Slashdot Mirror


There Is No Plan B, the Ugly Transition To IPv6

An anonymous reader writes "The Internet is running out of IPv4 addresses — not at some point in the future, but right now. But the only solution to the problem, IPv6, is just now really starting to be deployed. That's why we're all in for some tough times ahead."

33 of 717 comments (clear)

  1. Reclaim Some? by d0nster · · Score: 5, Funny

    Maybe we should reclaim some of AOL's massive block of addresses. It would help a little in the short run. And they sure aren't using them.

    1. Re:Reclaim Some? by Carewolf · · Score: 5, Informative

      kidding aside, I'd be interested to know what the actual Class A block utilization numbers look like.

      True, that is obligatory. Map of the Internet

    2. Re:Reclaim Some? by kaptink · · Score: 5, Informative

      I've wondered why this hasnt been done sooner. There are some relatively small groups out there with class A blocks (16.7m) still. Make those who own these blocks justify their use. I believe back when the internet was just a wee bub, IP addresses were handed out to anyone who wanted them. And some companies just took huge chunks.

      Have a look at this list for starters http://en.wikipedia.org/wiki/List_of_assigned_/8_IPv4_address_blocks or http://abhishek.nagar.me/content/class-ip-address-and-owners

      Some organizations, such as Stanford University, formerly using 36.0.0.0/8, have returned their allocated block to assist in the delay of the exhaustion of addresses. Perhaps some others could follow in their steps.

      --
      Those who can, do. Those who cannot, sue.
    3. Re:Reclaim Some? by jon787 · · Score: 5, Informative

      ICANN considered this option, but decided that it didn't extend the deadline out far enough to be worth the costs.

      http://blog.icann.org/2008/02/recovering-ipv4-address-space/

      --
      X(7): A program for managing terminal windows. See also screen(1).
    4. Re:Reclaim Some? by Anpheus · · Score: 4, Insightful

      At the rate that we're exhausting addresses, even if it were possibly to schedule and reclaim more than one Class A a month, we'd only be postponing the inevitable... by about a month.

      And that assumes you can move all of their infrastructure off their class A in that time, maybe when your team gets around to dealing with , you realize it could take a year long migration.

      Yeah, that'll work.

    5. Re:Reclaim Some? by Sir_Lewk · · Score: 4, Funny

      AOL now has more subscribers in 2010 than they did in 2000. And I'm one of them

      This explains... so much.

      --
      "linux is just DOS with a UNIX like syntax" -- Galactic Dominator (944134)
    6. Re:Reclaim Some? by SamSim · · Score: 4, Insightful

      There are two major reasons why this almost certainly won't happen. The first reason is that at the current rate of use this would delay IPv4 exhaustion by only a few months to a year.

      The second is that for an organisation to claim such a large block of addresses, it must have done so relatively early in history. That probably means the organisation is a technology group or another organisation which has had a vested interest in the internet for a very long time. Over those decades, there's a good chance that the organisation has swelled up to make maximum use of its assigned address spaces, and rearranging its network and systems for greater efficiency would be a mammoth undertaking for relatively little gain (see above).

    7. Re:Reclaim Some? by geekoid · · Score: 5, Informative

      "which thanks to compression looks as fast as 500k DSL"

      hahaha, no.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    8. Re:Reclaim Some? by Gerald · · Score: 4, Interesting

      4) It's Just Not Fair. Why should Ford, Apple, and HP be forced to give their /8s back when Level 3 and AT&T get to keep and resell theirs?

    9. Re:Reclaim Some? by Anonymous Coward · · Score: 4, Funny

      Why not just link to the 45 other places you've posted the list? I've seen this same conversation with you 25 times. You know what? I hope they do take away your fucking TV. I hope you turn it on one day, and nothing is there. I hope you sit there and stare at a blank screen (not even snow to look at - they took that from you too already, didn't they?). I smile as I think of your simple whimpering as you paw in futility at the TV. Your only friend...gone...gone...

      Gone.

      Please shut the fuck up about your god damn antenna TV. No one cares. Get bittorrent, get cable, whatever.

  2. Why didn't somebody tell us? by Anonymous Coward · · Score: 5, Funny

    What? We're running out of IPv4 addresses? Why are we only learning this NOW? This is an outrage! Why haven't tech sites told us about this problem sooner...say, several times a year?

