Slashdot Mirror


Free IPv4 Pool Now Down To Seven /8s

Zocalo writes "For those of you keeping score, ICANN just allocated another four /8 IPv4 blocks; 23/8 and 100/8 to ARIN, 5/8 and 37/8 to RIPE, leaving just seven /8s unassigned. In effect however, this means that there are now just two /8s available before the entire pool will be assigned due to an arrangement whereby the five Regional Internet Registries would each automatically receive one of the final five /8s once that threshold was met. The IPv4 Address Report counter at Potaroo.net is pending an update and still saying 96 days, but it's now starting to look doubtful that we're going to even make it to January."

460 comments

  1. Last IP! by statusbar · · Score: 1

    Last IP!!

    I Have 2 that I'm not using anymore, perhaps I should put them on ebay? ;-)

    --
    ipv6 is my vpn
    1. Re:Last IP! by Stregano · · Score: 1

      I got $5 for it.

      --
      The world is how you make it
    2. Re:Last IP! by Lennie · · Score: 0

      Sorry, but I think providers will only interrested in blocks of 256 (/24), they are the the smallest blocks that are routable.

      --
      New things are always on the horizon
    3. Re:Last IP! by zach_the_lizard · · Score: 1, Insightful

      Have you not yet upgraded to classless routing protocols? Now just might be the time to do so

      --
      SSC
    4. Re:Last IP! by Nethead · · Score: 3, Interesting

      I can announce and route down to a /32. It's up to my peers to accept that announcement. Some may and some may not. It depends upon politics, payment, router memory and BOFH whim.

      A /24 is commonly the longest network accepted for re-announcement, but that is not a hard rule.

      --
      -- I have a private email server in my basement.
    5. Re:Last IP! by Lennie · · Score: 1, Informative

      Sure I have, /22, /23 are used all over the place.

      But I doubt anyone would except your announcement if it was a /25.

      --
      New things are always on the horizon
    6. Re:Last IP! by Lennie · · Score: 1

      I know and I don't see it changing anytime soon.

      --
      New things are always on the horizon
    7. Re:Last IP! by tokennrg · · Score: 2, Interesting

      It will, ARIN will start handing out /28's. You think routers are choking on routes now, just wait. Edge networks that are multihomed will be ok, you can drop large swaths of announcements and still get plenty of diversity; in the core however....gonna suck for them. Or not...we'll see how it goes. https://www.arin.net/policy/nrpm.html#four10

    8. Re:Last IP! by LordLimecat · · Score: 2, Interesting

      er, I have several publicly routable /29 blocks at several clients. Care to clarify your statement? As posted, it is misleading at best.

    9. Re:Last IP! by Anonymous Coward · · Score: 0

      I don't think that is strictly true, even at the Autonomous System level the netmask used to produce CIDR prefixes can vary from 1 to 32 bits (in IPv4). This means that you can route things as small as a single IP address.

    10. Re:Last IP! by afidel · · Score: 1

      Last time I looked the smallest block for an ASN was also a /24 so I'm not sure why you would necessarily want your own block that was smaller. Of course IANA and RIPE may have changed policies since I last looked into it as well.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    11. Re:Last IP! by Keruo · · Score: 1

      Sure you can have address blocks down to /32, but are those assigned blocks or provider aggregated?
      If you change network provider, you cannot take the addresses with you if using provider aggregated publicly routed addresses.

      --
      There are no atheists when recovering from tape backup.
    12. Re:Last IP! by james_a_craig · · Score: 1

      It's a policy thing. A lot of routers are configured not to accept announcements for smaller than a /24 - too many of those routes eat a lot of RAM. The protocols all support all prefix lengths, but that's not to say that people will actually permit them on real networks - especially the big core routers.

    13. Re:Last IP! by Lennie · · Score: 1

      That is a special range, I don't think their will be a similair policy set up for all the IPv4 internet.

      I've seen a similair proposal from RIPE for the last /8. I don't think it got excepted.

      --
      New things are always on the horizon
    14. Re:Last IP! by Anonymous Coward · · Score: 0

      it doesn't help much when you peer's peers filter out your /32 annoucement.

    15. Re:Last IP! by Anonymous Coward · · Score: 1

      er, I have several publicly routable /29 blocks at several clients. Care to clarify your statement? As posted, it is misleading at best.

      Don't confuse announcing a /32 or a /29 to your ISP with your ISP announcing it to their upstream provider/peers. Just because a block is publicly routable does not mean that is is individually announced, in most cases it will be announced as part of an aggregate route for a larger scope. (And then split out within your ISP's network as needed)

      For the bulk of IP space, the ISP's don't generally announce anything smaller than a /24 externally. But the sub-blocks will be announced individually internally.
      There are some special situations where an ISP will announce a smaller block externally, but those situations are very limited special cases and require a lot of paper work between peers. If everybody tried to announce on a /32 level there's simply no way the internet's routing infrastructure could handle the table size.

      Keep in mind that when your ISP announces your route, all the other ISP's on the planet only need to know how to get the traffic to your ISP's edge. So what you usually have is you announce your /29 or /32 to the first upstream router at your ISP, which will most likely have a larger scope for your city/region which it then announces to the ISP's core and edge routers, which then announce it (again, often part of a larger scope) to their peers/upstream providers.
      The only time you really see an actual need for the ISP to announce a small block externally is when a customer is multi-homed and needs an IP block owned by a 3rd party (a backup ISP) to start coming in through them instead... usually in the event of a failover situation. For example, customer has two scopes, one from each ISP, which host web sites. Normally traffic for each block comes in through the correct ISP, but when one goes down they want the other to handle the traffic in the meantime. This requires special setup by BOTH ISP's as well as their peers/upstream providers since normally nobody will accept routes for blocks which are not owned by that company.

      So while technically speaking it's possible to announce a /32 publicly to the entire internet, in actual practice it would be a nightmare scenario if everybody tried, and in 99.9% of the situations there is not only no need to do so since it wastes router resources and bandwidth.

      But in reference to the OMG SKY FALLLINGZZZ story, relax. The only people who are going to feel a pinch when the address space 'runs out' are businesses who are trying to buy up large IP blocks. While we are close to running out of un-owned IP's, we are still a long way from running out of un-used addresses. And most large organizations are pretty wasteful right now with their IP's. For example, most ISP's allow more than one public IP address per home customer. This is a hangover from the internet explosion days when people started connecting more than one device at a time, but home routers weren't yet common. Since the huge explosion of wireless tech, it's getting more and more rare to see anybody operating without a router, and for most residential usage that's all you really need. (In almost every scenario in which NAT poses a problem, you're violating your TOS for a home connection; if you want details look for the language about 'running a server').
      In any event, most major ISP's are on track to be able to fully support ipv6 by the end of 2011, and the plans coincide nicely with a push to docsis 3.0**

      ** I have no idea what the DSL providers are planning on doing, they're going to have more trouble with v6 than the cable operators.

    16. Re:Last IP! by joss · · Score: 1

      Congratulations.

      I've been reading /. for a decade or so and this is the least comprehensible serious post that wasnt deliberately trying to be hard to understand that I can remember

      --
      http://rareformnewmedia.com/
    17. Re:Last IP! by Eivind+Eklund · · Score: 1

      From your low UID, you're too old to have kept track of how the net infrastructure evolved...

      A /28 means 28 bits routing - ie, a router has to look at the first 28 bits of the IP address to know where to send it. Presently, the main (core) routers of the net will only accept /24s and there's problems with router memory just due to too many /24s; with /28s, there will be potentially 4 bits (16x) more routes.

      --
      Doubting the existence of evolution is like doubting the existence of China: It just shows that you're uninformed.
  2. Soo... by Facegarden · · Score: 2, Interesting

    So, I keep hearing all this news about them running low... What happens when we run out?
    -Taylor

    --
    Worldwide Military budgets: $2100 billion. Worldwide Space Exploration budgets: $38 billion. Really, world? Really?
    1. Re:Soo... by tehniobium · · Score: 4, Informative
      --
      No kitty, this is my pot pie!
    2. Re:Soo... by keeboo · · Score: 3, Funny

      Dunno... The heat death of the internet?

    3. Re:Soo... by Konsalik · · Score: 4, Informative

      THE INTERWEBZ EXPLODZ!!! Ok no seriously, once ICANN allocates the final blocks the IPv4 space will be declared as "used up" but it is still up to the regional RIRs to *use* those IPs. ie if ICANN issues IPs they are not automatically used. Thus it will still be a while after that when they are really all used up. Even then we could maybe see a sharing of sub-blocks between regional RIRs (?) For example AfriNic will probably have quite a surplus if it receives another /8 range. Lastly there are (not so preferable) technologies available such as NAT to allow the internet to continue functioning as it did (more or less). In the end we will need to move to IPv6.

    4. Re:Soo... by glwtta · · Score: 4, Informative

      it is still up to the regional RIRs to *use* those IPs

      Regional Internet Registry.

      --
      sic transit gloria mundi
    5. Re:Soo... by Lennie · · Score: 1

      Why in the end we will have to move to IPv6 ? Why not now ?

      --
      New things are always on the horizon
    6. Re:Soo... by froggymana · · Score: 1

      They'll probably just keep nesting NATs for a while though, unfortunately...

      --
      "To prevent this day from getting any worse, I'll just read ERROR as GOOD THING" 1GJU8xLuDKDxEs4KLf8fAGyptoDsqvEsBT
    7. Re:Soo... by icebraining · · Score: 2, Insightful

      Some already are, others' aren't. It's not cheap, hence it'll be delayed, as always.

    8. Re:Soo... by Daniel+Phillips · · Score: 1

      Why in the end we will have to move to IPv6 ? Why not now ?

      Because nobody wants to be on the internet all by themselves.

      --
      Have you got your LWN subscription yet?
    9. Re:Soo... by mmontour · · Score: 4, Insightful

      "Why not now"? Because slack-ass websites like the one you're currently browsing still haven't bothered to flip on the IPv6 switch. I have IPv6 at home (pretty much plug-and-play; just enable it on the Apple Airport base station and all of the LAN machines pick up an address) and the only site I've found to go to is "ipv6.google.com". OK, there's also a dancing turtle GIF on kame.net, but that doesn't really count.

      Interestingly there is an "ipv6.slashdot.org" DNS entry. However it has no IPv6 "AAAA" record, only an IPv4 "A". Seriously guys, WTF? If a techie "News for Nerds" site can't be bothered to make itself available to IPv6 users then there's little hope for the rest of the web.

    10. Re:Soo... by sjames · · Score: 2, Insightful

      It ain't cheap if you're a major provider, but for the rest of us it is somewhere between dirt cheap to absolutely free.

      It WOULD have been cheap or free for the major providers as well had they not spent the last 10 years with their heads buried in the sand. They could have gotten v6 capable routers as part of their normal upgrade cycle.

    11. Re:Soo... by geekmux · · Score: 1

      So, I keep hearing all this news about them running low... What happens when we run out? -Taylor

      Good question. Not sure how relevant it is, since we've all been asking that same question for about the last decade worth of "oh noes, we're running out!" threats...

      Pretty sure that frozen dogshit running uphill moves faster than any IPv6 transition efforts to date...Maybe not merely threatening to run out and instead actually running out would finally get some movement.

    12. Re:Soo... by zach_the_lizard · · Score: 2, Informative

      It's not just providers. There're enterprises who have some quite expensive routers that don't do v6. Not all home gear does v6; my iPhone 3G doesn't, and I'm pretty sure some of the consoles I have don't do it either. My printer doesn't. There are solutions to this, but that's still more work.

      --
      SSC
    13. Re:Soo... by zach_the_lizard · · Score: 2, Interesting

      There's ipv6.facebook.com, and that's a pretty major site.

      --
      SSC
    14. Re:Soo... by Anonymous Coward · · Score: 0

      Somehow the "redundant" mod is fitting...

    15. Re:Soo... by Lennie · · Score: 1

      It's called dual stack, you have both IPv4 and IPv6. You have more internet then people which only have IPv4. :-)

      --
      New things are always on the horizon
    16. Re:Soo... by Lennie · · Score: 1
      --
      New things are always on the horizon
    17. Re:Soo... by Straterra · · Score: 4, Informative

      Any iOS device with 4.0 or later supports IPv6, including your iPhone.

    18. Re:Soo... by zach_the_lizard · · Score: 1

      It doesn't seem to like the 6to4 address that my router advertises, and it refuses to use it for some reason. All other hosts on my network that are ipv6 capable work just fine.

      --
      SSC
    19. Re:Soo... by hedwards · · Score: 2, Interesting

      I'm curious why Apple chose not to include support. I mean after all MS offers support for IPv6 since SP1. Is it a resources thing like Flash or is it something that Steve hates, like Flash.

    20. Re:Soo... by Nigel+Stepp · · Score: 2, Interesting

      Some big ipv6 domains. (This list was posted to the nanog mailing list last week or so):

      ipv6.cnn.com
      ipv6.comcast.net
      ipv6.google.com
      www.ipv6.cisco.com
      www.v6.facebook.com
      m.v6.facebook.com
      ipv6.t-mobile.com
      ipv6.weather.yahoo.com

      --
      4096R/EF7BAFA6 79E1 DF98 D09D 898F 9A11 F6F0 DDDC 23FA EF7B AFA6
    21. Re:Soo... by sjames · · Score: 2, Interesting

      Dual stack is the natural next step here. That means only things going off the LAN/VPN need support v6.

      The enterprises won't have to replace their expensive routers, they can set up 6rd servers and department based gateways (or just configure the gateways they already have. Like the providers, they could have had the full support for free with a tiny bit of foresight.

      New home router, $50, not all that expensive. Of go to OpenWRT.

      Your printer doesn't likely need to go to v6. I suspect you don't offer it as a public resource.

      You should update your phone's software. I understand iOS does support v6. I have no idea if the consoles do or do not support v6. If not, pester the vendor for a flash update.

    22. Re:Soo... by mikelieman · · Score: 1

      Those expensive routers already have IP addresses...

      --
      Technology -- No Place For Wimps! Grateful Dead and Jerry Garcia Chatroom -- http://www.wemissjerry.org
    23. Re:Soo... by Anonymous Coward · · Score: 0

      Not all home gear does v6; my iPhone 3G doesn't

      You sure about that? MacOS X had v6 years before Apple branched it to create iOS, so it would be a bit surprising if iPhones didn't have v6.

    24. Re:Soo... by afidel · · Score: 2

      I believe the problem was that some OS's preferred AAAA results even if they didn't have a working connected IPv6 address and hence the user got black holed from the site or majorly long delays for the connection to time out. According to Googles numbers ~.1% of internet users have broken dual stacks vs .26% have working IPv6 connections. There's also an average increase of ~150ms for a dual stacked host that connects to the IPv6 address. linky

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    25. Re:Soo... by Tubal-Cain · · Score: 1

      There are many IPv6 users on bittorrent ;-)

    26. Re:Soo... by Straterra · · Score: 1

      They DID include support. You need to have iOS 4.0 or newer for it. My iPod Touch works perfectly using RAs, but they may not work with DHCPv6. YMMV

    27. Re:Soo... by tagno25 · · Score: 1

      All Google services have IPv6 if you use HE's DNS.

    28. Re:Soo... by Hadlock · · Score: 1

      Are you talking about OS9? OSX has had v6 support since inception, IIRC

      --
      moox. for a new generation.
    29. Re:Soo... by Angostura · · Score: 1

      For almost the same reasons you're (probably) not driving an electric car.

    30. Re:Soo... by Yvanhoe · · Score: 1

      The providers are too busy fighting legal shallow fights revolving around imaginary properties and finding a way to monetize the end of net neutrality to waste precious time solving lesser technical problems.

      --
      The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
    31. Re:Soo... by hairyfeet · · Score: 1

      Several reasons: One, thanks to the threat of outsourcing new blood into IT fields have been in heavy decline, especially in the flyover states. what this means is lots of old graybeards that know IPV4 like the back of their hands but have little to no experience with IPV6. Talking to some of those old graybeards many are looking to get out of IT, especially when IPV6 comes out which means even more risk of outages and lack of manpower. Two, we are talking several trainloads of eWaste that is gonna be dumped when it comes to IPv6 as just about ALL standard home routers being sold even today, as well as most cable modems, are strictly IPv4. All that mess is gonna be a serious cost. Add in to that much of the aging infrastructure including some seriously expensive equipment is likewise gonna have to be chunked because it is "no longer supported" (translation: We made our money off you already, so buy more shit) in a dead economy with a cable/DSL companies that hate to spend a dime on anything other than CEO bonuses, and you got a serious trainwreck ahead.

      TL:DR? it is gonna be a clusterfuck of biblical proportions my friend. You are gonna have widespread outages thanks to problems that would have taken minutes to fix with IPv4 taking days or weeks due to lack of experience, lack of manpower qualified to do the work, cable/DSL companies that will hold off to the last second to keep from spending a dime, yeah it is gonna royally suck ass. Remember just because you have people on the coasts don't mean the flyover states are anywhere near ready, and most of those lines run right through here. Finally thanks to the giant moron who decided to make IPv6 non backwards compatible with IPv4 you are gonna need to run TWO networks until the last one is switched over, we equals double the headaches and twice as much to go wrong. I honestly don't know how they could have fucked up the transition any worse if they tried. It is gonna be a real fricking mess.

      --
      ACs don't waste your time replying, your posts are never seen by me.
    32. Re:Soo... by gbjbaanb · · Score: 2, Funny

      There's ipv6.facebook.com

      phew. I was beginning to get worried!

    33. Re:Soo... by gbjbaanb · · Score: 1

      "why not now?"

      if the world was forced to switch to IPv6 tomorrow, I'm sure slashdot and all the other websites out there could migrate their stuff in no time.

      Me, on the other hand, would have a great deal of trouble. Mainly because my home router doesn't support it and I can't find a decent (and cheap-ish) one to replace it that does.

    34. Re:Soo... by Adambomb · · Score: 1

      The regional governors now have direct control over their territories. Fear will keep the local systems in line.

      --
      Ice Cream has no bones.
    35. Re:Soo... by FoolishOwl · · Score: 1

      Which is pretty nice. Unfortunately, HE's DNS doesn't support DNSSEC yet.

    36. Re:Soo... by gmack · · Score: 1

      They may be blocking 6to4 addresses to avoid attempting to run connections over a likely unstable link. It is something Apple fans slam Linux for not doing

    37. Re:Soo... by Inda · · Score: 2, Interesting

      My XBOX360 connects to my home network through IPv6. The amusing thing is, I did absolutely fuck-all to make it connect this way.

      --
      This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
    38. Re:Soo... by petermgreen · · Score: 1

      But not significantly more, all the important stuff is available on V4 and will be for the forseeable future. Likewise I would expect most users to have access to those resources through some mechanism (likely some form of NAT).

      And your V6 connection is likely to be slower than your V4 one at communicating with a given resource, especially if your V6 connection comes in the form of a third party tunnel.

      So other than P2P (which the ISPs hate anyway) there is little incentive to implement V6.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    39. Re:Soo... by petermgreen · · Score: 1

      So, I keep hearing all this news about them running low... What happens when we run out?
      My bet is that ISPs force end lusers behind ISP level NAT to free up the IPs for more profitable customers.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    40. Re:Soo... by Bert64 · · Score: 1

      Most highend kit made in the last 10 years is capable of supporting v6 these days...

      Many printers support v6 (my samsung does), but it's unlikely your printer will need to route outside of your local network so you can still use ipv4 for that anyway.

      The iPhone supports v6 since ios version 4 (which can run on your 3g), technically earlier versions could have supported it too but apple chose to compile the kernel without support for it.

      All the consoles which support online play are upgradeable, i'm not sure if any of them support v6 now but it wouldn't be hard for that support to be added.

      The problem is a general lack of knowledge, you go into the IT department at any company and 9/10 times none of them will have any idea what ipv6 is.

      There will be no demand for v6 until there is content available only on v6, and noone will ever put anything exclusively on v6 until there are sufficient users to access it.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    41. Re:Soo... by Anonymous Coward · · Score: 0

      You can keep IPv4 for your internal LAN, and have an IPv6 enabled device to connect to the IPv6 Internet.
      You'll still need to have some ugly NAT to set up, but at least the IPv4 address space exhaustion problem is fixed and you can now have a whole bunch of static IPv6 addresses that you can forward individually to each of your IPv4 boxes running servers, so connection tracking is a lot easier too.

    42. Re:Soo... by Anonymous Coward · · Score: 0

      Yes, because running ipv6 at home on your wireless router is the same as implementing it throughout a company. And I've heard it so many times. I'm not a network admin and really could care less whether we use IPv4, IPv6, or , as long as it works reliably, but that argument is about as falacious and stupid as it gets. When random-app-x doesn't work because it was never updated to work with IPv6 (and you know there will be some particularly stupid app that doesn't even work with a gateway) and you NEEDZZZzzzzz it now you'll be the first to bitch too.

    43. Re:Soo... by bhagwad · · Score: 1

      It depresses me that the we can't even coordinate together on something as trivial as moving to IPv6 when IPv4 addresses are clearly running out. How the fuck can we ever coordinate when our planet is in REAL trouble like if an asteroid is going to hit or even climate change?

    44. Re:Soo... by astar · · Score: 1

      I imagine I am dual stack at home. RTSOL? So I am not quite sure what goes out ipv4 vs ipv6. But it seemed to work well enough. So I asked my ISP for a /16:-) Ended up a bit upstream from the actual ISP and they told me to check back at the start of 2011. That is real close in time now and I am interested in what they will be saying to me next month. But my ISP is fully tricked out for ipv6 but they do not spend time doing the testing they would need to do if a lot of people were depending on ipv6.

    45. Re:Soo... by omnichad · · Score: 1

      ipv6.slashdot.org means nothing. anyfreakingsubdomainimaginable.slashdot.com also has an A entry. It's just set up with wildcard DNS.

    46. Re:Soo... by omnichad · · Score: 1

      And that would prompt a class action lawsuit pretty immediately. It's not the "Internet" if you're behind a NAT. You can reach the web, but it's NOT an Internet connection.

    47. Re:Soo... by hedwards · · Score: 1

      Since iOS 4.0, that's several years after MS made it available for Win XP. It's something that should've been in iOS 1.0 or whatever the first release was. Which is why I inquired about that.

    48. Re:Soo... by sac13 · · Score: 1

      So, I keep hearing all this news about them running low... What happens when we run out? -Taylor

      NAT

    49. Re:Soo... by Tynin · · Score: 1

      So I asked my ISP for a /16

      If I was your ISP I wouldn't have told you to wait till next year. I would have been gracious enough to give you the entire 192.168.0.0/16 range. You know what, since I'm such a nice guy, I'll let you take it. This one is on me. :)

    50. Re:Soo... by Anonymous Coward · · Score: 0

      And how many people care about having an "internet connection"? Most people who can reach just "the web" are just fine and include most of the popultation

    51. Re:Soo... by Abcd1234 · · Score: 1

      Not to mention ipv6.netflix.com.

      Oh, yeah, and that little site known as YouTube went live with IPv6 earlier this year (resulting in a noticeable increase in v6 traffic). If the DNS server you use is whitelisted by Google (Hurricane Electric's DNS, for example), www.youtube.com resolves to 2001:4860:8011::be.

    52. Re:Soo... by Dr.Dubious+DDQ · · Score: 1
      "[Or] go to OpenWRT"

      There are also variants of the "Tomato" firmware with IPv6 support as well, which some people might find simpler to deal with.

    53. Re:Soo... by Abcd1234 · · Score: 1

      Yup. I was pleasantly surprised when my iTouch connected to my wireless router, picked up the radv advertisement from my firewall, and proceeded to autoconfigure itself. 'course, SBSettings ends up looking a little silly (their windows isn't properly sized to properly display an entire v6 address...).

    54. Re:Soo... by astar · · Score: 1

      hahha, maybe *that* was what they mean to offer when I call next year. :-) But these are the good guys, been putting fibre to the home for quite a while, hmm, five years? Talking to brain-dead third party support people who want to know about my internet connection and I tell them fibre and they immediately want to claim I have some brand-name thingy like FIOS? from a big operator, maybe franchised through the local ISP, and it cannot be the locals.

    55. Re:Soo... by Midnight+Thunder · · Score: 1

      Last time I heard /. had not moved to supporting IPv6 because of limitations in Slashcode. When I dug it turned out some of the Perl libraries used by Slashcode were not IPv6 ready and CPAN seems to dragging its feet when it comes to ensuring all its networking libraries are IPv6 ready - there certainly doesn't seem to be any concerted development effort to sort out these issues last I looked.

