the article?)

    1. Re:Nortel's class A? by A+beautiful+mind · · Score: 2, Insightful

      Reclaiming all the legacy IP addresses would buy us 6 months tops. So we delayed the problem by 6 months, during which we would be fucking up the DoD, IBM and a handful of other companies, I'm sure it'd be worth it, it's not like the military would be fighting somewhere and they could pull off a massive networking restructure in less than a year for the 8 /8s they're holding on to.

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    2. Re:Nortel's class A? by shentino · · Score: 1

      You make a good point.

      ARIN in theory has the authority to revoke or simply not renew IP space that isn't being used properly. They are leased, not sold.

      Whether they can survive the political shitstorm that would ensue as a result is another thing.

      I'm sure that "national security" will be thrown around against ARIN over v4 shortages just like it was against the EFF when they whined about ACTA being kept under wraps.

  24. Re:Trends (625 days vs 1.5 years +/- 3 mo) by jcurran · · Score: 4, Interesting

    You're correct... I'm careful to point out the uncertainty when doing the interviews, but reporters tend to lock onto the IPv4 depletion countdown number regardless...

  25. In other news.... by idiotnot · · Score: 4, Informative

    IPX won't die in 2010, either.

    But, in all seriousness, there's a few things to remember here.
    1. The v4 address space will be exhausted in the foreseeable future.
    2. Reclaiming large blocks only delays that inevitability by a few months.
    3. With a few exceptions, modern, supported OSes (Windows [2003, 2008, Vista, 7], GNU/Linux, all of the BSDs, OS X) support IPv6 perfectly.
    4. Most of the critical applications support IPv6 perfectly.
    5. The big holdup on the consumer side has been with the ISPs. The DOCSIS 3.0 roll-out is ongoing in many places.
    6. The US government has mandated it. The compliance date was in 2008 for all of the Federal agencies on their backbones. It's just a matter now of getting ISP access to those sites, and configuring lower-level systems.

    The luddite attitude here about this is amazing. If you're really all that concerned about it, and don't want to focus too much on the nuts-and-bolts, here's some advice: Learn BIND. Setting up your resolvers properly will spare you headaches.

    I use IPv6 every day. I get lots of e-mail over IPv6 (netbsd and freebsd mailing lists, to name just a couple). I enjoy being able to ssh to all of my machines at home directly. It's here. Evaluate your crap, and see what's not going to work. Plan to replace that stuff. Most of it probably will need replacing by the time you get assigned a /64 or /48 by your ISP, anyway. This isn't rocket science. /rant

    1. Re:In other news.... by JasterBobaMereel · · Score: 1

      The answer to this is that too many people have tried to setup IPv6 and have run into problems and reverted back to IPv4 (Thank you Microsoft!)

      Once burnt twice shy ... we'll wait until it is easy to setup (or default) ... why is is not the default on all new systems?

      --
      Puteulanus fenestra mortis
    2. Re:In other news.... by idiotnot · · Score: 2, Informative

      IPv6 was a PITA on 2000 and XP. It is the default protocol on Vista, 2008, and 7. In fact, one of the original bugs in Exchange 2007 was that you couldn't install it *without* IPv6 being enabled on your public interface.

      But, I disagree with your contention that bad experiences are why people shy away from it. I think for more people, it's the nastiness of the stateless addresses. "But I can remember 192.168.0.1 in my head!" Yeah, and you can remember the four numbers in your /64 prefix, too. You're just not trying hard enough.

    3. Re:In other news.... by Abcd1234 · · Score: 1

      But, I disagree with your contention that bad experiences are why people shy away from it. I think for more people, it's the nastiness of the stateless addresses.

      Nah, frankly, most people shy away from it because they just don't see the benefit that makes the trouble with it. And I'm one of them. I could, this weekend, get myself an ipv6 allocation from hurricane or a similar provider, configure my firewall appropriately, reconfig the few boxes on my network, and voila, have ipv6 deployed. But then what? What would that get me? "No NAT!" you say. Sure, great. Except any time I'd want remote access to my machines (say, at work), ipv6 is unavailable. So what was the point, again?

      It's fundamentally a chicken-and-egg problem. Until ipv6 starts getting deployed, it's useless. But until ipv6 appears useful, it won't get deployed. It sucks, but that's the simple reality of the situation.

    4. Re:In other news.... by dkf · · Score: 1

      It's fundamentally a chicken-and-egg problem. Until ipv6 starts getting deployed, it's useless. But until ipv6 appears useful, it won't get deployed. It sucks, but that's the simple reality of the situation.