  3. Procrastination by dmgxmichael · · Score: 5, Insightful

    Why is it that problems never seem to get corrected until they are well and truly disastrous in scope.

    1. Re:Procrastination by oldspewey · · Score: 5, Insightful

      Because by being insanely focused on quarterly results, our society rewards short-term thinking, and often actively punishes long-term thinking. In most (not all, but most) companies, if a system architect told his CTO
      "we need to undertake a $X million project to transition our systems to IPv6. This is going to become a big deal in about 10 years time and we want to be on top of it,"
      the CTO might or might not take the idea seriously. But even if the CTO did decide to bring the idea to the board for approval, he'd be shot down in seconds.
      "You want to reduce shareholder profits by $X million to fix something that might become a problem in 10 years? Let's move on to the next item on the agenda shall we? And don't bring stupid ideas like this one to the table again in the future Bob. We need you focused on shareholder value."
      .

      --
      If libertarians are so opposed to effective government, why don't they all move to Somalia?
    2. Re:Procrastination by hedwards · · Score: 5, Insightful

      That's why some of us advocate increasing the short term tax rate to something much higher than what we currently have and tailing off to what we've got now for long term capital gains. And pushing the holding period to 2 years or so. And cut the tax rate on dividends to the rate that people pay for capital gains.

      The effect of that is to increase the holding period of an investment and discourage reckless speculation. People tend to forget that Enron produced far more winners than losers. The people who ended up holding the bag were a small fraction of the total number of people who invested in it.

      It also has the upside of discouraging charlatans that practice technical analysis from screwing up the markets with their charts. Any practice which ignores what a business does to make money should be discouraged.

    3. Re:Procrastination by hjf · · Score: 5, Insightful

      Yes, all sounds good, until your ISP starts providing you with 1 private IP address for your home, with no way around it. Here in my city 1 of the ISPs does this, you get an address from the 10.0.0.0/8 range. If you need to poke a hole in the firewall for things like IM file transfer or webcam, any kind of P2P, SIP, SSH/remote desktop/vnc into your home machine, etc... guess what? you're out of luck. Change ISPs? Sure, until the other ISPs are forced to do the same. What are we going to do then?

      And that's what we're going to get. I simply don't see the point of mentioning NAT as a near-term temporary solution: it ALREADY is doing that. Guess what? Companies don't give their desktops public IPv4 addresses anymore, they haven't done that in several years now, so I don't see what your point is. You're just in denial and being too optimistic.

      I wonder why no one mentions v4 addresses are "lost in routing". Take for example an ISP here, they used to give you a full /24 (legacy CLASS C, and let me stop here for a bit: NOT EVERY ASSIGNMENT IN THE NET IS A, B or C. Only script kiddies dreaming of "T3" "pipes" talk about "class C" and "ping of death", get over it! It's 2010 already. OK, back to my point). So they used to give you a /24. For every 256 addresses on a /24, the .0 and .255 are usually not usable, and the .1 is usually the CPE router. But now they don't give out a /24 anymore, unless you specifically state why you need such a large space. So they give out a /30. 8 addresses, again the first and last are unusable, and the first available is the CPE router. 3 out of 8 or 27% of the addresses are lost in routing.

      Let me recap: NAT is not the solution, it's already there holding the internet like duct tape.

  4. Nobody cares. by ledow · · Score: 4, Interesting

    Nobody cares, nor needs to, except the ISP's and hosting outfits. If they provide a nice 6-4 proxy (or whichever way around it is), 99.999% of users can continue doing everything they normally do. I've done it on several of my machines in the past, been in the IPv6 net and browsed IPv6 websites to confirm it, and I never once had to touch my IPv4 config or do anything too fancy - certainly nothing that an ISP couldn't do transparently from their side of the net.

