Slashdot Mirror


Why You Shouldn't Worry About IPv6 Just Yet

nk497 writes "While it's definitely time to start thinking about IPv6, it's not time for most to move up to it, argues Steve Cassidy, saying most can turn it off in Windows 7 without causing any trouble. Many network experts argue we're nearing network armageddon, but they've been saying that for years.'This all started when Tony Blair was elected. The first time. Yep, that's how long IPv6 has been around, and it's quite a few weeks ago now.' He says smart engineering has avoided many of the problems. 'Is there an IPv6 "killer app" yet for smaller networks? No. Is there any reason based on security or ease of management — unless you're running a 100,000-seat network or a national-level ISP — for you to move up to it? No. Should you start to do a bit of reading about it? That's about the stage we're truly at, and the answer to that one is: yes,' he says."

9 of 425 comments (clear)

  1. Ah, Yes, 'Let Someone Else Worry About It' by eldavojohn · · Score: 5, Insightful

    Is there any reason based on security or ease of management – unless you're running a 100,000-seat network or a national-level ISP – for you to move up to it? No.

    What if you're writing web applications that monitor IP addresses? Shouldn't you be making sure that your regexp fits for IPv6 as well? What if you're storing IP addresses and your sanitizing your data? What if you're doing anything at all with IP addresses? Like monitoring logs for abuse? Shouldn't be preparing for the inevitable move to IPv6? What if you collect metrics so you can report to management your country by userbase? I say this because we've started to account for IPv6 in our coding and auditing.

    What if you write any sort of firmware or software for network devices?

    And if you're a consumer and you're about to purchase something that's going to last you more than three years you should probably make sure it supports IPv6 in case the computer you buy down the line can only handle IPv6 addresses allocated to it.

    Go ahead and tell your readers that it's cool, Microsoft's got it covered. I'm going to err on the side of safety whether the armageddonists are right or wrong about the ETA.

    --
    My work here is dung.
  2. Torrenting by Anonymous Coward · · Score: 5, Insightful

    Torrenting is the killer app. Very unlikely all the spooks have updated to ipv6 snooping.

  3. Re:Won't even notice it by statusbar · · Score: 5, Insightful

    Many people are already using ipv6 by default without even knowing it!

    jdks-mbp:~ jeffk$ ssh jeffk@macpro.local.
    Warning: Permanently added the RSA host key for IP address 'fe80::21f:5bff:fe38:39e5%en0' to the list of known hosts.
    Last login: Tue Aug 17 14:32:43 2010

    One important reason to use it is for small devices that you really don't want to have to have a user interface to enable Static IP / Router Info / DHCP configuration on.

    Also, if you use use Apple MobileMe's Remote Desktop feature, you are using ipv6 only - MobileMe provides an IPv6 VPN to access all of your devices wherever they may be.

    So in fact there are many many users of Ipv6 out there, just not much sending packets over the un-vpn'd internet.

    --jeffk++

    --
    ipv6 is my vpn
  4. Roll it out in cell phones by xerent_sweden · · Score: 5, Insightful

    Roll it out in the cell phones and the problem is solved! Most of the growth in the adress space is in the mobile space, so if the telecom backbone is made IPv6-compatible and all our fancy iPhones and Android phones resolve IPv6-adresses instead, we won't run out of adresses.

  5. Re:I have read it... by Denis+Lemire · · Score: 5, Insightful

    You and many others desperately need to read more about v6 before regurgitating the same old myths.

    * Read up on RFC 4941 - Privacy Extensions for Stateless Address Autoconfiguration in IPv6
    * Their is NOTHING in IPv6 that negates a hardware firewall. You get a prefix routed to your 'router' it can have whatever allow or deny rules you like.
    * If you want to use NAT and non-routable IPs for whatever reason, however misguided, there is nothing in IPv6 preventing you from doing so, see also FC00::/7 link-local addresses
    * Whether a network is routed or switched has as little to do with IPv4 as it does with IPv6, these topology decisions have nothing to do with the protocol.

  6. most hated part of ipv6 by jollyreaper · · Score: 4, Insightful

    Sure, ipv4 addresses were a little cumbersome but at least they were numbers and dots. 192.168.0.1. I can type that out on the numeric keypad. 2001:0618:71A3:0801:1319:0211:FEC2:82DC is just awful. Yeah, I know you need to have more characters in there to represent the value and a larger address space means it's going to be a larger number. Keeping the old ipv4 decimal scheme would make addresses look like 128.91.45.157.220.40.0.0.0.0.252.87.212.200.31.255. But I don't really see the hex as an improvement!

    --
    Kwisatz Haderach
    Sell the spice to CHOAM
    This Mahdi took Shaddam's Throne
  7. Re:No NAT, no glory by LingNoi · · Score: 4, Insightful

    It's not a religious taboo, it's just you not knowing what the hell you're talking about (and this happens every damn time an IPv6 story on slashdot shows up).

    evil use of NAT (N-to-1 mapping) being taken into consideration

    Except NAT doesn't do that. PAT does that.

    without NAT every PC in your local network may be identified individually,

    Except NAT doesn't do that. A firewall does that.

    but takes away too much for me to consider using it for myself or my customers at the moment.

    You should not be doing any job involving networking with your current level of knowledge. If you don't even understand how current technology works how can you determine what is or isn't better for your customers.

  8. Re:From end-user perspective by Vancorps · · Score: 4, Insightful

    It is? I run hundreds of SIP phones complete with video calling behind NAT without a problem. It only becomes an issue when you have 10s or 100s of thousands of phones.

    Why would the phones even need Internet access? You have your SIP proxy on your network which connects to your SIP provider or POTs provider depending how you like to deploy. It's a very simple setup, makes auditing really easy, and allows me to do tricky stuff like divert the video from the gate to the phone so whoever answers can choose whether or not to let them in.

    Worms will propogate as they always have, properly firewalled setups have dramatically reduced this in IPv4 and the same will happen on IPv6. I keep hearing people speak of NAT like it's not a firewall but most of those people are forgetting that most NAT devices actually are real firewalls these days unlike the early days of NAT.

    I'm not against IPv6 but I have to agree with the parent, it has to start with the ISPs before it really makes sense for the rest of us to change. ISPs are having enough trouble with current traffic levels however that I have no faith in their ability to launch anytime soon on any real scale.

  9. It's time to start including it in home routers. . by JSBiff · · Score: 4, Insightful

    It might not be time for residential networks and ISPs to flip the switch yet. . . but it's *definitely* time for all new home routers, DSL/Cable gateways, etc, to include full IPv6 compatibility. That way, when the ISPs decide it's time to turn on IPv6, they and their customers don't need to replace most of the hardware already deployed. IPv6 support at the vast majority of network endpoints needs to already be present before you can actually make the switch - you can't change the protocol and just force people to suddenly change.

    ISPs need to start configuring networks to run in a dual-stack mode (at least as far as the end-user is concerned - once it hits the first ISP owned router, it could be all IPv6 from that point on), so that those who are ready to use IPv6 can start using it (yeah, you can use tunnel providers or 6to4 [which is really another sort of tunnel], right now, but that usually adds additional hops and latency to your connections - basically, if you are tunneling IPv6 traffic over IPv4, why bother using it to begin with).