      --
      Jumpstart the tartan drive.
    56. Re:Soo... by Midnight+Thunder · · Score: 1

      So, I keep hearing all this news about them running low... What happens when we run out?
      -Taylor

      NAT

      NAT only helps client computers. It does nothing to help bring new servers online, that need a unique IP address.

      --
      Jumpstart the tartan drive.
    57. Re:Soo... by sac13 · · Score: 1

      So, I keep hearing all this news about them running low... What happens when we run out? -Taylor

      NAT

      NAT only helps client computers. It does nothing to help bring new servers online, that need a unique IP address.

      Correct... if they need a unique IP address. But, you can route based on ports, protocols, client address, etc. So, NAT with more complicated routing can be used to get new servers online.

      I'd still rather see ipv6 rolled out, though...

    58. Re:Soo... by petermgreen · · Score: 1

      As long as they give a public IP to anyone who bitches too much and/or offer a public IP at a small (initially) extra charge I think a lawsuit is unlikely.

      And on what grounds would such a suit be brought anyway? is there any legal definition of internet connection? do the contracts promise a public IP?

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    59. Re:Soo... by Anonymous Coward · · Score: 1

      Actually it is www.v6.facebook.com. Not sure why they didn't follow the "standard" ipv6 entry.

    60. Re:Soo... by omnichad · · Score: 1

      Well...for it to be called "inter" net, interconnection would have to be possible. I'd say that's a fundamental premise. It's like the difference between the telephone and television. The television is a consumption device, but the telephone is an interconnection device. Without an IP, you lose that.

    61. Re:Soo... by dargaud · · Score: 1

      Any iOS device with 4.0 or later supports IPv6, including your iPhone.

      Well, I just tried to reach some ipv6 addresses without success, evem http://1/. So my Ubuntu 10.10 + Firefox doesn't support it. My adsl router / access provider doesn't support it. And what about my website, how can I check if it supports ipv6 ? To my defense I just configured its https access this morning, after 14 years...

      --
      Non-Linux Penguins ?
    62. Re:Soo... by Facegarden · · Score: 1

      It depresses me that the we can't even coordinate together on something as trivial as moving to IPv6 when IPv4 addresses are clearly running out. How the fuck can we ever coordinate when our planet is in REAL trouble like if an asteroid is going to hit or even climate change?

      Or like, if there was a giant oil leak in the gulf?

      --
      Worldwide Military budgets: $2100 billion. Worldwide Space Exploration budgets: $38 billion. Really, world? Really?
    63. Re:Soo... by GNious · · Score: 1

      Please clarify: Can all iPhones run 4.0+ firmware?
      I am asking, since I have here a iPod (not phone), that cannot run 4.0 and for which some software reports that a firmware upgrade is required.

    64. Re:Soo... by Facegarden · · Score: 1

      Well...for it to be called "inter" net, interconnection would have to be possible. I'd say that's a fundamental premise. It's like the difference between the telephone and television. The television is a consumption device, but the telephone is an interconnection device. Without an IP, you lose that.

      I'm pretty sure you'd lose that argument. With NAT people could still access the web, so >=98% of the users wouldn't give a shit. As long as the ISP offers a real IP to anyone that requests one, I don't think a judge would even hear a lawsuit. The number of people that asked for a real IP would be so low, they would likely not even need to charge extra. If 98% of their customers are fine with NAT, it frees up a lot of IPs for the rest of the people.

      Of course, that's a shitty solution and i think it's dumb as hell that they didn't move to IPv6 5 years ago, but my point was just that a judge won't see your principles, they'd see the consequences of what was happening. If an ISP used NAT but gave a real IP to anyone that asked, the consequences would be pretty low, I think.

      Of course, I'm not actually sure what the effects of ISP-wide NAT really are, but I know that if they can get the "web" working and people can e-mail, twitter, and facebook, they're not going to complain. If the users that do complain can get a free real IP address, it seems like a fair solution (again, to a problem that should have been avoided anyway, but thats another issue).
      -Taylor

      --
      Worldwide Military budgets: $2100 billion. Worldwide Space Exploration budgets: $38 billion. Really, world? Really?
    65. Re:Soo... by omnichad · · Score: 1

      This is equivalent to telephone companies going back to party lines. True, you'd have a smaller number of unhappy people with NAT'ed web. But I think that the number of P2P users would have some part in it. Then you also have the fact that bad users are usually banned from web sites based on IP address. If that practice doesn't change, then you'd have one bad neighbor ruining it for the entire neighborhood.

    66. Re:Soo... by Facegarden · · Score: 1

      This is equivalent to telephone companies going back to party lines. True, you'd have a smaller number of unhappy people with NAT'ed web. But I think that the number of P2P users would have some part in it. Then you also have the fact that bad users are usually banned from web sites based on IP address. If that practice doesn't change, then you'd have one bad neighbor ruining it for the entire neighborhood.

      Yeah, there'd be peripheral crap and like I said it's a shitty solution, but I don't think it would cause a large uproar.

      Plus, the sites people get banned from are usually forums and interest-specific sites, so a neighbor might not even notice if they are banned from a forum they don't visit. I'm sure it would still happen, but it wouldn't be extremely common. And people would stop IP-banning if NAT was that common.
      -Taylor

      --
      Worldwide Military budgets: $2100 billion. Worldwide Space Exploration budgets: $38 billion. Really, world? Really?
    67. Re:Soo... by shnull · · Score: 0

      oh noez, actual work for the it-sector, who would want that ...

      --
      beware he who denies you access to information for in his mind, he already deems himself to be your master (SMAC-ish)
    68. Re:Soo... by Anonymous Coward · · Score: 0

      Any iOS device with 4.0 or later supports IPv6, including your iPhone.

      Oh fuck.... it always boils down to iCrap. IT does not give a shit about your fashion accessory.

    69. Re:Soo... by l0c0.l00n_EBin · · Score: 1

      So, I keep hearing all this news about them running low... What happens when we run out? -Taylor

      IPV6 "crash courses" become an "official" FaceBook app? :) L0c0

    70. Re:Soo... by mintrepublic · · Score: 1

      Don't forget http://www.ipv6porn.co.nz/ which only serves up pr0n to an IPv6 connection.

  3. Oh noes! by Anonymous Coward · · Score: 0

    How will I ever be able to use my twittering armchair fart detector?

    1. Re:Oh noes! by by+(1706743) · · Score: 4, Funny

      How will I ever be able to use my twittering armchair fart detector?

      Well, you'll have to choose between a NAT twittering armchair fart detector and an IPv6 twittering armchair fart detector!

    2. Re:Oh noes! by n6kuy · · Score: 1

      Don't be such a NATing nabob of negativity.

      --
      If you disagree with me on social issues, then it's pretty clear that you are a narrow-minded bigot.
  4. The most surprising turn of events by Arancaytar · · Score: 3, Insightful

    ... since the unexpected end of the century in '99.

    (What is actually surprising is that the internet still hasn't widely adopted IP6, and ISPs are now turning to ludicrous measures - NAT - to keep avoiding what makes sense.)

    1. Re:The most surprising turn of events by bbn · · Score: 1

      ... since the unexpected end of the century in '99.

      Quite unexpected considering centuries start at year 1 and end in year 100.

    2. Re:The most surprising turn of events by onefriedrice · · Score: 1

      (What is actually surprising is that the internet still hasn't widely adopted IP6, and ISPs are now turning to ludicrous measures - NAT - to keep avoiding what makes sense.)

      Dare I ask... why, pray tell, do you consider NAT to be a "ludicrous" measure? It seems like a pretty sturdy bridge to me. IPv6's slow adoption isn't really surprising to me; it has required code modifications across the board on numerous levels. It has been more of an undertaking than most people realize. On the other hand, apart from a little NAT-trickery to allow hole-punching (which, admittedly, should be have been put in a standard), the large majority of legacy apps continue to work under NAT like they did before. Not so with IPv6, which has been a lot more work to implement. Fortunately, most of that work is behind us, and IPv6 will "soon" be commonplace.

      --
      This author takes full ownership and responsibility for the unpopular opinions outlined above.
    3. Re:The most surprising turn of events by Formalin · · Score: 1

      NAT is quite the abortion, and is only prolonging the inevitable.

      Without it, we'd have switched over long ago.

    4. Re:The most surprising turn of events by mangamuscle · · Score: 1

      you forgot year zero (or are you born having 1 year already under your belt?)

    5. Re:The most surprising turn of events by Volante3192 · · Score: 2

      There is no year zero.

    6. Re:The most surprising turn of events by timeOday · · Score: 5, Insightful

      And the best part for ISPs is, NAT turns the Internet from its inherent peer-to-peer nature into a client/server architecture where all home users can be relegated to "content consumers" under cover of IP4 address shortages. Score!

    7. Re:The most surprising turn of events by gnasher719 · · Score: 2

      you forgot year zero (or are you born having 1 year already under your belt?)

      He was talking about years and centuries, not about age.
      We started counting centuries with the first century (year 1 to 100), then the second century (year 101 to 200) and so on. The twentieth century was from 1901 to 2000. The 21st century is 2001 to 2100, the 3rd millenium (see how we count millenia starting with 1 as well) is 2001 to 3000. The same rules are used for years, centuries, millenia. They all start with 1.

    8. Re:The most surprising turn of events by bhcompy · · Score: 1

      Gregorian calendar has no year zero. Centuries and millennia end on a zero and start on a 1

    9. Re:The most surprising turn of events by Your.Master · · Score: 1

      That would only work if our calendar system was 0-indexed. It isn't.

      Also noteworthy: the traditional 12 hour clock ranges from 1 through 12 and 59/60 instead of 0 through 11 59/60.

      You can mentally warp your mind into seeing "12" as an alternative symbol for "0". In the same way, you can say that a century ends at any year you please. But if we're counting years from the start of the Gregorian calendar, then sadly we're not done 100 years until year 101.

    10. Re:The most surprising turn of events by Lennie · · Score: 1

      I think it is 10% of the provider networks, but it's higher when you are talking about transit providers (what some people call Tier 1 or Tier 2).

      --
      New things are always on the horizon
    11. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      Depends on what country you are born in, several Asian countries have 100 day celebrations for the children that have reach that plateau. They consider that 100 days and the 9 months in the womb make the child 1 year old at that point.

    12. Re:The most surprising turn of events by FeepingCreature · · Score: 1

      Let me put it like this. If a convention takes mental warping to persist, and does not have [i]serious[/i] force behind it, then it is either going to die out within one generation or otherwise it is already dead and some people just don't want to acknowledge its demise.

    13. Re:The most surprising turn of events by Anonymous Coward · · Score: 1

      That depends - would you consider "church people didn't think through the year 0 issue, so centuries don't follow sensible limits" as a worse bug than "the first century had 99 years"?
      I'm a fan of ignoring the contradiction in saying the first century was a year short, just for the convenience of the 20th century actually being [1900,1999] - which gives a perfect overlap with languages that prefer forms like "the nineteen hundreds", just as a bonus.

    14. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      A century is a hundred years, so the years from 1900 to 1999 (inclusive) could also be counted as a century.
      Of course, that means the first century includes year -1 ... or that the first and second century have a year of overlap. Oh well, that's still less annoying.

    15. Re:The most surprising turn of events by sjames · · Score: 5, Insightful

      Lets say your ISP assigns you 10.0.32.128. Now, kindly tell me how you plan to connect to your home PC from work.

    16. Re:The most surprising turn of events by Lennie · · Score: 2, Insightful

      IPv4 will last us about one and half year. IPv4 will run out next year, the regional registries (RIR's) will run out a number of months later and if you are lucky your provider still has some new IPv4 addresses left for his new customers.

      Then your provider can only get new addresses for money from other providers/organisations which want to sell them for money.

      The following will happen, first for new customers and eventually for all existing customers.

      When we get to a point where your access-provider does not have enough IPv4-addresses you will just get a private IPv4-address through DHCP instead of your public IPv4-address. Probably in the 10.0.0.0/8 range.

      You will be stuck behind an IPv4 NAT which sits in the provider network, not at your home. That NAT will be congested, it will be slow.

      This means probably no online games and no P2P on IPv4 for you (and other things will break too).

      You will however get a complimentary IPv6-block of a size which is atleast a /64, which is has more addresses then the whole IPv4-range.

      At the time when this happends, your OS will have IPv6-support and IPv6 will probably be enabled on most of the websites, mailservers and what not. You might need to replace your modem or router though. Maybe you will get a new one from your provider, maybe not, depends on your arraignment.

      (kind of useful version of IPv6 in Windows since XP, useful in Windows Vista/7, Mac OS X had the last update recently to fix the last issue, Linux has no problems, even things like Network Manager supports it)

      A real IPv4-address will be a privilege (read: you pay extra).

      Or when you do what to play games, you might need to get a VPN to somewhere else and pay extra for that service/IP-address.

      So when you are stuck behind a IPv4 NAT, websites which don't add IPv6 will also be slow.

      When we really run out, I think you all just want to use IPv6 like it was intended.

      --
      New things are always on the horizon
    17. Re:The most surprising turn of events by DeadBeef · · Score: 5, Insightful

      What will make it even more fun is if you have two branch offices of the same company connected to the different ISPs getting 172.16.32.66 and 10.0.65.88, how do you set up a VPN between them?

      --
      I am a lawyer and this constitutes legal advice and I shall indemnify you against any losses arising from taking it.
    18. Re:The most surprising turn of events by hardburn · · Score: 1

      It seems like a pretty sturdy bridge to me.

      Then frankly, you have simple networking needs. Once things go beyond basic web and email access, NAT ends up being a pain for either the end user or the net code developer, or sometimes both.

      --
      Not a typewriter
    19. Re:The most surprising turn of events by Belial6 · · Score: 1

      This is no year zero, nor is there a year 1, 2, 3, or any of the first few hundred. Year numbers are an arbitrary system for counting time that we have all just agreed to use. That being the case, we as a culture have also decided that decades start a year x0, centuries start at x00, and millenniums start at x000. A bunch of pseudo-intellectuals think they are being smart by trying to use logic gymnastics to 'prove' that the millennium starts at year x001. The problem is that they only think the problem half through and then jump to conclusions. Heck, not only is the date an arbitrary value, but there have been several times through history, where chunks of the counting were just thrown out.

      So, since dates are just a pragmatic system, and not a logical one, the smart thing to do is to bunch years together as a group when they start with the same numbers.

    20. Re:The most surprising turn of events by Obfuscant · · Score: 1
      And the best part for ISPs is, NAT turns the Internet from its inherent peer-to-peer nature into a client/server architecture where all home users can be relegated to "content consumers" under cover of IP4 address shortages. Score!

      Well, I'd hazard to guess that 95% of the home users ARE only clients. Maybe 99%.

      A lot of the rest of us get along pretty well with putting our servers behind a router/NAT that lets us define which ports get forwarded to which systems behind the router, thus adding "firewall" as a feature.

      The only drawback is when you are assigned an address via DHCP, and that's not a complete kill. I've got several systems around the planet that are behind a NAT/firewall and it is only an inconvenience, not a fatal problem.

    21. Re:The most surprising turn of events by Jeremi · · Score: 1

      This is no year zero, nor is there a year 1, 2, 3, or any of the first few hundred.

      At the risk of exposing myself as a pseudo-intellectual... if there is no year zero, then how should I refer to the year that was in progress 2010 years before today?

      --


      I don't care if it's 90,000 hectares. That lake was not my doing.
    22. Re:The most surprising turn of events by Lennie · · Score: 1

      You use IPv6 (only the VPN-concentrators/boxes and your router need to support it).

      IPv6 is what you get together with your private IPv4-address (or you pay extra for a 'real' IPv4 address).

      --
      New things are always on the horizon
    23. Re:The most surprising turn of events by bbn · · Score: 2, Informative

      That being the case, we as a culture have also decided that decades start a year x0, centuries start at x00, and millenniums start at x000.

      No we have not. You will have a very hard time relating to historic dates if you think so. Ever wondered why we are currently in the 21st century and not the 20th? Because the first century was not the number 0 century, as you would have it. The same way, the first year was not the number 0 year, the first decade was not the number 0 decade and the first millenia was not the number 0 millenia.

      Just because uneducated people have a hard time grasping this, does not make it less so. If you start calling this the 20th century just because the year is 20xx you will not be understood correctly.

      That said, because the general public seems to be quite uneducated about our calendar system, the mainstream media must be careful when the exact years of the boundaries of decades, centuries and millenias is important. Books for professionals can assume the reader knows the calendar.

    24. Re:The most surprising turn of events by bbn · · Score: 1

      This is no year zero, nor is there a year 1, 2, 3, or any of the first few hundred.

      At the risk of exposing myself as a pseudo-intellectual... if there is no year zero, then how should I refer to the year that was in progress 2010 years before today?

      Year 1 BC.

    25. Re:The most surprising turn of events by TooMuchToDo · · Score: 1

      You have them both tunnel to a VPN concentrator with a public IPv4 address? Or, you lease some fiber or copper and do Layer3 yourself.

    26. Re:The most surprising turn of events by hedwards · · Score: 1

      A lot of apps don't work very well if at all under NAT. And it just gets worse when you consider all the PAT solutions that are being passed off as NAT. Some protocols are robust enough to handle it, but any application which depends upon a 1:1 mapping is going to have issues with it.

      More than that a lot of applications really want to have the same IP or at least some predictability in it, and with NAT, it can be a real challenge to identify the correct IP and get there and back traversing through several levels of NATs.

    27. Re:The most surprising turn of events by bbn · · Score: 4, Informative

      Configure your home router to pass the port for whatever service you want to access from work to the system that can deal with it at home. Connect to that address using that port.

      This is where the trouble begins. You can do this today because it is _your_ router doing the NAT. With no more IPv4 available, you will be sharing your IPv4 with your neighbours. This means carrier NAT. How do you program your ISPs router? You don't.

    28. Re:The most surprising turn of events by Nigel+Stepp · · Score: 4, Insightful

      A lot of the rest of us get along pretty well with putting our servers behind a router/NAT that lets us define which ports get forwarded to which systems behind the router, thus adding "firewall" as a feature.

      Thing is, that's only when you have control over the NAT device. If ISPs move to multiple levels of NAT, as some people suggest, then you no longer have access to a thing on which you can forward ports. You're stuck being a content consumer.

      --
      4096R/EF7BAFA6 79E1 DF98 D09D 898F 9A11 F6F0 DDDC 23FA EF7B AFA6
    29. Re:The most surprising turn of events by Belial6 · · Score: 1

      You are mistaken. It is you who show a lack of education. Specifically in the use of language. We are in the 21st century in the same way that I am in my 40th year. That being said, I am 39 years old. See how that works? When you are 39, you have started your 40th year? That means that I am about to enter my 4th decade, and at that time I will be entering my 5th decade.

      It isn't a problem with the general public being uneducated about our calendar system, it is a problem with pseudo-intellectual halfway thinking through a subject, making a mistake, thinking they have found an "ah-ha" idea, and then refusing to re-evaluate when it is pointed out that they are wrong.

      Beyond your lack of education on how the language you are using works, you seem to think that there is something concrete about what dates are what. As stated earlier, our dates are simply an arbitrary way for a bunch of people to agree on time. So, even if your example was right, it would still be as irrelevant as Old English spelling rules in modern day America.

    30. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      Via a non-NAT intermediary. Applications like LogMeIn do not require any firewall configuration this way.

    31. Re:The most surprising turn of events by mikelieman · · Score: 1

      Lets say your ISP assigns you 10.0.32.128. Now, kindly tell me how you plan to connect to your home PC from work.

      You pay a premium for a static, routable IP address?

      --
      Technology -- No Place For Wimps! Grateful Dead and Jerry Garcia Chatroom -- http://www.wemissjerry.org
    32. Re:The most surprising turn of events by HeronBlademaster · · Score: 3, Insightful

      ISPs will just charge extra for a "real" IP address. (Basically the same thing they do now if you want more than however many come with your base service.)

    33. Re:The most surprising turn of events by sjames · · Score: 2, Insightful

      That only works because your home router does the Nat using a public IP address your ISP assigns.

      That was not the question. I said your ISP assigns you a NATed IP (so you are now doing double NAT at least). You can configure the port forwarding on YOUR NAT device, but I'll bet your ISP won't let you configure THEIR device.

      I am familiar with using ssh to tunnel as well. Not a problem for some (including me), but not everyone has an ssh account on a server with a public IP at work.

      Given all that, it's MUCH easier to just go with v6 and call it good. Fortunately, Comcast has both 6to4 and 6rd servers for their customers. Before that, I was routing v6 through the Netherlands.

    34. Re:The most surprising turn of events by Romancer · · Score: 1

      You missed the point; we all have to agree on dates to communicate so you should get your facts straight.

      You said that:

      That being the case, we as a culture have also decided that decades start a year x0, centuries start at x00, and millenniums start at x000.

      This is factually incorrect as centuries END in that format. The last year in x00 is the end of that century, not the beginning.

      Then you state:

      Beyond your lack of education on how the language you are using works, you seem to think that there is something concrete about what dates are what. As stated earlier, our dates are simply an arbitrary way for a bunch of people to agree on time.

      This is incorrect in itself because it claims
      A: setting dates is an arbitrary way for a bunch of people to agree on time, against the claim B: that there is not "something concrete about what dates are what". I would ask you to point to your sources for that claim and find an example of people not using their calendar and matching it with different calendars from other cultures and having them all match up to form a cohesive timeline with whatever reference each culture has set. This is accepted as standard and there is no arbitrary old or new method of referring to dates just what calendar you choose to reference. Please show authoritative examples if you disagree. Just because uneducated people think something doesn't mean that they change scientific fact or change the accepted method of referencing or calculating things by people in the field who have the education to make claims about the proper way to do something in that field.

      To address your original claim: please reference this site to understand the year 1 issue:
      http://www.vpcalendar.net/Millenniums.html

      If you have another viewpoint please cite examples.

      You don't want to be, as you say:
      a pseudo-intellectual halfway thinking through a subject, making a mistake, thinking they have found an "ah-ha" idea, and then refusing to re-evaluate when it is pointed out that they are wrong.

      --


      ) Human Kind Vs Human Creation
      ) It'd be interesting to see how many humans would survive to serve us.
    35. Re:The most surprising turn of events by sjames · · Score: 2, Insightful

      In other words, the NAT won't cut it, yes.

    36. Re:The most surprising turn of events by Zero__Kelvin · · Score: 1
      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    37. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      So, even though your home network is in the 10.0.0.0 net, your visible presence on the net is completely routable.

      In the case above, if your home net is 10.0.0.0, then your ISP gave you a 192.168.x.x IP on your WAN port.

      That is not routable, and that is what the problem being discussed is all about.

    38. Re:The most surprising turn of events by XO · · Score: 1

      Which is why super huge ISPs like Comcast are going way out of their way (finally) to enable IPv6, and in Comcast's case, they've even released GPL router upgrades. Sure.

      --
      "Champagne for my real friends - and real pain for my sham friends!" http://ericblade.postalboard.com/
    39. Re:The most surprising turn of events by shentino · · Score: 1

      Simple, you pay big bucks for a static IP.

      v4 isn't going away until the internet industry has milked it for all it's worth.

      v4 as a hoarded asset will prove to be quite lucrative.

    40. Re:The most surprising turn of events by XO · · Score: 1

      This is slashdot. I'm certain there are plenty of people here capable of reprogramming their ISPs routers, with out the ISP even noticing.

      --
      "Champagne for my real friends - and real pain for my sham friends!" http://ericblade.postalboard.com/
    41. Re:The most surprising turn of events by DarkOx · · Score: 1

      Well one answer is to start thinking of the port as part of the address. I have given this some thought. The major suckage of this scheme will be that there are no longer "well known" ports.

      If you use carrier grade NAT you might as well assign all the addresses via DHCP.

      You define some new DHCP options that passes a group of ports to the client. These are the ports the NAT engine will be forwarding to that host.

      The DHCP client will have to be configured to know about the services the machine will host. You would know that your ISP was going to give you 10 ports and so you would just configure the client with a map that says my first port will be http, my second port will be smtp, my third ftp and so on. The client sends this information back in the DHCP inform. The DHCP server will then create DNS srv records with the service name and the port number as the data.