      That's why governments are pushing it; to get things from one meta-stable state to another (hopefully more stable) one.

      --
      "Little does he know, but there is no 'I' in 'Idiot'!"
    5. Re:In other news.... by shentino · · Score: 1

      There's a reason for that.

      As the GP said, until the ISPs get off their lazy, blood-sucking asses and actually start supporting v6,

      And the ISPs have a damn good reason to hold up v6...

      1. v4 is a gold mine precious scarce resource that can be hoarded and RENTED out bit by bit while raking in metric assloads of cash.
      2. NAT as a workaround does a fine job of suppressing both home servers and p2p

      And until the major ISPs start playing ball, nobody will set it up as a default because of the sheer amount of griping.

    6. Re:In other news.... by shentino · · Score: 1

      More like a chicken-and-egg problem, with greedy, v4 holding foxes guarding the henhouse.

    7. Re:In other news.... by Dirtside · · Score: 1

      I'd like to be able to use IPv6 from my work desktop. I'm behind a huge corporate firewall, so I'm not even sure where to get started. I'm running Ubuntu and my eth0 interface already has an IPv6 address, but any attempt to use ping6 or ssh -6 to reach external IPv6 addresses is met with "Network is unreachable". I'm guessing I need to configure my routes, because the "Next Hop" column when I run "route -nve -A inet6" is "::" for all 5 entries. (I'd paste it here but /. is being bitchy about "too many junk characters".)

      I have no idea what route info to add that might work; I'm pretty sure the firewall's configured with IPv6 addresses, but I don't know whether it will forward IPv6 packets, or what, or how to even check that.

      --
      "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
    8. Re:In other news.... by Abcd1234 · · Score: 1

      Well, you could always run meredo, which implements the teredo protocol. But then you'd be punching a hole in your corporation's firewall, and I doubt they'll be terribly happy about that...

    9. Re:In other news.... by Bert64 · · Score: 1

      The federal agencies were required to use equipment that "supports" ipv6...
      What this means, is that they bought kit which had ipv6 as a bullet point on the feature checklist, they have never enabled it, probably don't know how to enable it, certainly haven't tested it so for all we know the support in those devices may be extremely buggy to the point of being useless...
      And that's just for the backbone, other devices may have no support whatsoever...

      I played with a commercial vpn client that claimed to support ipv6 a while ago, the v6 support was extremely rudimentary and trivially easy to crash... Many combinations of packets with the ip type set to 6 and otherwise invalid data would crash it, like it had no sanity checking whatsoever.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    10. Re:In other news.... by KonoWatakushi · · Score: 1

      3. With a few exceptions, modern, supported OSes (Windows [2003, 2008, Vista, 7], GNU/Linux, all of the BSDs, OS X) support IPv6 perfectly.

      Sadly, OSX does not. There is no support for NFS or SMB over IPv6. More importantly though, DNS is completely broken for hosts which have both v4 and v6 addresses, so you won't get far if you turn off v4.

      Another critically missing piece is home routers. Also, /. regrettably, but you could use http://slashdot.org.sixxs.org/ in the mean time.

    11. Re:In other news.... by idiotnot · · Score: 1

      "On June 30th 2008, OMB released a public statement indicating that all major USG agencies met the M-05-22 deadline, reporting successful demonstration of IPv6 capability resulting in "IPv6- enabled network backbones". Agencies were encouraged to move forward with IPv6 integration as part of their Enterprise Architecture planning and with IPv6-enabled backbone networks, agencies could begin the process of planning for phased integration of applications and users in a dual-stacked environment (IPv4 and IPv6 co-existing in the same network)." (emphasis added) From Planning Guide/Roadmap Toward IPv6 Adoption within the U.S. Government , which you can find at CIO.gov (zipped PDF).

      The agencies had to demonstrate passing traffic, which, of course, shows that they'd procured IPv6-capable hardware. Furthermore, with all of the agencies I've dealt with, IPv6 was specified in FAR.

    12. Re:In other news.... by Dirtside · · Score: 1

      Oh, the firewall already allows outbound everything from the office subnets (but not the server subnets). Except there's a Websense filter running on port 80 (but then, I have an external webhost that I tunnel SSH to when I want to get around it).

      I'll look into the Teredo thing, seems right up my alley. Thanks.

      --
      "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
  26. 2012? by Xacid · · Score: 2, Funny

    Maybe THIS is the end of the world everyone's talking about...