    It's an issue if you're hosting websites, because then your site needs to be accessible from the IPv6 addresses, but that's an issue for the hosters, most of the biggest of which are managed hosting outfits that can switch that on overnight if they haven't already - if they are allocating static IPv4 addresses, it's just a matter of translating and passing on IPv6 requests for a recognised IPv4 equivalent address to an internal IPv4 network. The root DNS servers are running IPv6 already, etc. There's absolutely nothing to stop this just working on most people's machines today and, no, not every machine needs to upgrade to IPv6 addressing in order to do that. In fact, if anything, suggesting that internal business networks suddenly become IPv6 addressable is the most stupid suggestion in the history of the world - most places just want an "4-6 convertor" in layman's terms and they'll tick along quite nicely on their internal 10, 176, and 192's without caring. Most places would run absolutely fine, the only place it matters is the extreme borders of the Internet.

    People don't run IPv6 not because of any of those reasons in the article but because a) they haven't heard of it, b) ISP's don't support it or won't do it for them automatically and c) a lot of OS's never come preconfigured to use IPv6 if it's available. Oh, and of course, d) nobody will care until their IP address allocation requests start getting turned down.

    It's not a big deal, it's not going to kill NAT's and 30 years from now there will STILL be local networks, internal VoIP systems, print-servers and whatever else using IPv4 addressing because it's a damn sight easier to leave a working config alone than to upgrade/replace every bit of hardware that touches IP. I can use IPv6 today. There's absolutely no need to until every link in the chain supports it and that's still YEARS away even with US government backing. And even then, IPv4 isn't going anywhere - it's just being superceded. It's like saying that all SSH servers have to switch to SSH2, or all wireless LAN's to 802.11n - it'll happen, and a little nudge won't hurt, but overall people just don't care enough for the majority of cases and their old stuff will still work on IPv4 in 20-30 years time if it's still operational.

    Tell me when even 5% of the websites that I use regularly are available over IPv6 and I'll look at setting up my VPS to do the same.

  5. This is really sad by Omnifarious · · Score: 4, Interesting

    And at every job I've worked in the past 5 years, management has completely had their head in the sand about it. :-( And none of the developers understood enough about IPv6 to push in an even faintly credible way. :-(

    I've been running IPv6 on my home network since about 2002. It's just not that hard. In fact, it's a lot easier than running IPv4. My IPv4 home network has a seriously contorted configuration because of the constrained addressing. When I wasn't even given a block of IPs but instead given X number of individual IP addresses it was even worse. My IPv6 network, OTOH, is configured quite simply and obviously.

    OTOH, even though I've had an IPv6 DNS server for ages, my stupid registrar STILL does not support IPv6 glue records. It's ridiculous. The standard has been stable enough to do something like that for at least 3-4 years now. I just want to strangle them.

    Last I checked, we only have about 200 days before ARIN stops being able to hand out new IPv4 addresses. It's around 7 months. After that, hosts start appearing on the Internet that only have IPv6 addresses. The connectivity breakage will be slow, subtle and inexorable. I bet it takes the tech industry at least another 5 or 6 years before they have to fix the problem or not have customers, and I bet it won't be fixed before then. So very very stupid.

  6. The solution is simple by Anonymous Coward · · Score: 5, Funny

    Just force all porn sites on the internet to be accessible from IPv6 addresses only.

  7. When is /. going to get an IPv6 address? by avij · · Score: 5, Insightful

    Serious question. I already have an IPv6 address, why doesn't Slashdot have one?

    --

    Follow your Euro bills at EBT
    1. Re:When is /. going to get an IPv6 address? by grumbel · · Score: 4, Informative

      Running IPv6 on a webserver means cutting of a chunk of your users with broken IPv6 setups. That is why you see a lot of http:://ipv6.google.com style sites, but hardly anybody having a AAAA record on their main domain.

    2. Re:When is /. going to get an IPv6 address? by gmueckl · · Score: 5, Insightful

      heise.de, a major German tech news site ran a test for precicely that reason about two weeks ago: they added an AAAA to heise.de in addition the normal AA record. Out of the thousands of visitors they have each day less than 10 were unable to reach that site in that configuration and wrote in about their problems and only one turned out to be unfixable because of a router misconfiguration somewhere else in the network. Since they advertised their test weeks ahead and asked users to report any problems they might experience during the test, the number of complaints they received is pretty low. So the argument of mixed AA/AAAA records not working properly of users is luckily losing its credibility, it seems.