      Once the DHCP negotiate is finished the operating system on the client restarts the services binding them to the correct ports received in the DHCP options.

      Browsers and new apps will need to be updated to check the srv records for the ports to append to the url. Users will have to learn to enter urls like http://example.com:7634/ into legacy applications.

      It could work for the most part though, without breaking legacy networks and applications. Kludgey sure, but better than nothing.

      --
      Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
    42. Re:The most surprising turn of events by aXis100 · · Score: 1

      Easy, use a hole-punching mediation service on a third host. Same way skype works/hamatchi works.

    43. Re:The most surprising turn of events by Man+Eating+Duck · · Score: 1

      The twentieth century was from 1901 to 2000. The 21st century is 2001 to 2100, the 3rd millenium (see how we count millenia starting with 1 as well) is 2001 to 3000. The same rules are used for years, centuries, millenia. They all start with 1.

      So, according to you the 1900s != the twentieth century? 1900 is not part of it? I suppose that by "1901 to 2000" you mean 1900-01-01 up to and including 2000-12-31, or do your centuries only contain 99 years? Would you seriously claim that the eighties lasted until the end of 1990? If not, does decades not match up with centuries?

      The modern calendar is just a convention most people agree to, as is the understanding of when a decade, century and millenium starts. That is, except for a few... OK, I'll restrict myself to use the term "extreme pedants", and that's generous, as pedants are usually technically right. You choose not to follow this convention, and make your own definition instead. That's up to you, but you understand what's really going on when "everyone else is wrong", don't you?

      --
      Are you a grammar Nazi? I'm trying to improve my English; please correct my errors! :)
    44. Re:The most surprising turn of events by Belial6 · · Score: 0

      Every one of the arguments that the new millennium starts in x001 are based on the idea that there was no year 0, and that 1000 years after the mistakenly labeled year 1 would be 1001. This is making the claim that because someone made a mistake early on, that the rest of humanity must also make the same mistake. First, the 1 was supposed to be the birth of Christ. As in the magical being who is both God and not God. Even if you go for the idea that Invisible Sky Man is real, the date of 1 is highly contested, and generally believed to be wrong. While at the time and place that the year 1 was established, the number 0 was not in wide use, the calander has been modified many times since then. The fact that there is a psudo-intellectual circle jerk that insists that the inability of early church folk in the 500s to properly count is somehow gospel for the rest of the world doesn't make it so. You want a link showing the millinium starting in 2000? Here you go.

      Again. Look at every source you can find that claims the millinuim starts at year x001. Every single one of them claims it is because there was no zero. They flat out admit that it is a counting error. Here in this millinuim, we know that between the numbers 1 and -1, there is this really cool number called 0. All of your sources basically state that 1-1=-1.

      So, we are left with a few possiblities:
      1) The start is an arbitrarily chosen date, and since the vast majority of people who use the Gregorian calendar agree that millenniums start in x000, that is when they start.
      2) The fact that there is no year 0 is an error, and thus claiming the new millennium starts in x001 years, is thus in error also.
      3) There was a ripple in the space time continuum that swallowed the year between 1 and -1.
      4) A minority of people using the fallacy of 'Argument from Authority' to convince a bunch of people who want to sound smart that the inability for people hundreds of years ago to count properly makes the majority of modern humans wrong when they use the obvious and logical marking points for a date system that only has meaning when people agree on it's values.
      5) The new millennium DOES start in x001 because God said so!

      Let me guess, your one of those guys that boycotted the "millennium Parties" on New Years 2000, and rented a huge party hall for New Years 2001 because you figured everyone would figure out how stupid they were in 2000.

    45. Re:The most surprising turn of events by blueg3 · · Score: 1

      Actually, the 20th century is January 1, 1901 to December 31, 2000. Likewise, the 19th century is 1801 to 1900.

      The decades, frustratingly, are different. The 80s is 1980-1989.

      See for examples:
      http://en.wikipedia.org/wiki/20th_century
      http://en.wikipedia.org/wiki/1980s

    46. Re:The most surprising turn of events by blueg3 · · Score: 1

      Except that the traditional 12-hour clock goes from 12:00 to 11:59. Either 1 through 12 and 59/60 or 0 through 11 59/60 would be sane. Instead, 12:00 is the start of the day, 1:00 is an hour into the day, and 11:59 is the end of the day. The point where the hour number wraps around and the breakpoint between two days aren't aligned.

    47. Re:The most surprising turn of events by blueg3 · · Score: 1

      Actually, UPnP and such technologies do a pretty good job of letting applications set up their own port forwarding without user interaction.

      Granted, having your ISP run a UPnP-enabled NATing router to be shared among multiple customers probably wouldn't be the best of security decisions.

    48. Re:The most surprising turn of events by onefriedrice · · Score: 1

      Lets say your ISP assigns you 10.0.32.128. Now, kindly tell me how you plan to connect to your home PC from work.

      I'm obviously assuming a local NAT that you can configure. If your ISP won't give you at least one "real" address, then you're obviously screwed. Under the assumption that most ISP's provide real addresses to their clients (which is, AFAIK, true), I believe I'm correct in saying that NAT has been a decent bridge.

      --
      This author takes full ownership and responsibility for the unpopular opinions outlined above.
    49. Re:The most surprising turn of events by paul248 · · Score: 1

      And the second approach (a reverse SSH tunnel) only works if you have that server at work with a public IP. What happens when you want to connect to your friend's computer, which happens to be behind a different ISP's NAT, or even an overlapping RFC1918 space within the same ISP?

      You basically have to lease a public IP on a server somewhere, to accomplish things that should be trivial.

    50. Re:The most surprising turn of events by jmerlin · · Score: 1

      Obviously the answer is GoToMyPC. Look, it even says it on the website, "Access your Mac or PC from Anywhere." How can you argue with that? Clearly they've even solved the problematic issue of 'anywhere' including private IP spaces, so they're effectively proxying or tunneling access, which is awesome, and scary as shit at the same time. If you're looking for cheap thrills at the expense of your data (yes, I mean you govt. officials, I heard rumors Assange has his hands in on this operation *wink, wink*), this is one hell of a solution.

    51. Re:The most surprising turn of events by Idiomatick · · Score: 2, Insightful

      Completely offtopic: I bet you could sell that account for a few hundred bucks.

    52. Re:The most surprising turn of events by LingNoi · · Score: 1

      So in a world where all connections are NAT'd you suggest connecting to a non-NAT'd IP address to fix the problem. Except you're forgetting that in this hypothetical situation that all connections are NAT'd so it wouldn't be possible to connect to a hole-punching service.

    53. Re:The most surprising turn of events by sjames · · Score: 2, Insightful

      It has been true, but necessarily cannot remain true. That's the whole point, in a few short months we'll be all out. No more real addresses to assign.

      Some people for some reason think NAT can fix that all by itself such that IPv6 need never happen.

      A better answer is for ISPs to deploy 6rd along with NAT. I don't mind so much if they give me an address in 10/8 if they also offer a solid 6rd tunnel.

      Next step is to offer v6 only and a translator/proxy for ::ffff:0000:0000/96 so customers can reach the holdouts stuck in v4.

      Then finally (eventually) IPv4 can drop away as far as publicly routed packets go.

    54. Re:The most surprising turn of events by Cato · · Score: 1

      So now we are using tunnels to get around NAT, which is used to get around IPv4 - a great demonstration of why it's easier and better to just upgrade to IPv6 and stop applying hack upon hack.

    55. Re:The most surprising turn of events by TheLink · · Score: 2, Insightful

      Under the assumption that most ISP's provide real addresses to their clients (which is, AFAIK, true), I believe I'm correct in saying that NAT has been a decent bridge.

      This whole story is about running out of IPv4 addresses, and thus contrary to your assumption. Providing "real IPv6 addresses" to clients doesn't help them if they need to talk to the very many IPv4 only machines out there.

      When they run out of IPv4 addresses, ISPs will stop providing "real" IPv4 addresses to clients. The "real" IPv4 addresses will be shared via NAT.

      They WILL use IPv4 to IPv4 NAT so that users can talk to IPv4 only servers. Most won't use IPv6 to IPv4 NAT/proxying for that because it isn't as well tested, and doesn't really add much (if you're going to NAT for that reason you might as well use IPv4 to IPv4 NATing).

      Big Media will see this as a feature, since P2P becomes harder.

      --
    56. Re:The most surprising turn of events by mcrbids · · Score: 1

      Thing is, that's only when you have control over the NAT device. If ISPs move to multiple levels of NAT, as some people suggest, then you no longer have access to a thing on which you can forward ports. You're stuck being a content consumer.

      But, that's not true at all. I've been piercing NAT for years using tools like OpenVPN, and it's not at all difficult to picture a schema similar to DynDNS wherein a standard value can be passed for inbound access to services by proxy.

      How I'd see this working:

      1) An ISP or network provider would have a "Port Host" server. It would have access to many public IP addresses. They would be available upon demand.

      2) The ISP customer's DHCP record would contain, along with DNS servers, a record referencing this Port Host.

      3) An ISP customer would, by default, get a NAT address when they log in.

      4) If a program running on ISP customer's computer needed a specific inbound port, the application needing it would know to register the need for that via the Port Host, which would request a port number. The Port Host would respond with the logged external IP/port as well as the internal (NAT) ip/port to connect to to listen to this public port number and IP address.

      5) The ISP customer's program would then announce the public IP address so that the public connection can begin by whatever means is appropriate.

      6) Port hosts only need to keep a unique IP/port combination. A single IP can be used for up to 65,535 inbound ports, so as long as the publicly needed ports are diverse, a relatively small number of IP addresses could server a rather large number of people. And there could be more than one Port Host, ordered by their network proximity to the ISP customer, so that failure conditions could be gracefully handled.

      A model like this not only would work for most people, and use a vastly smaller number of IPv4 addresses, but would also allow customers to use whatever Port Host server they wanted if they didn't want to use the ISPs Port Host, much like they can now use whatever DNS servers they wish.

      Sadly, the window for IPV6 is pretty much closed. We are not ever going to switch to it. The architects of the IETF had their chance, and they blew it. IPV6 is a wonderful invention, but it failed to take into account the cost of transition, which is now so high that making the existing IPv4 infrastructure continue to work with stupid hacks like I mentioned above is significantly cheaper than switching to IPV6.

      How long before "Port Host" (or some similar name) becomes as commonly used as "DNS server" is today?

      --
      I have no problem with your religion until you decide it's reason to deprive others of the truth.
    57. Re:The most surprising turn of events by noidentity · · Score: 1

      The most surprising turn of events since the unexpected end of the century in '99.

      Indeed, since the century wasn't supposed to end until December 31, 2000.

    58. Re:The most surprising turn of events by slack_justyb · · Score: 1

      I'm feeling pretty lucky then. I know boo, hiss Comcast, but I have to tell you that I've had an IPv6 address for about six months now. The WiFi router gets a /64 address from Comcast. From that point the nodes within the home create their addresses from the advertised prefix from the router, blah blah blah...

      Really there isn't that big a difference. The router still gets an IPv4 address too for all those websites that haven't got an IPv6 address or AAAA record. I'm not sure how Comcast handles when an AAAA lookup fails but all my boxen understand and obey. Most of the big names are already using IPv6 as well, Facebook, YouTube, all of Google, Apple, Microsoft, IBM, etc...

      At any rate, I understand that a lot of people aren't getting IPv6 at the current moment and last ditch efforts are going to be deployed. Granted widely deployed is the key part. But ISPs are going to roll it out, it is the only long term solution we've got, period. However, how long your ISP will drag its feet is a whole another story. However, I did want you all to know that IPv6 is being rolled out to some Comcast customers right now. Now if this is a test thing and then they bitch slap me into a NAT IPv4 scheme has yet to be seen. But for now it's a pretty seamless IPv6 switch, in fact didn't know they had done it till I started toying with ifconfig in Linux and found a global scope IPv6 address.

    59. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      We started counting centuries with the first century

      I don't think anyone started counting 2010 years ago, therefore the rest of your statements have no base.

    60. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      In Swedish there is, there is not in English though

    61. Re:The most surprising turn of events by Splab · · Score: 1

      Err no.

      All my clocks go from 00:00:00 to 23:59:59.

    62. Re:The most surprising turn of events by Rob+Kaper · · Score: 1

      Decades are no different per se. The first decennium of the 21st century is 2001 through 2010. That the naughties are 2000 through 2009 does not negate this: it's a completely different kind of decennium which just happens to overlap for nine years.

    63. Re:The most surprising turn of events by Rob+Kaper · · Score: 1

      How is that relevant to the original 12-hour clock?

    64. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      If you start calling this the 20th century just because the year is 20xx you will not be understood correctly.

      Nobody is arguing that this is the 20th century, the argument was that the 21st century started in 2000, not 2001

    65. Re:The most surprising turn of events by Zero__Kelvin · · Score: 1

      I wasn't implying it was a GoodThing(tm), just that it wasn't the Great Wall the GP seemed to think it was.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    66. Re:The most surprising turn of events by bbn · · Score: 1

      If you start calling this the 20th century just because the year is 20xx you will not be understood correctly.

      Nobody is arguing that this is the 20th century, the argument was that the 21st century started in 2000, not 2001

      Why would you want to start the 21st century after only 1999 years have passed? For some reason you understand that century YY does not equal year YYxx. But you don't understand the very same reasoning when counting years instead of centuries. The _first_ year in any of "decade, centuries, millenia" is always of the form xxx1. This follows easily because the very first year was indeed year 1 of the decade, century and millenia.

    67. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      *Millennia, millennium

      Spell it "millenia", and you refer to a thousand "ani" (plural of anus) rather than "anni" (plural of anno, i.e. year).

    68. Re:The most surprising turn of events by mikael_j · · Score: 1

      I have to say, this seems a lot more convoluted than "Give each node on the network its own public IPv6 address".

      --
      Greylisting is to SMTP as NAT is to IPv4
    69. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      I understand the logic, I had always thought there was a 0AD. Though I see now that there wasn't.
      That's rubbish, it would be better if there was.

    70. Re:The most surprising turn of events by Freultwah · · Score: 1

      You are mistaken. It is you who show a lack of education. Specifically in the use of language. We are in the 21st century in the same way that I am in my 40th year. That being said, I am 39 years old. See how that works?

      Yes, yes, we do, but do you? It's quite easy, see. You just have to think of years not as "year one" or some such, but "first year" (as in "20th century", not "century 20"), because that's what it boils down to. When you think about "year 2000" as the "2000th year", then you understand. When you've managed to wrap your head around the concept (which, by the way, is how years are counted in many languages), then you'll realise that all pseudo-logical mumbo jumbo just fades.

      Many people who like number magic point to the ruler as your first point of reference: "See, it begins with a zero!" But what they don't realise is that between 0 and 1, there's the first centimetre.

      Same applies to cases of beer, if that is any easier to understand. Let's assume there are 20 bottles in a case. Unless you're terminally stupid, you do not think that you started on a new case when you open the 20th bottle.

    71. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      Just sidestep it. Call it the 19hundreds and the 18hundreds and so on, which is both precise and trivially understandable.

    72. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      Lets say your ISP assigns you 10.0.32.128. Now, kindly tell me how you plan to connect to your home PC from work.

      Well first of all I've never seen an ISP which allows you to run any kind of "server" on a residential type account. And they usually define "server" with a phrase such as "A server includes, but is not limited to, any and all devices which accept unsolicited inbound connection attempts". So right off the bat there's a pretty good chance you're not allowed to do that, although most ISP's really don't care... but they also aren't going to care when you have troubles getting it to work.

      Second, there are several solutions to getting around this, which are very handy for people who travel a lot and deal with NAT frequently at places like hotels, cafe's, etc. When the NAT is out of your control, you can get around this by setting up a 3rd party hosting site, and then from your home computer you open a tunnel to that site, and then when you go to your site you can tunnel back home via the already open connection through the NAT.

      Third, any ISP of any size is not only ready (or nearly ready) to turn up ipv6, but wouldn't be able to handle NAT'ing any sizeable amount of customers without major hassles. The customer support for that type of setup is a pure nightmare, and for the cost of the time and effort of people to engineer and support a large-scale NAT you could just go to ipv6. It's not like at an enterprise where you can implement custom solutions for specific apps or just tell your employees "Hey, guess what? We know it doesn't work behind NAT, so don't try using it since it's not work-related".

      The guy below asked

      What will make it even more fun is if you have two branch offices of the same company connected to the different ISPs getting 172.16.32.66 and 10.0.65.88, how do you set up a VPN between them?

      The answer is, you get a business account instead of a residential account, and they'll give you two public IP's. Keep in mind if they start NAT'ing their current DHCP customers, they aren't going to just trash all the public IP's, they'll use a handful of them for NAT and re-purpose the rest for businesses who pay for static addressing.

      But to do it in the scenario you describe would require you to setup the VPN between the two public IP's at the NAT points, and the ISP would have to support VPN tunneling. In terms of your internal network, you don't see the public (or externally visible 'private' when behind an ISP NAT) addresses at all, that's the point of the tunnel.

    73. Re:The most surprising turn of events by Man+Eating+Duck · · Score: 1

      Actually, the 20th century is January 1, 1901 to December 31, 2000. Likewise, the 19th century is 1801 to 1900.

      Ok, I stand corrected on this fact, thanks for that! I still maintain that it doesn't make sense in common usage more than 2000 years after the off-by-one error was introduced, and where I live no one (including the media) use the terms this way. Especially jarring is the fact that the decades don't match up. All this seems messy, and it is a lot worse than having a shorter *first* /decade/century/millenium by convention, due to the missing year zero :)

      --
      Are you a grammar Nazi? I'm trying to improve my English; please correct my errors! :)
    74. Re:The most surprising turn of events by Malc · · Score: 1

      There must be some weird distortion in the allocation for IP addresses. My new ISP recently gave me the option of a free static IP address, on an unlimited full-speed ADSL2+ residential service costing about £17/month. If there were such a global shortage of IP addresses, I'd have seen something ludicrous like ISP level NAT, or a static IP being expensive.

    75. Re:The most surprising turn of events by peppepz · · Score: 1
      This starts to remind me of the 286's way of addressing memory (where you fought with conventional memory, upper memory blocks, high memory area, expanded memory, extended memory, real mode, protected mode, A20 line and segmentation on top of that), and how happy I was when I got a 32-bit PC capable of addressing all of its memory (and more) with a wide, beautiful, consistent, scalar, plain 32 bit pointer.

      Although segmentation offered additional security benefits over flat memory, just like NAT does in the IP world, just nobody has ever wanted to have anything to do with it after that, with the 386, it stopped being a necessity.

    76. Re:The most surprising turn of events by pigeon768 · · Score: 1

      Work computer is 192.168.123.75, NAT behind your company's router, whose public IP is 12.34.56.78.

      Home computer is 10.0.32.128, NAT behind your ISP's router, whose public IP is 34.56.78.90.

      Some else creates a third party service, to whom both your home computer and work computer connect to and maintain a connection. Your work computer tells the service it wants to open a connection to your home computer. The service tells your home computer another computer wants to connect to it. Your home computer opens a UDP port on 43210, tells the service it's listening on 43210, and starts waiting.

      The service tells your work computer to start sending UDP packets to 34.56.78.90:43210. Your work computer opens a UDP port on 54321, tells the service it's opened port 54321, and starts sending packets.

      The service tells your home computer to start sending UDP packets to 12.34.56.78:54321, which it does. You now have a connection over UDP, which you use outright, tunnel TCP over, or tunnel VPN over, or do whatever you want.

      Sure, it's hideous, to say the least, but having your ISP NAT you is not the end of the world.

    77. Re:The most surprising turn of events by Tim+C · · Score: 1

      I was always taught that way back when, years went (e.g.) ...3BC, 2BC, 1BC, AD1, AD2, AD3...

      There was no year 0. Call it "logical gymnastics" if you like, but humans don't count from zero, and the first century AD technically ran from AD1 to AD100.

      I've given up trying to convince people though, and celebrating the new millennium on my own in 2001 would've sucked...

    78. Re:The most surprising turn of events by TeknoHog · · Score: 1

      you forgot year zero (or are you born having 1 year already under your belt?)

      There was no year zero. "Year 1" should more accurately be called the first year, since there is no zero in ordinals. When you are born, your first year of life begins, and at the end of that period you are 1 year old.

      Similarly, at the _end_ of "year x" you are x years old. Which is why the millennium ended at the end of "year 2000".

      I think these confusions arise because "year x" is a one-year period, whereas "x years from something" is a specific point in time. It is not always obvious how to relate that point with the period, but usually when you measure something, the total is found at the end.

      --
      Escher was the first MC and Giger invented the HR department.
    79. Re:The most surprising turn of events by Sique · · Score: 1

      No, church people set the Christmas event in the twelve nights between Dec 24 and Jan 6, and called the year until Dec 24 "the last year before Christ (1 BC)" and the year after Jan 6 "the first year of the Lord (1 AD)", with AD meaning "anno Domini" = year of the Lord.

      There was no ambivalent year which was neither before Christ nor being a year of the Lord, so no "0 BC = 0 AD".

      --
      .sig: Sique *sigh*
    80. Re:The most surprising turn of events by Sique · · Score: 1

      Or to make it more clear: You got the etymology of the number of the year wrong, not the church people.
      They call the Year 2000 actually "the 2000th year of the Lord", and the 2000th year had not finished until Dec 31 2000. Not until Jan 1 of the 2001th has started, 2000 years are over.

      --
      .sig: Sique *sigh*
    81. Re:The most surprising turn of events by Bert64 · · Score: 1

      The ISP can only get a larger allocation of IPs from RIPE if they can justify their use and are actually using them... Giving them out to DSL users is a very effective way to "use" more addresses and gives them justification to get more. ISPs have been doing this for a few years to hoard addresses, and once they are no longer able to get new addresses they will gradually kick existing users off (probably by cranking up the prices until most users choose to take the cheaper nat option).

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    82. Re:The most surprising turn of events by fulldecent · · Score: 1

      your ISP doesn't allow servers on the consumer-grade network

      or

      VPN in to your ISPs network +$5/month

      --

      -- I was raised on the command line, bitch

    83. Re:The most surprising turn of events by LanMan04 · · Score: 1

      The most surprising turn of events since the unexpected end of the century in '99.

      The century ended at the end of the year 2000, as there was no year 0.

      Pedants unite!

      --
      With the first link, the chain is forged.
    84. Re:The most surprising turn of events by teshuvah · · Score: 1

      ... since the unexpected end of the century in '99.

      (What is actually surprising is that the internet still hasn't widely adopted IP6, and ISPs are now turning to ludicrous measures - NAT - to keep avoiding what makes sense.)

      Wow, that was unexpected that the century ended a full year earlier than it was supposed to.

    85. Re:The most surprising turn of events by petermgreen · · Score: 1

      Note that how well this sort of thing (you have the details of the method off a little but that isn't really relavent to the discussion) works depends on the type of nat.

      With a full cone, restricted cone or restricted port cone NAT the technique will work provided it is properly implemented and both sides start sending beacon packets before expecting anything from the other side..

      With a "symetric NAT" that treats every local IP/local port/remote IP/remote port combination as a "connnection" and uses unrelated ports on the WAN side for each connection (even if the source IP/PORT is the same) it won't work at all since the matchmaking service has no way of finding out what natted local port will be the source of the packets sent to the other peer.

      If the nat is a "port preservative" type (a type that tries to make the natted local port the same as the un-natted local port but changes the local port to avoid conflicts) the technique will work some but not all of the time and the chance of failure will increase with the load on the NAT. If the NAT is round robining public IPs then depending on how that is handled that could also cause problems.

      In summary the technique works most of the time with consumer NAT boxes that are generally under light load but things could be much worse with "carrier grade NAT" setups handling large numbers of users. Particually if they are stingy on the ratio of public IPs to private IPs.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    86. Re:The most surprising turn of events by Anonymous Coward · · Score: 0

      This is because NAT wasn't a properly designed fix. If they would have done NAT correctly, you could simply connect to $global_IP::$level_1_subnetwork::$level_2_subnetwork and so on. Basically, allocate the first 4 billion (global) addresses to the big network providers (like it is now), then add scoping to NAT so that you specify the full NAT-ted address from the top down.

      If /. (216.34.181.48) were an ISP, and your network was at 249.183.23.56 as assigned by the ISP, and your PC was at 38.245.1.59 on your network, you could get to it anywhere from 216.34.181.48::249.183.23.56::38.245.1.59. And oddly enough, that's actually a shorter address than the IPv6 one you're going to get instead. (NOTE: with the exception of /.'s IP, the above addresses are random.)