  27. Nope by Cyberax · · Score: 1

    No.

    Model which is used to predict the time when IPv4 addresses run out is actually quite good. See here: http://www.inetcore.com/project/ipv4ec/index_en.html

    1. Re:Nope by Bigjeff5 · · Score: 1

      Models are only as good as the data you put into them. As the recent financial crisis should demonstrate, it's extremely difficult - if not downright impossible - to predict human behavior over any extended period of time.

      We were supposed to run out of addresses 4-6 years ago, but we found ways around that. Predictions of two years ago put the end of IPv4 at this year, and yet we have two years left. Very strange, is it not?

      Frankly, we could burn up the rest of the addresses tomorrow if we wanted, but that won't happen. The pain felt in the IPv6 switch is highest at the Tier 1 ISP level and dissipates as it moves down the chain. It is virtualy painless for the end-user, but it will be an extremely expensive move for the Tier 1 folks, and unfortunately the internet doesn't go IPv6 until the Tier 1's go IPv6. They are going to put this off as long as they can, and they'll surely get very creative about doing so.

      There is also a lot of waste in the current setup, as it gets close to crunch time the waste will be squeezed out, further extending the life of IPv4.

      Basically, you won't see IPv6 until the cost to switch to IPv6 is lower than the cost to extend IPv4. So far, they aren't even close, it is still MUCH cheaper to extend IPv4 a while longer than to switch the entire infrastructure to IPv6, but the two are slowly getting closer with every passing day.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
  28. killer app by jmyers · · Score: 1

    For ipv6 to get widespread use there has to be a killer app that people (businesses or consumers) want or think they must have. I don't mean what geeks want or think they must have. The masses of sheeple are perfectly happy if everything is NAT'd.

    I have no idea what this app may be, but it could be some cloud service that everyone wants and is only made available via ipv6 technology. Customers will demand that ISPs support it so they can use the product.

    migration away from ipv4 for strictly technical reasons is not going to happen. By the time the killer app comes along it may be something other than ipv6 that takes over. Whatever happens it will not be for technical reasons or to make the network "better" it will be because clueless people want it.
     

    1. Re:killer app by Ltap · · Score: 1

      Many clueless people torrent - all it would take would be people talking about how it would make it easier to torrent... oh dear, I'm afraid ipv6 won't be arriving then, MAFIAA hitmen will take care of that.

      --
      Yet Another Tech Blog
      (but so much more, including game and movie reviews)
      http://yanteb.peasantoid.org
    2. Re:killer app by omnichad · · Score: 1

      More web servers on the Internet that need new IP addresses is all it takes. If you have to start assigning them IPv6 addresses, then all the consumers will need to be able to connect out to them. Done. Need created.

  29. Again? by jimpop · · Score: 1

    no, really? AGAIN?

  30. The Mayas were right!! by chelip · · Score: 1

    One more thing to worry about in 2012!

  31. Yet another RGA from CmdrTaco by FlyingGuy · · Score: 1

    Pfffft!

    --
    Hey KID! Yeah you, get the fuck off my lawn!
  32. an honest question: by circletimessquare · · Score: 1

    speaking honestly from a position of ignorance on the issue: is there anything about the ipv6 spec that lends itself better to censorship and control? in other words, could china or iran do their authoritarian bullshit easier with ipv6 than with ipv4?

    depending upon the answer, i will either support ipv6 adaptation, or fight giving up ipv4 until the bitter end

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  33. Re:We're on slashdot, right? by Anonymous Coward · · Score: 1, Funny

    I thought they were people who managed "I am not a ..." jokes. You know, like "IANAL" and "IANACS" and so on.

    I always wondered who managed all those "not me" acronyms. Guess I'll have to keep wondering. Maybe it's Taco.

  34. So what's the satus... by HaZardman27 · · Score: 1

    ...of deploying IPv6? Two years isn't that much time, and I haven't heard much of when IPv6 will be the new standard.

    --
    Apparently wizard is not a legitimate career path, so I chose programmer instead.
  35. Re:Whats the point? A three year old estimate is o by Anonymous Coward · · Score: 0

    I predict that in eight years the president of the USA will not be Barack Obama. (no caveats, no small print)

  36. NAT ISP... by proton · · Score: 1

    My ISP changed their network a couple of months ago. I have broadband, what they call broadband anyways, but now they only assign local addresses (192.168.x.x) to our home computers and proxy our shit... pisses me off, but what can I do, Im locked into an email address I dont want to change...

