Most IPv6-certified Home Network Gear Buggy
Julie188 writes "The University of New Hampshire InterOperability Lab held an IPv6 consumer electronics Plugfest on Feb. 14 and CableLabs has scheduled two more for this year. UNH is tight-lipped about the results, but the sad fact is that most home routers and DSL/cable modems certified as IPv6-compliant by the IPv6 Forum are so full of implementation bugs that they can't be used by ISPs for IPv6 field trials. And that's not helping the Internet have a smooth, fast transition to IPv6. Though OpenWRT and DD-WRT solve the problem, ISPs point out that requiring the average consumer to upgrade their own firmware, because the manufacturer can't do IPv6 right, isn't a practical solution."
However, Cisco isn't sure yet if routers bought prior to 2011 will get IPv6. "We are currently looking into which 'legacy' Linksys product can support IPv6. (There are many things that influence us being able to do it -- including if there is enough memory, as well as other factors.) The engineer teams are working on that," the spokesperson said.
I would be shocked if they offered firmware upgrades for old hardware to add IPv6 support even if the hardware could do it. It seems more likely they and others will use it as an excuse to obsolete a ton of old hardware and force people to buy new stuff.
Okay, this may be a new article on the subject - but it's repeating exactly the same thing we've talked about ad nauseum before.
Apple's routers are fine with regard to IPv6, and D-Link's routers are fine as well; it's just that, once again, the reporter says "most home routers" instead of using the brand name Cisco.
Wait - is this actually a new article?
#DeleteChrome
If we had known years ago that we needed to switch to IPv6 we could have tested and then fixed these bugs with firmware updates!
NAT needs a connection state tracker to work anyway (which forms the basis of a stateful firewall). Slap a stateful firewall on v6, no need for actual NAT, and you get better security without the drawbacks. As for dynamic IPs, every IPv6 customer gets at least 18,446,744,073,709,551,615 IPv6s to himself. It's pretty easy to make computers pick one at random. This alone makes IPv6 a lot more resistant to attack than IPv4, since IP netblock scanning becomes all but impossible.
Too bad Apple has been entirely unwilling to address DHCPv6 for purposes of DNS information, which means that all of their products must have DNS servers configured by typing in their IPv6 addresses. (Yes, several other vendors suffer from the same issue) but I still suggest that disqualifies them form the "Ready for IPv6" badge of honor. See http://discussions.info.apple.com/thread.jspa?threadID=2607101&tstart=1, or most any education networking IPv6 discussion.
In Windows Vista and 7, if DNS resolves the name "isatap", Windows will automatically try to acquire an IPv6 prefix using an IPv4 tunnel to the ISATAP server, and use that server to route all your IPv6 traffic. Windows XP SP1+ will as well, once you enable IPv6.
When an ISP implements IPv6, why can't they also add an ISATAP server? With ISATAP, customers with IPv4 routers will have computers that notice the ISP's IPv6 router and start using it through their IPv4 NAT router automatically.
Cisco could implement ISATAP into their routers so that ISPs' internal routers could provide the ISATAP interface, which would be better than a normal machine being a single point of failure. Is this an ISATAP packet destined for the fake IP address we set up as the isatap DNS result? Yes. Let's translate this packet to IPv6 and send it on its way.
Since this is effectively bypassing the customer's IPv4 router's pseudo-security inherently present in NAT, the ISP could have a policy that those using ISATAP as opposed to an IPv6-capable router will have incoming IPv6 traffic blocked, to maintain the status quo in security.
Sometimes, I feel like this transition process is being handled the wrong way, and that there are much easier solutions to these seemingly difficult migration problems.
"Screw Sun, cross-platform will never work. Let's move on and steal the Java language." - Visual J++ Product Manager
I don't know about the person you're responding too but I actually routinely get better latency via IPv6 tunneled via Hurricane Electric than IPv4 through my own ISP.
Fact of the matter is that IPv6 should be slightly faster since the routers don't have to recalculate a CRC for every hop. HE has multiple tunnel broker servers around the world. So you can pick one close to your network and the only CRC latency you'll eat will be the hops between you and the tunnel broker site.
Example:
--- leguin.freenode.net ping6 statistics ---
10 packets transmitted, 10 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 205.932/215.147/262.156/16.624 ms
--- leguin.freenode.net ping statistics ---
10 packets transmitted, 10 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 280.228/329.908/374.605/31.503 ms
And I just picked a random IPv6 host that I knew I could target the same machine via either network. I didn't dig around to find a machine that gave me better latency via IPv6 than IPv4.