    87. Re:The most surprising turn of events by petermgreen · · Score: 1

      I don't see anything in this thread talking about a situation were all connections are natted. Such a situation is clearly unfeasible.

      Natting home lusers (I suspect geeks will have a choice of either putting up with it too of paying extra) should be sufficiant for a while at least. Proper servers will almost certainly continue to get public IPs.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    88. Re:The most surprising turn of events by bbn · · Score: 1

      216.34.181.48::249.183.23.56::38.245.1.59. And oddly enough, that's actually a shorter address than the IPv6 one you're going to get instead.

      No it is not. The longest address you risk being assigned is of the form 1234:5678:9ABC:DEF0::1 (*) which is 22 characters. Your proposal is up to 49 characters.

      (*) Remember you decide the last 64 bit of the address (the host part). You can make it just a ::1 as in my example. You can also make the host part a maximum of 20 characters including the separators if it suits you, but that is your choice.

    89. Re:The most surprising turn of events by blueg3 · · Score: 1

      It's true that lots of people don't use it that way. Historians and pedants do. The decades not matching up is particularly annoying. I'm not sure that one way or the other really makes more sense, but usually it's good to at least accept whatever the conventional usage is. (That is, when someone says 20th century, you should accept that they might think of it as ending either on 1999 or 2000. Hey, that's language for you.)

    90. Re:The most surprising turn of events by blueg3 · · Score: 1

      "The decades" as in "the '30s" or "the '80s" or "the 1870s". Technically you can have a decade aligned on any year you want.

      Earlier poster was talking about whether "the 80s" referred to 80-89 or 81-90.

    91. Re:The most surprising turn of events by sjames · · Score: 1

      Server doesn't generally include a login for your own personal use.

    92. Re:The most surprising turn of events by sjames · · Score: 1

      Sounds like IPv6 is the way to go then, that way it all just works.

    93. Re:The most surprising turn of events by hardburn · · Score: 1

      And they usually define "server" with a phrase such as "A server includes, but is not limited to, any and all devices which accept unsolicited inbound connection attempts".

      Which would cover any VoIP device.

      --
      Not a typewriter
    94. Re:The most surprising turn of events by Abcd1234 · · Score: 1

      Actually, UPnP and such technologies do a pretty good job of letting applications set up their own port forwarding without user interaction.

      And it's completely useless for more than 65k active NAT'd services.

    95. Re:The most surprising turn of events by DavidTC · · Score: 1

      That's because we're not saying 'the 80th decade', like we're saying 'the third millennium'. This obviously wouldn't even vaguely be right, it's the '198th decade'...and the 'the 199th decade' started in 1991, not 1990. If we counted decades, like we do centuries, we'd be just as confused there,and debating over when we hit 'decade 200' or 'the 200th decade'.

      Saying 'the eighties' is like if we were saying 'the one thousands' and 'the two thousands' which, would indeed, refer to 1xxx and 2xxx. But no one says that.

      When we say 'the eighties', we're not actually counting decades at all. That span of time, because we're in base ten, happens to be ten years, which is a decade, but there are not, in any sense, '80' or '1980' of them. It is a span of time that ended in 8x, which coincidentally happened to be a decade.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    96. Re:The most surprising turn of events by Abcd1234 · · Score: 1

      Sadly, the window for IPV6 is pretty much closed. We are not ever going to switch to it.

      Uhoh, better tell Comcast the bad news, they're well on their way to rolling it out...

    97. Re:The most surprising turn of events by DavidTC · · Score: 1

      Tunnels have to have an endpoint, which now means you need an IPv4 address there. All you've done is move the address!

      It doesn't actually solve IPv4 address problem at all. All it does is let experienced people figure out a way around NAT'd connections.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    98. Re:The most surprising turn of events by Zero__Kelvin · · Score: 1

      Of course I solved the problem, you simply weren't paying attention to what problem it addresses. This thread was not about solving the lack of IP addresses, but simply how to get a NATed connection to work when there are cascaded NATs.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    99. Re:The most surprising turn of events by blueg3 · · Score: 1

      NAT is useless well below that. Even if none of the services require port-forwarding, just doing masquerading ties up one port on the NATing router per active connnection.

    100. Re:The most surprising turn of events by Abcd1234 · · Score: 1

      Yeah, I know, I was being generous. :)

    101. Re:The most surprising turn of events by mrman18766 · · Score: 1
    102. Re:The most surprising turn of events by Leolo · · Score: 1

      Through an SSH tunnel to some publicly routed host.

    103. Re:The most surprising turn of events by kheldan · · Score: 1

      Simple. Your ISP says, "Well, for $$$ per month extra.."

      --
      Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
    104. Re:The most surprising turn of events by Belial6 · · Score: 1

      So, your saying that if you use the language wrong, you can disagree with the majority of people, and still have counting error, since Yeah! That's a grand idea!

      Besides, giving your rationalization on the ruler, you would also have to claim that a meter doesn't start until you complete the first centimeter. A centimeter is a subunit to a meter. A year is a subunit to a millennium. In fact, the counting of years is metric.

      Century = 100 years
      100 Centimeter = meter

      Millennium = 1000 years
      1000 Millimeters = meter
      Your logic would then dictate that a meter ends at 101 centimeters, or 1001 millimeters. It's very simple. The year before year 1 is simply counted wrong. -1 does not come before 1. Between 1 centimeter and -1 centimeters, there is 0 centimeters. Between my having 1 beer, and my owing you 1 beer (-1), I have 0 beers.

      When you have drank 20 beers, you have drank a case, and start on the next one. When you have drank 20 beers, and take a sip of the next one, you are on the second case. You don't start the second case when you have drank 21 beers. Your logic only applies if years were an atomic value.

      Very simply, there is no way to deny that that -1/0/1 point on the calender, there is an error. Your argument is that that error should be carried forward indefinitely, even though the majority of people have corrected the error.

    105. Re:The most surprising turn of events by dargaud · · Score: 1

      So, according to you the 1900s != the twentieth century?

      No it's not. The simplest way I found to get people like you to understand why is to ask you to count to 10, on your fingers if you need some help. So you go: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10. Then I ask you to count 10 more, and you start the 2nd decade by, wait for it, 11 !!! It's the same for centuries.

      Are you a grammar Nazi? I'm trying to improve my English; please correct my errors! :)

      Well, you are in error, but it's not grammar this time C;-)

      --
      Non-Linux Penguins ?
    106. Re:The most surprising turn of events by Volante3192 · · Score: 1

      1) The start is an arbitrarily chosen date, and since the vast majority of people who use the Gregorian calendar agree that millenniums start in x000, that is when they start.

      Wrong. The Gregorian calendar (which, yes, is arbitrary, but technically, every system of measurement is arbitrary) has no year zero. Period. End of story. Finito.

      You want a link showing the millinium starting in 2000? Here you go. [google.com],

      Because people are idiots.

      Find me a link saying there is a year zero in the Gregorian calendar. That's the only way you can make centuries start on a zero.

    107. Re:The most surprising turn of events by Volante3192 · · Score: 1

      That being the case, we as a culture have also decided that decades start a year x0, centuries start at x00, and millenniums start at x000.

      We as a culture have also decided global warming doesn't exist, the earth was created in 6 days and the current US president was born in Kenya.

      What's that say about our culture?

      Although, technically, random decades can start whenever we want them to. A 'decade' is just a span of 10 years. I could say a new millenium starts next year: the millenium of 2011 to 2110. Am I wrong?

      People just like to apply special meaning to big round numbers.

      However, when speaking in relation to the Gregorian calendar, it's 2nd millenium started on 2001. Period. Sure, maybe the guy goofed when he made the system, going 2BC, 1BC, 1AD, 2AD...but it's become a standard and we have accepted it.

      It's the same reason electrical diagrams are backwards. Some zidiot mucked up the first one and it's too damn late to change every diagram on the planet. (Oblig xkcd: http://xkcd.com/567/ )

      Incidentally, isn't it funny how you say 'we start decades at zero' yet I bet if you asked 100 random people to start counting, 9 out of 10 would begin '1, 2, 3...' with the occassional '0, 1, 2...' and the even more random nonconformist going '17, 18, 19...'

      If we start counting with 1, why do we start counting decades with 0?

    108. Re:The most surprising turn of events by Belial6 · · Score: 1

      Then what does the year before the new millennium start with?

    109. Re:The most surprising turn of events by Belial6 · · Score: 1

      You must be one of the REALLY REALLY Young Earthers.

      More seriously:
      More than 1999 years has passed for humanity.
      Less than 1999 years has passed for any specific individual.
      We have discovered the number 0.
      Grouping things by place value is easy, convenient, and logical
      Metric naming is based on place value for just about every other scale (hard drives excepted)
      The start date for the new millennium is an arbitrary value, and thus with more people agreeing that it starts in x000, like the arbitrariness of language, makes it so.
      Since when discussing years, 1000 - 2000 = -1001, we must conclude that there is an error in the numbering system. Since that error can be identified as being the missing year zero, we are faced with either propagating the error forever, accepting that the first millennium had a one year error, or declaring year -1 to be the first year of the first millennium.
      Declaring the first millennium to have run from -1 to 1999 makes just as much sense as declaring it running from 1 to 2001.
      If one cannot accept that the way to handle the numbering error is to just accept that the first millennium only has 999 years, it makes more sense to push the miss counting into the past where dates with a resolution of only one year are generally lucky guesses at best, rather than into the future where the dates matter.
      Given that chunks of the Gregorian calendar have been ripped out on multiple occasions, slavish adherence to truly 1000 year millenniums would not put the new millennium anywhere near January 1st 2001.

      So, back at you... Why would you want to start the 21st century after ~2000.8 years AND make the naming sound metric, but not be metric?

    110. Re:The most surprising turn of events by sjames · · Score: 1

      So what your saying is that the peons should depend on the IP bourgeois for their needs? Rather than just going to IPv6?

    111. Re:The most surprising turn of events by bbn · · Score: 1

      So, back at you... Why would you want to start the 21st century after ~2000.8 years AND make the naming sound metric, but not be metric?

      Because I can count. The first year is the FIRST year. Not the ZERO year.

      Just like a ruler, like another put it. The ruler might start at zero, but the first cm is the first cm. Not the number zero cm.

      This incidentially also solves your .8 year issue. We count the number of years, not the length of the years.

      With risk of repeating myself: The year 1 startet at time 0 and ended at time 1. The 2000th year started at time 1999 and ended at time 2000. The 2001st year started at time 2000. Which is why the new millenium came to pass at the same time as the 2001st year.

    112. Re:The most surprising turn of events by Belial6 · · Score: 1

      So, what was the year before 1? If you say -1 then clearly you cannot count unless you accept that there is a numbering error.

      The ONLY argument for the claim that x000 does not belong to the Mill place value is that there was no zero. The lack of a year zero was a mistake. Just like all the other mistakes in the calendar at the time. Claiming that all reason should be thrown out the window because someone made an error 1500 years ago is a ridiculous argument.

      So again, what is year 1000 - 2000? Show me how well you can count.

    113. Re:The most surprising turn of events by Man+Eating+Duck · · Score: 1

      The simplest way I found to get people like you to understand why is to ask you to count to 10, on your fingers if you need some help.

      I've never met you, but I'd still wager a pint that I would beat you when it comes to doing arithmetics in my head (or whatever would be the right expression). I'm actually pretty good at that.

      So you go: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10. Then I ask you to count 10 more, and you start the 2nd decade by, wait for it, 11 !!! It's the same for centuries.

      No, I wouldn't go 1991, 1992 and so on. I would start at 1990, and restart at 2000. No fingers needed.

      I disagree with you, but I think we could have an entertaining conversation at a party. For now, let's agree to disagree :)

      --
      Are you a grammar Nazi? I'm trying to improve my English; please correct my errors! :)
    114. Re:The most surprising turn of events by Agripa · · Score: 1

      I suspect another cycle of porn and piracy is going to lead the way toward IPv6 when p2p file sharing starts to have problems with widely deployed IPv4 NAT.

    115. Re:The most surprising turn of events by Agripa · · Score: 1

      The side effect of charging too much may be a loss in their ability to monitor the traffic of those who makes the most use of their services if those users start buying routable VPN accounts.

    116. Re:The most surprising turn of events by Agripa · · Score: 1

      Since it is not really possible to sell unused IP addresses, I wonder if they will end up being used in VPN concentrators as an extra revenue source. A IP address holder could effectively sell them to a company providing VPN services.

    117. Re:The most surprising turn of events by dargaud · · Score: 1

      No, I wouldn't go 1991, 1992 and so on. I would start at 1990, and restart at 2000. No fingers needed.

      Then you've counted one specific year twice. Which one ?

      I disagree with you, but I think we could have an entertaining conversation at a party. For now, let's agree to disagree :)

      Only after a pint.

      --
      Non-Linux Penguins ?
    118. Re:The most surprising turn of events by bbn · · Score: 1

      So, what was the year before 1? If you say -1 then clearly you cannot count unless you accept that there is a numbering error.

      Before the first year was the first year before christ (BC). There was no year that was neither before christ nor a year of the lord (no year 0). There are no negative years, no year -1. A count of years can never be negative.

      The ONLY argument for the claim that x000 does not belong to the Mill place value is that there was no zero.

      No. The argument is that the year number is a numbering (count) of the years of the lord. We are currently in the 2010th year of the lord. A year has only passed when the year is done, so in a little less than a month we will have done 2010 years since the start (time 0).

      The lack of a year zero was a mistake.

      No at all. There simply can not be a year zero when you use the counting method (the first year, the second year etc, the language does not allow it). So it is not a mistake, just you that do not understand this basic mathematical reality. The calendar does indeed have a zero, which is the start of the first year. You think the year number is the time passed when it is actually a naming. We also have no day zero in the month or a month zero in year and so on. For the same reason.

      So again, what is year 1000 - 2000? Show me how well you can count.

      Year 1001 BC.

      The first 1000 years back gets you 1 BC. Then subtract 1000 more and you end up at 1001 BC.

      If you think this is much harder than simple arithmetic, consider that it is so with everything in the calendar. You can also not do simple arithmetic to calculate January 10 - 20 days.

    119. Re:The most surprising turn of events by Volante3192 · · Score: 1

      Then what does the year before the new millennium start with?

      January 1st. Same as every other year.

      What I'm getting from you is the following:

      Millenium 1 = 0 to 999.
      Millenium 2 = 1000 to 1999.
      Millenium 3 = 2000 to 2999.

      Please, explain if I have that wrong, because otherwise the following might not apply:

      In the Gregorian system, there is no year zero, so that would make millenium 1 only 999 years long making it...*gasp*...an error. (something you were fond of pointing out in another post.)

      If you want your fancy calendar system or arbitrary measure of 1000 years in your reality to start on a 0, you do that. Just don't be surprised when you can't get it accepted as a worldwide standard in places that actually care about accurate recording of relative dates.

      Don't muck up accuracy simply because we (arbitrarily, as well,) use a base 10 counting system and apply undeserved additional attention on nice, round numbers. If for some crazy reason the Gregorian calendar started on year 33 and 0 to 32 didn't exist, The new millenium would kick in on 2033.

    120. Re:The most surprising turn of events by mrman18766 · · Score: 1

      So what your saying is that the peons should depend on the IP bourgeois for their needs? Rather than just going to IPv6?

      No! Not at all, and I truly fear a future when users are stuck in some type of multiple NAT prison. My link to TeamViewer was purely based off of my appreciation of them providing their software free for non-commercial use. I have no association with them. I am just a very happy user since after discovering it I no longer need to mess with port forwarding/listening vnc viewers/ssh tunnels - for basic remote access it just works quick and easy.

    121. Re:The most surprising turn of events by sjames · · Score: 1

      I can see that it could be useful for when people do get stuck behind a NAT they don't control, but It's not really a full substitute for having a public address (or in the case of v6, a full public prefix).

    122. Re:The most surprising turn of events by badkarmadayaccount · · Score: 1

      Not to be a noob, but why not?

      --
      I know tobacco is bad for you, so I smoke weed with crack.
    123. Re:The most surprising turn of events by badkarmadayaccount · · Score: 1

      Actually, DHCP PNAT with UPnP queries and SRV records, DNS side, with appropriate client support would duplicate this functionality. None of that is an isssue - except client side support at OSI L6. A socket encaplsulation similar to SSL for this sort of abstraction might be useful.

      --
      I know tobacco is bad for you, so I smoke weed with crack.
    124. Re:The most surprising turn of events by badkarmadayaccount · · Score: 1

      Would you like to pay for the hardware upgrade?

      --
      I know tobacco is bad for you, so I smoke weed with crack.
    125. Re:The most surprising turn of events by badkarmadayaccount · · Score: 1

      A decently set up NAT requires only client side srv record support and DHCP, easily wrapped up by a library or socket abstraction.

      --
      I know tobacco is bad for you, so I smoke weed with crack.
  5. Last Post!! by Nefarious+Wheel · · Score: 1

    IPV6 anybody? (new meme anybody?)

    --
    Do not mock my vision of impractical footwear
  6. where is ATT and comcast with IPV6? by Joe+The+Dragon · · Score: 2, Insightful

    where is ATT and comcast with IPV6?

    1. Re:where is ATT and comcast with IPV6? by the_macman · · Score: 3, Insightful

      Busy counting their profit and laughing over all the money you think they want to spend on IPV6 upgrades.

    2. Re:where is ATT and comcast with IPV6? by ziggyzaggy · · Score: 4, Informative
    3. Re:where is ATT and comcast with IPV6? by Anonymous Coward · · Score: 0

      Comcast is supposed to be testing NDS in select markets soon. 6RD and 6to4 are currently being tested.

    4. Re:where is ATT and comcast with IPV6? by Anomalyx · · Score: 1

      Bah, they better be giving discounts to go to IPv6. Many people will need to upgrade routers or OS's because they can't handle IPv6.
      Knowing how corrupt big business is, they'll probably do something stupid like give you the option between NAT and IPv6, and tack an extra monthly charge on no matter which one you pick (but of course, an even higher monthly charge if you pick neither). This will do nothing but raise awareness that there are more ISPs out there than just AT&T & Comcast.

      Hey stupid, corrupt ISPs! Try this one! $5/mo discount for a couple months to every customer who agrees to permanently switch to IPv6. Can't cost that much out of your 18-light-year-deep pockets, and would actually make customers happy with you... for once...

      --
      No, there is no "-1 I'LL NEVER ADMIT BEING WRONG!!!" mod.
    5. Re:where is ATT and comcast with IPV6? by sl3xd · · Score: 1

      Anybody who uses Comcast can actually manually setup their connection to use 6RD

      6to4 is an option as well, but don't use it unless you have to (and you don't) - 6RD was created to address several of the problems of 6to4.

      --
      -- Sometimes you have to turn the lights off in order to see.
    6. Re:where is ATT and comcast with IPV6? by Comen · · Score: 1

      It just takes awhile, most providers have turned it one on the backbone routers, but run it in parallel with IPv4 and they just need to push IPv6 to the edge, eventually everyone will be able to run duel IPv4 and IPv6 stacks on your pc (you can do this today if you want to setup a tunnel).
      I am still not sure of the plan for getting IPv4 address to talk to IPv6 address using some kind of ISP grade NAT between IPv4 and IPv6 at all, I need to read around on it.

      I would think it would be possible to do a 1 to 1 translation that would not have the downsides of hiding several IPv4 addresses behind 1 IPv6 address that causes protocol issues , each IPv4 address would have its own corresponding IPv6 IP that would be mapping to it, this should just be mapped in certain ranges, so its predictable. Then when everyone is done with IPv4 and every service is on IPv6 you can free up the IPv6 space that was being used for this mapping.

    7. Re:where is ATT and comcast with IPV6? by sjames · · Score: 1

      Comcast is showing progress. They've had both 6rd and 6to4 servers up and running for a while now. Both seem to work well.

      I have no idea where AT&T is.

    8. Re:where is ATT and comcast with IPV6? by sjames · · Score: 1

      People might have to upgrade routers (though Comcast offers an OpenWRT image if you want to try reflashing), but even XP can do IPv6 if you install the protocol. Newer Windows, pretty much any decently modern Linux or OSX all support IPv6 by default.

      I have plenty of complaints about ISPs in the U.S., but the need to upgrade to v6 is NOT their doing. Honestly, Comcast is making decent progress now.

    9. Re:where is ATT and comcast with IPV6? by hedwards · · Score: 1

      Considering that IPv6 is supported in Win XP since SP1, I don't think there's many people that are going to need their OS updated. And most of those ought not to be connecting to the internet anyways due to vulnerabilities.

    10. Re:where is ATT and comcast with IPV6? by CrimsonAvenger · · Score: 1

      Busy counting their profit and laughing over all the money you think they want to spend on IPV6 upgrades.

      AT&T has a profit margin of about 10%, Comcast about 7%.

      Interestingly, Apple's profit margin is about 15%, Microsoft's is about 30%.

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
    11. Re:where is ATT and comcast with IPV6? by dakameleon · · Score: 1

      Interestingly? Microsoft's profit is almost totally based on ephemeral software that costs pennies to produce copies of once the development is done, and Apple's is a combination of software and premium priced hardware. Both dominate markets and collect hefty premiums doing so. Say what you will about the service providers, but they've got a physical infrastructure to maintain and at least a pinch more competition than their counterparts you've lisetd there. There's no meaning in comparing across industries with companies that are not close peers in terms of operating environments.

      --
      Man who leaps off cliff jumps to conclusion.
    12. Re:where is ATT and comcast with IPV6? by LordLimecat · · Score: 2

      Yes, that IPv6 address comcast hands me is imaginary. Absolutely no way ipv6.google.com resolves from my home network, right?

    13. Re:where is ATT and comcast with IPV6? by Anonymous Coward · · Score: 1

      I can address where AT&T is, based on what I was told.

      We have an AT&T ADSL connection at work. We have a static IPv4 address. I would like to add a static IPv6 address. Two months ago, I called AT&T tech support and asked about getting an IPv6 address. I got a lot of confused people on the other end, passing the line to other people who supposedly knew more. Eventually I finally got a straight answer, after they had consulted with some manager. AT&T was never going to IPv6, they said. Never.

    14. Re:where is ATT and comcast with IPV6? by LingNoi · · Score: 1

      You could argue that Microsoft's or Apple's costs are higher. When you consider the cloud services, mail, updates, search engines and many servers they self host they probably have to maintain more equipment then an ISP.

    15. Re:where is ATT and comcast with IPV6? by slack_justyb · · Score: 1

      Um, I've got an IPv6 address right now from Comcast. Wifi Router gets it's IP address from the upstream advertisements. I get an IPv4 address as well. At any rate the WiFi router configures the clients, or advertises the prefix and the clients do the rest. I'm not sure if this is some sort of trial or what but I can hit all the IPv6 services like www.v6.facebook.com and Google's IPv6 stuff.

      Been like this for about six months now.

    16. Re:where is ATT and comcast with IPV6? by Chuck_McDevitt · · Score: 1

      6RD and 6to4 require you to have a public IPv4 address. Native dual-stack and/or DSLITE don't require this, but those are still not ready on Comcast.

    17. Re:where is ATT and comcast with IPV6? by CrimsonAvenger · · Score: 1

      Say what you will about the service providers, but they've got a physical infrastructure to maintain and at least a pinch more competition than their counterparts you've lisetd there.

      Ahh, you misunderstood me. I wasn't trying to compare their counterparts - I was responding to a comment that suggested that AT&T and Comcast had unusually high profit margins. Evidence is that they don't - their profits are pretty much where most businesses in a reasonably competitive (but not totally cutthroat) field expect them to be.

      I picked Microsoft and Apple as comparisons because they were unusual in having really high profit margins.

      Arguably, AT&T is showing a bit more profit than one might expect in their business. Of course, AT&T is a bit more diversified than most internet providers, so that might be enough to explain it.

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
    18. Re:where is ATT and comcast with IPV6? by sjames · · Score: 2

      6to4 requires a public address, 6rd does not as long as the 6rd server has a route to the private addresses. Since the ISP that would do the NATing is also deploying the 6rd server, they can do that with no problem.

    19. Re:where is ATT and comcast with IPV6? by dwinks616 · · Score: 1

      You could map the entire IPv4 internet on IPv6 addresses forever and not care. There's so many IPv6 addresses, even if Earth had 10x the current population and each man, woman and child had 100,000 addresses each, there'd still be tons left over.