  37. Yay IPv6! by javalizard · · Score: 1

    We can finally assign an IP address to every atom on the Earth. That should take care of things. At the rate the Earth is collecting space dust though we would run out of IPv6 addresses on May 4th 2022. Time for IPv8. We can base it on veggie juice.

  38. An honest answer: Its better, for tracking YOU by Anonymous Coward · · Score: 0

    "speaking honestly from a position of ignorance on the issue: is there anything about the ipv6 spec that lends itself better to censorship and control?" - by circletimessquare (444983) on Friday January 08, @10:05AM (#30694520) Homepage

    See subject-line above. IPv6 makes you far more "trackable" than IPv4 ever did.

    1. Re:An honest answer: Its better, for tracking YOU by iburrell · · Score: 1

      In practice, IPv6 is no different than IPv4 with NAT for tracking people. With IPv4, your machine address is hidden by NAT behind your public IP address. They can track it to your house but not your computer.

      By default IPv6 uses the MAC address in composing the IPv6 address which ties it to the machine. But this is recognized as a problem and there are ways of creating unique random addresses. Also, there is enough address space that you can change your address frequently. Every day or even every destination. They can still track the prefix to your house.

    2. Re:An honest answer: Its better, for tracking YOU by CjKing2k · · Score: 1

      They can still track the prefix to your house.

      Except that there's no easy way to tell if you're on a /48, /64, /80, etc. In v4 it's assumed that everyone can be tracked by a single address, at least for a little while.

  39. Magic 2-Year Mark by Ltap · · Score: 1

    Why is it that, whenever something is supposed to happen, it's perpetually 2 years from now? This seems like a pretty common phenomenon in tech - mostly due to the vanishing point for new tech being several years (startups tend to not last very long, so having 2 years of R&D on something usually means it will never be finished). Anyone got other examples/ideas?

    --
    Yet Another Tech Blog
    (but so much more, including game and movie reviews)
    http://yanteb.peasantoid.org
  40. Reclaim unused address space by rlh100 · · Score: 1

    A simple solution to reclaim unused blocks of addresses would be to allow/encourage people/ companies to sell their class B or class C net blocks if they are not using them. I have a class C net block that I do not use. I got it years ago when all you had to do was fill in the form. At the time I got several companies class B net blocks. I suspect that there are many net blocks that were allocated in the late 80;s, early 90's that are not used or are used in a very limited way.

    If we allowed people to sell their net blocks like people can sell their domain names on ebay I suspect that many of these unused blocks of addresses would be put back into the pool of available addresses.

    RLH

    1. Re:Reclaim unused address space by jcurran · · Score: 1

      RLH - Excellent points. Presently, the theory is that if you've got unused address space, you should return it so that other organizations that have need can be assigned it. This actually has happened (again, http://blog.icann.org/2008/02/recovering-ipv4-address-space/) but realistically, may not be the most popular route. In 2009, the community adopted a transfer policy which allows one party to transfer their address blocks to another (and be compensated independent of ARIN) but the receiving party has to prove the documented need to receive it. Since there's still addresses in the free pool, there's not a lot of reason for someone to pay when ARIN will provide them directly the same space once they've documented their need. FYI.

  41. if ipv6 really makes you more trackable by circletimessquare · · Score: 1

    then fuck ipv6

    and welcome to the age of subnets

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:if ipv6 really makes you more trackable by Anonymous Coward · · Score: 0

      I would advise you to not go with the word of one anonymous coward. Partisans are not a very good source of information about the other side of the coin as they have no incentive to get the other side's view correct.

      I do not have a complete answer for you. I can say that ipv6 makes ipsec seasier as it is built into the stack as opposed to layering. Also, regardless of whether it is counter productive or not, NAT is going to be available for ipv6. Regardless of what detractors claim, autoconfig does not NEED to use your mac address in the ip, though I can't say what the default policy is for all implementations.

      nb - I am posting anonymously since I have moderator points.

  42. Re:I genuinely wish they would just give it all aw by Pinky's+Brain · · Score: 1

    We need more ipv6 only torrents.

  43. I foresee a temporary solution. by TrisexualPuppy · · Score: 4, Interesting

    There are going to be lots of little solutions that will stretch out IPv4 for a while.

    One that I came up would be to offer a financial incentive to reclaim unused blocks of addresses. Ten or fifteen years ago, IP address space was handed out like candy. You could get a class C block readily, and class B blocks just needed a little justification. I did some contract work in the late 90s for a company that I still keep up with, and they have a few entire C nets in their possession and not in use. Now how do we get these back? There is going to be demand for IP addresses, and as the supply becomes more and more limited, that demand will make people desperate.