      --
      http://www.moonlight3d.eu/
    3. Re:When is /. going to get an IPv6 address? by Abcd1234 · · Score: 4, Informative

      heise.de, a major German tech news site ran a test for precicely that reason about two weeks ago: they added an AAAA to heise.de in addition the normal AA record. Out of the thousands of visitors they have each day less than 10 were unable to reach that site in that configuration and wrote in about their problems and only one turned out to be unfixable because of a router misconfiguration somewhere else in the network.

      Counter-anecdote. I've been running v6 at home for about a year now with absolutely no problems (Hurricane Electric, seriously, you guys kick ass). But I decided I wanted to add a new private 802.11n router to my network, so I went and picked up a DIR-625, which is a lower-end, 2.4Ghz-only 802.11n-capable D-Link WAP.

      Now, I have a *slightly* unusual setup, in that I have a dedicated firewall (m0n0wall, you guys also kick ass), and I wanted this private, WPA2-secured AP to sit on my internal network and basically bridge the wireless pool directly to my network (no, in an enterprise scenario, I wouldn't advise this, but at home, with a properly secured WAP, I think it's safe). Furthermore, the firewall sends out v6 router advertisements, and I use simple v6 auto-configuration, so that any device connected to my LAN or existing 802.11g WAP automatically gets v6 connectivity (the latter is open and sits in its own DMZ). All of this works perfectly.

      So I plug in the WAP so that the LAN-side of the device is connected to my network (this bridging the networks), and then connect to it with my laptop... and my v6 connectivity is shot. Attempts to connect to any v6 hosts time out. Odd. So I check my routes, and lo and behold, inexplicably, I have a default v6 gateway route that corresponds to a *loopback* address. A little digging, and I discover this POS AP is sending out router advertisements, and advertising it's *loopback address* as the gateway address. Buh??

      So naturally I log into the AP and make sure v6 is disabled. Except it is. And it's *still sending out radv messages for it's loopback address*. The solution? I had to reflash the blasted thing and replace D-Link's firmware with dd-wrt.

      Now, this is an incredibly common piece of consumer-grade hardware. And their IPv6 implementation is, apparently, horribly broken. If I were a regular user, and, say, Google, advertised AAAA records for www.google.com, I would've been unable to hit their website. So can you really blame service providers for choosing to either a) not advertise AAAA records for their services, or b) only do so to whitelisted ISPs?

  8. crisis? opportunity! by F�an�ro · · Score: 4, Funny

    So, what are the best ways to profit from this crisis?

    Hoarding IP addresses is an obvious way, but that market seems pretty crowded already.

  9. Re:Right now? by 2.7182 · · Score: 4, Insightful

    Actually you might say we've been running out of them since the moment the first one was assigned...

  10. Re:The IPv6 nightmare begins with it's design... by TheRaven64 · · Score: 5, Interesting

    While that might have been a better design, smarter people than me decided it wasn't practical to approach it that way

    The problem with the approach is that it's very difficult to do in a way that doesn't break backwards compatibility, and if you're going to break compatibility then you may as well fix other things at the same time.

    One option, for example, might have been to get rid of the port field as a fixed length and make network, machine, and port number all combined in the same way that network and machine addresses are now. This would let you have, for example, 256 ports per machine while getting 256 times as many IP addresses, or doubling the available addresses at the cost of only having 32K ports per machine. Only the routers at the very last hope would need any modification for this to work. Since you only need a unique port for each app that connects to the Internet (you can reuse ports, as long as the remote end is different), 2^16 is a lot more than most machines need, and losing 3-4 bits from the port field would be a lot more convenient than NAT for a lot of home users.

    Of course, that would still not be a good long-term solution. After a little while, you'd end up with the port field being shortened so much that people would complain. You'd also have the problem that you actually use the variable-length port field, every machine on your local segment would need an upgraded network stack, and protocols that expected to be able to use high port numbers would have serious problems.

    The effort in deploying such a solution would only be slightly lower than the effort of deploying IPv6 and it would be a significantly inferior long-term fix.

    --
    I am TheRaven on Soylent News
  11. Re:NAT by betterunixthanunix · · Score: 4, Insightful

    One issue with NAT is the difficulty in running a server. I like being able to ssh to my home computer when I am at work; but behind NAT, that becomes more difficult (not impossible, just more difficult).