    20. Re:where is ATT and comcast with IPV6? by dakameleon · · Score: 1

      Microsoft and Apple's costs might be higher on a dollar-for-dollar basis, but the profit margin is (Revenue - Costs)/Costs. My point remains - the software has a big fat margin, especially in near-monopoly environments, and provision of physical services doesn't.

      --
      Man who leaps off cliff jumps to conclusion.
  7. Meh. Allocate 240.0.0.0/4. by Anonymous Coward · · Score: 1, Informative

    Class E? That "reserved" block, for "future expansion"? That "future expansion" would be now.

    There you go, another 16 blocks to break out. Plus the 7 we already have, that makes 385,875,968 addresses left still unallocated. Still over a third of a billion to go, which should be more than enough time for everyone to replace equipment that doesn't support IPv6, and deal with applications like Teredo that leak IPv6 address space across NATs and through VPNs.

    1. Re:Meh. Allocate 240.0.0.0/4. by Trolan · · Score: 3, Insightful

      And have to push new TCP/IP stacks for most operating systems to get them to understand that that is now viable space. This would be effort better spent on just going IPv6.

    2. Re:Meh. Allocate 240.0.0.0/4. by A · · Score: 4, Informative
    3. Re:Meh. Allocate 240.0.0.0/4. by MarkRose · · Score: 2, Insightful

      And every router. In every office. And every home.

      And who knows how many routers would have those addresses hardcoded in hardware.

      It's probably just as easy to go IPv6, when you consider the hassles and testing.

      --
      Be relentless!
    4. Re:Meh. Allocate 240.0.0.0/4. by Mashiki · · Score: 1

      Most routers and so on that I see use 10.0.0.0/255 or 169.0.0.0/255, I actually haven't seen a router use 240.0.0.0/4 since the mid 90's.

      --
      Om, nomnomnom...
    5. Re:Meh. Allocate 240.0.0.0/4. by XO · · Score: 2, Interesting

      I doubt that, there'd be no reason for anyone to write it up to not understand 240*

      --
      "Champagne for my real friends - and real pain for my sham friends!" http://ericblade.postalboard.com/
    6. Re:Meh. Allocate 240.0.0.0/4. by XO · · Score: 1

      He makes a case that 240/ addresses are not allowed with current stacks, but I just tested that with a few computers here, and it seemed to work fine .. 2 ver of Windows, and a modern Linux install.

      --
      "Champagne for my real friends - and real pain for my sham friends!" http://ericblade.postalboard.com/
    7. Re:Meh. Allocate 240.0.0.0/4. by MarkRose · · Score: 1

      Yeah, but they may not see them as legitimate, normal IP addresses. With all the short cuts that have been taken in the past, it's impossible to know.

      --
      Be relentless!
    8. Re:Meh. Allocate 240.0.0.0/4. by Mashiki · · Score: 1

      Kinda moot really. I'm not sure you could get the widespread adaption to use 240.0.0.0/4 anyway, not even counting patches, testing, more testing. Really what it boils down to, is a gigantic clusterfuck of epic proportions where ISP's and backbone providers have been told for the last 10 years "We're running out, switch." and they've replied with a "meh, whatever."

      --
      Om, nomnomnom...
    9. Re:Meh. Allocate 240.0.0.0/4. by jimicus · · Score: 1

      Which is precisely why he's writing sense and you're writing on slashdot.

      How about routers running VXWorks? Or some other OS? Have you tested all of those too? Go back in time a few years, VXWorks didn't even include a TCP/IP stack, you had to put in your own, so you'll have to test every implementation.

      How about Cisco's kit? Do they make assumptions in their OS? Older versions, do they work?

      Okay, so that all works. Firewalls - they tend to block addresses they don't recognise. Are you going to ask the entire world to reconfigure their firewalls (and upgrade if the firmware won't let them designate 240.0.0.0/4 as valid)?

      If you're going to audit and potentially upgrade all this equipment, you may as well go over to IPv6 and be done with.

    10. Re:Meh. Allocate 240.0.0.0/4. by Anonymous Coward · · Score: 1, Funny

      ...thus solving the problem once and for all!

    11. Re:Meh. Allocate 240.0.0.0/4. by 91degrees · · Score: 1

      But it will work, immediately, with a decent chunk of the hardware out there. Some will fail. Much will work. Another chunk will need a simple patch - very likely a config file. This has always been a possibility with the class E address range. It's always been quite likely that whatever the "future expansion" is, for routing the packet should be treated like any other. Class A/B/C were replaced by subnets without breaking the internet. I can't see how this is a substantially bigger change.

      Cisco proposed this in the past. I suspect they have away of dealing with it. Maybe this was just a way to make sure their support contracts are extended, but most Cisco customers are paying for that support anyway.

      So to upgrade to an IP4 variant, *some* hardware needs to be upgraded. To upgrade to IPv6, *all* hardware will.

    12. Re:Meh. Allocate 240.0.0.0/4. by Anonymous Coward · · Score: 0

      10.* is reserved for internal addresses. 169.* (I think it's actually 169.254.*) is reserved for autoconfiguration, i.e. automatic IP address assignment without using DHCP.

      240.* OTOH is multicast. Stuff like EIGRP communication between Cisco routers. Maybe uPNP too, not sure about that one.

    13. Re:Meh. Allocate 240.0.0.0/4. by DavidTC · · Score: 1

      Still over a third of a billion to go, which should be more than enough time for everyone to replace equipment that doesn't support IPv6, and deal with applications like Teredo that leak IPv6 address space across NATs and through VPNs.

      We've repeatedly had 'more than enough time'.

      Adding more time does not actually work. It is not a problem with time.

      I moved and hooked up Internet in August. I got the ISP's router. Guess what? No IPv6. Less than a year from the predicted end of IPv4, no IPv6.

      It's nothing to do with 'time'.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    14. Re:Meh. Allocate 240.0.0.0/4. by dvious · · Score: 1

      And have to push new TCP/IP stacks for most operating systems to get them to understand that that is now viable space. This would be effort better spent on just going IPv6.

      At this juncture, one might as well just go IPv6. Also keep in mind that a lot of OS's are IPv6 ready as is (of course the remaining 90% would still need implementation.) Plus with the network configuration changes that possibly have to be made to utilize Class E, again, might as well just go IPv6.

    15. Re:Meh. Allocate 240.0.0.0/4. by bbn · · Score: 1

      So to upgrade to an IP4 variant, *some* hardware needs to be upgraded. To upgrade to IPv6, *all* hardware will.

      False. Much hardware can already do IPv6 and yet more can be flashed to do IPv6. *All* modern operatingsystems come with IPv6 enabled by default.

    16. Re:Meh. Allocate 240.0.0.0/4. by Anonymous Coward · · Score: 0

      So? Use them for the public IP's of NATs. Sure, servers would need updates to support them, but the client side of the NATs couldn't care less.

      You could even set up a 1-to-1 NAT, remapping up to an entire /8 from e.g. 248.x.x.x to 10.x.x.x. That way, each client on the NAT side would have a fixed public IP that's directly related to the internally visible IP. All the cheap consumer crap wouldn't care, yet semi-intelligent P2P applications wouldn't be bothered at all.

  8. Seven eights?!? We have PLENTY left!!! by Anonymous+Freak · · Score: 1

    end of line

    --
    Another non-functioning site was "uncertainty.microsoft.com."
    The purpose of that site was not known.
  9. NAT! by markdavis · · Score: 1

    NAT Time!
    Granted, it is not a solution for everything, but there are just TONS of networks that could be behind NAT's and don't need anywhere near the IPV4 space they have. I have a feeling NATing will suddenly become a lot more popular.

    1. Re:NAT! by Xugumad · · Score: 5, Insightful

      I'm frankly terrified that the "solution" to this is not to fix the underlying issue, but instead to layer work-arounds on it.

      Not to mention, unless I'm much mistaken a NAT can support 65536 connections at maximum (number of valid ports for outgoing connections). A /8 network might be okay, but putting a larger network behind NAT isn't going to help, and you can't layer them (because you still need a port free for the connection). We're going to run out, NAT just delays the inevitable by layering a giant administrative headache on the top.

    2. Re:NAT! by Imagix · · Score: 1

      Yes, but they can use carrier-grade NAT. You're thinking of the ISP only using one IP to do this. They get 65k ports per IP that they reclaim from giving out to consumers.

    3. Re:NAT! by EdIII · · Score: 2, Insightful

      The whole thing is a lesson in waste and inefficiency.

      Every business that I have ever known, or been involved with its network, was delivered anywhere from 4-32 IP addresses on their T1 lines. Just recently I setup a new business cablemodem connection and they just gave me ,without me asking, 8 IP addresses.

      What the heck do I need 8 IP addresses for at a branch office? I don't really know of any businesses that really need a static IP address, much less multiple ones to host multiple publicly addressable servers. Everyone is either using the "cloud" or hosted services at a colo.

      Demand is going to change things quite quickly. I expect that the first T1 line that is held up because there is no IP address for it is going to start things rolling. NAT is not a perfect solution and I sincerely doubt a company paying $500+ a month for a T1 is going to settle for being treated that way. Certainly not the IT staff.

      Most guys I know are quite reasonable. If any ISP came to me and asked to reduce me down to 1 or 2 IP addresses per branch office or connection I would readily agree.

      Now in the colo... that is another matter entirely. Some places I work with actually use a couple hundred different IP addresses for legitimate reasons.

      It's all waste. IP address reclamation will get us back at least 40% of the address space.

    4. Re:NAT! by Burning1 · · Score: 2

      NAT can be implemented a huge number of ways.

      On small class C networks, especially when using consumer grade equipment, it's very common to put the entire network behind a single external IP address. Each outgoing connection is assigned a port on the NAT box. Network utilization on a class C should never be so great as to exhaust the number of available ports. This is many to one NAT.

      For larger corporate networks, it's common to use a pool of IP addresses on a more advanced router. Because each IP address has it's own pool of available ports, many more connections are available.

      Finally, it's possible to abhor the use of port mapping, and simply assign an IP address to each client host that connects through the router, and simply redirect all traffic back to the client that initiated the first connection. Since each client has an entire IP, all traffic to that IP would be redirected back to the client, with a 1 to 1 port map. This would essentially permit any protocol to work through the NAT box, including active FTP and some of the other PITA protocols This approach also means that you only have to have enough IPs to support your active users, instead of every user on your network.

      With that said, it's been a long time since I was building firewalls, so some of my terminology may be off, or incorrect. Hopefully someone can clarify any mistakes I've made.

    5. Re:NAT! by Nethead · · Score: 3, Interesting

      IP address reclamation will get us back at least 40% of the address space.

      But not necessaries usable addresses on routable boundaries.

      --
      -- I have a private email server in my basement.
    6. Re:NAT! by TooMuchToDo · · Score: 1

      What are you going to do? Go somewhere else if you try to get IPs from an ISP and you can't get any? Good luck with that. It'll last only until Provider-dependent IPs are used up.

    7. Re:NAT! by hedwards · · Score: 1

      You're mistaken. That would be Port Address Translation.

    8. Re:NAT! by jewelises · · Score: 2

      Not to mention, unless I'm much mistaken a NAT can support 65536 connections at maximum (number of valid ports for outgoing connections).

      I believe that with TCP the limit is 65536 concurrent connections to one host and port. In other words, you can use the same source port for two concurrent, outgoing connections at the same time as long as the destination is different. (This is similar to the principle of how more than one connection to a single port on a server work without problems as long as the client host/ip combination is different.)

    9. Re:NAT! by lidocaineus · · Score: 1

      If you knew about provisioning usable IPs to end users, you would know that subnetting on subnet boundaries is a LOT nicer than handing out individual IPs (ala home ISPs). Basically the overhead / admin of handing out one ISP per endpoint is terrible unless you're doing DHCP, which is why a lot of ISPs operate that way. Likewise the second you switch over to their business offerings, you either get slightly glorified consumer level IP space (one IP, handed out by DHCP), or you get allocated a subnet. Each one is on a completely different network because mixing the two is a pain in the ass. When you get single statics, most of the time you're secretly getting a subnet allocated to you, but it's either filtered down to one IP or they don't do any filtering, and you can use the other IPs and they don't even bother checking (this happens quite a lot).

      And as someone else said, returning IPs to ISPs does nothing for coalescing those into usable groups. It may give that ISP or even the provider above it back some space, but there's no real way you're going to be able to help out a starved network provider on the other side of the world with some freed IPs of your own.

    10. Re:NAT! by zippthorne · · Score: 1

      It's by design. That way, with "carrier grade NAT" you can't just connect, get an IP, and run a home server for your emailz or whatever, you have to by the premium "routable" plan.

      It turns the formerly interconnected "web" even more into a centrally controlled "snowflake" model. Much more profitable for the utilities, but also far more fragile than it needs to be, too. All for the low, low cost of not bothering to upgrade.

      --
      Can you be Even More Awesome?!
    11. Re:NAT! by afidel · · Score: 1

      We used 8 IP's in our block just to setup MS universal access gateway to allow secure access to OWA and some file shares (yeah I know, real efficient but hey there's no additional recurring charges and it just works with Win 7 no additional software to mess with).

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    12. Re:NAT! by Anonymous Coward · · Score: 0

      Most IPSEC gear requires a fixed ip-address by design, to use AH. I'm not talking about linux or bsd-based routers, I'm talking about what most companies actually buy (cisco, smc, netgear, whatever). I guess it's prime time (finally) for openvpn-based vpns.

    13. Re:NAT! by Anonymous Coward · · Score: 1

      Actually it can support more than 65536 connections depending on the "cone" nat that your router supports. For some the source/dest ip/port and protocol come into play so you can have (number of dest IP * source ports * dest ports * protocols) 2^32*2^16*2^16*3 (3 protocols for TCP/UDP/ICMP since these are easily nattable)... but I think you would run out of memory before you ever use that many NAT associations ;)

    14. Re:NAT! by blueg3 · · Score: 1

      You don't know of any businesses that need a static IP address?

      So, you don't know of any businesses that use VPN or having public-facing servers? These businesses don't run their own e-mail servers?

    15. Re:NAT! by uolamer · · Score: 1

      Every T1 I ever saw around here had a whole class C (256 ips). On my T1 (that I no longer have) I managed to get 3 class C's by filling out that paper work with networks and servers that did not exist. Then on top of that the ISP assigned me IPs that were intended for Dallas routing not Houston, so they gave me 3 more class Cs for me to move to, but I never did, I ended up just keeping all 6 for a total of 1536 IP addresses when I could have done it with 8 or less. I did use all the IPs for a little project once, but I never needed them. Again I do not have this anymore lol.

      --
      s/©//g
    16. Re:NAT! by Anonymous Coward · · Score: 0

      What the heck do I need 8 IP addresses for at a branch office? I don't really know of any businesses that really need a static IP address, much less multiple ones to host multiple publicly addressable servers. Everyone is either using the "cloud" or hosted services at a colo.

      Let's see.....

      1. VoIP
      2. DNS
      3. email server

      If you don't run these 3 locally, then you are fucked when your network is down. And you also need at least 1 for the gateway. So 4. Now, you ideally want all your computers on public IPs too. Why? Traceability.

      NAT gives you that extra IP addresses at cost of traceability and robustness. Unless you want to record every single packet that goes in and out of your network. Of course then you maybe breaking wiretapping laws....

      Now, if you ever setup an IPv6 network, you would understand how beautiful it is not to fuck around with NAT. Just setup a /48 or /64 and be done with it.

    17. Re:NAT! by ugen · · Score: 2

      No, there is no such limitation. You are mistaken. Connections can be matched based on both a port and a remote destination, so the same mapped port could be used for multiple connections.

      What you wanted to say is that NAT is limited to 65535 unique host mappings (i.e. that many IP's hidden behind one IP). Well, if we can extend IPv4 number of hosts that many times, we should be good for a few thousand years :)

    18. Re:NAT! by ugen · · Score: 1

      no such limitation.
      you are limited to 65535 *hosts* behind a single NAT IP address.

    19. Re:NAT! by DarkOx · · Score: 1

      You can use more than one address in a NAT pool.

      --
      Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
    20. Re:NAT! by Anonymous Coward · · Score: 0

      No, you have 64K connections per destination IP address.. You can re-use the same NAT'd source port, as long as it's to two different IPs.

    21. Re:NAT! by Wannabe+Code+Monkey · · Score: 1

      Not to mention, unless I'm much mistaken a NAT can support 65536 connections at maximum (number of valid ports for outgoing connections).

      I think some solutions have this limit but not all. Let's use some smaller numbers so it's easier to comprehend, let's say say there are only 4 valid port numbers and you've got 4 customers all wanting to connect to a different external host all at once. That's obviously fine, you'll have an internal mapping of:

      • 192.168.1.101:1 -> ISP_IP:1:google.com:1
      • 192.168.1.102:1 -> ISP_IP:2:yahoo.com:1
      • 192.168.1.103:1 -> ISP_IP:3:facebook.com:1
      • 192.168.1.104:1 -> ISP_IP:4:youtube.com:1

      Now let's say you add another user on 192.168.1.105 who wants to connect to farmville.com at the same time as our other users. Impossible, right? Nope, there's nothing stopping the ISPs router from overloading any of the ports as long as they're going to different external host:port pairs. You can have this mapping:

      • 192.168.1.101:1 -> ISP_IP:1:google.com:1
      • 192.168.1.102:1 -> ISP_IP:2:yahoo.com:1
      • 192.168.1.103:1 -> ISP_IP:3:facebook.com:1
      • 192.168.1.104:1 -> ISP_IP:4:youtube.com:1
      • 192.168.1.105:1 -> ISP_IP:1:farmville.com:1

      Both google.com and farmville.com will be sending packets to port 1 at your ISP, but since they're coming from different host:ip pairs, the router can still send the packets to the right internal host. What you can't have is the following:

      • 192.168.1.101:1 -> ISP_IP:1:google.com:1
      • 192.168.1.102:1 -> ISP_IP:2:yahoo.com:1
      • 192.168.1.103:1 -> ISP_IP:3:facebook.com:1
      • 192.168.1.104:1 -> ISP_IP:4:youtube.com:1
      • 192.168.1.105:1 -> ISP_IP:1:farmville.com:1
      • 192.168.1.106:1 -> ISP_IP:1:farmville.com:1

      Because when farmville.com send a packet to ISP_IP:1, the NAT won't know where to send it internally. So I think the theoretical limit is 65536 connections per external host IP:port pair. Of course most traffic these days is just to port 80, so this effectively becomes 65536 simultaneous connections per external host. As an ISP, you'd probably want to look at the max simultaneous connections to a single external host you get, and split up your customers into separate NATed networks whenever it approaches 65536.

      --
      We always knew Comcast was corrupt, here's the proof: http://tech.slashdot.org/comments.pl?sid=1909890&cid=34545432
    22. Re:NAT! by DavidTC · · Score: 1

      This approach also means that you only have to have enough IPs to support your active users, instead of every user on your network.

      I'm not sure this makes much difference, in the days of all applications assuming they're online all the time. If the computer's up, it's probably made some connection, somewhere, even if it's just to check for updates.

      Now, an interesting trick might be to use port mapping just for HTTP and email ports (Which don't have any reverse-connections at all.), but flip to an IP when anything else is used.

      However, that introduces some weird logistical nightmares of dealing with existing connections during the switch, and might not make much difference when people are running Skype and IM clients and stuff.

      And it might not work for 'smarter' protocols, which might use HTTP to connect to connect to a server, at which point the server tries connecting backwards to them to see if they're going to need to proxy connections, or if two people can connect directly to each other. I think some games work this way.

      If you were running a server, of course, it wouldn't work, but if you were running a server you'd be knowledgeable to run some program that would trip the individual IP.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    23. Re:NAT! by mpsheppa · · Score: 2

      Not to mention, unless I'm much mistaken a NAT can support 65536 connections at maximum

      This is not true, at least for TCP connections. While many implementations might have this limit for simplicity sake, there is no actual reason why you can't use the same local port for different destinations, e.g. TCP port 1000 could have active connections to www.slashdot.org on port 80 and to www.microsft.com on port 80 and there is sufficient information in each packet to work out which of those two connections each packet belongs to. You see this type of multiplexing in reverse on servers where port 80 might have thousands of connections to it active at once.

    24. Re:NAT! by EdIII · · Score: 1

      Going someplace else, or being obstinate with an ISP, is not my point.

      I know there is going to be a time in which the IPv4 address space is truly exhausted at the ISP level, even with all the customers only having one address. The move to IPv6 is needed quite badly, yet everybody involved is dragging ass.

      My point is, that at the ISP level, there is a huge amount of waste. HUGE. There has to be. When every connection that I know of, at a business level, is assigned more than one IP address, that is waste 95% of the time. I know of only a few use cases where multiple publicly addressable IPs are needed. Most of those are not suited for anything but a colo/datacenter anyways.

      I really do think the ISPs are sitting on a large amount of "idle" IP addresses.

      So all I am really saying, is that when all those /8s are assigned it's not going to be the end of the world the next 48 hours, 48 days, or even 48 months. We have some time, and we really need it, because all the manufacturers are dragging ass.

    25. Re:NAT! by EdIII · · Score: 1

      If you knew about provisioning usable IPs to end users, you would know that subnetting on subnet boundaries is a LOT nicer than handing out individual IPs (ala home ISPs). Basically the overhead / admin of handing out one ISP per endpoint is terrible unless you're doing DHCP, which is why a lot of ISPs operate that way.

      I can understand that it may be easier, but I don't think it is smarter. DHCP is a really good solution, which may be why it used so often in the consumer space.

      Likewise the second you switch over to their business offerings, you either get slightly glorified consumer level IP space (one IP, handed out by DHCP), or you get allocated a subnet. Each one is on a completely different network because mixing the two is a pain in the ass. When you get single statics, most of the time you're secretly getting a subnet allocated to you, but it's either filtered down to one IP or they don't do any filtering, and you can use the other IPs and they don't even bother checking (this happens quite a lot).

      You're right. Mixing the two is a pain in the ass. I know of a few ISPs that use DHCP in their business offerings and encourage their end users to *not* enter the static IP address, but actually let their DHCP server handle it. Basically, "Trust us. It will always be reserved".

      As far as not checking, I think that is just laziness. They should be checking.

      And as someone else said, returning IPs to ISPs does nothing for coalescing those into usable groups. It may give that ISP or even the provider above it back some space, but there's no real way you're going to be able to help out a starved network provider on the other side of the world with some freed IPs of your own.

      I know that freeing up my unused IP addresses in my own country has no effect on another country. I am not that ignorant :)

      Now as for coalescing the returned IPs into usable groups, it would be easy to do if DHCP was used. I think DHCP is a fantastic idea and I have no problems with the trust issue at all........ because....

      I have already experienced a complete freakin' nightmare with Sprint (The mentally challenged children of the IT world). I had them change static IPs on business accounts over 20 times in one year at multiple locations with no notice at all . First time I spent 2 hours on the phone when service went out and it took a supervisor (of a supervisor) to figure out the static was changed. It eventually became my goto diagnosis when one of those branch offices went down and the normal routine was not working.

      So my belief that static IP addresses will truly stay the same over an 18-24 month period is pretty shaky at this point. To make my life easier I do rely on dynamic DNS, even with statics. All of the VPN tunnels are configured with host names instead of IP addresses. This makes administration a lot easier for me. With a consistent naming convention I can quickly administrate any router at any office. Quite a few of them have backup connections too, so if a static were to suddenly change (or a real tech support issue arises) I can still access the site when the monitoring services indicate it is down.

      Now if all those business connections delivered my "static" IP address with DHCP? Even easier to administrate then before. The ISPs could change my static any time they wanted (later at night preferred obviously) and high resolution dynamic DNS would bring the connection back up pretty quickly. The backups would take over anyways, but a few seconds of downtime around midnight (with or without advance notice) would not be the end of the world.

      You really hit the solution right away - DHCP. Now the only thing I would want to feel even better would be custom dynamic DNS configurations on the equipment instead of dyndns.com that would allow me to integrate with our own DNS servers. It's OK though, we use dyndns.com as a backup

    26. Re:NAT! by EdIII · · Score: 1

      I use host names with VPN tunnels and Dynamic DNS (even on the statics). VPN is not that much of an issue for me. Two of the business connections that I directly administrate use DHCP to deliver me my static IP. I could enter it in directly, but why? DHCP is the better solution.