    So why not let people who already have address space sell what they have? It does reward unrightfully holding onto stuff, but if these addresses are needed, then hey!

    1. Re:I foresee a temporary solution. by Anonymous Coward · · Score: 0

      how much should these addresses be sold for?

    2. Re:I foresee a temporary solution. by Anonymous Coward · · Score: 0

      MOD PARENT UP

    3. Re:I foresee a temporary solution. by pe1chl · · Score: 1

      But who will have interest in "a few entire C nets"?
      Even an entire A net represents only 0.5% of the address space.
      If you could reclaim one of those A nets that were handed out in the early days, you could add 0.5% to the address space.
      But that does not buy you much more time at the rate those addresses are handed out.

    4. Re:I foresee a temporary solution. by Diffusion · · Score: 0

      There's a market for everything. That's like saying "why do I care who wants a used car when I have a warehouse full of them?"

      Large companies aren't the only ones who use IP addresses.

    5. Re:I foresee a temporary solution. by trickyD1ck · · Score: 1

      Auction? Market?

      Supply and demand

  44. well ok by circletimessquare · · Score: 1

    if ipv6 makes you more trackable, or not, or if there is any privacy issues with ipv4 versus ipv6, this is apparently a complex question whose answer someone a lot wiser than me on the subject matter should study. maybe ipv6 is neutral, i don't know. but whatever the answer is, it decides the fate of ipv4. because i and many others will fight ipv6 if it indeed allows for more centralized authority. or maybe ipv6 is neutral, in which case i don't care either way

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  45. Old News -- Dupe by sconeu · · Score: 1

    You mean just like they said here?

    --
    General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
  46. Waste waste waste... by SuperCharlie · · Score: 1

    I think we could probably go a lot longer if places like the University where I used to work didn't just hand out "real" IP's on their DHCP for a full Class C. I cringed every time I thought about the security issues of having a "real" IP for every PC on campus. Who also wouldn't allow firewalls, even Windows firewall, because it would impede their port scans.. sigh.. but I digress..

  47. Dragging it out... by Bert64 · · Score: 1

    I'm sure the registries will drag things out, pulling back some blocks, making it harder and more expensive to get new allocations etc, and putting pressure on organizations to cut down their IP usage.

    In the meantime, there is still very little support for IPv6 out there...

    --
    http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  48. How long until /. is IPv6? by wowbagger · · Score: 3, Interesting

    Once again, I'll ask a simple question:

    How long until it is possible to pull up the main page on Slashdot, using nothing but IPv6 packets?

    IMHO, every time one of these "OMFG IPv4 gonna run out RSN!!!1!11!" stores hits the front page, the Slashcrew should have to state where THEY are in becoming IPv6, and what is preventing them from doing so already.

  49. Re:What about the domain parking, tasting, sniping by aztracker1 · · Score: 1

    If you're using a 15 year old browser, you get what you deserve.. ;)

    --
    Michael J. Ryan - tracker1.info
  50. I have IPv6 and don't know why by SmilingBoy · · Score: 1

    Apparently, my wireless ADSL modem router (a Fritz!box 7270) has default support, and so does Windows 7. I didn't enable it either on my router nor on my Windows Laptop. Yet, I am currently assigned both a IPv4 and an IPv6 address. Of course, my ISP doesn't offer it, so I guess this would just be useful for communication within my LAN. Is it normal now that home routers offer IPv6 addresses or is the Fritz!box an exception? Who else has IPv6 on the network without excessive configurations/upgrades?

    1. Re:I have IPv6 and don't know why by Nicopa · · Score: 1

      No, it's not just for your lan. Probably your router is doing 6to4 for you, so all of those IPv6 addresses are real, and can potentially be reached from outside (pretty cool! of course, it's surely controled by filtering in the router).

  51. There's plenty of addresses left. Don't panic. by rs79 · · Score: 1

    They say you could post a cure to cancer to the net and nobody would notice. Similarly, one Jim Fleming in Chicago has hacked the IP header to get workable 34 bit addressing. He just found 3 more intrnets worth of addresses. Folow @techno_cat on twitter for details.