    --
    Palm trees and 8
  12. The leading cause of smug is no longer hybrids. by pak9rabid · · Score: 5, Funny

    It's the unnecessary use of IPv6 on private networks.

  13. Re:NAT by Ephemeriis · · Score: 5, Informative

    what limitations? my iphone is on NAT. what will IPV6 allow me to do on it that i can't do now

    The original idea of the Internet was a network of peers. Every address was globally routable, and any machine could host content.

    There are obvious security issues with this... Which is why we've got firewalls... But there wasn't really anything standing in the way of you hosting a game server, or website, or whatever on your home machine.

    NAT now stands in the way of you doing this. NAT has destroyed the whole "network of peers" thing.

    NAT is fine for simply consuming content. For your iPhone, for example, I doubt if it's an issue. And if you're just loading up random web pages at home, or connecting to WoW, or whatever - you'll be fine.

    But if you want to host a web page at home you're going to have to not just open the ports in your firewall, but forward the traffic from your outside IP to the inside IP. And if you want a second box to serve up a web page too? Too bad. You only get one port 80 per IP address, and you've only got one globally routable IP address.

    Again, if all you're doing is consuming, this isn't all that much of a problem. But then you aren't a peer, either.

    Where this starts to be more of an issue is with various devices that we now want to be able to communicate with remotely. It's becoming more and more common for people to want to remote into home computers. Or maybe program a DVR remotely. Or maybe some utility company wants to be able to check your electric/water meter remotely.

    Being able to host your own content is becoming more important, not less. And shoving everything behind NAT is becoming more of a problem, not less.

    --
    "Work is the curse of the drinking classes." -Oscar Wilde
  14. IPv4 is warmer and I'll never switch by SteeldrivingJon · · Score: 4, Funny

    I'll never switch to IPv6 with its cold, digital precision rendering of data. The lower resolution of IPv4 just provides a better rendition of old favorites like slashdot, to my eyes anyway. Sure, there's some noise, some clicks and pops, but nothing matches wikipedia seen through a nice tube monitor.

    --
    September 2011: Looking for Cocoa/iOS work in Boston area Cocoa Programmer Quincy, MA
  15. Re:The IPv6 nightmare begins with it's design... by AbbeyRoad · · Score: 4, Interesting

    Basically, this is what is going to happen:

    Some ISP somewhere with a /20 is going to project that in 6 months time they will be out of IPs,
    and it's going to be too expensive to buy another /20.

    So they are going to buy some Cisco-hardware-NAT-appliance and say to their customers: "look here,
    you are all on NAT from now on, if you want a real IP you pay extra."

    This NAT box will NAT a /20 to a /24 of temp addresses+ports. It will be plug-n-play and
    easier than setting up IPv6.

    99.9% of customers won't read the announcement and won't notice. They are all NATing through
    their DSL modems anyway, and this Cisco equipment will have hacks for all those special
    apps that need it to work behind double NATing.

    And no one will ever think of switching to IPv6

    -paul

  16. Re:The IPv6 nightmare begins with it's design... by r7 · · Score: 4, Informative

    The problem with the approach is that it's very difficult to do in a way that doesn't break backwards compatibility, and if you're going to break compatibility then you may as well fix other things at the same time.

    Didn't have to be that way. We could have had an IPv5 with all the addresses and none of the backwards compatibility issues if not for special interests in the IETF:

        http://bill.herrin.us/network/ipxl.html

    Gets my vote for IPv7...

  17. Re:Plan B by PitaBred · · Score: 5, Insightful

    Assuming you don't want to use VNC, VoIP, IM file transfers, bittorrent, access your home DVR remotely... sure, it's workable! It's as workable as a backup to the Internet as candles are a backup to electricity.

  18. Re:May are reporting doom scenarios by jd · · Score: 5, Insightful

    Y2K was only a minor issue BECAUSE every programmer and their cousin was busy fixing the bugs for several years. A few million man-hours and workarounds from hell later, you'd expect things to function fine. There were vendors that ignored the issue and it is those vendors that reported problems in 2000. It is THOSE examples you should look at, because THAT is what your world would have been had the rest of us not fixed things for you. Be grateful, wretch, that we bothered. Because next time we might not. And there is NOTHING you can do or say to change that.

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)