      Yes, I really don't know that many businesses (with business connections) that really reaalllly need a static. Most I encounter are running zero public services and have no need for VPN.

      I can't tell you how many small accounting firms, insurance offices, doctors offices, etc. that had remote access to a desktop PC being their only real need. Kind of hard to justify the extra $5 to $10 a month on a static do to that when Dynamic DNS not only solves the problem but provides an easier to use and remember name for the client. Additionally, there are some pretty decent free alternatives to GoToMyPC.com, radmin, etc. that handle all that for the client and don't require a static IP to operate.

      E-mail servers? .............

      I know I am asking for it, but I don't think most businesses should be doing that off a business connection anyways. That stuff should be hosted in a datacenter or with a dedicated service. More reliable and cost effective anyways. I steer businesses away from self-administrating their own email services. Not a good idea for a lot of reasons.....

      SPAM and the expertise needed to run one. Anywhere. What software are you using? Is it patched? What are the vulnerabilities? Is a complete retard responsible for the configuration and left an open relay? Did you get blacklisted? Is anybody actually fucking "awake" and reading the postmaster account? Or....... did we just setup and email server and walk away with "prayer" being our support strategy? Old IT guys learn things the hard way sometimes. Even though you *could* do it yourself, maybe you *shouldn't* be doing it yourself. Companies like mail street, ice mail, app river, etc. really know what the heck they are doing and could be cost effective for a small organization when you consider everything.

      Email servers running on business connections is a bad idea because email needs to be there all the time. I had an accounting firm with a full MS Exchange server on location running their own MTA in addition to it. MSCE was running it and things went smoothly till some fucktard (their words) with a backhoe took out their T1 for a week. That not only removed their ability to send emails out, but all of their clients and vendors attempting to deliver email to them started getting permanent delivery notices, as well as those transient ones. Bad image. Not any different than the phone company saying the number is disconnected and no longer in service or walking up to the building and seeing it gutted and empty. After the first few dozen or so phone calls from people asking the owner why those transient delivery notices were coming back he got pissed off and asked me how to make it more reliable. Hosted in a colo was my first solution since this was before hosted exchange services were as widely popular as they are now.

      As for those public facing servers..... if you are running a serious business that requires bandwidth and reliability you ain't using a business ISP connection. A bonded T1 costs around $600 dollars on average where I am and a dedicated server in most colos costs around half that. The colo will give you something like a floor of 2 mbs with a max of 10 mbs on your dedicated server. That bonded T1 is only going to deliver 3 mbs with no scaling. Colo is a smarter way to go in nearly every case.

      Now if you are smaller than that, don't have the IT staff, and maybe you are (or aren't) using a business connection, perhaps Dynamic DNS is the way to go instead of a static anyways.

    27. Re:NAT! by Anonymous Coward · · Score: 0

      unless I'm much mistaken a NAT can support 65536 connections at maximum

      If it's not a terrible implementation, you are. The socket is actually identified by the combination of source and destination ports as well as the destination IP address. So you get around 64k (don't use well-known source ports for connections from the NAT gateway) possible connections per destination host per destination protocol. The gateway's mapping table will die a lot earlier than that, though.

  10. Exploits by Anonymous Coward · · Score: 0

    Are there any cool exploits which will emerge between the used up pool and IPV6 adoption? Will collisions happen?

  11. I wish we could... by MachDelta · · Score: 1

    Let it burn to the ground and start fresh. IPv256! Decentralized DNS! All the good stuff. Oh well.

    1. Re:I wish we could... by blair1q · · Score: 3, Funny

      If we are to do that then the address field of the packet header should be a null-terminated string, not a fixed or limited size.

      Note that if you embed the length in the header you have to decide how wide the length field is, which then limits the string length. Though I'll accept arguments to the effect that an 18e18-character address should be enough for anyone.

    2. Re:I wish we could... by Nethead · · Score: 1

      If I hadn't had commented earlier I would have modded your post as 'funny'.

      That or you don't understand how routers really work inside.

      --
      -- I have a private email server in my basement.
    3. Re:I wish we could... by John+Hasler · · Score: 1

      He just wants to go back to bang paths.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    4. Re:I wish we could... by ziggyzaggy · · Score: 1

      naw, we don't need that archaic shit to do this, we can use the newfangled DECnet Phase V adjacency databases. and get off my lawn.

    5. Re:I wish we could... by ImprovOmega · · Score: 1

      256-bit addressing would enable you to address nearly all atoms in the observable universe. (~10^77 addresses vs. estimate 4*10^79 atoms in the universe). The great thing about exponents is that it's easy to get up to a size that should be readily sufficient for all practicably foreseeable scenarios. In all honesty, while 128-bit addressing won't quite address every atom in the earth, it should be fine until we start a galactic colonization plan and develop FTL communications and travel. Until then though, it should be plenty enough.

    6. Re:I wish we could... by MistabewM · · Score: 1

      640k should be enough for anyone...

      --
      "A learning experience is one of those things that says, 'You know that thing you just did? Don't do that.'" - DNA
  12. a gazillion IPv6's spamming? hell no by ralphdaugherty · · Score: 0, Troll

    I can handle blocking IPv4 blocks based on geography given I have a US oriented website. But if you guys think you're going to unleash spammers from hell on me with a gazillion IP addresses, think again. As far as I'm concerned, you can give IPv6 to the Russians and Chinese on their own spam network.

    The range of IPv4 addresses these people spam from is insane. Just give them back to us and go take IPv6 and spam yourselves into oblivion.

      rd

    1. Re:a gazillion IPv6's spamming? hell no by Anonymous Coward · · Score: 0

      What would be _really_ nice is if they allocated them by country or region or whatever.

      Yes I know, I'm a horrible person..

      And yes I've heard everyone saying that most spam _actually_ comes from North America.. but none the less blocking access to a few select IPs in "that area" of the world helps immensely on the junk traffic.

    2. Re:a gazillion IPv6's spamming? hell no by tonan · · Score: 1

      I thought the network portion of the address (the first 64 bits) had bits allocated for region. Couldn't you just filter out those regions? Or deny all and then load allow filters. I don't know, I'm not a network guy.

    3. Re:a gazillion IPv6's spamming? hell no by Lennie · · Score: 1

      No that did not happen.

      Their is no IPv6-regions you speak of, this was an idea which was never implemented.

      --
      New things are always on the horizon
    4. Re:a gazillion IPv6's spamming? hell no by ralphdaugherty · · Score: 0

      what did unhappy spammers give me a troll rating because I called them out? Ten years here and I get a troll for stating my opinion.

        rd

    5. Re:a gazillion IPv6's spamming? hell no by ralphdaugherty · · Score: 1

      I thought the network portion of the address (the first 64 bits) had bits allocated for region. Couldn't you just filter out those regions? Or deny all and then load allow filters. I don't know, I'm not a network guy.

      That's what I do with ipv4. Are they going to keep the same ARIN etc. setups? Even if they do, the gazillion address space means that the number of ranges will be huge. I deal with 255 x 255 as currently exists, but basically this is giving the commie criminals free range to attack from so many addresses that no one will be able to block them. You ought to see the ranges they attack from in 255 x 255.

        rd

    6. Re:a gazillion IPv6's spamming? hell no by ralphdaugherty · · Score: 1

      No that did not happen.
      Their is no IPv6-regions you speak of, this was an idea which was never implemented.

      Thanks for the answer.

        rd

    7. Re:a gazillion IPv6's spamming? hell no by Lennie · · Score: 1

      The idea was that if regions had their own range you could just agregate everything in that region (use 1 large IP-block to represent many smaller ones). For example an other continent.

      This would safe memory and CPU-time on routers.

      It was a nice idea, but it doesn't work in real life. In real life large networks span the globe and similair problems.

      --
      New things are always on the horizon
    8. Re:a gazillion IPv6's spamming? hell no by ralphdaugherty · · Score: 0

      The idea was that if regions had their own range you could just agregate everything in that region (use 1 large IP-block to represent many smaller ones). For example an other continent.

      This would safe memory and CPU-time on routers.

      It was a nice idea, but it doesn't work in real life. In real life large networks span the globe and similair problems.

      Thanks for the explanation. ARIN and the other geographical assignment areas work fine. I increasingly see an ipv4 split between continents but still is pretty good at 255.255.128 or so.

      I see the ipv6 people here are pretty rabid but I'm not joking. They're crazy if they think the rest of us are going to allow IP attacks from anywhere in a gazillion addresses.

      The rest don't know it yet, but they will when all hell is unleashed on them by the attackers who must be giggling about this. In fact, the number of IP ranges keep being added to former USSR is amazing. Do you have any idea how many address ranges are assigned to Latvia, for example. just to pick a very small country with an amazing range of addresses generating spam attacks.

        rd

    9. Re:a gazillion IPv6's spamming? hell no by Lennie · · Score: 1

      Who cares if people use more addresses ? We are going to run out of IPv4 anyway and it will happen 'fast' or faster.

      --
      New things are always on the horizon
    10. Re:a gazillion IPv6's spamming? hell no by Lennie · · Score: 3, Informative

      What is the difference for IPv6 ?

      Their currently is one IPv6-DNS-blocklist, they use something like: 5 bad IP's in one /64, block the whole /64, 5 bad /64 block the whole /48. Or some system like that.

      Or do you mean their isn't enough tooling yet ?

      --
      New things are always on the horizon
  13. IPv6 Compatability by Konsalik · · Score: 4, Funny

    Remember before Y2k almost all computer manufacturers placed "Y2k Compliant" or "Y2k Ready" logos on everything from bare computer cases to speakers? Well I cant wait for my "IPv6 Ready" USB keyboard...

    1. Re:IPv6 Compatability by froggymana · · Score: 1

      Don't forget about your IPv6 ready monitor and vacuum. Oh, and don't forget that it will probably be labeled with works with "Windows Vista/7".

      --
      "To prevent this day from getting any worse, I'll just read ERROR as GOOD THING" 1GJU8xLuDKDxEs4KLf8fAGyptoDsqvEsBT
    2. Re:IPv6 Compatability by omnichad · · Score: 1

      I remember seeing MP3-ready speakers - never saw Y2K ready computer cases.

    3. Re:IPv6 Compatability by Anonymous Coward · · Score: 0

      I remember when Windows 95 first came out and all of the Windows 95 Compatible! stickers came out... CompUSA had a pallet of Windows 95 compatible compressed air. I kick myself for not buying one every time I think about it :D

  14. indian giver.... by metalmaster · · Score: 1

    Take em back! If we run out just reassign them. Do we really need an internet connected refrigerator to tell us that we need milk and $grocer has the best price?

    1. Re:indian giver.... by Formalin · · Score: 1

      I wouldn't be surprised if the refrigerator has a whole /8, with the... lets say... inefficiency of some of the early allocations.

    2. Re:indian giver.... by blair1q · · Score: 1

      Well, yeah. The only question is will we control it or will $advertisers control it?

    3. Re:indian giver.... by hedwards · · Score: 1

      It's not so much inefficiency as it is that they weren't expecting IPv4 to still be in use all these years later. Which is how some of those corporations got gigantic ranges that they're probably still using only a fraction of.

  15. Fuck Everything, We're Doing Five Octets by Anonymous Coward · · Score: 0

    Would someone tell me how this happened? We were the fucking vanguard of addressing in this country. The ICANN IPv4 class/8 was the block to own. Then the other guy came out with a IPV6 block. Were we scared? Hell, no. Because we hit back with a little thing called NAT. That's network address translation. For flexibility. But you know what happened next? Shut up, I'm telling you what happened--the bastards went to IPV6 tunnels. Now we're standing around with our cocks in our hands, selling four octets and a NAT. Flexibility or no, suddenly we're the chumps. Well, fuck it. We're going to five octets.

    Sure, we could go to IPV6 next, like the competition. That seems like the logical thing to do. After all, IPV4 worked out pretty well, and IPV6 is the next number after IPV5 which seems to have disappeared. So let's play it safe. Let's make a longer address and call it the 4aff:fe0e. Why innovate when we can follow? Oh, I know why: Because we're a business, that's why!

    1. Re:Fuck Everything, We're Doing Five Octets by Anrego · · Score: 1

      All kidding aside, they probably _should_ have just increased the address space of IPv4.

      IPv6 may be better.. sure.. but it is too different for its own good.. and requires too much of a drastic change for most networks to implement it.

    2. Re:Fuck Everything, We're Doing Five Octets by rekenner · · Score: 1

      ... That ... that wouldn't work. For the same reason we can't just magically convert to IPv6. It would take massive replacements of hardware to do even that. So why not just overhaul the entire thing and apply years of knowledge if we have to overhaul everything anyway?

    3. Re:Fuck Everything, We're Doing Five Octets by Anrego · · Score: 1

      Hardware is easy at the large company level. "Hey, we need to spend $xxxxxx to stay in business". Getting people to use something when they don't absolutely have to isn't.

      People are used to the way IPv4 works.. and specifically the way NAT works.

      IPv6 requires people to figure out how to have what they used to have with something different. Some people love this, some people don't.

      I understand that now seemed like a good time to "fix everything". The internet really is the definitive legacy problem.. you can't just roll out a new patch every month.. and this is probably the only chance they'll ever have to make sweeping changes.

      But the other side is that we are hitting the reset switch on maturity. As buggy as stuff is, I don't think it's gonna compare to the years of exploits that IPv6 is going to bring. IPv4 grew with the hackers.. IPv6 is going to be transplanted..

    4. Re:Fuck Everything, We're Doing Five Octets by Nigel+Stepp · · Score: 1

      Please tell me how transition to your larger ipv4 is substantively different from transition to ipv6. Is it the case that you want to increase address space while still being able to use addresses from the smaller address space? How will that work?

      (continue this discussion for years, and you will have reproduced a chunk of the ipv6 design process)

      --
      4096R/EF7BAFA6 79E1 DF98 D09D 898F 9A11 F6F0 DDDC 23FA EF7B AFA6
    5. Re:Fuck Everything, We're Doing Five Octets by Anrego · · Score: 1

      Less "new shit" to learn.

      I would bet good money that IPv6 NAT is going to emerge, because people are used to thinking in the NAT way. Even though this is what a large part of IPv6 is meant to avoid.

    6. Re:Fuck Everything, We're Doing Five Octets by John+Hasler · · Score: 1

      > I would bet good money that IPv6 NAT is going to emerge

      It already has.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  16. Well by openback · · Score: 2

    Does anybody wanna buy an......eight? http://www.youtube.com/watch?v=rfelvI_ikf4

  17. ipv6 by Anonymous Coward · · Score: 3, Insightful

    Whens slashdot going to go ipv6?

  18. 2011 - the year of IPv6 on the desktop! by Alwin+Henseler · · Score: 1

    (see subject)

    IPv4 is dying - Netcraft confirms it, bla bla...

    In the mean while, why not simply create some IP addresses? As long as you keep them to yourself, no-one will complain...

  19. So slashdot, when are YOU getting on ipv6 by Anonymous Coward · · Score: 3, Interesting

    Because I'm on it right now yet I see no AAAA record. Pretty much anyone on Comcast can get a 6rd address at the drop of a hat; native dual stack is coming. Other providers will have to get on the bandwagon soon I gather. Whine endless about the end of ipv4 after you've already made arrangements to join the modern age.

  20. Cheap DSL routers by MichaelSmith · · Score: 1

    For years now I have had this netbsd box as my front end. The DSL modem plugs into an ethernet port on the PC which NATs in two directions: a local hard wired network and wifi. So after y'all slashdotted by server I stated looking at a rebuild around this nice fast AMD64 machine but it is light on PCI slots so I can't have the two ethernet cards plus atheros wifi plus serial that I need.

    So last night I splashed out on a Netcomm wifi router and the plan I formulated later in the evening was to use it as my front end with the DMZ trick pointing to the BSD box.

    Then this morning the penny dropped. NetBSD supports IPv6 perfectly well but the netcomm configuration pages don't mention it. But most people use these little wifi routers. Are they screwed? Am I screwed if I rely on this router?

    1. Re:Cheap DSL routers by drinkypoo · · Score: 1

      Most of your cheap little crap routers have 32 bit processors with no larger data types and a two-bit amount of RAM so IPv6 will choke them like a bitch if it is even feasible to support on them.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:Cheap DSL routers by countSudoku() · · Score: 1

      What the sam hell are you babbling about? Enable your IPv6 routing and leave us alone!

      --
      This is the NSA, we're gonna geet U h@x0r5! Also, what is a h@x0r5?
    3. Re:Cheap DSL routers by icebraining · · Score: 1

      Yes, cheap routers without IPv6 support will need to be firmware upgraded, if the hardware can handle it and the manufacturer releases one, or replaced at the user's expenses if it doesn't.

      I'm on the same boat, but since my ISP doesn't give out IPv6 addresses yet (although it already has them assigned), I'm procrastinating.

    4. Re:Cheap DSL routers by mmontour · · Score: 1

      If the "crap" router vendors can't support IPv6 on their current hardware then they should upgrade to an Arduino.

    5. Re:Cheap DSL routers by drinkypoo · · Score: 1

      It's not that it can't be done, it's that you would have shit performance, though not half as shit as you get with an Arduino.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  21. all because MS won't put TLS on XP... by dAzED1 · · Score: 1, Interesting

    what needs "public" IPs? What /really/ needs them? routing interfaces between networks, and websites using ssl. Since a very large percentage of the web surfing population is still using windowsXP or older, we can't use TLS (which has been around for ages). So instead, every single ssl-enabled site needs it's own IP. I work at a small company, and even we could release hundreds of public IPs if WindowsXP could use tls instead of ssl.

    1. Re:all because MS won't put TLS on XP... by drinkypoo · · Score: 4, Insightful

      what needs "public" IPs?

      Anything that wants to participate in the peer-to-peer internet as a peer.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:all because MS won't put TLS on XP... by Anonymous Coward · · Score: 0

      What /really/ needs them?

      Well, unless you want to use UPnP, pretty much everything which wants to act as a server. (P2P, VoIP, HTTP/FTP, [Insert favorite user-hosted game here], etc, etc)

      Since a very large percentage of the web surfing population is still using windowsXP or older, we can't use TLS (which has been around for ages).

      I'm not sure I follow, what part of XP doesn't support TLS?

    3. Re:all because MS won't put TLS on XP... by Lennie · · Score: 3, Informative

      Actually it does support TLS, it just doesn't support SNI. Or actually IE and Safari only, because they use the windows library. Firefox and Chrome use the library first developed at Netscape and Opera uses OpenSSL.

      But as SNI is the part that adds 'Namebased virtual hosts' to TLS, the result is the same as you mentioned. Everything that wants to use a certificate still needs it's own IPv4-address (and/or IPv6 address) for now.

      --
      New things are always on the horizon
    4. Re:all because MS won't put TLS on XP... by Anonymous Coward · · Score: 0

      So instead, every single ssl-enabled site needs it's own IP. I work at a small company, and even we could release hundreds of public IPs if WindowsXP could use tls instead of ssl.

      Dude, this is simple. TLS + SAN Certs, problem solved.

    5. Re:all because MS won't put TLS on XP... by shentino · · Score: 4, Insightful

      Sounds like something ISPs actually wouldn't mind obstructing.

    6. Re:all because MS won't put TLS on XP... by paul248 · · Score: 1

      Precisely. Now whose side are you on?

    7. Re:all because MS won't put TLS on XP... by ugen · · Score: 2, Informative

      Not true at all. It is possible to establish a direct peer to peer connection between two hosts which are *both* behind NAT. You do need a "rendezvous" server to bounce a few packets - that's not hard to do, and can be easily accommodated as part of any other P2P infrastructure (or even outside of it).

      In fact, running P2P in that manner would significantly increase privacy of its participants because to anyone outside a given network there will no longer be a visible single mapping of IP to a "person" (or household etc).

    8. Re:all because MS won't put TLS on XP... by innocent_white_lamb · · Score: 1

      what needs "public" IPs?
       
      I use ssh and vnc connections to remotely administer and backup a number of the machines that I look after for various businesses. I need static IP addresses on both ends because (a) I have to be able to find them on the Internet and (b) they will only accept an incoming connection from specific IP addresses.
       
      I run webservers, email servers and even a streaming audio server for some small businesses and they all require public IP addresses (not to mention domain names, etc.)
       
      It should be obvious that a lot of stuff requires a "public" IP address. Even POS tills have to be able to find the central office to write their sales records.
       
      The average home user (if such a thing exists) may not need a static public IP address but most businesses require at least some static IP addresses.

      --
      If you're a zombie and you know it, bite your friend!
    9. Re:all because MS won't put TLS on XP... by this+great+guy · · Score: 1
      This is untrue. At work I have set up many times Apache serving different HTTPS name-based virtual hosts using the same IP and port. It is possible by creating a certificate with different "subject alternative names" (for example by passing a configuration file to "openssl req -config xxx" defining subjectAltName=DNS:"foo.example.com",DNS:"bar.example.com"). Here is an example of a certifcate valid for both foo.example.com and bar.example.com. (All OSes support subject alt names, even XP!)

      $ openssl x509 -noout -text < server.crt
      Certificate:
      Data:
      Version: 3 (0x2)
      Serial Number:
      xx:xx:xx:xx:xx:xx:xx:xx
      Signature Algorithm: sha1WithRSAEncryption
      Issuer: CN=My Custom CA
      Validity
      Not Before: Oct 11 00:00:00 2007 GMT
      Not After : Oct 12 00:00:00 2020 GMT
      Subject: CN=foo.example.com
      Subject Public Key Info:
      Public Key Algorithm: rsaEncryption
      RSA Public Key: (3072 bit)
      Modulus (3072 bit):
      ...
      X509v3 extensions:
      X509v3 Basic Constraints:
      CA:FALSE
      X509v3 Subject Key Identifier:
      xx:xx:xx:xx:xx:xx:xx:xx:xx
      X509v3 Authority Key Identifier:
      keyid:xx:xx:xx:xx:xx:xx:xx:xx:xx
      X509v3 Subject Alternative Name:
      DNS:foo.example.com, DNS:bar.example.com
      Signature Algorithm: sha1WithRSAEncryption
      ...

    10. Re:all because MS won't put TLS on XP... by short · · Score: 1

      what needs "public" IPs? What /really/ needs them?

      SIP (its STUN support works only with a luck).

      Besides any service providing = servers which I run some for local stuff even on my notebook.

    11. Re:all because MS won't put TLS on XP... by Lennie · · Score: 1

      Yes, that is the workaround, but it really is a workaround. It takes a lot of coordination with the CA.

      --
      New things are always on the horizon
    12. Re:all because MS won't put TLS on XP... by emt377 · · Score: 1

      what needs "public" IPs? What /really/ needs them?

      People who actually use their computers for work instead of surfing really need it. I don't know how often I'd like to mount a drive on my desktop at home while at work or using my laptop. Or access the browser on the desktop to check the URL history to find a link I thought I'd never need again, but which suddenly became important. Or access the printer configuration page to see how I set it up so I can help someone with a similar device. Getting rid of NAT changes the problem from being technical to being about policy and access control - and that actually has acceptable solutions. It goes back to letting TCP/IP be the general-purpose networking protocol it was designed to be without half-functional hacks like ssh connection tunneling. My computers should be able to sync address books, keychains, and other data without having to bounce of a third-party pay service just to get around routing problems - there really is no good reason for them to exist whatsoever. All that's needed is authentication (and that could certainly be third-party).

    13. Re:all because MS won't put TLS on XP... by satuon · · Score: 1

      How can I do that? Right now I have a static IP but before that I was behind NAT and would have liked to know about that. Do you use a proxy server? Are there public servers that do this?

    14. Re:all because MS won't put TLS on XP... by JImbob0i0 · · Score: 1

      It is also only a workaround within a given organisation (yes I do this to for my sites)... For a hosting company (rackspace, 1&1, etc) it is not viable to do this realistically. For http connections they can virtualhost any number of sites through a single IP... for https connections unless the various clients agree to share a certificate with another client the IPs will need to be different. Would you really want to be a SAN on another person's cert so that the IP can be shared but that other server can then impersonate your encrypted connection?

    15. Re:all because MS won't put TLS on XP... by ugen · · Score: 2, Informative

      Lots and lots of documentation on that. Google for "nat" and "rendezvous".