    --
    Need Mercedes parts ?
    1. Re:There's plenty of addresses left. Don't panic. by phantomfive · · Score: 4, Insightful

      You could easily use 64 bit addresses in IPV4 by sticking the rest of the source and destination addresses in the options field of the packet. But why? We would still need to upgrade all the routers and software to work with the new system, except we would be upgrading to a hack not a solution, and we would be ignoring the solution that has already been implemented in many computers around the world. As likely as not, IPv6 already works with the computer you are holding, it just needs to be turned on.

      IPv6 is the way to go, and everyone is already heading that way. By the time IPv4 addresses run out, the biggest difficulty may be explaining to your friends how to fix their internet that is no longer working and they don't know why.

      --
      Qxe4
    2. Re:There's plenty of addresses left. Don't panic. by Citizen+of+Earth · · Score: 1

      The IPv6 designers made a terrible mistake by not including backward compatibility with IPv4. IPv6 is a lot like Intel's Itanium processor. It's unclear right now whether the the anointed successor will gain ground or whether some IPv4 extension hack will come along and make fools of the IPv6 crowd. (Wait, what's the opposite of "crowd"?) BTW, I'm using a x86_64 processor right now, like most people.

    3. Re:There's plenty of addresses left. Don't panic. by idiotnot · · Score: 2, Informative

      The IPv6 designers made a terrible mistake by not including backward compatibility with IPv4.

      How, praytell, would they have gone about doing that?

      IPv6 is a lot like Intel's Itanium processor. It's unclear right now whether the the anointed successor will gain ground or whether some IPv4 extension hack will come along and make fools of the IPv6 crowd. (Wait, what's the opposite of "crowd"?) BTW, I'm using a x86_64 processor right now, like most people.

      Sorry. Try again. The first Itaniums had IA-32 compatibility. Later ones do not. And AMD did some incredibly stupid things with x64, which are becoming rapidly apparent as time goes along. I'm guessing you haven't noticed. But the reason Microsoft has an emulated 32-bit XP VirtualPC instance running for compatibility is that amd64 can't do vmm86 when running in 64-bit mode. Consequently, sixteen-bit applications can't run at all, natively. Sure, they run fine if you run the processor in 32-bit mode, but then you still are stuck with PAE for >4GB memory, and there's no way to directly access 64-bit registers (which you can do on IA-64, Sparc64, and POWER). I'm not saying amd64 isn't without its merits, but, backwards compatibility sure ain't one of them.

    4. Re:There's plenty of addresses left. Don't panic. by Anonymous Coward · · Score: 0

      Oh, baby Jeezus. Not Jim Fleming *again*!?

      I thought he curled up and went away...

  52. DJB on the v6 mess by rs79 · · Score: 1

    If you haven't seen this yet you might want to read it: http://cr.yp.to/djbdns/ipv6mess.html

    --
    Need Mercedes parts ?
    1. Re:DJB on the v6 mess by jcurran · · Score: 2, Informative

      DJB is correct, in that the IETF considered it outside their scope to do a "transition plan for the Internet"... This means that instead of having one standard model for how to get to IPv6, we've seen a veritable parade of transition and coexistence technologies. The combination of no clear transition plan plus no new end-user features makes deployment of IPv6 challenging, and I noted the same thing 15 years ago in RFC 1669. Despite all of the above, IPv6 remains the only viable answer if we want to keep growing the Internet.

    2. Re:DJB on the v6 mess by Bigjeff5 · · Score: 1

      That's 8 years old, a lot of those concerns have been addressed.

      However, it still takes Tier 1 ISP's switching over to cascade everything else, until then it's pointless. They haven't done that yet, so we'll have IPv4 for a while still.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    3. Re:DJB on the v6 mess by petermgreen · · Score: 1

      IPv6 remains the only viable answer if we want to keep growing the Internet.
      Having most machines on dual stack is pretty much a prerequisite to intoducing v6 only hosts nad yet as of right now only a handful of hosts are dual stack. Further most home routers dont' support IPv6 either. To think that this will get sorted in the next couple of years is frankly ludicrous.

      The only viable answer now is to move end lusers behind NAT so thier IPs can be freed up for servers (and yes that will almost certainly mean price increases for those of us home users who want to retain a public IP).

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    4. Re:DJB on the v6 mess by jcurran · · Score: 1

      Petermgreen - We actually agree in one sense: the goal is to make sure that the public *servers* have unique addresses. It's not very difficult for corporate and hosting firms to make their public web sites IPv6 reachable in addition to IPv6. We're not talking about 99% of the home users or servers internal to the corporate firewall, just the public servers. Once there's critical mass in dual-homed public web content, it's possible for fiber/cable/broadband carriers to connect customers with IPv6 and dynamic IPv4 NAT for the remainder of the content.