      Here is a first random link I came up with: http://www.brynosaurus.com/pub/net/p2pnat/

      Basically, rendezvous server (a host with "real" IP out there) punches a "hole" in each NAT for and on behalf of the respective counterparty. Once it made those "holes", parties communicate directly. Done.

    16. Re:all because MS won't put TLS on XP... by yuna49 · · Score: 1

      While I agree with what you've written, I've taken to using OpenVPN to support servers behind NAT routers. I install a server with an OpenVPN client configuration that points to a server I maintain with a public address. Boot up the remote machine, and it becomes visible over the tunnel.

    17. Re:all because MS won't put TLS on XP... by Anonymous Coward · · Score: 0

      I thought they already made this peer-to-peer thing illegal anyway....

    18. Re:all because MS won't put TLS on XP... by dAzED1 · · Score: 1

      wrong. I p2p from inside a NAT to others inside NATs on a regular basis. As is pointed out in subsequent comments, this actually helps ensure my privacy.

    19. Re:all because MS won't put TLS on XP... by dAzED1 · · Score: 1

      that is a workaround, not a fix. You do this at work, you say? Go to one of the urls with your web browser, and look at the cert. What does it have on there? EVERYTHING. So if I have 20 clients I want to put on one server using SSL, gosh...I hope they don't mind that anyone that looks at their cert will see the name of the other 19 people. Also, I hope 19 of them don't mind not being the first one mentioned...
      SAN is a hack job workaround. True TLS support, including SNI, is the only "fix"

    20. Re:all because MS won't put TLS on XP... by dAzED1 · · Score: 1

      it's so funny that you say "work" but then talk about doing things to your home computer. It's 2010; you don't need a silly LAN at your house, with fileservers you leave on 24/7. The coal mines called, they'd like to thank you for your support.
      I suppose you never heard of delicious, or any of the mobile desktop settings services...
      Yes, in an ideal world we could all have a few public IPs. Only, we can't - because we're out of IPv4, and tard monkeys won't move to IPv6 or some other option. We'd get *years* more life out of IPv4 though if MS would just add TLS support to WindowsXP.

    21. Re:all because MS won't put TLS on XP... by Agripa · · Score: 1

      The NAT implementations have to cooperate for this to work by allowing the endpoint IPs to change. Strict NAT would identify the rendezvous server and the other party as separate connections not allowing one to substitute for the other.

  22. So what happens to Hamachi by thegreenbandit · · Score: 2

    Will everyone using Hamachi be unable to reach whoever gets a 5/8 address?

    1. Re:So what happens to Hamachi by Raptoer · · Score: 1

      Hamachi is built on top of IP, but I don't know exactly how it works. Once the data leaves your machine the network will treat it just the same if it's hamachi traffic or not. If you can reach it via IP, you can reach it via hamachi (excepting IPv6 support, dunno where they stand with that).

    2. Re:So what happens to Hamachi by thegreenbandit · · Score: 1

      Well, the issue is that once the 5.x.x.x address block becomes routable, Hamachi users will have 2 routes to the 5.x.x.x address block. One will be to all the Hamachi addresses, and the other will be to the legitimate, RIPE assigned addresses. Whichever route takes priority, there will be problems.

  23. IANA, not ICANN by Anonymous Coward · · Score: 0

    It is IANA--Internet Assigned Numbers Authority--not ICANN that allocates IP addresses. They also do things like port and protocol numbers.

  24. Maybe I'm being naive... by dominion · · Score: 1

    But can someone explain to me why IPv6 didn't just extend the IPv4 format logically and stylistically? Why not just tack on more numbers? And all existing numbers could be assumed

    For instance,

    209.85.225.147

    becomes

    1.1.209.85.225.147

    Instead, we break convention to use colons and hex, ie. 3ffe:1900:4545:3:200:f8ff:fe21:67cf

    It seems to me adoption could have been a lot quicker and less painless.

    1. Re:Maybe I'm being naive... by characterZer0 · · Score: 2, Informative

      They did not bother, because they thought if there was a freaking decade to roll it out, that would be plenty of time.

      --
      Go green: turn off your refrigerator.
    2. Re:Maybe I'm being naive... by dominion · · Score: 2

      Well, that was very helpful, and thank you for your enlightened and useful response!

    3. Re:Maybe I'm being naive... by Anonymous Coward · · Score: 0

      Double retarded? Are you 12?

    4. Re:Maybe I'm being naive... by bbn · · Score: 3, Informative

      3ffe:1900:4545:3:200:f8ff:fe21:67cf

      That would be 63.254.25.0.69.69.0.3.2.0.248.255.254.33.103.207 using your scheme which is horrible. Is also leaves out the most useful compression feature, so you can write 3ffe:1900::/32 instead of 63.254.25.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0/32. Just counting out the correct numbers of .0 is horrible.

      Practical real life IPv6 addresses often use compression: ipv6.l.google.com has IPv6 address 2a00:1450:8005::63, ipv6.myip.dk has IPv6 address 2001:470:27:f9::2, ipv6.net has IPv6 address 2a00:1188:5:2::8. If you care about your address you can make it short, since the last 64 bits is yours to decide.

    5. Re:Maybe I'm being naive... by TurtleBay · · Score: 2, Informative

      Just tacking on more numbers becomes a problem because IPv6 addresses are 128 bits long and not 32 bits like IPv4. 1.1.209.85.255.147 is only a 48 bit number. An example of a 128 bit IP address in decimal would be 209.85.255.147.236.152.95.220.51.119.152.21.201.103.118.1 Having to use up to 64 digits to describe one address is not efficient, even if using only numbers are easier to say or remember than alphanumeric hex.

    6. Re:Maybe I'm being naive... by ptudor · · Score: 2, Insightful

      IPv6 solves problems beyond just the raw number of bits for addressing.

      In your example, 48 bits isn't enough space--in a few years we would be doing another next-gen IP, after implementing IPng as the CTOs start panicking. I don't want to deploy a new Internet every two decades, I'd rather get past the flaws in IPv4 once for my lifetime and start thinking about Y2038.

      Convention is meant to be broken. But perhaps you ignore that we're speaking about bits, not decimal data. The subnet mask FFFFFF00 I see in ifconfig has the same meaning as /24 or 1111-1111 1111-1111 1111-1111 0000-0000 and we all know that because we're smart enough to read slashdot.

      Decimal address can used all you like in IPv6. If you like 208.80.11.254, address your host as 2620:0:c0:1:208:80:11:254 and be happy; meanwhile I'd rather use stateless autoconfiguration or a simple address like n:n:n:1::53 for my nameserver.

      Adoption could be less painless if you weren't citing address space that was deprecated and removed from the Internet five years ago. How is the 6bone keeping its memory alive for so long? Use 2001:db8:: for examples, or at least start an address with operational space like 2610. RIP 3ffe, 6/6/6.

    7. Re:Maybe I'm being naive... by the_humeister · · Score: 1

      I don't see what the problem is. Isn't that what DNS is for so I don't have to type 216.34.181.45 in the address bar if I want to access slashdot.org?

    8. Re:Maybe I'm being naive... by zippthorne · · Score: 3, Funny

      The colons and hex are for typing it in. It stored in 16 bytes on disk, just like ipv4 addresses are stored in 4 bytes currently. There are lots of ways of representing a v6 address, though, just like there are lots of ways of representing a v4 address (hex, being among them, iirc, and for a while firefox would let you type in the unsigned integer that the 4 bytes represent and would translate that directly.)

      The rest of us will just use a lookup service to map an easily remembered string to the v6 numerical address. At the moment, though, I'm not sure I cann think of an analogous service for ipv4, but I'm sure someone's doing it.

      --
      Can you be Even More Awesome?!
    9. Re:Maybe I'm being naive... by geekpowa · · Score: 4, Insightful

      A curious key thing I fail to understand about this issue is why the ip4/ip6 issue encourages people to act so rudely towards other professionals who demonstrate at least some grasp of the underlying issue.

      I think you ask a reasonable question, the question in my mind similar to yours: the transition from ip4/ip6 appears to be hard and this is a factor in it's slow adoption so what prevented the design a more gentler protocol that provided a smoother/simpler transition; particularly given our heavy reliance on this network in so many facets of our civilization?

      As a programmer that does alot of network type stuff close to the metal, frequently designing my own OSI 7 protocols, I understand ip4 and higher layers very well, better than most IT professionals; but certainly not as well as a carrier network engineer. I know little about IP6 other than than regular reports about it's high barrier to entry and the inherent complexity associated with the change over. Maybe I need to make time and learn more about it now; but life is busy and other things compete for my time.

      But to such questions can always be counted on being treated rudely by ip6 zealots. Just like the ruby programming language, I am keen to learn more when I get the spare time, and I dabble when I can, but in some ways disinclined given how rude and obnoxious the community advocating it can be.

    10. Re:Maybe I'm being naive... by paul248 · · Score: 1

      When IPv4 was first developed, subnets were only allocated on 8-bit boundaries. Since CIDR rolled out in the 90's, the subnet length is now arbitrary, and working with subnets requires doing tedious decimal-binary conversions in your head. It's a mess.

      IPv6 uses hexadecimal, because a hex digit represents exactly 4 bits. This makes the CIDR math really simple.

      Now, what if we used hex with dots? Is a.b.c.d.e.f.beef.de an IP address or a hostname? Hell if I know. That's why we use colons now.

    11. Re:Maybe I'm being naive... by Anonymous Coward · · Score: 0

      Yes, that is what DNS is for, but lots of stuff is accessed by IP address for a variety of reasons.

    12. Re:Maybe I'm being naive... by ziggyzaggy · · Score: 1

      one of the problems with our IP4 is that ISP's routing tables are massively huge and growing, 100,000+ entries, each reachable network requires an entry. IP6 solves that problem in that the average routing table will have 8192 entries. Your solution is a routing nightmare in that regard, I'm afraid

    13. Re:Maybe I'm being naive... by swordgeek · · Score: 1

      Yes, that's what DNS is for. People who maintain DNS have to use full addresses. So do many others--enough that being unable to compress IPv6 addresses would be a nightmare.

      --

      "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
    14. Re:Maybe I'm being naive... by Cato · · Score: 1

      Perhaps a different IPv6 would have been better, but it's now a long way past the time where we could design, implement and deploy anything other than v6. Getting into IPv6 isn't necessarily that complex or difficult but there are many detailed steps to be taken, and it will be harder to do it in a rush - unfortunately most organisations, including ISPs and web hosts, will have to do it more quickly and expensively now.

      Most of the blockers are now at the applications level.

    15. Re:Maybe I'm being naive... by butlerm · · Score: 1

      But can someone explain to me why IPv6 didn't just extend the IPv4 format logically and stylistically? Why not just tack on more numbers? And all existing numbers could be assumed

      The reason is that IPv4 wasn't designed to allow variable length addresses, so new IP version whatever hosts with VLA support still couldn't exchange traffic in both directions with IPv4 hosts, not without some sort of NAT in between. Small fixed length addresses are IPv4's fatal flaw.

    16. Re:Maybe I'm being naive... by joost · · Score: 2

      You complain that IPv6 people are rude to you, but bring this little gem to the table:

      Maybe I need to make time and learn more about it now; but life is busy and other things compete for my time.

      The truth is you do need to make time and learn more about it now. Really, if you've grasped IPv4 you will grasp IPv6 too. Spend a couple evenings with an Oreilly book and you will be fine.

    17. Re:Maybe I'm being naive... by gbjbaanb · · Score: 1

      or.. here's a novel idea, ask someone who might know! Like on a website full of intelligent, informative and helpful people who would at least give pointers on where to look and advice to narrow their searching down a little.

      Hmm. Not here then :)

    18. Re:Maybe I'm being naive... by geekpowa · · Score: 1

      Because I don't really care that much about ipv6. The same way I don't really care about how cars work, and the same way my mechanic doesn't really care about computers or the various esoteric things that currently occupy my mind space.

      The dialogue from lay public to ipv6 nerds is simple: if it is so important then just do it and don't bother me with the details. Explain to me what it will take for me to get my OS (Fedora in my case), my DSL Modem, my ISP, my software to work with IPv6. No straight forward answer is forthcoming. I try to hit some ip6 websites secure in the knowledge that my ISP is regarded as being quite progressive technologically (they are linux friendly for one and maintain alot of repo mirrors); but it don't work. I got other things I want to spent time on right now so I move on; and knowing a fair bit about ipv4 I figure I can continue to NAT and HTTP virtual host and other tricks to keep things moving along for the little bits of the internet I look after and in reply the ipv6 nerd pours disdain upon me because my passions are not his passions and I have decided that in the din of people yelling at me for their urgent attention on all manner of issues across a range of spectrums: politics, social, environmental, IT ; I am pushing the ipv6 nerd down the list a bit. Actually ipv6 does interest me a bit, more than it interests my mechanic, but many things interest me and there is limited number of hours in the day.

    19. Re:Maybe I'm being naive... by Anonymous Coward · · Score: 0

      12? Are you double retarded?

    20. Re:Maybe I'm being naive... by pthreadunixman · · Score: 1

      Decimal representation was a epic mistake in the first place. First, there are more characters to type. Second, constantly having to do base 10 to 2 conversion is a PITA. Base 16 to 2 is trivial.

    21. Re:Maybe I'm being naive... by david_thornley · · Score: 1

      What prevented the possibility of a gentler protocol is that it wouldn't do any good.

      The problem is not that IPv6 itself is hard (although you may well disagree with some of the decisions that went into it), but that it isn't IPv4. Any protocol change that allowed more than four bytes for IP address would have almost all of the exact same problems. IPv4 is baked into a tremendous number of devices and systems, due partly to our heavy reliance on that network, and they all are going to have to be replaced or upgraded. That's the issue.

      This is similar to Y2K in many respects, and that was not solved by having a gentler calendar, but by people changing everything that had to be changed.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    22. Re:Maybe I'm being naive... by Anonymous Coward · · Score: 1

      I understand ip4 and higher layers very well, better than most IT professionals; but certainly not as well as a carrier network engineer.

      Let's turn the table around: Carrier network engineers aren't application developers.

      I for one, have no problem with writing

          f = socket(PF_INET6, ...)

      instead of

          f = socket(PF_INET, ...)

      It's about the same effort and if it adds even a theoretically useful feature that no-one really needs, it's still pretty cool.

      However, what I'm NOT ok with, is the following:

          if (use_ipv6) { // totally untested.
              f = socket(PF_INET6, ...)
          } else {
              f = socket(PF_INET, ...)
          }

      It seems like such a small thing, but if I have to write separate code paths for IPv6, I'll rather do only IPv4 and wait until someone actually needs IPv6. Unfortunately, no-one needs IPv6 because no-one has an IPv6-only host, and the reason for that is that then it wouldn't work with existing software.

      The thing is, this isn't necessarily obvious at all. I mean, it's carriers who choose what gear they run, right? What the hell it has to do with developers or consumers? :)

    23. Re:Maybe I'm being naive... by Anonymous Coward · · Score: 0

      If you haven't yet noticed that software guys (and I do mean males) are often arrogant about their presumed areas of expertise, well... now you know. Assburgers and so on. Anyway,

      I think you ask a reasonable question, the question in my mind similar to yours: the transition from ip4/ip6 appears to be hard and this is a factor in it's slow adoption so what prevented the design a more gentler protocol that provided a smoother/simpler transition; particularly given our heavy reliance on this network in so many facets of our civilization?

      The transition is not hard. IPv6 is two decades old, and the changeover issues have been addressed all along. Tunnelling, translation, etc etc, many techniques have been proposed and developed. I attended a lecture on the subject in I think 1994 (weekly tech-talk at Apple -- do they still do those?). But the IPv4-based WWW exploded at the same time, and now there are vast interests at stake, as the OP of this thread rudely suggested. One, there's an investment cost for routers, gateways, end-point software, blah blah blah... it's real, but not really that big a thing. More significantly, there is no incentive, in fact there's counter-incentive, for all the ISPs and other real players in network infrastructure: scarcity means value and power for them.

  25. Crazy.... by Cylix · · Score: 1

    If you examine the currently alloted /8 addresses it seems really silly to say they are exhausted.

    I would rather say the current assignment is being poorly used at the moment.

    http://en.wikipedia.org/wiki/List_of_assigned_/8_IPv4_address_blocks

    This is about 1/5th of our total pool being thrown around rather carelessly. It would probably on buy a few more years to reclaim these addresses and chop them up, but surely the problem is just poor usage as opposed to exhaustion.

    Not that I think any type of recycling or waste management will actually happen in the IP space, but I do like complaining about it.

    --
    "You should always go to other people's funerals; otherwise, they won't come to yours." -- Yogi Berra
    1. Re:Crazy.... by Rakshasa+Taisab · · Score: 1

      Yes, we want to expend vast amounts of sys-admin time and effort in order to optimize all the world's routing tables just to gain us two or three years extra, including all the fuckups and bad routing that will happen due to this optimization. (Supposedly the routing tables are fickle beast these days due to their complexity)

      --
      - These characters were randomly selected.
    2. Re:Crazy.... by BrookHarty · · Score: 1

      So many mobile devices using real IP's, (aka most are not phones).. Its crazy.

      I was rather amused back in the day you could ping an ankle bracelet on home prisoners...

    3. Re:Crazy.... by JImbob0i0 · · Score: 1

      My Android mobile phone on Orange UK gets a 10.0.0.0/8 address.... I imagien other mobile carriers are doing similar.

    4. Re:Crazy.... by DavidTC · · Score: 3, Insightful

      It would probably on buy a few more years to reclaim these addresses and chop them up, but surely the problem is just poor usage as opposed to exhaustion.

      *SLAP*

      Seriously, we've already done this. Repeatedly. At no point has the actual transition started happening, even with all the 'extra time' given it.

      Attempting to figure out a way to get more time will not actually solve the problem at all.

      At the very least, we need IPv4 to blow up first, so the transition actually starts. After that point, if need be, we can start looking for more IPs to use during the transition.

      But first, we actually have to start.

      I got new ISP service in August. I got a router with it. This router does not do IPv6. In August. 2010.

      The problem isn't 'lack of time', the problem is LACK OF STARTING.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    5. Re:Crazy.... by vlueboy · · Score: 1

      I got new ISP service in August. I got a router with it. This router does not do IPv6. In August. 2010.

      As a gift I got the $35 WGR614NA. I slaved it to my ipv6-compliant router but it failed to forward v6 traffic --in September 2010. We're stuck with lots of tech that just will not get phased out because it is cheap to bundle and expensive to upgrade... like IE6. Perhaps your ISP does servr v6 but your router itself is "broken"? Borrow a known good one like an Apple airports and see if v6 works.

      After years, I've concluded that buying v6 consumer routers is hard. NONE say "ipv6-ready!!11oneone" on the box. Only geeks do web searches leading to appropriate forum threads before buying a hardware. WPA and WPA2, and N support are the only features the big players care about highlighting, and v6 is hidden --they most consider it a niche.

      "firmware upgradable to 802.11n final" has been an undelivered promise a whole year since the 802.11n standard was finalized. Worse, router boxes still say "802.11n draft standard" or deviously omit the word "final." We need to start posting all non-compliant, backward-ass routers, so google searches help people avoid these "incomplete" product lines.

    6. Re:Crazy.... by DavidTC · · Score: 1

      It's not 'broken', it literally has no options for IPv6 at all.

      Granted, for all I know it magically works once my ISP starts giving out IPv6 addresses, but logically it should at least have IPv6 DHCP support already showing.

      I think it bears repeating: The problem isn't lack of time. If we'd started in 2000, we'd be done by now. If we'd started in 2008, we'd be mostly done by now.

      WE HAVEN'T STARTED. WE ARE STILL DISTRIBUTING NON-IPV6 ROUTERS.

      This isn't people 'failing to update'. People have probably fucking updated routers three times. No one's running an non-IPv6 OS, everyone could be running IPv6 routers if they'd actually, ever, at any point in time, been handed out. They weren't. Consumer-priced IPv6 routers were never sold, and they certainly weren't distributed how 75% of the people get their router...via ISP.

      'Recovering IPv4 addresses' is akin to calling your teacher and asking for 30 minutes on a deadline because you're running late in traffic...on a paper you've literally not started.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    7. Re:Crazy.... by vlueboy · · Score: 1

      We agree that most people get their router from the ISP, and like I said, that's what's not "upgraded" to levels where IPv6 is built-in. Even wireless is not included on those Time Warner routers for people paying hefty cable bills.

      I wanted to stress that there are existing consumer routers with IPv6 support. The crime is that mine doesn't say it's IPv6 compliant, and even its website says nothing in its overview page. You'd have to accidentally discover its IPv6 options through their forums or the emulator.

      The industry ALREADY started putting out IPv6, but it's just at niche and expensive tiers that highlight gaming features... sales/marketing have no idea what IPv6 is and that they should advertise ipv6 to capitalize on what people like you, with the desire in mind but incomplete knowledge, could be spending good cash on. So, shame on the ones giving us IPv6 silently, and on the ones who have nothing to give.

    8. Re:Crazy.... by DavidTC · · Score: 1

      Yeah, I know they exist somewhere.

      I'm just annoyed because I remember, in 1999, talking about how the IPv6 transition was going to be hard because all consumer-level hardware would need to be replaced, and as people weren't likely to do it manually, that could take several years or even a decade!

      Little did I know that we actually would not make any steps in that direction. At all, whatsoever.

      At this point in time, it literally should not be possible to purchase IPv4-only routers. That shouldn't have been possible in 2002, when the stock ran out! All new hardware post 2001 or so should have supported IPv6, even if some of the support would probably be crappy.

      There never should have been, for example, an IEEE 802.11g device (standard created in 2003.) ever sold that didn't do IPv6. Much less a 802.11n device!

      --
      If corporations are people, aren't stockholders guilty of slavery?
  26. Dibs!!! by MobileTatsu-NJG · · Score: 4, Funny

    How long before I can get the address 255.255.255.255? I wanna set up a website called 'endoftheinternet.com'!

    --

    "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    1. Re:Dibs!!! by Anonymous Coward · · Score: 0

      You already have it, that's the broadcast address.

    2. Re:Dibs!!! by Anonymous Coward · · Score: 0

      say, not so funny. Would someone please explain to me why we can not just do something like 999.999.999.999 and keep on going a while longer?

      How about just expanding to include letters in to the ipv4 space?

    3. Re:Dibs!!! by Anonymous Coward · · Score: 0

      technically 223.255.255.254 is last usable host address /nerd

    4. Re:Dibs!!! by Venzor · · Score: 2

      I think that's more like 'alloftheinternet.com' ;)

      --
      If someone is wrong, don't insult; Educate.
    5. Re:Dibs!!! by Ksevio · · Score: 1

      Because currently an IP address fits into a 32bit address space as four 8 bit numbers (0-255). IP address aren't actually sent as numbers like 120.12.234.1, they're sent as 780CEA01. Expanding that to higher numbers would require making that a bigger data structure, so IPv6 does that, from 32 bits to 128 bits. The change in formatting to hex and colons is just for displaying to users, nothing to do with how it's stored.

    6. Re:Dibs!!! by MobileTatsu-NJG · · Score: 1

      Oh? Why is that?

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    7. Re:Dibs!!! by balbus000 · · Score: 1

      You should sell food and call it restaurantattheendoftheinternet.com

  27. sigh by smash · · Score: 1

    Can we PLEASE make a concerted effort towards ipv6 now please? Microsoft are even encouraging use of it via DirectAccess ("vpn less" ipv6 secure tunnel), and god knows they're nowhere near leading edge as far as standards support goes.

    I fear that ISPs are just going to do retarded shit like NATing their entire customer base though, but it really is just delaying the inevitable and causing breakage anyway...

    --
    I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
  28. seven /8s?? by Anonymous Coward · · Score: 0

    I thought there were 9 pieces of 8 available and if you had one you'd be one of the pirate lords.

  29. I propose an IPv5, or should just go right to v6? by Zero__Kelvin · · Score: 1

    "So, I keep hearing all this news about them running low... What happens when we run out?"

    I don't know, but I sure hope someone starts working on a solution soon! It sounds like solving this problem might take a while!

    --
    Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
  30. Why can't /8s be taken via eminent domain? by Anonymous Coward · · Score: 0

    008/8, does Level3 need two /8s?
    016/8, does HP(?) need two /8s?
    026/8, 029/8, 030/8, does DISA need 4 /8s?

    Do all of these guys need a /8? Can they be required to hand back a /9?
    034/8 Halliburton
    035/8 MERIT Computer Network
    038/8 PSINet
    040/8 Eli Lily
    048/8 Prudential Securities
    052/8 E.I. duPont de Nemours
    053/8 Cap Debis CCS
    054/8 Merck

    1. Re:Why can't /8s be taken via eminent domain? by LingNoi · · Score: 1

      Good idea, I'm sure once the legal cases are finished on getting those IPs back it'll all be worth it. Typical court case is, what? 3+ years?

  31. More accurate site by Anonymous Coward · · Score: 0

    www.ipv4depletion.com seems to have had a more accurate prediction than the Potaroo site for quite some time.

  32. Shock in ipv6! by Anonymous Coward · · Score: 0
  33. Game over by itamblyn · · Score: 1

    Well, that was fun while it lasted. Time to shut down the Internet.

  34. MAC Address? by itamblyn · · Score: 3, Interesting

    Why is IPv6 not based on MAC adresses? I've never understood this. Every piece of electronics capable of connecting to a network has at least one unique hardware id already. Why do we need a new one? Is there are reason not to just use this number? Or have I misunderstood, and this actually IS the plan.

    1. Re:MAC Address? by CyprusBlue113 · · Score: 3, Informative

      Privacy

      --
      a handful of selfish greedy people are no match for millions of selfish, greedy people -u4ya
    2. Re:MAC Address? by Anonymous Coward · · Score: 0

      Every IPv6 interface has two IPv6 addresses: a link-local address, which is based on the MAC address, and a routable address. The link-local address is not routable beyond the LAN.

    3. Re:MAC Address? by RzUpAnmsCwrds · · Score: 3, Informative

      Why is IPv6 not based on MAC adresses? I've never understood this.

      Well, first of all, it sort of is. The typical way to get an address on an IPv6 network is stateless auto-configuration, which basically allows your client to combine an advertised route prefix with the EUI-64 (basically a longer version of a MAC address that can be generated from a MAC address) to determine its IP. You don't need any configuration for new clients and they always get the same IP address. Note that Windows Vista/7 use a hashing function with random data and the MAC address so that you can't track a single machine based on its IPv6 address, which solves privacy concerns.

      Second, you can't just use the MAC address because it's not easy to route traffic that way. Routing works today because networks are assigned contiguous blocks of addresses, so it's easy to tell where to route traffic based on the address prefix. If we just had MAC addresses (which contain no information about which devices are connected to which networks), routing would require huge tables that would frequently change. This works OK for a small to medium sized network (e.g. switched Ethernet) but it doesn't work at all for the Internet. Even medium-large organizations need to use subnets to effectively manage traffic, which aren't possible without network prefixes.

    4. Re:MAC Address? by samson13 · · Score: 1

      Why is IPv6 not based on MAC adresses? I've never understood this. Every piece of electronics capable of connecting to a network has at least one unique hardware id already. Why do we need a new one?

      Is there are reason not to just use this number? Or have I misunderstood, and this actually IS the plan.

      A couple of reasons:

      V6 addressing often is based on mac address (for the host part) when using the auto addressing methods.

      Some network devices don't have mac addresses. Serial port with ppp.

      Ethernet MAC addresses aren't necessarily unique. I've had to debug a mac address collision in a medium sized site.. I think vendors are better now but it probably still happens.

      Makes sense to have a static address even if the hardware has to be changed for some reason... i.e. router goes on blah::1 maybe.

      Sometimes you want multiple addresses. Maybe virtual ethernets. Only one can be the MAC.

      I think the plan is that the network half of the address is allocated in as hierarchical a way as possible to hopefully enable route consolidation (are we dreaming). The host part will be allocated based on MAC address except when it is not.

    5. Re:MAC Address? by emt377 · · Score: 1

      Why is IPv6 not based on MAC adresses? I've never understood this. Every piece of electronics capable of connecting to a network has at least one unique hardware id already. Why do we need a new one?

      MAC addresses aren't useful for routing since they end up scattered all over.

      However, IPv6 in its most basic form actually uses the MAC address combined with a routing prefix. But it still needs DHCP for things like DNS and default gateways. IIRC it uses an all-zero prefix until someone (like a router) sends it something back to its actual assigned prefix, at which point it remembers. One of the early IPv6 headaches was that this could change (aka renumbering); as someone who in the late 90s went through large server codebases to make them IPv6 compatible this was a huge PITA. Servers configured to listen to different traffic on different interfaces really don't like to have their addresses suddenly changed. IPv6 at the time was cute but a useless academic exercise. Fortunately it has been fixed since...

    6. Re:MAC Address? by Anonymous Coward · · Score: 0

      Mac addresses are spoofable, and haven't there even been cases where vendors have shipped devices with conflicting addresses?

    7. Re:MAC Address? by digitalsushi · · Score: 1

      The host portion does use the mac. It just pads it with 16 extra bits in a known way. You can use privacy addresses to avoid this.

      --
      slashdot: where everyone yells sarcastic metaphors to themselves to understand the issue
    8. Re:MAC Address? by Anonymous Coward · · Score: 0

      Don't forget aliases. It isn't uncommon for a single network card to have more than one IP address. Especially with VMs.

    9. Re:MAC Address? by Anonymous Coward · · Score: 0

      Well, that and route-ability. If you plug you ethernet-enabled Cactus into the internet somewhere, how is the world supposed to know which route to send the packets?

    10. Re:MAC Address? by Dr.Dubious+DDQ · · Score: 1
      "Why is IPv6 not based on MAC adresses?"

      SOME of them actually ARE. "Link-local" addresses (roughly equivalent to the "169.*" ipv4 addresses that most people only see when you get stuck with them when the DHCP server isn't working...) are by default based on MAC address (though like the MAC address itself, you can change them). I seem to recall that there was at least one other class of IPv6 address that is commonly generated from the MAC address, but can't say for sure (I'm only just now finally getting around to playing with IPv6).

  35. Too late! by tverbeek · · Score: 1

    Damn! I wanted 37/8!

    --
    http://alternatives.rzero.com/
  36. Redesignation of 240/4 from Future Use to Private? by Anonymous Coward · · Score: 0

    This might have been a good case for accepting the proposal 'Redesignation of 240/4 from "Future Use" to "Private Use"':
    http://tools.ietf.org/html/draft-wilson-class-e-02 ... as beneficiaries would have some degree of control over the equipment linking the two sites. However the proposal is expired.

  37. Whatever by ugen · · Score: 0, Troll

    1. There are enough IPv4 addresses available in US to cover pretty much everyone. So no issue here. Since I live in US, frankly, that's all the answer I need.

    2. If there aren't enough IPv4 addresses - take away anything allocated to China, they don't use Internet in a fair or reasonable way anyway. Let them live in their own private little world.

    3. NAT - because I only need 1 (one) IP address for my entire household. I decidedly don't want any of my multiple devices to be separately and individually addressable. (By the same token my fridge does not have a separate mailing address or a phone number, you have to call or write to *me* before you get to talk to it - if that's your thing of course)

    4. Trading IP addresses and packing. It's a resource - and it will be dealt with as such.

    5. If only people that designed IPv6 "by committee" though a bit about real world and technology, IPv6 would have been much easier to implement. 128 bit addresses are a *wrong* size. They should have set the size at 64 bit. 64 bit values are now natively manipulated by much of computer hardware, so just as the new protocol would come into wider use, it would be conveniently supported by many algorithms relying on hardware. Now go build a radix tree for a routing table of 128 bit IPv6 addresses - let's see how well that works.

    6. IPv6 in default implementation wants to use your MAC address as part of the IP. I don't know, perhaps a few of those big companies that like tracking people so much may be interested in that. I am not.

    In conclusion - I'll wait till stuff begins crashing around. May be then someone will come up with a better solution than a deadborn poorly designed IPv6 we have now.

    1. Re:Whatever by Cochonou · · Score: 2, Insightful

      Honestly, by reading your first two bullet points I really thought your post was a good joke. But when I consider the entirety of what you've written, there is a distinct possibility that it may be instead a sad story.

    2. Re:Whatever by samson13 · · Score: 1

      5. If only people that designed IPv6 "by committee" though a bit about real world and technology, IPv6 would have been much easier to implement. 128 bit addresses are a *wrong* size. They should have set the size at 64 bit. 64 bit values are now natively manipulated by much of computer hardware, so just as the new protocol would come into wider use, it would be conveniently supported by many algorithms relying on hardware. Now go build a radix tree for a routing table of 128 bit IPv6 addresses - let's see how well that works.

      6. IPv6 in default implementation wants to use your MAC address as part of the IP. I don't know, perhaps a few of those big companies that like tracking people so much may be interested in that. I am not.

      In conclusion - I'll wait till stuff begins crashing around. May be then someone will come up with a better solution than a deadborn poorly designed IPv6 we have now.

      I think the 64bit size was planned for. The network part of the address is 64bits. Anything doing routing isn't going to concern itself with the host part. Anything doing the last hop part of the processing isn't going to be doing much with the network part but doing its look ups on the host part.

      I agree that the MAC address based network address is scary but I wonder how much of a signature they already have from other properties of my computer.. I wonder how long before the IPv6 address is used to try and prove that it was a specific computer that generated some traffic.

    3. Re:Whatever by LingNoi · · Score: 2, Informative

      1. I'm an american and think world == us. yeeha!
      2. I don't like China because my government told me so. Lets steal their IP addresses that were allocated to them because my country is more important.
      3. NAT because it works for me and my simple use cases so it must work for everyone else on the internet too.
      4. I don't think future expansion is important with my simple house hold use cases so obviously trading a couple of IP addresses is going to be the future! duh! People who need a few million for a different country are just going to have to suck it.
      5. I don't like the look of the new address so it should be shorter! If we run out of space then see 3.
      6. I don't like IPv6 so I'm going to take a little bit of fact and stretch it way past truth to the point where someone reading about the topic for the first time thinks i'm an internets expert.

      In conclusion - I don't know anything about what I am talking about. The facts I do know are outdated, are wrong and/or don't make sense in the context I place them in.

      FTFY

    4. Re:Whatever by Ash-Fox · · Score: 1

      If only people that designed IPv6 "by committee"

      It was, so technically there is no problem now. Thanks for reassuring me!

      --
      Change is certain; progress is not obligatory.
    5. Re:Whatever by emt377 · · Score: 1

      Now go build a radix tree for a routing table of 128 bit IPv6 addresses - let's see how well that works.

      No problem. IPv6 uses, canonically, 64 bits for network routing and 64 bits for host identification. Routers have a forwarding tree and a separate local delivery tree for locally attached hosts. Contrary to your statement, a 64+64 bit address scheme makes for efficient router implementation.

    6. Re:Whatever by ugen · · Score: 0

      :) It's funny how /. discards any opinion that does not really match the accepted local "wisdom" :)

      I happen to build software and systems that Internet infrastructure depends upon. In fact, I wrote a number of IP handling modules for open source products that you are likely using right this second (perhaps as you were typing that exceptionally intelligent retort :) )

    7. Re:Whatever by ugen · · Score: 1

      :)"Canonically" in this sense means "we screwed up in protocol design and now we'll just issue some guidelines".

      Address is an address. If you can't use part of that address for routing, what you get is *gasp* NAT? Oh no!

    8. Re:Whatever by j+h+woodyatt · · Score: 1

      I actually thought the troll in question was so nearly pitch perfect that it had to be a parody. Look on the bright side. Slashdot has seen its first IPv6 parody troll! Oh, frabjous day!

      --
      jhw
    9. Re:Whatever by Anonymous Coward · · Score: 0

      Isn't there somewhere a standard template for answering this?

    10. Re:Whatever by knorthern+knight · · Score: 3, Interesting

      > I agree that the MAC address based network address is
      > scary but I wonder how much of a signature they already
      > have from other properties of my computer.. I wonder
      > how long before the IPv6 address is used to try and
      > prove that it was a specific computer that generated
      > some traffic.

      Here's a computer-user IQ test. Question "what is your MAC address?"

      * Typical user... I don't got a Mac, I got a Winders PC.

      * Competent user... checks his network config and supplies answer.

      * l33t h@x0r d00d... what do you want it to be?

      --

      I'm not repeating myself
      I'm an X window user; I'm an ex-Windows user
  38. Web host control panels that don't support IPv6 by Cato · · Score: 1

    One particular issue is web host control panels - of the major control panels (cPanel, DirectAdmin and Plesk), only DirectAdmin has IPv6 already, and many web hosts aren't willing to deploy a different control panel just to get to IPv6. Hence many websites simply can't go IPv6 easily until the ISP upgrades to the control panel, and in the case of cPanel, which is by far the most popular one, there is not even a roadmap date for v6. Same goes for Plesk apparently.

    If you use cPanel, see http://forums.cpanel.net/f145/case-10334-make-cpanel-ipv6-compatible-35453.html and comment if you want to see IPv6.

    If you use Plesk, see http://forum.parallels.com/showthread.php?t=102770

  39. End of Hamachi? by pierlu · · Score: 1

    What about now Hamachi and big ISPs (like Fastweb, in Italy) who happily use 5/8 ip addresses?

    --
    -->keep the frequency clear
    1. Re:End of Hamachi? by alexmeaden · · Score: 1

      They should not have been using public IP addresses that were not allocated to them. They should be using the 192.168.0.0/16, 10.0.0.0/8 or 172.16.0.0/12 ranges which are specifically allocated for private network use.

  40. Re:I propose an IPv5, or should just go right to v by PolygamousRanchKid+ · · Score: 1

    IPv5 was the experimental ST2 protocol ( http://www.faqs.org/rfcs/rfc1819.html ). It was sort of a connection oriented IP designed for multimedia stuff. Nobody seemed to want that either. RSVP was a protocol designed to reserve bandwidth on the Internet, but ran on good old IPv4. That tanked as well.

    The European Telecom research agency, ETSI, is working on yet another attempt to provide resource reservation through the Internet for VOIP. We'll see how that one goes.

    --
    Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
  41. The IPv4 sky is falling! by drwho · · Score: 1

    There's still plenty of space available if the various registries were proactive and found out what space was no longer used, never used, or used in networks which don't directly connect to the Internet (i.e. US military). I have more IP space than I can ever use ( class B and a bunch of class Cs) so I'd profit greatly if this space become a fungible commodity. But really, this is a solvable problem.

    1. Re:The IPv4 sky is falling! by Abcd1234 · · Score: 1

      There's still plenty of space available if the various registries were proactive and found out what space was no longer used, never used, or used in networks which don't directly connect to the Internet (i.e. US military).

      So you'd rather we just spend millions and millions forcing people to renumber their networks, while putting off the issue for maybe years if we're lucky, rather than to just migrate to IPv6.

      You're a fucking genius.

  42. For lease: IP space, $1 per IP/month by drwho · · Score: 1

    Yes, I've got it and it's completely legit. I am not going to reveal the IP space here because it will end up being attacked by jealous nerds. Yea $1/IP/mo, and you ISPs know you can charge twice that to your customers and they'll pay, because they have to. Around 66,500 addresses available, in a variety of sizes.

    Oh, yes, I should add, this is not a joke.

    1. Re:For lease: IP space, $1 per IP/month by Ash-Fox · · Score: 1

      Please don't waste the IP address space, kthnxbye.

      --
      Change is certain; progress is not obligatory.
  43. You have to coordinate; notation is superficial by jonaskoelker · · Score: 1

    It seems to me adoption could have been a lot quicker and less painless.

    Whether we write down numbers in base 16 or base 256 (each digit in base 10) doesn't make one iota of difference to the upgrade difficulties.

    The real problem, one of them at least, as far as I understand, is the lack of incentive for individual people and organizations to move towards IPv6: it's all cost no gain, because none of the parties you want to talk to are on IPv6, and the IPv4 address space isn't embedded in the IPv6 space.

    1. Re:You have to coordinate; notation is superficial by DavidTC · · Score: 1

      Whether we write down numbers in base 16 or base 256 (each digit in base 10) doesn't make one iota of difference to the upgrade difficulties.

      But base 16 is an fuckload easier to segment in your head if you can't instantly change base 10 to binary. (I can change it in my head, but I can hardly do it instantly.)

      For networks, sure, 'decimal' (IPv4 is actually closer to base 256.) address worked great when we just had class A, B, and C. Once we got rid of them, people essentially had to memorize the network addresses for /25 to /30. And heaven forbid if you ran across a /22 or something!

      With IPv6, all you need to know to memorize is..the hex digits, which essentially means you need to memorize A-F, ten through 15. And for speed, remember that 16 divides into quarters with: 4, 8, B, 10. (And you can figure out what 'half' and 'eighths' are easily.)

      Take A982. Network mask FF00? It's in A900. Network mask FF40? It's in A980. Fs are copied, 0s are blanked, any remaining digits are the intervals you have to round down to. Tada. It's an instant binary AND in your head.

      It's complicated to explain, but it's really easy to do in your head, for any network mask. Or you can instantly convert it to binary and do it that way, each hex digit is four binary digits.

      IPv4 is actually just as easy in base 16, but no one ever writes it that way.

      --
      If corporations are people, aren't stockholders guilty of slavery?
  44. Upgrade IP stacks, use the Class E by Anonymous Coward · · Score: 0

    Upgrade IP stacks that don't support it (Windows, IOS I think, etc) and start using the "reserved" Class E:
      240.0.0.0-255.255.255.255 (268435456 adresses)

    There you go with 268 million more addresses, worth at least another couple of years of more, if not bound to limiting RIR redistribution bureaucracy as it is now.

    It the use of Class E a heavy and costly operation that a win of 2 years time would not justify? I don't think so.
    It's also responsibility of the nakers of TCP/IP stacks that decided to ignore that completely: it was defined as "Reserved", not "Invalid".

    All this panic for the end of IPv4 is not justified, like no panic was justified for the W2K bug.
    1) It could lead to a black market of IPs
    2) It will make the situation around RIRs unnecessarily tense
    3) It might endanger net neutrality

    There world will not go black at the end (at the real end, not at the bureaucratic end) of IPv4.
    The market will suffer a bit from the limitation of not having IPv4 addresses again and will have to move to IPv6.
    This might lead to pain and costs but I don't expect the world falling for that.
    How IPv4 could explode in the '90s, so can IPv6. Let's look and see what we can do..

    1. Re:Upgrade IP stacks, use the Class E by Chuck_McDevitt · · Score: 1

      Adding the class E addresses would add ONE /8, which is a fraction of a year of use. And which RIR gets it? Share it?

    2. Re:Upgrade IP stacks, use the Class E by LostOne · · Score: 1

      Actually, adding the class E addresses would add *16* /8s. however, that would still maybe buy a year, if lucky. Not worth the effort.

      --

      If it works in theory, try something else in practice.
  45. Re:I propose an IPv5, or should just go right to v by Zero__Kelvin · · Score: 0, Offtopic

    WHOOOSH

    --
    Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
  46. Who wants IPv6 actually? by joh · · Score: 1

    ... since the unexpected end of the century in '99.

    (What is actually surprising is that the internet still hasn't widely adopted IP6, and ISPs are now turning to ludicrous measures - NAT - to keep avoiding what makes sense.)

    NAT actually *makes* sense for many interested parties. You get some protection from consumers using their connection to actually (*gasp*) serve stuff which, along with asymmetric connections and anemic upload bandwidth, keeps the ability to offer and publish and distribute things out of the hands of the masses and in the hands of the deserving few. Allowing consumers to reach out and consume stuff is good, allowing them to serve things and to be able to connect to each other isn't.

    IPv6 is a technical solution to problems nobody who counts likes to see solved. NAT'ing the hell out of the consumer-facing side of the Internet creates something that is good enough for consumers and so much more suited to stuff that ghost called "Internet with billions of servers and peers on desks and in bags and pockets" back into the bottle.

  47. IPv6 is NOT SIMPLE by brunes69 · · Score: 1

    I love how people on Slashdot like to throw around migrating to IPv6 like it can be done in a fortnight.

    Migrating to IPv6 will cost ISPs BILLIONS. It is not simply a matter of flipping a few routers. It is tens of millions of lines of company code all geared around IPv4.

    It is hundreds of millions of lines of third-party code that they have bought all geared around IPv4. You know, the software that RUNS THE INTERNET.

    It is something that will take years to fully be completed, even though it has already been going on for years.

    It is not the flip of a switch.

    I work for one of these third party software companies so I know what I am taking about. To put it simply, the migration of our software 100% to IPv6 will take years to be fully done - and that is given a very large and capable team. This is not simply a matter of changing an int to two doubles and recompiling, it is a lot more complicated than that.

    1. Re:IPv6 is NOT SIMPLE by Bert64 · · Score: 1

      It's only going to take a long time because of short sighted implementation...
      IPv6 has been around for over 10 years now, and yet new applications are still being written which don't support it. How many places do you know that are running code which hasn't been touched in over 10 years, offering services over the internet? If v6 had been implemented into everything, even if not actively used, 10 years ago then it really would be just a case of flipping a switch.

      And incidentally, you will still be able to tunnel ipv4 over ipv6 so you can setup a private ipv4 vpn between different locations over the ipv6 internet... It is only services which actually need to be offered to the general public that will need to be migrated fully to v6.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    2. Re:IPv6 is NOT SIMPLE by j+h+woodyatt · · Score: 1

      You've already had ten years to work on the IPv6 transition, and you're still going to need several more before you will be ready for it? You deserve to have your business crushed by your competitors who are IPv6 ready today.

      --
      jhw
  48. The answer to your question may be OpenWRT by Constantin · · Score: 1

    ...runs on many cheap router platforms and allegedly is happy to do IPv6. The current Apple base stations also have two DNS entries set aside for IPv6 and another two DNS entries for IPv4 hosts. Another option is to repurpose an old laptop or mini to run any number of the open-source DNS servers out there and use that machine also to NAT, etc. Running your own DNS server has the additional benefit of speeding up lookups tremendously. But it is work and it consumes power... hence of marginal benefit unless you have a media server already running 24/7 and/or a craptastic provider like Comcast, whose DNS servers aren't all that reliable.

  49. Problem is for those wanting new servers by Midnight+Thunder · · Score: 1

    So, I keep hearing all this news about them running low... What happens when we run out?

    At that point essentially anyone wanting a new block of IPv4 addresses for their domain is out of luck. In this case they are left with two choices:
      - Move on to IPv6 for their servers
      - Get someone else to host their services - with HTTP you can share an IP, but have a different name (requires virtual domains with the same server instance)

    Both have limitations, since in the first scenario you are limited to IPv6 clients and in the second you are limited to what can be hosted.

    In both scenarios you could get a single IPv4 address for you network and then just NAT the PCs.

    As you can see the real limitation is not for those accessing services, but for those providing services. There is an extra issue that comes into play, for the the entity providing the online services: you will be forced to find an ISP who already has native IPv6 support or using and IPv6 tunnel.

    --
    Jumpstart the tartan drive.
  50. This is the End of the World as we know it by prefec2 · · Score: 1

    And therefore it will be a perfect day to be celebrated in future. Lets say January the 2nd can be a nice day for IPv4-exhaustion. However, I hope it will take a little longer for that as I would prefer such day in summer so I can lie drunken under a tree without serious danger to my health (other than the alcohol) .

    Yes I know this is a little bit egoistic as it is northern hemisphere centric view, but most people life north of the Equator ...

    And yes I know the world changes on a daily basis, so the world as we know it ends every day.

  51. NOT ICANN! by 3.1415926535 · · Score: 1

    Addresses are assigned to the RIRs by the Internet Assigned Numbers Authority, NOT the Internet Corporation for Assigned Names and Numbers. I know, all of these acronyms made up of Is, As, and Ns blur together.

  52. Unicode/ASCII by KingAlanI · · Score: 1

    Like how UTF-8 was designed to be backward-compatible with ASCII, because the first block of UTF-8 characters match those of ASCII?

    --
    I listen to both RIAA and non-RIAA stuff if I like the music, tangential business/politics nonwithstanding.
  53. Battlestar Galactica by Ginger+Unicorn · · Score: 1

    The summary sounds like the minutes from a Cylon board meeting

    --
    (1.21 gigawatts) / (88 miles per hour) = 30 757 874 newtons
  54. Plenty of claimed but unused IPs by Anonymous Coward · · Score: 0

    Really? You mean unclaimed right?

    We are a decade away from needing to move to IPv6. Millions of IP Addresses are not used today or are still used for all the nodes in an environment. Most ISPs are nowhere close to using all their IPs. So while there are few unclaimed blocks of IPs, there are plenty of claimed but unused IP addresses.