    5. Re:DJB on the v6 mess by petermgreen · · Score: 1

      It's not very difficult for corporate and hosting firms to make their public web sites IPv6 reachable
      That reminds me of another issue, some operating systems and software will try v6 first and apply very long timeouts before falling back to v4. This means that if a user has broken or terriblly performing v6 connectivity then sites that advertise v6 IPs will be horriblly slow for them.

      Such a situation is hardly going to encourage server operators to offer v6 ips for thier services.

      It will be interesting to see how everything pans out but I get the distinct impression that it is going to be pretty messy :(.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
  53. Re:I genuinely wish they would just give it all aw by aztracker1 · · Score: 1

    That's pretty damned insightful... If the underground file scene went IPv6 that would actually drive some adoption.

    --
    Michael J. Ryan - tracker1.info
  54. Re:I genuinely wish they would just give it all aw by rs79 · · Score: 1

    Look at the criticisms google staffers noted: http://www.metacafe.com/watch/yt-mZo69JQoLb8/google_ipv6_conference_2008_what_will_the_ipv6_internet_look_like/

    I don't expect to ever use v6. There's just no need and won't work for a very very very long time if at all.

    --
    Need Mercedes parts ?
  55. We all know its going to happen in 2012! by Anonymous Coward · · Score: 0

    That is what the Mayan predicted.... the end of the world (IPv4 running out of addresses)... on December 21, 2012.

  56. Re:I genuinely wish they would just give it all aw by austin987 · · Score: 1

    and that won't happen until there is stuff on the Internet people want that to reach couldn't get hold of an IPv4 address.

    You mean like http://freeipv6porn.com/ ?

  57. Re:I genuinely wish they would just give it all aw by the_one(2) · · Score: 1

    Individual nations could always mandate switching like they did with digital TV

  58. Re:Not entirely true (companies selling subnets... by jcurran · · Score: 1

    Transfers outside of the community adopted policies are fraud, report them here https://www.arin.net/resources/fraud/ and watch the resources be reclaimed. To the extent that you think the policy should/should not be changed, then get involved on the ARIN public policy process https://www.arin.net/participate/index.html. /John

  59. Re:I genuinely wish they would just give it all aw by Anonymous Coward · · Score: 0

    I dont see that ever happening. If theres money to be made in re-selling your ip address, ISPS will just put us all behind NAT and sell their IP space. Not to mention all the big companies that own /8 blocks that could easily sell off large chunks.

    If anything I just see an extension to DNS coming out that allows you to point a domain name to some kind of IP:NATIP block, and maybe even integrating ports in there.

  60. IPv4 Exhaustion Counter by flam3boy · · Score: 1

    Check this site to see how many days and IP's are left: http://inetcore.com/project/ipv4ec/index_en.html

  61. It's about routing.. by tempest69 · · Score: 3, Informative
    If we let these companies sell off small chunks all over the place, you have routing weirdness; as companies will need to aggregate a bunch of small chunks. Then you have all of these small addresses that need their own entries in routing tables where a large address range would make the routing easier. And changing the routing tables becomes more of a mess, and the protocols (ala RIP, OSPF) need to work harder, causing more overhead. If properly implemented, IPV6 would prevent these kind of issues, as the address space is huge (nearly uncomprehensable).

    Storm

  62. 400-foot dogs by Citizen+of+Earth · · Score: 1

    If most IANA analysts watched a puppy growing the the first month of its life, they'd conclude that it'll be a 400-foot tall monster trashing downtown Tokyo in two years.

  63. Why do we need IPv6? by pclminion · · Score: 1

    Can somebody with knowledge please explain why we need to ditch IPv4 instead of just layering on top of it? Most private networks have a tree topology, which implies a single entry/exit point for traffic bound for the rest of the Internet. There's absolutely no need for any entity to have more than a single IP. The internal hosts can be publicized via some new mapping/routing protocol which sits on top of IPv4. In other words, push IPv4 one click down the network stack and build a larger address space on top of it. Why can't we do this?

    1. Re:Why do we need IPv6? by Abcd1234 · · Score: 1

      You mean like, say, tunneling IPv6 over IPv4? Why? You still end up having to do a mass migration of users and applications to the new stack, so you might as well just stick v6 right on top of the link layer and be done with it.

  64. Take a read on security issues in IPv6 by Anonymous Coward · · Score: 0

    Here's a list of some key security flaws to look out for. The first four are all related to the IP type 0 routing header feature:

    1. Trespassing

    IPv6's advanced network discovery lets you select the path for your packets, but it could also let an attacker go where he or she should not go. "You can have them reach places they should not reach, and interact with equipment not in direct sight," according to Biondi and Ebalard. And an attacker could drill down and get more information on your remote networks, too.

    2. Filtering device bypass

    Many currently-installed filtering devices, such as firewalls, were not designed for IPv6. DMZ protection for IPv6 traffic varies in many products, as does firewall filtering of IPv6 packets. Experts worry that with such devices in place, an attacker could hide traffic or a payload using Route Header 0.

    3. Denial-of-service (DOS)

    DOS attacks can occur when IPv6 packets are sent back and forth through the same link until they overwhelm bandwidth. And you know what can happen after that -- not just the service disruption itself, but other attacks that are masked by the DOS.

    "According to Philippe, you can mark a single packet such that it'll go around and around and around in these huge routing loops, such that a single packet will be able to consume far more link bandwidth than it could have previously," says Dan Kaminsky, director of penetration testing services for IOActive. "An 88x bandwidth amplifier is actually a fairly big deal, and will allow someone with a 1.5Mbit link to kill a 100Mbit upstream. That would be pretty bad."

    4. Anycast: Not safe anymore

    "Anycast works by announcing the same IP at many places on Internet so that each box can go to the nearest one," explains Biondi and Ebalard.

    Trouble is, IPv6's routing header 0 feature "can single out all instances of an anycast service," according to the French researchers, and basically negate the benefits of anycasting.

    The researchers concluded that IPv6's type 0 routing headers "have no applications, and only bring security issues." The only way to protect yourself for now is to disallow "RH0" in your network, and to prevent your host systems from processing it as well, they said.

    5. IPv6 puts IPv4 at risk

    There are bigger-picture problems than routing headers. Once you enable IPv6, you may open up your IPv4 network and devices to its vulnerabilities as well. This is a hot button for service providers testing out IPv6, but the problem applies to enterprises with large WANs also, says Nicholas Fischbach, senior manager of network engineering/security for COLT Telecom Group plc (Nasdaq: COLT; London: CTM.L).

    "Turn on IPv6, and a number of DOS conditions may put your revenue- generating [IPv4] backbone at risk," Fischbach says.

    And IPv6 isn't just a network issue, either. "It will also impact security devices, operating systems, and applications," he says. "Making an application IPv6-ready requires changes, some minor, some major, depending on the application and how it's written. But at the end of the day, it could mean another exposure of a security hole that no one thought of, or [had] only fixed in the IPv4 part."

      Kelly Jackson Higgins, Senior Editor, Dark Reading

    From http://74.125.93.132/search?q=cache:aDqU_9rcWCMJ:www.darkreading.com/security/perimeter/showArticle.jhtml%3FarticleID%3D208804503+%22IPv6%22+and+%22security%22&cd=6&hl=en&ct=clnk&gl=us

  65. The problem with these things... by sean.peters · · Score: 1

    ... I like to call them "flaming barricades"... is that they come with their own set of weird problems. Need to go "back to your PC" at home? Oops. Trying to do a BitTorrent download? You'll need to dick around with your firewall. And if you have firewalls at each machine? And you want to share files among them? Ruh-roh. Etc, etc.

    Your point is valid - NAT wasn't really meant to be a security solution. But there are tradeoffs with firewalls too.

  66. IPv4 by Anonymous Coward · · Score: 0

    IPv4 should be enough for anyone!

  67. IPv4 will stick around, static address will go by MasterOfGoingFaster · · Score: 1

    IPv4 will last a lot longer than expected or desired. Short term, the price of a fixed IP address will shoot up like a rocket. So why would an ISP want to spend money to devalue that?

    This will drive a new method of finding a way to link a URL to a non-static IP address, and the change in the flow of money will make a lot of us think "why didn't I think of that?"

    Hey, most people just Google the site name anyway, so as long as you tell Google what today's IP address is, you don't need static.

    --
    Place nail here >+
  68. Already are, if you have the right torrent client by anti-NAT · · Score: 1
    --
    The Internet's nature is peer to peer - 20050301_cs_profs.pdf
  69. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  70. $ host -t aaaa slashdot.org by Eunuchswear · · Score: 1

    $ host -t aaaa slashdot.org
    slashdot.org has no AAAA record

    --
    Watch this Heartland Institute video